1 Commits

Author SHA256 Message Date
1fa7997076 GIT Revision: d745f52ae5a54901ce89da3cdc0ec327f66992f4
GIT Branch: SL-16.1
2026-01-14 09:25:33 +0000
2026-01-15 19:01:43 +01:00
42 changed files with 11297 additions and 57 deletions

Binary file not shown.

BIN
config.tar.bz2 LFS

Binary file not shown.

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -27,7 +27,7 @@
Name: dtb-aarch64
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

BIN
kabi.tar.bz2 LFS

Binary file not shown.

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -19,7 +19,7 @@
%define srcversion 6.12
%define patchversion 6.12.0
%define git_commit f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%define git_commit d745f52ae5a54901ce89da3cdc0ec327f66992f4
%define variant %{nil}
%define compress_modules zstd
%define compress_vmlinux xz
@@ -42,7 +42,7 @@
Name: kernel-64kb
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -19,7 +19,7 @@
%define srcversion 6.12
%define patchversion 6.12.0
%define git_commit f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%define git_commit d745f52ae5a54901ce89da3cdc0ec327f66992f4
%define variant %{nil}
%define compress_modules zstd
%define compress_vmlinux xz
@@ -42,7 +42,7 @@
Name: kernel-azure
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -19,7 +19,7 @@
%define srcversion 6.12
%define patchversion 6.12.0
%define git_commit f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%define git_commit d745f52ae5a54901ce89da3cdc0ec327f66992f4
%define variant %{nil}
%define compress_modules zstd
%define compress_vmlinux xz
@@ -42,7 +42,7 @@
Name: kernel-default
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -18,7 +18,7 @@
%define srcversion 6.12
%define patchversion 6.12.0
%define git_commit f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%define git_commit d745f52ae5a54901ce89da3cdc0ec327f66992f4
%define variant %{nil}
%define build_html 1
%define build_pdf 0
@@ -30,7 +30,7 @@
Name: kernel-docs
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -19,7 +19,7 @@
%define srcversion 6.12
%define patchversion 6.12.0
%define git_commit f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%define git_commit d745f52ae5a54901ce89da3cdc0ec327f66992f4
%define variant %{nil}
%define compress_modules zstd
%define compress_vmlinux xz
@@ -42,7 +42,7 @@
Name: kernel-kvmsmall
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -38,7 +38,7 @@
%endif
%endif
%endif
%global kernel_package kernel%kernel_flavor-srchash-f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%global kernel_package kernel%kernel_flavor-srchash-d745f52ae5a54901ce89da3cdc0ec327f66992f4
%endif
%if 0%{?rhel_version}
%global kernel_package kernel
@@ -47,14 +47,14 @@
Name: kernel-obs-build
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif
Summary: package kernel and initrd for OBS VM builds
License: GPL-2.0-only
Group: SLES
Provides: kernel-obs-build-srchash-f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
Provides: kernel-obs-build-srchash-d745f52ae5a54901ce89da3cdc0ec327f66992f4
BuildRequires: coreutils
BuildRequires: device-mapper
BuildRequires: dracut

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -25,7 +25,7 @@
Name: kernel-obs-qa
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif
@@ -36,7 +36,7 @@ BuildRequires: kernel-default
# kernel-obs-build must be also configured as VMinstall, but is required
# here as well to avoid that qa and build package build parallel
%if ! 0%{?qemu_user_space_build}
BuildRequires: kernel-obs-build-srchash-f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
BuildRequires: kernel-obs-build-srchash-d745f52ae5a54901ce89da3cdc0ec327f66992f4
%endif
BuildRequires: modutils
ExclusiveArch: aarch64 ppc64le s390x x86_64

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -19,7 +19,7 @@
%define srcversion 6.12
%define patchversion 6.12.0
%define git_commit f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%define git_commit d745f52ae5a54901ce89da3cdc0ec327f66992f4
%define variant %{nil}
%define compress_modules zstd
%define compress_vmlinux xz
@@ -42,7 +42,7 @@
Name: kernel-rt
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -18,7 +18,7 @@
%define srcversion 6.12
%define patchversion 6.12.0
%define git_commit f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%define git_commit d745f52ae5a54901ce89da3cdc0ec327f66992f4
%define variant %{nil}
%define gcc_package gcc13
%define gcc_compiler gcc-13
@@ -30,7 +30,7 @@
Name: kernel-source
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -16,7 +16,7 @@
#
%define git_commit f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%define git_commit d745f52ae5a54901ce89da3cdc0ec327f66992f4
%define variant %{nil}
%include %_sourcedir/kernel-spec-macros
@@ -24,7 +24,7 @@
Name: kernel-syms
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

View File

@@ -1,3 +1,852 @@
-------------------------------------------------------------------
Wed Jan 14 10:25:12 CET 2026 - ohering@suse.de
- fs/proc/vmcore: a few cleanups for vmcore_add_device_dump() (PED-14945).
- s390/vfio-ap: Notify userspace that guest's AP config changed when (PED-14941).
- s390/vfio-ap: Signal eventfd when guest AP configuration is changed (PED-14941).
- procfs: fix a locking bug in a vmcore_add_device_dump() error path (PED-14945).
- s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (PED-14945).
- virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (PED-14945).
- virtio-mem: remember usable region size (PED-14945).
- virtio-mem: mark device ready before registering callbacks in kdump (PED-14945).
- fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM (PED-14945).
- fs/proc/vmcore: factor out freeing a list of vmcore ranges (PED-14945).
- fs/proc/vmcore: factor out allocating a vmcore range and adding it to (PED-14945).
- fs/proc/vmcore: move vmcore definitions out of kcore.h (PED-14945).
- fs/proc/vmcore: prefix all pr_* with "vmcore:" (PED-14945).
- fs/proc/vmcore: disallow vmcore modifications while the vmcore is (PED-14945).
- fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (PED-14945).
- fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (PED-14945).
- fs/proc/vmcore.c: fix warning when CONFIG_MMU=n (PED-14945).
- s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (PED-14945).
- s390/sparsemem: Reduce section size to 128 MiB (PED-14945).
- lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (PED-14945).
- virtio-mem: s390 support (PED-14945).
- s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM (PED-14945).
- commit d745f52
-------------------------------------------------------------------
Tue Jan 13 07:15:56 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix invalid prog->stats access when update_effective_progs
fails (CVE-2025-68742 bsc#1255707).
- commit 4f8b390
-------------------------------------------------------------------
Mon Jan 12 20:19:07 CET 2026 - tonyj@suse.de
- perf/x86/intel: Fix KASAN global-out-of-bounds warning
(CVE-2025-40359 bsc#1255087).
- commit ed1e93a
-------------------------------------------------------------------
Mon Jan 12 18:05:11 CET 2026 - tbogendoerfer@suse.de
- mlx5: Fix default values in create CQ (CVE-2025-68209
bsc#1255230).
- commit 02d60e0
-------------------------------------------------------------------
Mon Jan 12 17:42:47 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Use sha256() instead of init/update/final
(bsc#1256495).
- Refresh
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch.
- commit 6b04345
-------------------------------------------------------------------
Mon Jan 12 17:42:07 CET 2026 - tiwai@suse.de
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
Halo (bsc#1256495).
- x86/microcode/AMD: Select which microcode patch to load
(bsc#1256495).
- x86/microcode/AMD: Make __verify_patch_size() return bool
(bsc#1256495).
- x86/microcode/AMD: Remove bogus comment from parse_container()
(bsc#1256495).
- commit 9f14cfe
-------------------------------------------------------------------
Mon Jan 12 17:24:01 CET 2026 - dsterba@suse.com
- crash: fix crashkernel resource shrink (CVE-2025-68198 bsc#1255243)
- commit 7e8f708
-------------------------------------------------------------------
Mon Jan 12 17:18:06 CET 2026 - dsterba@suse.com
- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 766431f
-------------------------------------------------------------------
Mon Jan 12 11:11:33 CET 2026 - tiwai@suse.de
- lib/crypto: aes: Fix missing MMU protection for AES S-box
(git-fixes).
- virtio_console: fix order of fields cols and rows
(stable-fixes).
- commit d55882c
-------------------------------------------------------------------
Mon Jan 12 11:08:46 CET 2026 - tiwai@suse.de
- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit 2373a9d
-------------------------------------------------------------------
Mon Jan 12 10:20:36 CET 2026 - mhocko@suse.com
- supported.conf: mark ksmbd unsupported
Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
module is unsupported but the supported.conf entry is incorrect. Fix
that.
- commit 143566d
-------------------------------------------------------------------
Mon Jan 12 10:00:47 CET 2026 - msuchanek@suse.de
- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
EEH event handling (bsc#1253262 ltc#216029).
- commit 594b86e
-------------------------------------------------------------------
Mon Jan 12 09:03:11 CET 2026 - joao.povoas@suse.com
- Update
patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
(git-fixes CVE-2025-40211 bsc#1254126).
- Update
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
(git-fixes CVE-2025-68346 bsc#1255603).
- Update
patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
(git-fixes CVE-2025-68753 bsc#1256238).
- Update
patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
(git-fixes CVE-2025-68347 bsc#1255706).
- Update
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
(git-fixes CVE-2025-68345 bsc#1255601).
- Update
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
(git-fixes CVE-2025-40275 bsc#1254829).
- Update
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
(stable-fixes CVE-2025-40269 bsc#1255035).
- Update
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
(git-fixes CVE-2025-68344 bsc#1255816).
- Update
patches.suse/ASoC-Intel-avs-Disable-periods-elapsed-work-when-clo.patch
(git-fixes CVE-2025-40344 bsc#1254618).
- Update
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
(git-fixes CVE-2025-40282 bsc#1254850).
- Update
patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
(git-fixes CVE-2025-40294 bsc#1255181).
- Update
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
(git-fixes CVE-2025-40284 bsc#1254860).
- Update
patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
(git-fixes CVE-2025-40213 bsc#1253674).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
(stable-fixes CVE-2025-40309 bsc#1255065).
- Update
patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
(stable-fixes CVE-2025-40308 bsc#1255064).
- Update
patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
(git-fixes CVE-2025-68298 bsc#1255124).
- Update
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
(git-fixes CVE-2025-68306 bsc#1255145).
- Update
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
(git-fixes CVE-2025-40283 bsc#1254858).
- Update
patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
(git-fixes CVE-2025-40301 bsc#1255193).
- Update
patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
(git-fixes CVE-2025-68305 bsc#1255169).
- Update
patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
(git-fixes CVE-2025-40318 bsc#1254798).
- Update
patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
(stable-fixes CVE-2025-40263 bsc#1255077).
- Update
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
(git-fixes CVE-2025-40262 bsc#1254840).
- Update
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
(git-fixes CVE-2025-68217 bsc#1255221).
- Update
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
(git-fixes CVE-2025-40266 bsc#1255040).
- Update
patches.suse/NFS-Fix-LTP-test-failures-when-timestamps-are-delegated.patch
(git-fixes CVE-2025-68242 bsc#1255186).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
(git-fixes CVE-2025-40324 bsc#1254791).
- Update
patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
(git-fixes CVE-2025-40273 bsc#1254828).
- Update
patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
(git-fixes CVE-2025-40219 bsc#1254518).
- Update
patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
(stable-fixes CVE-2025-68176 bsc#1255329).
- Update
patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
(stable-fixes CVE-2025-40311 bsc#1255068).
- Update
patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
(git-fixes CVE-2025-68749 bsc#1255724).
- Update
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
(stable-fixes CVE-2025-40310 bsc#1255041).
- Update
patches.suse/arm64-mte-Do-not-warn-if-the-page-is-already-tagged-in-cop.patch
(git-fixes CVE-2025-40353 bsc#1255312).
- Update
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
(git-fixes CVE-2025-68339 bsc#1255505).
- Update
patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
(git-fixes CVE-2025-68758 bsc#1255944).
- Update
patches.suse/btrfs-directly-free-partially-initialized-fs_info-in.patch
(git-fixes CVE-2025-40235 bsc#1254808).
- Update
patches.suse/btrfs-ensure-no-dirty-metadata-is-written-back-for-a.patch
(git-fix CVE-2025-40303 bsc#1255058).
- Update
patches.suse/btrfs-fix-memory-leak-of-qgroup_list-in-btrfs_add_qg.patch
(git-fixes CVE-2025-40209 bsc#1254128).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
(git-fixes CVE-2025-68342 bsc#1255508).
- Update
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
(git-fixes CVE-2025-68343 bsc#1255509).
- Update
patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
(git-fixes CVE-2025-68307 bsc#1255146).
- Update
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
(git-fixes CVE-2025-68308 bsc#1255149).
- Update
patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
(git-fixes CVE-2025-68332 bsc#1255483).
- Update
patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
(git-fixes CVE-2025-68257 bsc#1255167).
- Update
patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
(git-fixes CVE-2025-68258 bsc#1255182).
- Update
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
(git-fixes CVE-2025-68335 bsc#1255480).
- Update
patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
(git-fixes CVE-2025-68172 bsc#1255253).
- Update
patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
(git-fixes CVE-2025-68724 bsc#1255550).
- Update
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
(stable-fixes CVE-2025-68286 bsc#1255351).
- Update
patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
(git-fixes CVE-2025-68180 bsc#1255252).
- Update
patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
(stable-fixes CVE-2025-40354 bsc#1255316).
- Update
patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
(stable-fixes CVE-2025-40288 bsc#1255057).
- Update
patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
(stable-fixes CVE-2025-68190 bsc#1255131).
- Update
patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
(stable-fixes CVE-2025-68230 bsc#1255134).
- Update
patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
(stable-fixes CVE-2025-40339 bsc#1255428).
- Update
patches.suse/drm-amdgpu-hide-VRAM-sysfs-attributes-on-GPUs-withou.patch
(stable-fixes CVE-2025-40289 bsc#1255042).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
(stable-fixes CVE-2025-68201 bsc#1255136).
- Update
patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
(bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
(git-fixes CVE-2025-68244 bsc#1255190).
- Update
patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
(git-fixes CVE-2025-68184 bsc#1255220).
- Update
patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
(git-fixes CVE-2025-40316 bsc#1254797).
- Update
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
(git-fixes CVE-2025-68747 bsc#1255723).
- Update
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
(git-fixes CVE-2025-68748 bsc#1255813).
- Update
patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
(git-fixes CVE-2025-40225 bsc#1254827).
- Update
patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
(git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
(git-fixes CVE-2025-68181 bsc#1255247).
- Update
patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
(stable-fixes CVE-2025-68223 bsc#1255357).
- Update
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
(git-fixes CVE-2025-40329 bsc#1254621).
- Update
patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
(git-fixes CVE-2025-40360 bsc#1255095).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
(git-fixes CVE-2025-68233 bsc#1255206).
- Update
patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
(git-fixes CVE-2025-68757 bsc#1255943).
- Update
patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
(git-fixes CVE-2025-40277 bsc#1254894).
- Update
patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
(stable-fixes CVE-2025-40340 bsc#1254996).
- Update
patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
(git-fixes CVE-2025-68207 bsc#1255234).
- Update
patches.suse/erofs-avoid-infinite-loop-due-to-incomplete-zstd-compressed-data.patch
(git-fixes CVE-2025-68210 bsc#1255231).
- Update
patches.suse/exfat-fix-improper-check-of-dentry.stream.valid_size.patch
(git-fixes CVE-2025-40287 bsc#1255030).
- Update patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
(git-fixes CVE-2025-68351 bsc#1255567).
- Update
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
(git-fixes CVE-2025-40307 bsc#1255039).
- Update
patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
(stable-fixes CVE-2025-40323 bsc#1255094).
- Update
patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
(stable-fixes CVE-2025-40304 bsc#1255034).
- Update
patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
(stable-fixes CVE-2025-40322 bsc#1255092).
- Update
patches.suse/firmware-arm_scmi-Account-for-failed-debug-initializ.patch
(git-fixes CVE-2025-40226 bsc#1254821).
- Update
patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
(git-fixes CVE-2025-68328 bsc#1255489).
- Update
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
(git-fixes CVE-2025-68167 bsc#1255099).
- Update
patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
(git-fixes CVE-2025-68732 bsc#1255688).
- Update
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
(git-fixes CVE-2025-68213 bsc#1255228).
- Update
patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
(stable-fixes CVE-2025-68330 bsc#1255493).
- Update
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
(git-fixes CVE-2025-68740 bsc#1255812).
- Update
patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
(stable-fixes CVE-2025-68183 bsc#1255251).
- Update
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
(git-fixes CVE-2025-68766 bsc#1255932).
- Update
patches.suse/media-imon-make-send_packet-more-robust.patch
(stable-fixes CVE-2025-68194 bsc#1255325).
- Update
patches.suse/media-pci-mg4b-fix-uninitialized-iio-scan-data.patch
(git-fixes CVE-2025-40221 bsc#1254519).
- Update
patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
(git-fixes CVE-2025-40302 bsc#1255196).
- Update
patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
(git-fixes CVE-2025-68252 bsc#1255197).
- Update
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
(git-fixes CVE-2025-40272 bsc#1254832).
- Update
patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
(git-fixes CVE-2025-40223 bsc#1254957).
- Update
patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
(git-fixes CVE-2025-68290 bsc#1255154).
- Update
patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
(git-fixes CVE-2025-68249 bsc#1255233).
- Update
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
(git-fixes CVE-2025-68765 bsc#1255931).
- Update
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
(git-fixes CVE-2025-68238 bsc#1255202).
- Update
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
(git-fixes CVE-2025-68237 bsc#1255203).
- Update
patches.suse/net-stmmac-Correctly-handle-Rx-checksum-offload-erro.patch
(git-fixes CVE-2025-40337 bsc#1255081).
- Update
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
(git-fixes CVE-2025-68192 bsc#1255246).
- Update
patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
(git-fixes CVE-2025-68185 bsc#1255135).
- Update
patches.suse/nfsd-fix-refcount-leak-in-nfsd_set_fh_dentry.patch
(git-fixes CVE-2025-40212 bsc#1254195).
- Update
patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
(git-fixes CVE-2025-68235 bsc#1255209).
- Update
patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
(bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
(bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
(git-fixes CVE-2025-68222 bsc#1255218).
- Update
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
(git-fixes CVE-2025-68303 bsc#1255122).
- Update
patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
(git-fixes CVE-2025-40317 bsc#1254796).
- Update
patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
(git-fixes CVE-2025-68354 bsc#1255553).
- Update
patches.suse/sctp-avoid-NULL-dereference-when-chunk-data-buffer-i.patch
(git-fixes CVE-2025-40240 bsc#1254869).
- Update
patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
(git-fixes CVE-2025-40320 bsc#1254793).
- Update
patches.suse/spi-ch341-fix-out-of-bounds-memory-access-in-ch341_t.patch
(git-fixes CVE-2025-68352 bsc#1255541).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
(bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-OnBeacon.patch
(stable-fixes CVE-2025-68254 bsc#1255140).
- Update
patches.suse/staging-rtl8723bs-fix-out-of-bounds-read-in-rtw_get_.patch
(stable-fixes CVE-2025-68256 bsc#1255138).
- Update
patches.suse/staging-rtl8723bs-fix-stack-buffer-overflow-in-OnAss.patch
(stable-fixes CVE-2025-68255 bsc#1255395).
- Update
patches.suse/tty-serial-ip22zilog-Use-platform-device-for-probing.patch
(stable-fixes CVE-2025-68311 bsc#1255161).
- Update
patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
(stable-fixes CVE-2025-40314 bsc#1255072).
- Update
patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
(git-fixes CVE-2025-68287 bsc#1255152).
- Update
patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
(git-fixes CVE-2025-68289 bsc#1255155).
- Update
patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
(stable-fixes CVE-2025-40315 bsc#1255083).
- Update
patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
(stable-fixes CVE-2025-68750 bsc#1255814).
- Update
patches.suse/usb-renesas_usbhs-Fix-synchronous-external-abort-on-.patch
(git-fixes CVE-2025-68327 bsc#1255488).
- Update
patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
(stable-fixes CVE-2025-40345 bsc#1255279).
- Update
patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
(git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
(git-fixes CVE-2025-68312 bsc#1255171).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
(git-fixes CVE-2025-68380 bsc#1255580).
- Update
patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
(git-fixes CVE-2025-40321 bsc#1254795).
- Update
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
(git-fixes CVE-2025-68759 bsc#1255934).
- Update
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
(git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
(git-fixes CVE-2025-68313 bsc#1255415).
- Update
patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
(git-fixes CVE-2025-68195 bsc#1255259).
- Update
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
(CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c0f554e
-------------------------------------------------------------------
Sun Jan 11 10:04:49 CET 2026 - tiwai@suse.de
- docs: ABI: sysfs-devices-soc: Fix swapped sample values
(git-fixes).
- commit 8c83315
-------------------------------------------------------------------
Sat Jan 10 17:47:15 CET 2026 - tiwai@suse.de
- gpio: rockchip: mark the GPIO controller as sleeping
(git-fixes).
- drm/pl111: Fix error handling in pl111_amba_probe (git-fixes).
- crypto: qat - fix duplicate restarting msg during AER error
(git-fixes).
- commit f18c9f6
-------------------------------------------------------------------
Fri Jan 9 22:20:53 CET 2026 - krisman@suse.de
- io_uring/zctx: check chained notif contexts (CVE-2025-68317
bsc#1255354).
- commit b895dee
-------------------------------------------------------------------
Fri Jan 9 17:25:00 CET 2026 - ematsumiya@suse.de
- cifs: client: fix memory leak in smb3_fs_context_parse_param
(bsc#1255082, CVE-2025-40268).
- commit 7120bdc
-------------------------------------------------------------------
Fri Jan 9 14:13:27 CET 2026 - hoyeon.lee@suse.com
- selftests/bpf: Add test to verify freeing the special fields
in pcpu maps (CVE-2025-68744 bsc#1255709).
- commit 763d99d
-------------------------------------------------------------------
Fri Jan 9 14:11:53 CET 2026 - tiwai@suse.de
- drm/amdkfd: Trap handler support for expert scheduling mode
(stable-fixes).
- commit 021ac24
-------------------------------------------------------------------
Fri Jan 9 14:10:13 CET 2026 - tiwai@suse.de
- PCI: brcmstb: Reuse pcie_cfg_data structure (stable-fixes).
- Refresh
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch.
- commit 0f681e6
-------------------------------------------------------------------
Fri Jan 9 14:08:30 CET 2026 - tiwai@suse.de
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
(git-fixes).
- wifi: mac80211: restore non-chanctx injection behaviour
(git-fixes).
- wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
- atm: Fix dma_free_coherent() size (git-fixes).
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
(git-fixes).
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
(git-fixes).
- HID: quirks: work around VID/PID conflict for appledisplay
(git-fixes).
- ASoC: sun4i-spdif: Add missing kerneldoc fields for
sun4i_spdif_quirks (git-fixes).
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
(git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
bcdDevice range (git-fixes).
- serial: xilinx_uartps: fix rs485 delay_rts_after_send
(git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
quirk table (stable-fixes).
- Input: lkkbd - disable pending work before freeing device
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN351
(stable-fixes).
- drm/amd/display: Fix scratch registers offsets for DCN35
(stable-fixes).
- broadcom: b44: prevent uninitialized value usage (git-fixes).
- Revert "drm/amd/display: Fix pbn to kbps Conversion"
(stable-fixes).
- drm/amdkfd: bump minimum vgpr size for gfx1151 (stable-fixes).
- drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace
(stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
(stable-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
VGBS DMI quirks (stable-fixes).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src
(stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
the EL-R12 optical drive (stable-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
(stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
(stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
(stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
(stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
(stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
(stable-fixes).
- ipmi: Fix the race between __scan_channels() and
deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
(stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
channel (stable-fixes).
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 &
pcie_x4 (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
(stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
transition (stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
(stable-fixes).
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
(stable-fixes).
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
(git-fixes).
- drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
(stable-fixes).
- drm/displayid: add quirk to ignore DisplayID checksum errors
(stable-fixes).
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct
drm_edid_ident (stable-fixes).
- drm/displayid: pass iter to drm_find_displayid_extension()
(stable-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
(stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
(stable-fixes).
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (stable-fixes).
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (stable-fixes).
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING
after CLC load (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
tablet (stable-fixes).
- wifi: cfg80211: stop radar detection in cfg80211_leave()
(stable-fixes).
- wifi: cfg80211: use cfg80211_leave() in iftype change
(stable-fixes).
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
(stable-fixes).
- cpufreq: nforce2: fix reference count leak in nforce2
(git-fixes).
- ACPI: fan: Workaround for 64-bit firmware bug (stable-fixes).
- ACPI: property: Use ACPI functions in
acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
(stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
(stable-fixes).
- firmware: imx: Add stub functions for SCMI MISC API (git-fixes).
- media: amphion: Add a frame flush mode for decoder
(stable-fixes).
- serial: xilinx_uartps: Use helper function
hrtimer_update_function() (stable-fixes).
- commit 52a2394
-------------------------------------------------------------------
Fri Jan 9 11:17:19 CET 2026 - pfalcato@suse.de
- net/smc: fix general protection fault in __smc_diag_dump
(CVE-2025-40357 bsc#1255097).
- commit ef3290b
-------------------------------------------------------------------
Fri Jan 9 10:42:18 CET 2026 - jgross@suse.com
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is
replaced (CVE-2025-68259 bsc#1255199).
- commit 0428a24
-------------------------------------------------------------------
Fri Jan 9 07:29:08 CET 2026 - hoyeon.lee@suse.com
- bpf: Free special fields when update [lru_,]percpu_hash maps
(CVE-2025-68744 bsc#1255709).
- commit ab66ed0
-------------------------------------------------------------------
Thu Jan 8 19:58:52 CET 2026 - henrique.carvalho@suse.com
- smb: client: introduce close_cached_dir_locked() (git-fixes).
- commit e15b950
-------------------------------------------------------------------
Thu Jan 8 19:54:41 CET 2026 - henrique.carvalho@suse.com
- smb: client: fix potential UAF in smb2_close_cached_fid()
(CVE-2025-40328 bsc#1254624).
- commit f11d74a
-------------------------------------------------------------------
Thu Jan 8 18:12:10 CET 2026 - jack@suse.cz
- binfmt_misc: restore write access before closing files opened
by open_exec() (bsc#1255272 CVE-2025-68239).
- commit 2983172
-------------------------------------------------------------------
Thu Jan 8 18:12:04 CET 2026 - jack@suse.cz
- fs/proc: fix uaf in proc_readdir_de() (bsc#1255297
CVE-2025-40271).
- commit 46250e7
-------------------------------------------------------------------
Thu Jan 8 18:11:59 CET 2026 - jack@suse.cz
- ext4: refresh inline data size before write operations
(bsc#1255380 CVE-2025-68264).
- commit c23012b
-------------------------------------------------------------------
Thu Jan 8 18:11:53 CET 2026 - jack@suse.cz
- fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809
CVE-2025-40237).
- commit 70d7e44
-------------------------------------------------------------------
Thu Jan 8 18:11:48 CET 2026 - jack@suse.cz
- ext4: guard against EA inode refcount underflow in xattr update
(bsc#1253623 CVE-2025-40190).
- commit 6c51c0b
-------------------------------------------------------------------
Thu Jan 8 16:35:23 CET 2026 - dsterba@suse.com
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (CVE-2025-40218 bsc#1254964)
- commit a3828d9
-------------------------------------------------------------------
Thu Jan 8 16:33:10 CET 2026 - dsterba@suse.com
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (CVE-2025-40346 bsc#1255318)
- commit 799eb50
-------------------------------------------------------------------
Thu Jan 8 16:30:09 CET 2026 - dsterba@suse.com
- net: sxgbe: fix potential NULL dereference in sxgbe_rx() (CVE-2025-68302 bsc#1255121)
- commit 15ce001
-------------------------------------------------------------------
Thu Jan 8 15:16:30 CET 2026 - pfalcato@suse.de
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN
kernel-infoleak (CVE-2025-40278 bsc#1254825).
- commit a5a7e57
-------------------------------------------------------------------
Thu Jan 8 12:02:19 CET 2026 - vbabka@suse.cz
- mm/huge_memory: fix NULL pointer deference when splitting folio
(CVE-2025-68293 bsc#1255150).
- commit 1dd8abe
-------------------------------------------------------------------
Thu Jan 8 11:32:36 CET 2026 - vkarasulli@suse.de
- iommufd: Don't overflow during division for dirty tracking
(CVE-2025-40293 bsc#1255179).
- commit b6a4633
-------------------------------------------------------------------
Wed Jan 7 20:11:58 CET 2026 - rgoldwyn@suse.com
- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 9132138
-------------------------------------------------------------------
Wed Jan 7 20:11:05 CET 2026 - rgoldwyn@suse.com
- libceph: replace BUG_ON with bounds check for map->max_osd (CVE-2025-68283 bsc#1255379).
- commit 0f51ab5
-------------------------------------------------------------------
Wed Jan 7 19:52:33 CET 2026 - rgoldwyn@suse.com
- ceph: fix multifs mds auth caps issue (CVE-2025-40362 bsc#1255103).
- commit 9fee071
-------------------------------------------------------------------
Wed Jan 7 19:48:17 CET 2026 - rgoldwyn@suse.com
- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 9838be9
-------------------------------------------------------------------
Wed Jan 7 16:01:08 CET 2026 - tiwai@suse.de
- ASoC: codecs: wcd937x: fix OF node leaks on probe failure
(git-fixes).
- ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
(git-fixes).
- commit 1cc2d04
-------------------------------------------------------------------
Wed Jan 7 15:53:03 CET 2026 - tiwai@suse.de
@@ -13,6 +862,54 @@ Wed Jan 7 13:46:22 CET 2026 - msuchanek@suse.de
- pseries/lparcfg: Add resource group monitoring (jsc#PED-14514).
- commit 1e32467
-------------------------------------------------------------------
Tue Jan 6 22:24:53 CET 2026 - krisman@suse.de
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
(CVE-2025-40251 bsc#1254856).
- commit da56dba
-------------------------------------------------------------------
Tue Jan 6 20:50:58 CET 2026 - krisman@suse.de
- net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
(bsc#1255156 CVE-2025-40255).
- commit 57e1c6f
-------------------------------------------------------------------
Mon Jan 5 17:54:26 CET 2026 - pfalcato@suse.de
- net: sched: act_connmark: initialize struct tc_ife to fix
kernel leak (CVE-2025-40279 bsc#1254846).
- commit cb9f7bb
-------------------------------------------------------------------
Mon Jan 5 16:47:12 CET 2026 - fdmanana@suse.com
- btrfs: do not skip logging new dentries when logging a new name
(git-fixes).
- commit ec916c6
-------------------------------------------------------------------
Mon Jan 5 16:38:28 CET 2026 - fdmanana@suse.com
- btrfs: don't log conflicting inode if it's a dir moved in the
current transaction (git-fixes).
- commit a690d41
-------------------------------------------------------------------
Mon Jan 5 16:11:05 CET 2026 - fdmanana@suse.com
- btrfs: fix changeset leak on mmap write after failure to
reserve metadata (git-fixes).
- commit 75e4299
-------------------------------------------------------------------
Mon Jan 5 15:50:13 CET 2026 - svarbanov@suse.de
- PM: wakeup: implement devm_device_init_wakeup() helper (jsc#PED-14678)
- commit 2e59471
-------------------------------------------------------------------
Mon Jan 5 14:22:19 CET 2026 - tbogendoerfer@suse.de
@@ -33,6 +930,12 @@ Mon Jan 5 13:49:49 CET 2026 - tiwai@suse.de
components (CVE-2025-40338 bsc#1255273).
- commit fb15ec5
-------------------------------------------------------------------
Mon Jan 5 13:22:15 CET 2026 - svarbanov@suse.de
- rtc: nvvrs: add NVIDIA VRS RTC device driver (jsc#PED-14678)
- commit 1179843
-------------------------------------------------------------------
Mon Jan 5 11:02:40 CET 2026 - tiwai@suse.de
@@ -214,6 +1117,20 @@ Mon Jan 5 10:53:17 CET 2026 - tiwai@suse.de
reset/resume fail (git-fixes).
- commit bc5d2b7
-------------------------------------------------------------------
Mon Jan 5 08:38:29 CET 2026 - hoyeon.lee@suse.com
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
(CVE-2025-68378 bsc#1255614).
- commit 7a823bd
-------------------------------------------------------------------
Mon Jan 5 08:24:53 CET 2026 - hoyeon.lee@suse.com
- bpf: Refactor stack map trace depth calculation into helper
function (CVE-2025-68378 bsc#1255614).
- commit 296727b
-------------------------------------------------------------------
Fri Jan 2 10:33:37 CET 2026 - msuchanek@suse.de
@@ -629,6 +1546,13 @@ Wed Dec 17 14:18:10 CET 2025 - pjakobsson@suse.de
- drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (CVE-2025-40276 bsc#1254824).
- commit a018fa4
-------------------------------------------------------------------
Wed Dec 17 13:48:45 CET 2025 - pfalcato@suse.de
- mptcp: fix race condition in mptcp_schedule_work()
(CVE-2025-40258 bsc#1254843).
- commit 37cfb37
-------------------------------------------------------------------
Wed Dec 17 13:43:51 CET 2025 - rbm@suse.com

View File

@@ -19,7 +19,7 @@
%define srcversion 6.12
%define patchversion 6.12.0
%define git_commit f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
%define git_commit d745f52ae5a54901ce89da3cdc0ec327f66992f4
%define variant %{nil}
%define compress_modules zstd
%define compress_vmlinux xz
@@ -42,7 +42,7 @@
Name: kernel-zfcpdump
Version: 6.12.0
%if 0%{?is_kotd}
Release: <RELEASE>.gf0eb18e
Release: <RELEASE>.gd745f52
%else
Release: 0
%endif

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.

View File

@@ -222,6 +222,11 @@
patches.suse/s390-cpum_sf-Fix-and-protect-memory-allocation-of-SDBs-with-mutex.patch
patches.suse/s390-kvm-Initialize-uninitialized-flags-variable.patch
patches.suse/s390-kvm-Mask-extra-bits-from-program-interrupt-code.patch
patches.suse/s390-physmem_info-Query-diag500-STORAGE-LIMIT-to-sup.patch
patches.suse/virtio-mem-s390-support.patch
patches.suse/lib-Kconfig.debug-Default-STRICT_DEVMEM-to-y-on-s390.patch
patches.suse/s390-sparsemem-Reduce-section-size-to-128-MiB.patch
patches.suse/s390-sparsemem-Provide-memory_add_physaddr_to_nid-wi.patch
patches.suse/s390-uvdevice-Support-longer-secret-lists.patch
patches.suse/s390-cmpxchg-Provide-arch_try_cmpxchg.patch
patches.suse/s390-syscalls-Avoid-creation-of-arch-arch-directory.patch
@@ -2955,6 +2960,7 @@
patches.suse/scsi-ufs-core-Add-missing-post-notify-for-power-mode-chang.patch
patches.suse/msft-hv-3085-scsi-storvsc-Do-not-flag-MAINTENANCE_IN-return-of-SR.patch
patches.suse/scsi-scsi_debug-Fix-hrtimer-support-for-ndelay.patch
patches.suse/fs-proc-vmcore.c-fix-warning-when-CONFIG_MMU-n.patch
patches.suse/mm-gup-handle-NULL-pages-in-unpin_user_pages.patch
patches.suse/mm-mempolicy-fix-migrate_to_node-assuming-there-is-a.patch
patches.suse/kasan-make-report_lock-a-raw-spinlock.patch
@@ -4047,6 +4053,8 @@
patches.suse/x86-bugs-Add-SRSO_USER_KERNEL_NO-support.patch
patches.suse/KVM-x86-Advertise-SRSO_USER_KERNEL_NO-to-userspace.patch
patches.suse/x86-microcode-AMD-Return-bool-from-find_blobs_in_container.patch
patches.suse/x86-microcode-AMD-Remove-bogus-comment-from-parse_co.patch
patches.suse/x86-microcode-AMD-Make-__verify_patch_size-return-bo.patch
patches.suse/x86-microcode-AMD-Have-__apply_microcode_amd-return-bool.patch
patches.suse/x86-sev-Prepare-for-using-the-RMPREAD-instruction-to.patch
patches.suse/x86-sev-Add-support-for-the-RMPREAD-instruction.patch
@@ -4707,6 +4715,7 @@
patches.suse/clk-clk-loongson2-Fix-the-number-count-of-clk-provid.patch
patches.suse/ipmi-ipmb-Add-check-devm_kasprintf-returned-value.patch
patches.suse/ipmi-ssif_bmc-Fix-new-request-loss-when-bmc-ready-fo.patch
patches.suse/PM-wakeup-implement-devm_device_init_wakeup-helper.patch
patches.suse/intel_idle-add-Clearwater-Forest-SoC-support.patch
patches.suse/cpufreq-schedutil-Fix-superfluous-updates-caused-by-need_freq_update.patch
patches.suse/cpufreq-amd-pstate-Convert-the-amd_pstate_get-set_epp-to-static-calls.patch
@@ -5387,6 +5396,18 @@
patches.suse/seqlock-add-missing-parameter-documentation-for-raw_seqcou.patch
patches.suse/tools-add-VM_WARN_ON_VMG-definition.patch
patches.suse/mm-compaction-fix-UBSAN-shift-out-of-bounds-warning.patch
patches.suse/fs-proc-vmcore-convert-vmcore_cb_lock-into-vmcore_mu.patch
patches.suse/fs-proc-vmcore-replace-vmcoredd_mutex-by-vmcore_mute.patch
patches.suse/fs-proc-vmcore-disallow-vmcore-modifications-while-t.patch
patches.suse/fs-proc-vmcore-prefix-all-pr_-with-vmcore.patch
patches.suse/fs-proc-vmcore-move-vmcore-definitions-out-of-kcore..patch
patches.suse/fs-proc-vmcore-factor-out-allocating-a-vmcore-range-.patch
patches.suse/fs-proc-vmcore-factor-out-freeing-a-list-of-vmcore-r.patch
patches.suse/fs-proc-vmcore-introduce-PROC_VMCORE_DEVICE_RAM-to-d.patch
patches.suse/virtio-mem-mark-device-ready-before-registering-call.patch
patches.suse/virtio-mem-remember-usable-region-size.patch
patches.suse/virtio-mem-support-CONFIG_PROC_VMCORE_DEVICE_RAM.patch
patches.suse/s390-kdump-virtio-mem-kdump-support-CONFIG_PROC_VMCO.patch
patches.suse/vhost-net-Set-num_buffers-for-virtio-1.0.patch
patches.suse/power-ip5xxx_power-Fix-return-value-on-ADC-read-erro.patch
patches.suse/power-reset-as3722-poweroff-Remove-unnecessary-retur.patch
@@ -6157,6 +6178,7 @@
patches.suse/ALSA-hda-cirrus-Reduce-codec-resume-time.patch
patches.suse/ALSA-hda-conexant-Add-quirk-for-HP-ProBook-450-G4-mu.patch
patches.suse/ALSA-seq-Drop-UMP-events-when-no-UMP-conversion-is-s.patch
patches.suse/procfs-fix-a-locking-bug-in-a-vmcore_add_device_dump.patch
patches.suse/lib-iov_iter-fix-import_iovec_ubuf-iovec-management.patch
patches.suse/mm-migrate_device-don-t-add-folio-to-be-freed-to-LRU-in-migrate_device_finalize.patch
patches.suse/selftests-mm-fix-check-for-running-THP-tests.patch
@@ -6969,6 +6991,7 @@
patches.suse/x86-platform-olpc-Remove-unused-variable-len-in-olpc_dt_co.patch
patches.suse/PM-runtime-Switch-to-use-hrtimer_setup.patch
patches.suse/usb-typec-tcpm-Switch-to-use-hrtimer_setup.patch
patches.suse/serial-xilinx_uartps-Use-helper-function-hrtimer_upd.patch
patches.suse/perf-dwc_pcie-fix-duplicate-pci_dev-devices.patch
patches.suse/arch_topology-init-capacity_freq_ref-to-0.patch
patches.suse/cpufreq-Allow-arch_freq_get_on_cpu-to-return-an-error.patch
@@ -8029,6 +8052,7 @@
patches.suse/PCI-apple-Use-helper-function-for_each_child_of_node.patch
patches.suse/PCI-brcmstb-Fix-missing-of_node_put-in-brcm_pcie_pro.patch
patches.suse/PCI-brcmstb-Add-a-softdep-to-MIP-MSI-X-driver.patch
patches.suse/PCI-brcmstb-Reuse-pcie_cfg_data-structure.patch
patches.suse/PCI-brcmstb-Expand-inbound-window-size-up-to-64GB.patch
patches.suse/PCI-brcmstb-Set-generation-limit-before-PCIe-link-up.patch
patches.suse/PCI-brcmstb-Use-internal-register-to-change-link-cap.patch
@@ -8120,8 +8144,10 @@
patches.suse/of-resolver-Simplify-of_resolve_phandles-using-__fre.patch
patches.suse/of-resolver-Fix-device-node-refcount-leakage-in-of_r.patch
patches.suse/of-property-Increase-NR_FWNODE_REFERENCE_ARGS.patch
patches.suse/s390-vfio-ap-Signal-eventfd-when-guest-AP-configurat.patch
patches.suse/s390-tty-Fix-a-potential-memory-leak-bug.patch
patches.suse/s390-Remove-ioremap_wt-and-pgprot_writethrough.patch
patches.suse/s390-vfio-ap-Notify-userspace-that-guest-s-AP-config.patch
patches.suse/s390-tlb-Use-mm_has_pgste-instead-of-mm_alloc_pgste.patch
patches.suse/mfd-axp20x-AXP717-Add-AXP717_TS_PIN_CFG-to-writeable.patch
patches.suse/mfd-sm501-Switch-to-BIT-to-mitigate-integer-overflow.patch
@@ -8922,6 +8948,7 @@
patches.suse/btrfs-fix-invalid-inode-pointer-after-failure-to-cre.patch
patches.suse/virtgpu-don-t-reset-on-shutdown.patch
patches.suse/virtio_console-fix-missing-byte-order-handling-for-c.patch
patches.suse/virtio_console-fix-order-of-fields-cols-and-rows.patch
patches.suse/vhost-scsi-protect-vq-log_used-with-vq-mutex.patch
patches.suse/vhost-scsi-Fix-vhost_scsi_send_bad_target.patch
patches.suse/vhost-scsi-Fix-vhost_scsi_send_status.patch
@@ -9621,6 +9648,7 @@
patches.suse/x86-cpu-Sanitize-CPUID-0x80000000-output.patch
patches.suse/x86-fpu-Refactor-xfeature-bitmask-update-code-for-sigframe.patch
patches.suse/x86-pkeys-Simplify-PKRU-update-in-signal-frame.patch
patches.suse/x86-microcode-AMD-Use-sha256-instead-of-init-update-.patch
patches.suse/x86-microcode-AMD-Do-not-return-error-when-microcode-updat.patch
patches.suse/x86-idle-Remove-MFENCEs-for-X86_BUG_CLFLUSH_MONITOR-in-mwa.patch
patches.suse/x86-bugs-Restructure-ITS-mitigation.patch
@@ -9725,6 +9753,7 @@
patches.suse/overflow-Fix-direct-struct-member-initialization-in-.patch
patches.suse/scsi-qedf-Use-designated-initializer-for-struct-qed_fcoe_c.patch
patches.suse/selinux-unify-OOM-handling-in-network-hashtables.patch
patches.suse/media-amphion-Add-a-frame-flush-mode-for-decoder.patch
patches.suse/media-rkvdec-Fix-frame-size-enumeration.patch
patches.suse/media-mediatek-vcodec-Correct-vsi_core-framebuffer-s.patch
patches.suse/media-venus-Fix-probe-error-handling.patch
@@ -11027,6 +11056,7 @@
patches.suse/ASoC-fsl_asrc-use-internal-measured-ratio-for-non-id.patch
patches.suse/ASoC-Intel-SND_SOC_INTEL_SOF_BOARD_HELPERS-select-SN.patch
patches.suse/ASoC-fsl_sai-Force-a-software-reset-when-starting-in.patch
patches.suse/ASoC-Intel-soc-acpi-arl-Correct-order-of-cs42l43-mat.patch
patches.suse/ASoC-cs35l56-probe-should-fail-if-the-device-ID-is-n.patch
patches.suse/ALSA-hda-realtek-Enable-headset-Mic-on-Positivo-K116.patch
patches.suse/module-Fix-memory-deallocation-on-error-path-in-move_modul.patch
@@ -12162,6 +12192,7 @@
patches.suse/module-Remove-unnecessary-1-from-last_unloaded_module-name.patch
patches.suse/module-Restore-the-moduleparam-prefix-length-check.patch
patches.suse/tracing-Remove-unneeded-goto-out-logic.patch
patches.suse/fs-proc-vmcore-a-few-cleanups-for-vmcore_add_device_.patch
patches.suse/kdump-add-crashkernel-cma-suffix.patch
patches.suse/kdump-implement-reserve_crashkernel_cma.patch
patches.suse/kdump-crashkernel-cma-update-Documentation.patch
@@ -12806,6 +12837,7 @@
patches.suse/arm64-dts-marvell-cn9132-clearfog-disable-eMMC-high-speed-.patch
patches.suse/arm64-dts-marvell-cn9132-clearfog-fix-multi-lane-pci-x2-an.patch
patches.suse/reset-eyeq-fix-OF-node-leak.patch
patches.suse/firmware-imx-Add-stub-functions-for-SCMI-MISC-API.patch
patches.suse/arm64-dts-imx8mp-Correct-thermal-sensor-index.patch
patches.suse/tracing-dynevent-Add-a-missing-lockdown-check-on-dynevent.patch
patches.suse/vhost-Take-a-reference-on-the-task-in-struct-vhost_t.patch
@@ -13026,6 +13058,7 @@
patches.suse/memory-samsung-exynos-srom-Fix-of_iomap-leak-in-exyn.patch
patches.suse/tee-fix-register_shm_helper.patch
patches.suse/bus-fsl-mc-Check-return-value-of-platform_get_resour.patch
patches.suse/io_uring-zctx-check-chained-notif-contexts.patch
patches.suse/nbd-restrict-sockets-to-TCP-and-UDP.patch
patches.suse/md-fix-mssing-blktrace-bio-split-events.patch
patches.suse/nvme-auth-update-bi_directional-flag.patch
@@ -13166,6 +13199,7 @@
patches.suse/drm-amdgpu-remove-the-redeclaration-of-variable-i.patch
patches.suse/drm-amd-display-Reject-modes-with-too-high-pixel-clo.patch
patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
patches.suse/media-amphion-Make-some-vpu_v4l2-functions-static.patch
patches.suse/media-amphion-Delete-v4l2_fh-synchronously-in-.relea.patch
patches.suse/media-zoran-Remove-zoran_fh-structure.patch
patches.suse/media-i2c-Kconfig-Ensure-a-dependency-on-HAVE_CLK-fo.patch
@@ -13308,12 +13342,14 @@
patches.suse/Squashfs-add-additional-inode-sanity-checking.patch
patches.suse/Squashfs-reject-negative-file-sizes-in-squashfs_read_inode.patch
patches.suse/simplify-nfs_atomic_open_v23.patch
patches.suse/fuse-fix-livelock-in-synchronous-file-put-from-fuseblk-wor.patch
patches.suse/fs-quota-create-dedicated-workqueue-for-quota_releas.patch
patches.suse/fs-udf-fix-OOB-read-in-lengthAllocDescs-handling.patch
patches.suse/ext4-add-ext4_sb_bread_nofail-helper-function-for-ex.patch
patches.suse/ext4-verify-orphan-file-size-is-not-too-big.patch
patches.suse/ext4-fix-an-off-by-one-issue-during-moving-extents.patch
patches.suse/ext4-avoid-potential-buffer-over-read-in-parse_apply.patch
patches.suse/ext4-guard-against-EA-inode-refcount-underflow-in-xa.patch
patches.suse/ext4-fix-checks-for-orphan-inodes.patch
patches.suse/exfat-limit-log-print-for-IO-error.patch
patches.suse/exfat-validate-cluster-allocation-bits-of-the-allocation-bitmap.patch
@@ -13611,6 +13647,7 @@
patches.suse/ASoC-SOF-Intel-Read-the-LLP-via-the-associated-Link-.patch
patches.suse/ASoC-meson-aiu-encoder-i2s-fix-bit-clock-polarity.patch
patches.suse/io_uring-waitid-always-prune-wait-queue-entry-in-io_.patch
patches.suse/ceph-fix-multifs-mds-auth-caps-issue.patch
patches.suse/of-unittest-Fix-device-reference-count-leak-in-of_un.patch
patches.suse/drm-vmwgfx-Fix-a-null-ptr-access-in-the-cursor-snoop.patch
patches.suse/drm-vmwgfx-Fix-Use-after-free-in-validation.patch
@@ -13628,6 +13665,7 @@
patches.suse/drm-amd-Check-whether-secure-display-TA-loaded-succe.patch
patches.suse/drm-amdgpu-Report-individual-reset-error.patch
patches.suse/drm-amd-display-Enable-Dynamic-DTBCLK-Switch.patch
patches.suse/mm-damon-vaddr-do-not-repeat-pte_offset_map_lock-unt.patch
patches.suse/mm-ksm-fix-flag-dropping-behavior-in-ksm_madvise.patch
patches.suse/mm-hugetlb-avoid-soft-lockup-when-mprotect-to-large-.patch
patches.suse/bpf-Fix-metadata_dst-leak-__bpf_redirect_neigh_v-4-6.patch
@@ -13719,6 +13757,7 @@
patches.suse/HID-multitouch-fix-sticky-fingers.patch
patches.suse/HID-logitech-hidpp-Add-HIDPP_QUIRK_RESET_HI_RES_SCRO.patch
patches.suse/x86-resctrl-Fix-miscount-of-bandwidth-event-when-reactivat.patch
patches.suse/fs-notify-call-exportfs_encode_fid-with-s_umount.patch
patches.suse/ocfs2-clear-extent-cache-after-moving-defragmenting-.patch
patches.suse/mm-mremap-correctly-account-old-mapping-after-MREMAP.patch
patches.suse/msft-hv-3361-scsi-storvsc-Prefer-returning-channel-with-the-same-.patch
@@ -13728,6 +13767,7 @@
patches.suse/cpufreq-amd-pstate-Fix-a-regression-leading-to-EPP-0-after-hibernate.patch
patches.suse/net-usb-rtl8150-Fix-frame-padding.patch
patches.suse/net-enetc-fix-the-deadlock-of-enetc_mdio_lock.patch
patches.suse/net-smc-fix-general-protection-fault-in-__smc_diag_dump.patch
patches.suse/can-bxcan-bxcan_start_xmit-use-can_dev_dropped_skb-i.patch
patches.suse/can-esd-acc_start_xmit-use-can_dev_dropped_skb-inste.patch
patches.suse/can-rockchip-canfd-rkcanfd_start_xmit-use-can_dev_dr.patch
@@ -13753,6 +13793,7 @@
patches.suse/drm-panic-Fix-drawing-the-logo-on-a-small-narrow-scr.patch
patches.suse/drm-panic-Fix-qr_code-ensure-vmargin-is-positive.patch
patches.suse/sysfs-check-visibility-before-changing-group-attribute-own.patch
patches.suse/arch_topology-Fix-incorrect-error-check-in-topology_.patch
patches.suse/x86-microcode-Fix-Entrysign-revision-check-for-Zen1-Naples.patch
patches.suse/usb-xhci-pci-Fix-USB2-only-root-hub-registration.patch
patches.suse/xhci-dbc-fix-bogus-1024-byte-prefix-if-ttyDBC-read-r.patch
@@ -13837,6 +13878,7 @@
patches.suse/drm-ast-Clear-preserved-bits-from-register-output-va.patch
patches.suse/drm-xe-Do-not-wake-device-during-a-GT-reset.patch
patches.suse/bpf-Sync-pending-IRQ-work-before-freeing-ring-buffer.patch
patches.suse/perf-x86-intel-Fix-KASAN-global-out-of-bounds-warning.patch
patches.suse/x86-microcode-AMD-Limit-Entrysign-signature-checking-to-kn.patch
patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
patches.suse/x86-mm-Ensure-clear_page-variants-always-have-__kcfi_typei.patch
@@ -13864,6 +13906,7 @@
patches.suse/sctp-Prevent-TOCTOU-out-of-bounds-write.patch
patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
patches.suse/bnxt_en-Shutdown-FW-DMA-in-bnxt_shutdown.patch
patches.suse/bnxt_en-Fix-null-pointer-dereference-in-bnxt_bs_trac.patch
patches.suse/virtio-net-fix-received-length-check-in-big-packets.patch
patches.suse/wifi-mac80211_hwsim-Limit-destroy_on_close-radio-rem.patch
patches.suse/net-bridge-fix-use-after-free-due-to-MST-port-state-bypass.patch
@@ -13872,6 +13915,7 @@
patches.suse/Documentation-ACPI-i2c-muxes-fix-I2C-device-referenc.patch
patches.suse/gpio-swnode-don-t-use-the-swnode-s-name-as-the-key-f.patch
patches.suse/gpiolib-fix-invalid-pointer-access-in-debugfs.patch
patches.suse/iommufd-Don-t-overflow-during-division-for-dirty-tra.patch
patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
patches.suse/drm-i915-Fix-conversion-between-clock-ticks-and-nano.patch
@@ -13888,6 +13932,7 @@
patches.suse/drm-xe-Do-clean-shutdown-also-when-using-flr.patch
patches.suse/x86-amd_node-Fix-AMD-root-device-caching.patch
patches.suse/x86-microcode-AMD-Add-more-known-models-to-entry-sign-chec.patch
patches.suse/smb-client-fix-potential-UAF-in-smb2_close_cached_fid-.patch
patches.suse/rtc-rx8025-fix-incorrect-register-reference.patch
patches.suse/KVM-SVM-Initialize-per-CPU-svm_data-at-the-end-of-ha.patch
patches.suse/KVM-guest_memfd-Remove-bindings-on-memslot-deletion-.patch
@@ -13895,6 +13940,7 @@
patches.suse/KVM-arm64-Check-the-untrusted-offset-in-FF-A-memory-.patch
patches.suse/KVM-SVM-Mark-VMCB_LBR-dirty-when-MSR_IA32_DEBUGCTLMS.patch
patches.suse/mm-shmem-fix-THP-allocation-and-fallback-loop.patch
patches.suse/fs-proc-fix-uaf-in-proc_readdir_de.patch
patches.suse/mm-mm_init-fix-hash-table-order-logging-in-alloc_lar.patch
patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
patches.suse/btrfs-do-not-update-last_log_commit-when-logging-ino.patch
@@ -13911,6 +13957,9 @@
patches.suse/net-phy-micrel-lan8814-fix-reset-of-the-QSGMII-inter.patch
patches.suse/tipc-Fix-use-after-free-in-tipc_mon_reinit_self.patch
patches.suse/af_unix-Initialise-scc_index-in-unix_add_edge.patch
patches.suse/net-sched-act_connmark-initialize-struct-tc_ife-to-fix-ker.patch
patches.suse/net-sched-act_ife-initialize-struct-tc_ife-to-fix-KMSAN-ke.patch
patches.suse/mlx5-Fix-default-values-in-create-CQ.patch
patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
@@ -13930,6 +13979,7 @@
patches.suse/cpufreq-intel_pstate-Check-IDA-only-before-MSR_IA32_PERF_CTL-writes.patch
patches.suse/PM-hibernate-Emit-an-error-when-image-writing-fails.patch
patches.suse/PM-hibernate-Use-atomic64_t-for-compressed_size-vari.patch
patches.suse/cifs-client-fix-memory-leak-in-smb3_fs_context_parse_param.patch
patches.suse/crypto-hisilicon-qm-Fix-device-reference-leak-in-qm_.patch
patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
@@ -13964,9 +14014,11 @@
patches.suse/x86-CPU-AMD-Add-additional-fixed-RDSEED-microcode-revision.patch
patches.suse/x86-microcode-AMD-Add-Zen5-model-0x44-stepping-0x1-minrev.patch
patches.suse/s390-sles16-s390-mm-Fix-__ptep_rdp-inline-assembly.patch
patches.suse/crash-fix-crashkernel-resource-shrink.patch
patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
patches.suse/mtd-onenand-Pass-correct-pointer-to-IRQ-handler.patch
patches.suse/binfmt_misc-restore-write-access-before-closing-file.patch
patches.suse/HID-quirks-work-around-VID-PID-conflict-for-0x4c4a-0.patch
patches.suse/HID-apple-Add-SONiX-AK870-PRO-to-non_apple_keyboards.patch
patches.suse/HID-amd_sfh-Stop-sensor-before-starting.patch
@@ -13975,8 +14027,11 @@
patches.suse/HID-elecom-Add-support-for-ELECOM-M-XT3URBK-018F.patch
patches.suse/HID-playstation-Fix-memory-leak-in-dualshock4_get_ca.patch
patches.suse/HID-uclogic-Fix-potential-memory-leak-in-error-path.patch
patches.suse/net-core-prevent-NULL-deref-in-generic_hwtstamp_ioct.patch
patches.suse/mptcp-fix-race-condition-in-mptcp_schedule_work.patch
patches.suse/net-openvswitch-remove-never-working-support-for-setting-n.patch
patches.suse/net-qlogic-qede-fix-potential-out-of-bounds-read-in-.patch
patches.suse/devlink-rate-Unset-parent-pointer-in-devl_rate_nodes.patch
patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
patches.suse/net-mlx5-Clean-up-only-new-IRQ-glue-on-request_irq-f.patch
patches.suse/idpf-fix-possible-vport_config-NULL-pointer-deref-in.patch
@@ -14011,6 +14066,7 @@
patches.suse/pinctrl-s32cc-initialize-gpio_pin_config-list-after-.patch
patches.suse/ata-libata-scsi-Add-missing-scsi_device_put-in-ata_s.patch
patches.suse/nvmet-auth-update-sc_c-in-target-host-hash-calculati.patch
patches.suse/smb-client-introduce-close_cached_dir_locked-.patch
patches.suse/Input-goodix-add-support-for-ACPI-ID-GDIX1003.patch
patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
@@ -14019,6 +14075,7 @@
patches.suse/dm-verity-fix-unreliable-memory-allocation.patch
patches.suse/ALSA-usb-audio-Add-DSD-quirk-for-LEAK-Stereo-230.patch
patches.suse/ALSA-usb-audio-fix-uac2-clock-source-at-terminal-par.patch
patches.suse/mm-huge_memory-fix-NULL-pointer-deference-when-splitting-f.patch
patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
patches.suse/net-phy-mxl-gpy-fix-bogus-error-on-USXGMII-and-integ.patch
patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
@@ -14029,6 +14086,7 @@
patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
patches.suse/net-phy-mxl-gpy-fix-link-properties-on-USXGMII-and-i.patch
patches.suse/team-Move-team-device-type-change-at-the-end-of-team.patch
patches.suse/net-sxgbe-fix-potential-NULL-dereference-in-sxgbe_rx.patch
patches.suse/net-atlantic-fix-fragment-overflow-handling-in-RX-path.patch
patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
patches.suse/can-sja1000-fix-max-irq-loop-handling.patch
@@ -14036,6 +14094,8 @@
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual.patch
patches.suse/can-gs_usb-gs_usb_receive_bulk_callback-check-actual-395d988.patch
patches.suse/can-sun4i_can-sun4i_can_interrupt-fix-max-irq-loop-h.patch
patches.suse/libceph-replace-BUG_ON-with-bounds-check-for-map-max_osd.patch
patches.suse/libceph-prevent-potential-out-of-bounds-writes-in-handle_a.patch
patches.suse/drm-amd-amdgpu-reserve-vm-invalidation-engine-for-un.patch
patches.suse/Revert-drm-amd-display-Move-setup_stream_attribute.patch
patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
@@ -14091,9 +14151,14 @@
patches.suse/sched-fair-Small-cleanup-to-update_newidle_cost.patch
patches.suse/sched-fair-Proportional-newidle-balance.patch
patches.suse/tick-sched-Limit-non-timekeeper-CPUs-calling-jiffies.patch
patches.suse/x86-microcode-AMD-Select-which-microcode-patch-to-lo.patch
patches.suse/efi-libstub-Fix-page-table-access-in-5-level-to-4-le.patch
patches.suse/ACPI-processor_core-fix-map_x2apic_id-for-amd-pstate.patch
patches.suse/ACPICA-Avoid-walking-the-Namespace-if-start_node-is-.patch
patches.suse/ACPI-property-Use-ACPI-functions-in-acpi_graph_get_n.patch
patches.suse/ACPI-property-Fix-fwnode-refcount-leak-in-acpi_fwnod.patch
patches.suse/ACPI-fan-Workaround-for-64-bit-firmware-bug.patch
patches.suse/cpufreq-nforce2-fix-reference-count-leak-in-nforce2.patch
patches.suse/cpuidle-menu-Use-residency-threshold-in-polling-state-override-decisions.patch
patches.suse/KEYS-trusted-Fix-a-memory-leak-in-tpm2_load_cmd.patch
patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
@@ -14111,6 +14176,11 @@
patches.suse/Documentation-tps6594-pfsm-Fix-macro-cross-reference.patch
patches.suse/Documentation-kernel-parameters-fix-typo-in-retbleed.patch
patches.suse/lib-vsprintf-Check-pointer-before-dereferencing-in-t.patch
patches.suse/bpf-Refactor-stack-map-trace-depth-calculation-into-.patch
patches.suse/bpf-Fix-stackmap-overflow-check-in-__bpf_get_stackid.patch
patches.suse/bpf-Free-special-fields-when-update-lru_-percpu_hash.patch
patches.suse/selftests-bpf-Add-test-to-verify-freeing-the-special.patch
patches.suse/bpf-Fix-invalid-prog-stats-access-when-update_effect.patch
patches.suse/wifi-ath10k-move-recovery-check-logic-into-a-new-wor.patch
patches.suse/wifi-ath11k-restore-register-window-after-global-res.patch
patches.suse/wifi-ath11k-fix-VHT-MCS-assignment.patch
@@ -14123,11 +14193,22 @@
patches.suse/wifi-rtw88-Add-USB-ID-2001-3329-for-D-Link-AC13U-rev.patch
patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
patches.suse/wifi-rtl8xxxu-Fix-HT40-channel-config-for-RTL8192CU-.patch
patches.suse/wifi-cfg80211-use-cfg80211_leave-in-iftype-change.patch
patches.suse/wifi-cfg80211-stop-radar-detection-in-cfg80211_leave.patch
patches.suse/wifi-brcmfmac-Add-DMI-nvram-filename-quirk-for-Acer-.patch
patches.suse/wifi-mt76-Fix-DTS-power-limits-on-little-endian-syst.patch
patches.suse/wifi-mt76-mt792x-fix-wifi-init-fail-by-setting-MCU_R.patch
patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
patches.suse/wifi-ieee80211-correct-FILS-status-codes.patch
patches.suse/wifi-nl80211-vendor-cmd-intel-fix-a-blank-kernel-doc.patch
patches.suse/Bluetooth-btusb-MT7920-Add-VID-PID-0489-e135.patch
patches.suse/Bluetooth-btusb-MT7922-Add-VID-PID-0489-e170.patch
patches.suse/Bluetooth-btusb-Add-new-VID-PID-2b89-6275-for-RTL876.patch
patches.suse/Bluetooth-btusb-Add-new-VID-PID-0x0489-0xE12F-for-RT.patch
patches.suse/Bluetooth-btusb-Add-new-VID-PID-13d3-3533-for-RTL882.patch
patches.suse/net-phy-aquantia-check-for-NVMEM-deferral.patch
patches.suse/ext4-refresh-inline-data-size-before-write-operation.patch
patches.suse/ext4-align-max-orphan-file-size-with-e2fsprogs-limit.patch
patches.suse/media-dvb-usb-dtv5100-fix-out-of-bounds-in-dtv5100_i.patch
patches.suse/media-TDA1997x-Remove-redundant-cancel_delayed_work-.patch
@@ -14142,6 +14223,7 @@
patches.suse/media-platform-mtk-mdp3-fix-device-leaks-at-probe.patch
patches.suse/media-verisilicon-Fix-CPU-stalls-on-G2-bus-error.patch
patches.suse/media-verisilicon-Protect-G2-HEVC-decoder-against-in.patch
patches.suse/media-amphion-Remove-vpu_vb_is_codecconfig.patch
patches.suse/media-amphion-Cancel-message-work-before-releasing-t.patch
patches.suse/media-mediatek-vcodec-Fix-a-reference-leak-in-mtk_vc.patch
patches.suse/media-renesas-rcar_drif-fix-device-node-reference-le.patch
@@ -14164,6 +14246,9 @@
patches.suse/drm-panthor-Fix-UAF-race-between-device-unplug-and-F.patch
patches.suse/drm-panthor-Fix-race-with-suspend-during-unplug.patch
patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
patches.suse/drm-displayid-pass-iter-to-drm_find_displayid_extens.patch
patches.suse/drm-edid-add-DRM_EDID_IDENT_INIT-to-initialize-struc.patch
patches.suse/drm-displayid-add-quirk-to-ignore-DisplayID-checksum.patch
patches.suse/drm-panthor-Fix-potential-memleak-of-vma-structure.patch
patches.suse/drm-msm-dpu-Remove-dead-code-in-dpu_encoder_helper_r.patch
patches.suse/drm-msm-dpu-drop-dpu_hw_dsc_destroy-prototype.patch
@@ -14182,11 +14267,15 @@
patches.suse/drm-panthor-Avoid-adding-of-kernel-BOs-to-extobj-lis.patch
patches.suse/drm-amd-display-Fix-logical-vs-bitwise-bug-in-get_em.patch
patches.suse/drm-amdgpu-add-missing-lock-to-amdgpu_ttm_access_mem.patch
patches.suse/drm-amdgpu-Forward-VMID-reservation-errors.patch
patches.suse/drm-amdgpu-gmc11-add-amdgpu_vm_handle_fault-handling.patch
patches.suse/drm-amdgpu-gmc12-add-amdgpu_vm_handle_fault-handling.patch
patches.suse/Revert-drm-amd-Skip-power-ungate-during-suspend-for-.patch
patches.suse/ALSA-wavefront-Fix-integer-overflow-in-sample-size-v.patch
patches.suse/ASoC-tas2781-correct-the-wrong-period.patch
patches.suse/ASoC-fsl_xcvr-clear-the-channel-status-control-memor.patch
patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
patches.suse/ASoC-qcom-sdw-fix-memory-leak-for-sdw_stream_runtime.patch
patches.suse/ASoC-qcom-q6apm-dai-set-flags-to-reflect-correct-ope.patch
patches.suse/ASoC-qcom-q6adm-the-the-copp-device-only-during-last.patch
patches.suse/ASoC-qcom-qdsp6-q6asm-dai-set-10-ms-period-and-buffe.patch
@@ -14203,6 +14292,12 @@
patches.suse/mtd-maps-pcmciamtd-fix-potential-memory-leak-in-pcmc.patch
patches.suse/mtd-mtdpart-ignore-error-ENOENT-from-parsers-on-subp.patch
patches.suse/mtd-lpddr_cmds-fix-signed-shifts-in-lpddr_cmds.patch
patches.suse/mtd-spi-nor-winbond-Add-support-for-W25Q01NWxxIQ-chi.patch
patches.suse/mtd-spi-nor-winbond-Add-support-for-W25Q01NWxxIM-chi.patch
patches.suse/mtd-spi-nor-winbond-Add-support-for-W25Q02NWxxIM-chi.patch
patches.suse/mtd-spi-nor-winbond-Add-support-for-W25H512NWxxAM-ch.patch
patches.suse/mtd-spi-nor-winbond-Add-support-for-W25H01NWxxAM-chi.patch
patches.suse/mtd-spi-nor-winbond-Add-support-for-W25H02NWxxAM-chi.patch
patches.suse/Revert-mtd-rawnand-marvell-fix-layouts.patch
patches.suse/mtd-nand-relax-ECC-parameter-validation-check.patch
patches.suse/mtd-rawnand-lpc32xx_slc-fix-GPIO-descriptor-leak-on-.patch
@@ -14220,6 +14315,7 @@
patches.suse/hwmon-w83l786ng-Convert-macros-to-functions-to-avoid.patch
patches.suse/hwmon-max16065-Use-local-variable-to-avoid-TOCTOU.patch
patches.suse/platform-x86-intel-chtwc_int33fe-don-t-dereference-s.patch
patches.suse/mmc-sdhci-msm-Avoid-early-clock-doubling-during-HS40.patch
patches.suse/mfd-altera-sysmgr-Fix-device-leak-on-sysmgr-regmap-l.patch
patches.suse/mfd-da9055-Fix-missing-regmap_del_irq_chip-in-error-.patch
patches.suse/mfd-max77620-Fix-potential-IRQ-chip-conflict-when-pr.patch
@@ -14237,6 +14333,7 @@
patches.suse/HID-logitech-dj-Remove-duplicate-error-logging.patch
patches.suse/HID-logitech-dj-Add-support-for-a-new-lightspeed-rec.patch
patches.suse/HID-logitech-hidpp-Do-not-assume-FAP-in-hidpp_send_m.patch
patches.suse/HID-input-map-HID_GD_Z-to-ABS_DISTANCE-for-stylus-pe.patch
patches.suse/Documentation-hid-alps-Fix-packet-format-section-hea.patch
patches.suse/power-supply-rt5033_charger-Fix-device-node-referenc.patch
patches.suse/power-supply-cw2015-Check-devm_delayed_work_autocanc.patch
@@ -14257,24 +14354,34 @@
patches.suse/exfat-fix-refcount-leak-in-exfat_find.patch
patches.suse/pseries-lparcfg-Add-resource-group-monitoring.patch
patches.suse/powerpc-64s-slb-Fix-SLB-multihit-issue-during-SLB-preload.patch
patches.suse/KVM-SVM-Don-t-skip-unrelated-instruction-if-INT3-INT.patch
patches.suse/clk-mvebu-cp110-add-CLK_IGNORE_UNUSED-to-pcie_x10-pc.patch
patches.suse/soc-tegra-fuse-Do-not-register-SoC-device-on-ACPI-bo.patch
patches.suse/soc-tegra-fuse-speedo-tegra210-Update-speedo-IDs.patch
patches.suse/firmware-imx-scu-irq-fix-OF-node-leak-in.patch
patches.suse/firmware-imx-scu-irq-Init-workqueue-before-request-m.patch
patches.suse/ti-sysc-allow-OMAP2-and-OMAP4-timers-to-be-reserved-.patch
patches.suse/firmware-qcom-tzmem-fix-qcom_tzmem_policy-kernel-doc.patch
patches.suse/soc-qcom-ocmem-fix-device-leak-on-lookup.patch
patches.suse/soc-qcom-pbs-fix-device-leak-on-lookup.patch
patches.suse/soc-qcom-smem-fix-hwspinlock-resource-leak-in-probe-.patch
patches.suse/reset-fix-BIT-macro-reference.patch
patches.suse/soc-amlogic-canvas-fix-device-leak-on-lookup.patch
patches.suse/soc-apple-mailbox-fix-device-leak-on-lookup.patch
patches.suse/soc-samsung-exynos-pmu-fix-device-leak-on-regmap-loo.patch
patches.suse/ipmi-Fix-the-race-between-__scan_channels-and-delive.patch
patches.suse/ipmi-Fix-__scan_channels-failing-to-rescan-channels.patch
patches.suse/rpmsg-glink-fix-rpmsg-device-leak.patch
patches.suse/via_wdt-fix-critical-boot-hang-due-to-unnamed-resour.patch
patches.suse/watchdog-wdat_wdt-Fix-ACPI-table-leak-in-probe-funct.patch
patches.suse/watchdog-starfive-Fix-resource-leak-in-probe-error-p.patch
patches.suse/fbdev-gbefb-fix-to-use-physical-address-instead-of-d.patch
patches.suse/fbdev-tcx.c-fix-mem_map-to-correct-smem_start-offset.patch
patches.suse/fbdev-pxafb-Fix-multiple-clamped-values-in-pxafb_adj.patch
patches.suse/fbdev-ssd1307fb-fix-potential-page-leak-in-ssd1307fb.patch
patches.suse/uio-uio_fsl_elbc_gpcm-Add-null-pointer-check-to-uio_.patch
patches.suse/firmware-stratix10-svc-Add-mutex-in-stratix10-memory.patch
patches.suse/iio-adc-ti_am335x_adc-Limit-step_avg-to-valid-range-.patch
patches.suse/iio-imu-st_lsm6dsx-Fix-measurement-unit-for-odr-stru.patch
patches.suse/iio-core-add-missing-mutex_destroy-in-iio_dev_releas.patch
patches.suse/iio-core-Clean-up-device-correctly-on-iio_device_all.patch
@@ -14289,13 +14396,19 @@
patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
patches.suse/firmware_loader-make-RUST_FW_LOADER_ABSTRACTIONS-sel.patch
patches.suse/intel_th-Fix-error-handling-in-intel_th_output_open.patch
patches.suse/char-applicom-fix-NULL-pointer-dereference-in-ac_ioc.patch
patches.suse/serial-add-support-of-CPCI-cards.patch
patches.suse/serial-sprd-Return-EPROBE_DEFER-when-uart-clock-is-n.patch
patches.suse/usbip-Fix-locking-bug-in-RT-enabled-kernels.patch
patches.suse/USB-Fix-descriptor-count-when-handling-invalid-MBIM-.patch
patches.suse/usb-typec-ucsi-Handle-incorrect-num_connectors-capab.patch
patches.suse/usb-dwc3-dwc3_power_off_all_roothub_ports-Use-iorema.patch
patches.suse/usb-xhci-limit-run_graceperiod-for-only-usb-3.0-devi.patch
patches.suse/usb-chaoskey-fix-locking-for-O_NONBLOCK.patch
patches.suse/usb-dwc2-fix-hang-during-shutdown-if-set-as-peripher.patch
patches.suse/usb-dwc2-fix-hang-during-suspend-if-set-as-periphera.patch
patches.suse/usb-raw-gadget-cap-raw_io-transfer-length-to-KMALLOC.patch
patches.suse/usb-usb-storage-No-additional-quirks-need-to-be-adde.patch
patches.suse/usb-phy-Initialize-struct-usb_phy-list_head.patch
patches.suse/USB-serial-belkin_sa-fix-TIOCMBIS-and-TIOCMBIC.patch
patches.suse/USB-serial-kobil_sct-fix-TIOCMBIS-and-TIOCMBIC.patch
@@ -14313,6 +14426,7 @@
patches.suse/clk-samsung-exynos-clkout-Assign-.num-before-accessi.patch
patches.suse/clk-qcom-camcc-sm8550-Specify-Titan-GDSC-power-domai.patch
patches.suse/clk-qcom-camcc-sm6350-Specify-Titan-GDSC-power-domai.patch
patches.suse/clk-qcom-dispcc-sm7150-Fix-dispcc_mdss_pclk0_clk_src.patch
patches.suse/clk-qcom-camcc-sm6350-Fix-PLL-config-of-PLL2.patch
patches.suse/clk-qcom-camcc-sm7150-Fix-PLL-config-of-PLL2.patch
patches.suse/clk-qcom-Mark-camcc_sm7150_hws-static.patch
@@ -14329,8 +14443,10 @@
patches.suse/hwmon-w83791d-Convert-macros-to-functions-to-avoid-T.patch
patches.suse/docs-hwmon-fix-link-to-g762-devicetree-binding.patch
patches.suse/platform-x86-intel-pmc-Update-Arrow-Lake-telemetry-G.patch
patches.suse/platform-x86-intel-hid-Add-Dell-Pro-Rugged-10-12-tab.patch
patches.suse/platform-x86-asus-wmi-use-brightness_set_blocking-fo.patch
patches.suse/i2c-i2c.h-fix-a-bad-kernel-doc-line.patch
patches.suse/i2c-designware-Disable-SMBus-interrupts-to-prevent-s.patch
patches.suse/i2c-amd-mp2-fix-reference-leak-in-MP2-PCI-device.patch
patches.suse/regulator-fixed-Rely-on-the-core-freeing-the-enable-.patch
patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
@@ -14341,10 +14457,17 @@
patches.suse/ASoC-codecs-nau8325-Silence-uninitialized-variables-.patch
patches.suse/ASoC-ak4458-Disable-regulator-when-error-happens.patch
patches.suse/ASoC-ak5558-Disable-regulator-when-error-happens.patch
patches.suse/ASoC-codecs-wcd937x-fix-OF-node-leaks-on-probe-failu.patch
patches.suse/ASoC-codecs-wcd938x-fix-OF-node-leaks-on-probe-failu.patch
patches.suse/ASoC-codecs-wcd939x-fix-OF-node-leaks-on-probe-failu.patch
patches.suse/rtc-nvvrs-add-NVIDIA-VRS-RTC-device-driver.patch
patches.suse/rtc-gamecube-Check-the-return-value-of-ioremap.patch
patches.suse/drm-amdkfd-Use-huge-page-size-to-check-split-svm-ran.patch
patches.suse/drm-amdkfd-Trap-handler-support-for-expert-schedulin.patch
patches.suse/drm-amd-display-Use-GFP_ATOMIC-in-dc_create_plane_st.patch
patches.suse/drm-amdkfd-Export-the-cwsr_size-and-ctl_stack_size-t.patch
patches.suse/drm-amdkfd-bump-minimum-vgpr-size-for-gfx1151.patch
patches.suse/Revert-drm-amd-display-Fix-pbn-to-kbps-Conversion.patch
patches.suse/drm-i915-Fix-format-string-truncation-warning.patch
patches.suse/drm-plane-Fix-IS_ERR-vs-NULL-check-in-drm_plane_crea.patch
patches.suse/drm-nouveau-refactor-deprecated-strcpy.patch
@@ -14355,14 +14478,20 @@
patches.suse/args-fix-documentation-to-reflect-the-correct-number.patch
patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
patches.suse/cgroup-rstat-use-LOCK-CMPXCHG-in-css_rstat_updated.patch
patches.suse/btrfs-don-t-log-conflicting-inode-if-it-s-a-dir-move.patch
patches.suse/btrfs-do-not-skip-logging-new-dentries-when-logging-.patch
patches.suse/btrfs-fix-changeset-leak-on-mmap-write-after-failure.patch
patches.suse/net-phy-marvell-88q2xxx-Fix-clamped-value-in-mv88q2x.patch
patches.suse/r8169-fix-RTL8117-Wake-on-Lan-in-DASH-mode.patch
patches.suse/broadcom-b44-prevent-uninitialized-value-usage.patch
patches.suse/can-gs_usb-gs_can_open-fix-error-handling.patch
patches.suse/nfc-pn533-Fix-error-code-in-pn533_acr122_poweron_rdr.patch
patches.suse/can-j1939-make-j1939_sk_bind-fail-if-device-is-no-lo.patch
patches.suse/PM-runtime-Do-not-clear-needs_force_resume-with-enab.patch
patches.suse/ACPI-CPPC-Fix-missing-PCC-check-for-guaranteed_perf.patch
patches.suse/ACPI-PCC-Fix-race-condition-by-removing-static-quali.patch
patches.suse/drm-amd-display-Fix-scratch-registers-offsets-for-DC.patch
patches.suse/drm-amd-display-Fix-scratch-registers-offsets-for-DC-fd62aa1.patch
patches.suse/drm-panel-sony-td4353-jdi-Enable-prepare_prev_first.patch
patches.suse/drm-me-gsc-mei-interrupt-top-half-should-be-in-irq-d.patch
patches.suse/drm-xe-bo-Don-t-include-the-CCS-metadata-in-the-dma-.patch
@@ -14381,7 +14510,9 @@
patches.suse/hwmon-ltc4282-Fix-reset_history-file-permissions.patch
patches.suse/spi-fsl-cpm-Check-length-parity-before-switching-to-.patch
patches.suse/spi-cadence-quadspi-Fix-clock-disable-on-probe-failu.patch
patches.suse/Input-lkkbd-disable-pending-work-before-freeing-devi.patch
patches.suse/Input-atkbd-skip-deactivate-for-HONOR-FMB-P-s-intern.patch
patches.suse/Input-i8042-add-TUXEDO-InfinityBook-Max-Gen10-AMD-to.patch
patches.suse/Input-alps-fix-use-after-free-bugs-caused-by-dev3_re.patch
patches.suse/Input-ti_am335x_tsc-fix-off-by-one-error-in-wire_ord.patch
patches.suse/ALSA-vxpocket-Fix-resource-leak-in-vxpocket_probe-er.patch
@@ -14395,11 +14526,13 @@
patches.suse/serial-core-Restore-sysfs-fwnode-information.patch
patches.suse/serial-core-Fix-serial-device-initialization.patch
patches.suse/serial-sh-sci-Check-that-the-DMA-cookie-is-valid.patch
patches.suse/serial-xilinx_uartps-fix-rs485-delay_rts_after_send.patch
patches.suse/usb-dwc3-keep-susphy-enabled-during-exit-to-avoid-co.patch
patches.suse/usb-renesas_usbhs-Fix-a-resource-leak-in-usbhs_pipe_.patch
patches.suse/usb-typec-altmodes-displayport-Drop-the-device-refer.patch
patches.suse/USB-lpc32xx_udc-Fix-error-handling-in-probe.patch
patches.suse/usb-dwc3-of-simple-fix-clock-resource-leak-in-dwc3_o.patch
patches.suse/usb-usb-storage-Maintain-minimal-modifications-to-th.patch
patches.suse/usb-gadget-lpc32xx_udc-fix-clock-imbalance-in-error-.patch
patches.suse/usb-phy-isp1301-fix-non-OF-device-reference-imbalanc.patch
patches.suse/usb-ohci-nxp-fix-device-leak-on-probe-failure.patch
@@ -14425,7 +14558,25 @@
patches.suse/drm-imagination-Disallow-exporting-of-PM-FW-protecte.patch
patches.suse/drm-nouveau-dispnv50-Don-t-call-drm_atomic_get_crtc_.patch
patches.suse/drm-i915-gem-Zero-initialize-the-eb.vma-array-in-i91.patch
patches.suse/x86-microcode-AMD-Fix-Entrysign-revision-check-for-Z.patch
patches.suse/of-unittest-Fix-memory-leak-in-unittest_data_add.patch
patches.suse/ALSA-ac97-fix-a-double-free-in-snd_ac97_controller_r.patch
patches.suse/ASoC-sun4i-spdif-Add-missing-kerneldoc-fields-for-su.patch
patches.suse/HID-quirks-work-around-VID-PID-conflict-for-appledis.patch
patches.suse/net-wwan-iosm-Fix-memory-leak-in-ipc_mux_deinit.patch
patches.suse/net-usb-pegasus-fix-memory-leak-in-update_eth_regs_a.patch
patches.suse/atm-Fix-dma_free_coherent-size.patch
patches.suse/wifi-avoid-kernel-infoleak-from-struct-iw_point.patch
patches.suse/wifi-mac80211-restore-non-chanctx-injection-behaviou.patch
patches.suse/pinctrl-qcom-lpass-lpi-mark-the-GPIO-controller-as-s.patch
patches.suse/crypto-qat-fix-duplicate-restarting-msg-during-AER-e.patch
patches.suse/drm-pl111-Fix-error-handling-in-pl111_amba_probe.patch
patches.suse/gpio-rockchip-mark-the-GPIO-controller-as-sleeping.patch
patches.suse/docs-ABI-sysfs-devices-soc-Fix-swapped-sample-values.patch
patches.suse/lib-crypto-aes-Fix-missing-MMU-protection-for-AES-S-.patch
# powerpc/linux next
patches.suse/powerpc-eeh-fix-recursive-pci_lock_rescan_remove-locking-in-EEH-event-handling.patch
# mkp/scsi queue
patches.suse/scsi-lpfc-Update-various-NPIV-diagnostic-log-messagi.patch

View File

@@ -1,3 +1,3 @@
2026-01-08 06:28:50 +0000
GIT Revision: f0eb18e537bbf815824a55e6f0ab64b40fa3e1d4
2026-01-14 09:25:33 +0000
GIT Revision: d745f52ae5a54901ce89da3cdc0ec327f66992f4
GIT Branch: SL-16.1

View File

@@ -4718,6 +4718,7 @@
-!optional drivers/rtc/rtc-mxc
- drivers/rtc/rtc-mxc_v2
-!optional drivers/rtc/rtc-nct3018y # SP6-NEED-REVIEW
drivers/rtc/rtc-nvidia-vrs10 # jsc#PED-14678
-!optional drivers/rtc/rtc-nxp-bbnsm # SP6-NEED-REVIEW
-!optional drivers/rtc/rtc-omap # armv7hl
+external drivers/rtc/rtc-opal # supported by IBM
@@ -5913,7 +5914,6 @@
fs/fuse/virtiofs # virtiofs: virtio-fs host<->guest shared file system
+base fs/isofs/isofs
+base fs/jbd2/jbd2
- fs/ksmbd/ksmbd # SP6-NEED-REVIEW
fs/lockd/lockd
+base fs/mbcache
+base fs/netfs/netfs
@@ -5989,6 +5989,7 @@
fs/smb/client/cifs # VFS to access servers complying with the SNIA CIFS Specification e.g. Samba and Windows
fs/smb/common/cifs_arc4 # used by cifs.ko, split done in upstream 23e91d8b
fs/smb/common/cifs_md4 # used by cifs.ko, split done in upstream 23e91d8b
- fs/smb/server/ksmbd
fs/squashfs/squashfs
fs/udf/udf # Universal Disk Format Filesystem
+base fs/xfs/xfs # bsc#457668

BIN
sysctl.tar.bz2 LFS

Binary file not shown.