GIT Revision: da767816e3b0ba2e8936b3e4195711612e4ac7d3

GIT Branch: SL-16.1 2026-01-30 00:02:00 +0000
2026-01-30 08:00:55 +01:00
parent b8fdb6372c
commit 62daeb58c2
28 changed files with 8150 additions and 34 deletions
--- a/kernel-docs.changes
+++ b/kernel-docs.changes
@@ -1,3 +1,112 @@
+-------------------------------------------------------------------
+Thu Jan 29 09:33:01 CET 2026 - oneukum@suse.com
+
+- =?UTF-8?q?net:=20phy:=20Introduce=20PHY=5FID=5FSIZE=20?=
+  =?UTF-8?q?=E2=80=94=20minimum=20size=20for=20PHY=20ID=20string?=
+  (CVE-2025-71094 bsc#1256597).
+- commit d8e9577
+
+-------------------------------------------------------------------
+Wed Jan 28 23:18:02 CET 2026 - mkubecek@suse.cz
+
+- net/sched: ets: Remove drr class from the active list if it
+  changes to strict (CVE-2025-68815 bsc#1256680).
+- commit ef2665d
+
+-------------------------------------------------------------------
+Wed Jan 28 23:06:54 CET 2026 - mkubecek@suse.cz
+
+- net/sched: ets: Always remove class from active list before
+  deleting in ets_qdisc_change (CVE-2025-71066 bsc#1256645).
+- commit 19d5700
+
+-------------------------------------------------------------------
+Wed Jan 28 19:50:29 CET 2026 - rgoldwyn@suse.com
+
+- libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116 bsc#1256744).
+- commit ec226dd
+
+-------------------------------------------------------------------
+Wed Jan 28 17:15:07 CET 2026 - rbm@suse.com
+
+- net/sched: sch_qfq: Fix NULL deref when deactivating inactive
+  aggregate in qfq_reset (CVE-2026-22976 bsc#1257035).
+- commit 9a83c42
+
+-------------------------------------------------------------------
+Wed Jan 28 15:43:34 CET 2026 - oneukum@suse.com
+
+- net: usb: asix: validate PHY address before use (CVE-2025-71094
+  bsc#1256597).
+- commit 1c268d0
+
+-------------------------------------------------------------------
+Wed Jan 28 15:41:06 CET 2026 - oneukum@suse.com
+
+- net: usb: asix: ax88772: Increase phy_name size (CVE-2025-71094
+  bsc#1256597).
+- commit 1a25880
+
+-------------------------------------------------------------------
+Wed Jan 28 14:21:47 CET 2026 - msuchanek@suse.de
+
+- Update config files.
+- commit 382f0ac
+
+-------------------------------------------------------------------
+Wed Jan 28 14:21:01 CET 2026 - msuchanek@suse.de
+
+- Update config files.
+- commit bdfa806
+
+-------------------------------------------------------------------
+Wed Jan 28 12:35:27 CET 2026 - msuchanek@suse.de
+
+- powerpc/smp: Expose die_id and die_cpumask (jsc#PED-15482).
+- cpu/SMT: Provide a default topology_is_primary_thread()
+  (jsc#PED-15482).
+  Refresh patches.suse/sched-fair-Get-rid-of-sched_domains_curr_level-hack-for-tl-cpumask.patch
+  Refresh patches.suse/x86-topology-Implement-topology_is_core_online-to-address-.patch
+- commit e830b49
+
+-------------------------------------------------------------------
+Wed Jan 28 12:27:40 CET 2026 - msuchanek@suse.de
+
+- Revert "- Delete
+  patches.suse/sched-fair-Get-rid-of-sched_domains_curr_level-hack-for-tl-cpumask.patch.
+  patches.suse/sched-topology-Refinement-to-topology_span_sane-speedup.patch.
+  patches.suse/sched-topology-improve-topology_span_sane-speed.patch."
+  (bsc#1246843 bsc#1242119 jsc#PED-15482)
+  This reverts commit cbe477262ee70395f4208137488d67dcc271c4e0.
+- commit f49f4cf
+
+-------------------------------------------------------------------
+Wed Jan 28 04:35:37 CET 2026 - shung-hsi.yu@suse.com
+
+- selftests/bpf: ns_current_pid_tgid: Use test_progs's ns_
+  feature (bsc#1255552 CVE-2025-68363).
+- selftests/bpf: tc_links/tc_opts: Unserialize tests (bsc#1255552
+  CVE-2025-68363).
+- selftests/bpf: Optionally open a dedicated namespace to run
+  test in it (CVE-2025-68363 bsc#1255552).
+- selftests/bpf: ns_current_pid_tgid: Rename the test function
+  (bsc#1255552 CVE-2025-68363).
+- commit deba1cc
+
+-------------------------------------------------------------------
+Tue Jan 27 23:35:52 CET 2026 - tonyj@suse.de
+
+- perf/x86/amd: Check event before enable to avoid GPF
+  (bsc#1256689 CVE-2025-68798).
+- commit 599ecfb
+
+-------------------------------------------------------------------
+Tue Jan 27 19:21:18 CET 2026 - rbm@suse.com
+
+- selftests/bpf: Optionally open a dedicated namespace to run
+  test in it (CVE-2025-68363 bsc#1255552).
+- commit 72f882c
+
 -------------------------------------------------------------------
 Tue Jan 27 18:13:09 CET 2026 - tbogendoerfer@suse.de

@@ -77,6 +186,55 @@ Tue Jan 27 17:11:41 CET 2026 - iivanov@suse.de
 - gpio: tegra186: don't call the set() callback directly (jsc#PED-14677)
 - commit e9a555b

+-------------------------------------------------------------------
+Tue Jan 27 15:40:59 CET 2026 - fdmanana@suse.com
+
+- btrfs: use variable for end offset in extent_writepage_io()
+  (git-fixes).
+- commit b0ce396
+
+-------------------------------------------------------------------
+Tue Jan 27 15:27:28 CET 2026 - fdmanana@suse.com
+
+- btrfs: truncate ordered extent when skipping writeback past
+  i_size (git-fixes).
+- commit 2d28056
+
+-------------------------------------------------------------------
+Tue Jan 27 14:51:48 CET 2026 - fdmanana@suse.com
+
+- btrfs: fix deadlock in wait_current_trans() due to ignored
+  transaction type (git-fixes).
+- commit 58c1893
+
+-------------------------------------------------------------------
+Tue Jan 27 13:59:31 CET 2026 - mkoutny@suse.com
+
+- blk-cgroup: fix possible deadlock while configuring policy
+  (CVE-2025-68178 bsc#1255266).
+- commit 39b8d0d
+
+-------------------------------------------------------------------
+Tue Jan 27 13:09:23 CET 2026 - jslaby@suse.cz
+
+- libbpf: Fix -Wdiscarded-qualifiers under C23 (bsc#1257309).
+- commit 123e6ba
+
+-------------------------------------------------------------------
+Tue Jan 27 11:53:27 CET 2026 - mkoutny@suse.com
+
+- scripts/cve_tools/kss-dashboard: --exportpatch: Skip commits that are in base kernel
+- commit ef59f5e
+
+-------------------------------------------------------------------
+Tue Jan 27 11:50:35 CET 2026 - mkoutny@suse.com
+
+- scripts/cve_tools/kss-dashboard: Simplify --exportpatch condition
+  Use the filtering logic only once. (This changes warning messages when
+  patch would have been both backported and blacklisted.)
+  Fix insert_sereis comand when we end up with empty patch set.
+- commit d3bd915
+
 -------------------------------------------------------------------
 Tue Jan 27 10:29:53 CET 2026 - jlee@suse.com

@@ -186,6 +344,13 @@ Tue Jan 27 06:39:34 CET 2026 - jlee@suse.com
  (jsc#PED-14260).
 - commit 0292151

+-------------------------------------------------------------------
+Tue Jan 27 03:39:50 CET 2026 - shung-hsi.yu@suse.com
+
+- bpf: Add bpf_prog_run_data_pointers() (bsc#1255241
+  CVE-2025-68200).
+- commit 738511e
+
 -------------------------------------------------------------------
 Tue Jan 27 02:29:41 CET 2026 - jlee@suse.com

@@ -204,6 +369,13 @@ Tue Jan 27 02:08:27 CET 2026 - jlee@suse.com
 - alienware-wmi: fixed indentation and clean up (jsc#PED-14260).
 - commit 5325f5a

+-------------------------------------------------------------------
+Mon Jan 26 19:59:18 CET 2026 - ematsumiya@suse.de
+
+- smb: client: don't try following DFS links in
+  cifs_tree_connect() (git-fixes).
+- commit 3cf926a
+
 -------------------------------------------------------------------
 Mon Jan 26 17:54:05 CET 2026 - jlee@suse.com

@@ -213,6 +385,30 @@ Mon Jan 26 17:54:05 CET 2026 - jlee@suse.com
  ATLA 10 tablet (jsc#PED-14260).
 - commit 72d1afd

+-------------------------------------------------------------------
+Mon Jan 26 17:42:52 CET 2026 - tiwai@suse.de
+
+- kABI workaround for tpm_chip changes (CVE-2025-71077
+  bsc#1256613).
+- commit b25df62
+
+-------------------------------------------------------------------
+Mon Jan 26 17:42:50 CET 2026 - tbogendoerfer@suse.de
+
+- e1000: fix OOB in e1000_tbi_should_accept() (CVE-2025-71093
+  bsc#1256777).
+- net/mlx5: fw_tracer, Validate format string parameters
+  (CVE-2025-68816 bsc#1256674).
+- commit 767a8ff
+
+-------------------------------------------------------------------
+Mon Jan 26 17:40:49 CET 2026 - tiwai@suse.de
+
+- tpm: Cap the number of PCR banks (CVE-2025-71077 bsc#1256613).
+- Refresh
+  patches.suse/0003-ima-invalidate-unsupported-PCR-banks.patch.
+- commit 3fdd7fa
+
 -------------------------------------------------------------------
 Mon Jan 26 17:21:02 CET 2026 - jlee@suse.com

@@ -224,6 +420,40 @@ Mon Jan 26 17:21:02 CET 2026 - jlee@suse.com
  helper (jsc#PED-14260).
 - commit 84c27fe

+-------------------------------------------------------------------
+Mon Jan 26 17:10:13 CET 2026 - heming.zhao@suse.com
+
+- gfs2: Prevent recursive memory reclaim (bsc#1255593
+  CVE-2025-68356).
+- commit 798fe56
+
+-------------------------------------------------------------------
+Mon Jan 26 16:46:34 CET 2026 - tiwai@suse.de
+
+- keys/trusted_keys: fix handle passed to tpm_buf_append_name
+  during unseal (CVE-2025-68792 bsc#1256656).
+- commit 6ebc180
+
+-------------------------------------------------------------------
+Mon Jan 26 15:23:59 CET 2026 - tiwai@suse.de
+
+- kABI workaround for tpm2_session changes (CVE-2025-68792
+  bsc#1256656).
+- commit 7af0065
+
+-------------------------------------------------------------------
+Mon Jan 26 15:16:11 CET 2026 - tiwai@suse.de
+
+- tpm2-sessions: Fix out of range indexing in name_size
+  (CVE-2025-68792 bsc#1256656).
+- commit 2805234
+
+-------------------------------------------------------------------
+Mon Jan 26 15:05:44 CET 2026 - nik.borisov@suse.com
+
+- x86: make page fault handling disable interrupts properly (git-fixes).
+- commit 8ec97c6
+
 -------------------------------------------------------------------
 Mon Jan 26 14:54:33 CET 2026 - jlee@suse.com

@@ -341,12 +571,68 @@ Mon Jan 26 13:31:13 CET 2026 - nik.borisov@suse.com
 - x86/kexec: Disable LASS during relocate kernel (jsc#PED-14226).
 - commit 8535229

+-------------------------------------------------------------------
+Mon Jan 26 13:14:28 CET 2026 - rbm@suse.com
+
+- selftests: net: fib-onlink-tests: Convert to use namespaces
+  by default (bsc#1255346).
+- commit 9f9ee4e
+
+-------------------------------------------------------------------
+Mon Jan 26 13:13:38 CET 2026 - rbm@suse.com
+
+- Delete
+  patches.suse/selftests-net-fib-onlink-tests-Set-high-metric-for-d.patch.
+- commit 3ae01ff
+
+-------------------------------------------------------------------
+Mon Jan 26 12:48:27 CET 2026 - ailiop@suse.com
+
+- exfat: check return value of sb_min_blocksize in
+  exfat_read_boot_sector (git-fixes).
+- commit 3d9560f
+
+-------------------------------------------------------------------
+Mon Jan 26 12:46:52 CET 2026 - ailiop@suse.com
+
+- pnfs/blocklayout: Fix memory leak in bl_parse_scsi()
+  (git-fixes).
+- commit 25884fe
+
+-------------------------------------------------------------------
+Mon Jan 26 12:46:07 CET 2026 - ailiop@suse.com
+
+- pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
+  (git-fixes).
+- commit def5db6
+
+-------------------------------------------------------------------
+Mon Jan 26 12:44:47 CET 2026 - ailiop@suse.com
+
+- pNFS: Fix a deadlock when returning a delegation during open()
+  (git-fixes).
+- commit 39c05eb
+
 -------------------------------------------------------------------
 Mon Jan 26 12:44:34 CET 2026 - nik.borisov@suse.com

 - x86/alternatives: Disable LASS when patching kernel code (jsc#PED-14226).
 - commit 1d0aa37

+-------------------------------------------------------------------
+Mon Jan 26 12:43:28 CET 2026 - ailiop@suse.com
+
+- nfsd: check that server is running in unlock_filesystem
+  (git-fixes).
+- commit d20f2be
+
+-------------------------------------------------------------------
+Mon Jan 26 12:42:00 CET 2026 - ailiop@suse.com
+
+- nfsd: use correct loop termination in nfsd4_revoke_states()
+  (git-fixes).
+- commit bb91457
+
 -------------------------------------------------------------------
 Mon Jan 26 12:41:55 CET 2026 - nik.borisov@suse.com

@@ -359,6 +645,13 @@ Mon Jan 26 12:41:38 CET 2026 - nik.borisov@suse.com
 - x86/cpu: Add an LASS dependency on SMAP (jsc#PED-14226).
 - commit 42e2a54

+-------------------------------------------------------------------
+Mon Jan 26 12:40:27 CET 2026 - ailiop@suse.com
+
+- NFSD: Fix permission check for read access to executable-only
+  files (git-fixes).
+- commit 183186b
+
 -------------------------------------------------------------------
 Mon Jan 26 12:40:17 CET 2026 - nik.borisov@suse.com

@@ -371,6 +664,69 @@ Mon Jan 26 12:39:50 CET 2026 - nik.borisov@suse.com
 - x86/cpufeatures: Make X86_FEATURE leaf 17 Linux-specific (jsc#PED-14226).
 - commit f54cff3

+-------------------------------------------------------------------
+Mon Jan 26 12:39:12 CET 2026 - ailiop@suse.com
+
+- nfsd: Drop the client reference in client_states_open()
+  (git-fixes).
+- commit c888f17
+
+-------------------------------------------------------------------
+Mon Jan 26 12:35:12 CET 2026 - ailiop@suse.com
+
+- NFSD/blocklayout: Fix minlength check in proc_layoutget
+  (git-fixes).
+- commit b191678
+
+-------------------------------------------------------------------
+Mon Jan 26 12:34:09 CET 2026 - ailiop@suse.com
+
+- NFSD: use correct reservation type in nfsd4_scsi_fence_client
+  (git-fixes).
+- commit 9c83e59
+
+-------------------------------------------------------------------
+Mon Jan 26 12:27:50 CET 2026 - ailiop@suse.com
+
+- svcrdma: return 0 on success from svc_rdma_copy_inline_range
+  (git-fixes).
+- commit 029a31c
+
+-------------------------------------------------------------------
+Mon Jan 26 12:27:13 CET 2026 - ailiop@suse.com
+
+- NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
+  (git-fixes).
+- commit 5253399
+
+-------------------------------------------------------------------
+Mon Jan 26 11:38:53 CET 2026 - ailiop@suse.com
+
+- NFS: Fix up the automount fs_context to use the correct cred
+  (git-fixes).
+- commit 98b121a
+
+-------------------------------------------------------------------
+Mon Jan 26 11:37:52 CET 2026 - ailiop@suse.com
+
+- NFSv4: ensure the open stateid seqid doesn't go backwards
+  (git-fixes).
+- commit 15f5d8e
+
+-------------------------------------------------------------------
+Mon Jan 26 11:36:21 CET 2026 - ailiop@suse.com
+
+- exfat: fix remount failure in different process environments
+  (git-fixes).
+- commit 2a1614d
+
+-------------------------------------------------------------------
+Mon Jan 26 11:35:10 CET 2026 - ailiop@suse.com
+
+- exfat: zero out post-EOF page cache on file extension
+  (git-fixes).
+- commit b63526d
+
 -------------------------------------------------------------------
 Mon Jan 26 11:04:07 CET 2026 - jlee@suse.com

@@ -576,6 +932,61 @@ Mon Jan 26 10:01:26 CET 2026 - nik.borisov@suse.com
 - Refresh patches.suse/x86-msr-Rename-rdmsrl-to-rdmsrq.patch.
 - commit 9024ddb

+-------------------------------------------------------------------
+Mon Jan 26 09:46:59 CET 2026 - mgorman@suse.de
+
+- Update patch metadata and sort
+  patches.suse/sched-fair-Disable-scheduler-feature-NEXT_BUDDY.patch.
+- commit 6b28e35
+
+-------------------------------------------------------------------
+Mon Jan 26 09:07:44 CET 2026 - tiwai@suse.de
+
+- w1: fix redundant counter decrement in w1_attach_slave_device()
+  (git-fixes).
+- w1: therm: Fix off-by-one buffer overflow in alarms_store
+  (git-fixes).
+- comedi: dmm32at: serialize use of paged registers (git-fixes).
+- mei: trace: treat reg parameter as string (git-fixes).
+- uacce: ensure safe queue release with state management
+  (git-fixes).
+- uacce: implement mremap in uacce_vm_ops to return -EPERM
+  (git-fixes).
+- uacce: fix isolate sysfs check condition (git-fixes).
+- uacce: fix cdev handling in the cleanup path (git-fixes).
+- slimbus: core: fix of_slim_get_device() kernel doc (git-fixes).
+- slimbus: core: fix device reference leak on report present
+  (git-fixes).
+- slimbus: core: fix runtime PM imbalance on report present
+  (git-fixes).
+- slimbus: core: fix OF node leak on registration failure
+  (git-fixes).
+- intel_th: fix device leak on output open() (git-fixes).
+- comedi: Fix getting range information for subdevices 16 to 255
+  (git-fixes).
+- interconnect: debugfs: initialize src_node and dst_node to
+  empty strings (git-fixes).
+- iio: accel: iis328dq: fix gain values (git-fixes).
+- iio: chemical: scd4x: fix reported channel endianness
+  (git-fixes).
+- iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
+  (git-fixes).
+- iio: accel: adxl380: fix handling of unavailable "INT1"
+  interrupt (git-fixes).
+- iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without
+  event detection (git-fixes).
+- iio: adc: pac1934: Fix clamped value in pac1934_reg_snapshot
+  (git-fixes).
+- iio: adc: ad9467: fix ad9434 vref mask (git-fixes).
+- iio: adc: ad7280a: handle spi_setup() errors in probe()
+  (git-fixes).
+- iio: adc: at91-sama5d2_adc: Fix potential use-after-free in
+  sama5d2_adc driver (git-fixes).
+- serial: 8250_pci: Fix broken RS485 for F81504/508/512
+  (git-fixes).
+- comedi: fix divide-by-zero in comedi_buf_munge() (stable-fixes).
+- commit e39a507
+
 -------------------------------------------------------------------
 Mon Jan 26 08:14:37 CET 2026 - jslaby@suse.cz

@@ -597,6 +1008,13 @@ Mon Jan 26 08:12:27 CET 2026 - jslaby@suse.cz
  patches, so re-add the spaces back (using quilt-refresh).
 - commit 8f19ff0

+-------------------------------------------------------------------
+Mon Jan 26 07:12:23 CET 2026 - shung-hsi.yu@suse.com
+
+- bpf: Do not let BPF test infra emit invalid GSO types to stack
+  (bsc#1255569).
+- commit 7eec89f
+
 -------------------------------------------------------------------
 Sat Jan 24 09:28:32 CET 2026 - tiwai@suse.de

@@ -608,6 +1026,41 @@ Sat Jan 24 09:28:32 CET 2026 - tiwai@suse.de
  (git-fixes).
 - commit 20f715d

+-------------------------------------------------------------------
+Sat Jan 24 09:25:26 CET 2026 - tiwai@suse.de
+
+- platform/x86: hp-bioscfg: Fix automatic module loading
+  (git-fixes).
+- platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID
+  macro (git-fixes).
+- platform/x86: hp-bioscfg: Fix kobject warnings for empty
+  attribute names (git-fixes).
+- platform/x86/amd: Fix memory leak in wbrf_record() (git-fixes).
+- mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
+  (git-fixes).
+- mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in
+  HS200/HS400 mode (git-fixes).
+- regmap: Fix race condition in hwspinlock irqsave routine
+  (git-fixes).
+- gpio: cdev: Correct return code on memory allocation failure
+  (git-fixes).
+- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
+  (git-fixes).
+- ALSA: scarlett2: Fix buffer overflow in config retrieval
+  (git-fixes).
+- ALSA: usb: Increase volume range that triggers a warning
+  (git-fixes).
+- drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
+  (git-fixes).
+- drm/amd/pm: Don't clear SI SMC table when setting power limit
+  (git-fixes).
+- drm/nouveau: implement missing DCB connector types; gracefully
+  handle unknown connectors (git-fixes).
+- drm/nouveau: add missing DCB connector types (git-fixes).
+- drm/imagination: Wait for FW trace update command completion
+  (git-fixes).
+- commit a8c0274
+
 -------------------------------------------------------------------
 Fri Jan 23 23:43:02 CET 2026 - mwilck@suse.com

@@ -763,6 +1216,104 @@ Fri Jan 23 21:48:00 CET 2026 - mwilck@suse.com
  patches.suse/scsi-mpi3mr-Update-driver-version-to-8.15.0.5.50.patch.
 - commit b4a2cf6

+-------------------------------------------------------------------
+Fri Jan 23 18:11:52 CET 2026 - tiwai@suse.de
+
+- phy: freescale: imx8m-pcie: assert phy reset during power on
+  (stable-fixes).
+- phy: rockchip: inno-usb2: Fix a double free bug in
+  rockchip_usb2phy_probe() (git-fixes).
+- USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
+  (stable-fixes).
+- USB: serial: option: add Telit LE910 MBIM composition
+  (stable-fixes).
+- USB: OHCI/UHCI: Add soft dependencies on ehci_platform
+  (stable-fixes).
+- usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS
+  descriptor (stable-fixes).
+- usb: dwc3: Check for USB4 IP_NAME (stable-fixes).
+- drm/amd/pm: fix smu overdrive data type wrong issue on smu
+  14.0.2 (git-fixes).
+- drm/amd/display: Bump the HDMI clock to 340MHz (stable-fixes).
+- drm/amd: Clean up kfd node on surprise disconnect
+  (stable-fixes).
+- HID: usbhid: paper over wrong bNumDescriptor field
+  (stable-fixes).
+- firmware: imx: scu-irq: Set mu_resource_id before get handle
+  (stable-fixes).
+- phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe
+  path (stable-fixes).
+- commit 3f8bd8a
+
+-------------------------------------------------------------------
+Fri Jan 23 17:45:31 CET 2026 - krisman@suse.de
+
+- io_uring: fix filename leak in __io_openat_prep()
+  (CVE-2025-68814 bsc#1256651).
+- commit 675d22e
+
+-------------------------------------------------------------------
+Fri Jan 23 16:43:33 CET 2026 - dsterba@suse.com
+
+- octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (CVE-2025-71137 bsc#1256760)
+- commit 3d4407e
+
+-------------------------------------------------------------------
+Fri Jan 23 16:35:39 CET 2026 - dsterba@suse.com
+
+- net: hns3: using the num_tqps in the vf driver to apply for resources (CVE-2025-71064 bsc#1256654)
+- commit 58ee56d
+
+-------------------------------------------------------------------
+Fri Jan 23 16:32:21 CET 2026 - dsterba@suse.com
+
+- macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (CVE-2025-68367 bsc#1255547)
+- commit ed9e7a9
+
+-------------------------------------------------------------------
+Fri Jan 23 16:20:20 CET 2026 - dsterba@suse.com
+
+- team: fix check for port enabled in team_queue_override_port_prio_changed() (CVE-2025-71091 bsc#1256773)
+- commit c426951
+
+-------------------------------------------------------------------
+Fri Jan 23 16:10:20 CET 2026 - mwilck@suse.com
+
+- md/raid5: fix possible null-pointer dereferences in
+  raid5_store_group_thread_cnt() (CVE-2025-71135 bsc#1256761).
+- commit 1fc61fc
+
+-------------------------------------------------------------------
+Fri Jan 23 14:45:38 CET 2026 - sjaeckel@suse.de
+
+- net: sock: fix hardened usercopy panic in sock_recv_errqueue
+  (CVE-2026-22977 bsc#1257053).
+- commit d4fc6df
+
+-------------------------------------------------------------------
+Fri Jan 23 10:29:33 CET 2026 - sjaeckel@suse.de
+
+- ipv4: Fix reference count leak when using error routes with
+  nexthop objects (CVE-2025-71097 bsc#1256607).
+- net: stmmac: fix the crash issue for zero copy XDP_TX action
+  (CVE-2025-71095 bsc#1256605).
+- net: hns3: add VLAN id validation before using (CVE-2025-71112
+  bsc#1256726).
+- net/handshake: duplicate handshake cancellations leak socket
+  (CVE-2025-68775 bsc#1256665).
+- ethtool: Avoid overflowing userspace buffer on stats query
+  (CVE-2025-68795 bsc#1256688).
+- mptcp: avoid deadlock on fallback while reinjecting
+  (CVE-2025-71126 bsc#1256755).
+- bnxt_en: Fix XDP_TX path (CVE-2025-68770 bsc#1256584).
+- mlxsw: spectrum_mr: Fix use-after-free when updating multicast
+  route stats (CVE-2025-68800 bsc#1256646).
+- mlxsw: spectrum_router: Fix neighbour use-after-free
+  (CVE-2025-68801 bsc#1256653).
+- lan966x: Fix sleeping in atomic context (CVE-2025-68320
+  bsc#1255172).
+- commit 4e1af62
+
 -------------------------------------------------------------------
 Fri Jan 23 10:25:22 CET 2026 - vkarasulli@suse.de

@@ -770,6 +1321,58 @@ Fri Jan 23 10:25:22 CET 2026 - vkarasulli@suse.de
  bsc#1256612).
 - commit 2eb2757

+-------------------------------------------------------------------
+Fri Jan 23 09:52:49 CET 2026 - tiwai@suse.de
+
+- dpll: Prevent duplicate registrations (git-fixes).
+- dpll: zl3073x: Fix output pin registration (git-fixes).
+- dpll: fix device-id-get and pin-id-get to return errors properly
+  (git-fixes).
+- dpll: spec: add missing module-name and clock-id to pin-get
+  reply (git-fixes).
+- dpll: fix clock quality level reporting (git-fixes).
+- dpll: Add an assertion to check freq_supported_num
+  (stable-fixes).
+- commit 59f0fdc
+
+-------------------------------------------------------------------
+Fri Jan 23 09:51:00 CET 2026 - tiwai@suse.de
+
+- crypto: authencesn - reject too-short AAD (assoclen<8) to
+  match ESP/ESN spec (git-fixes).
+- wifi: mac80211: don't perform DA check on S1G beacon
+  (git-fixes).
+- wifi: ath12k: fix dma_free_coherent() pointer (git-fixes).
+- wifi: ath10k: fix dma_free_coherent() pointer (git-fixes).
+- wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
+  (git-fixes).
+- wifi: rsi: Fix memory corruption due to not set vif driver
+  data size (git-fixes).
+- usbnet: limit max_mtu based on device's hard_mtu (git-fixes).
+- can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory
+  leak (git-fixes).
+- can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory
+  leak (git-fixes).
+- can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB
+  memory leak (git-fixes).
+- can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
+  (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on
+  usb_submit_urb() error (git-fixes).
+- Revert "nfc/nci: Add the inconsistency check between the input
+  data length and count" (git-fixes).
+- net: usb: dm9601: remove broken SR9700 support (git-fixes).
+- leds: led-class: Only Add LED to leds_list when it is fully
+  ready (git-fixes).
+- commit d5d2445
+
+-------------------------------------------------------------------
+Thu Jan 22 16:07:44 CET 2026 - pfalcato@suse.de
+
+- mptcp: fix a race in mptcp_pm_del_add_timer() (CVE-2025-40257
+  bsc#1254842).
+- commit dab52b4
+
 -------------------------------------------------------------------
 Thu Jan 22 09:51:08 CET 2026 - nik.borisov@suse.com

@@ -812,6 +1415,54 @@ Wed Jan 21 18:51:10 CET 2026 - rbm@suse.com
  (CVE-2025-40363 bsc#1255102).
 - commit e140a1d

+-------------------------------------------------------------------
+Wed Jan 21 17:06:59 CET 2026 - jack@suse.cz
+
+- fsnotify: do not generate ACCESS/MODIFY events on child for
+  special files (bsc#1256638 CVE-2025-68788).
+- commit c5ba5af
+
+-------------------------------------------------------------------
+Wed Jan 21 17:06:54 CET 2026 - jack@suse.cz
+
+- ext4: xattr: fix null pointer deref in ext4_raw_inode()
+  (bsc#1256754 CVE-2025-68820).
+- commit 5db1006
+
+-------------------------------------------------------------------
+Wed Jan 21 17:06:48 CET 2026 - jack@suse.cz
+
+- ext4: fix string copying in parse_apply_sb_mount_options()
+  (bsc#1256757 CVE-2025-71123).
+- commit f859099
+
+-------------------------------------------------------------------
+Wed Jan 21 17:06:43 CET 2026 - jack@suse.cz
+
+- ext4: add i_data_sem protection in
+  ext4_destroy_inline_data_nolock() (bsc#1255164 CVE-2025-68261).
+- commit ca299fb
+
+-------------------------------------------------------------------
+Wed Jan 21 17:06:38 CET 2026 - jack@suse.cz
+
+- nbd: defer config put in recv_work (bsc#1255537 CVE-2025-68372).
+- commit a3661a2
+
+-------------------------------------------------------------------
+Wed Jan 21 17:06:32 CET 2026 - jack@suse.cz
+
+- nbd: defer config unlock in nbd_genl_connect (bsc#1255622
+  CVE-2025-68366).
+- commit abe0920
+
+-------------------------------------------------------------------
+Wed Jan 21 17:06:27 CET 2026 - jack@suse.cz
+
+- jbd2: avoid bug_on in jbd2_journal_get_create_access() when
+  file system corrupted (bsc#1255482 CVE-2025-68337).
+- commit 158d717
+
 -------------------------------------------------------------------
 Wed Jan 21 17:00:38 CET 2026 - tbogendoerfer@suse.de

@@ -1247,6 +1898,19 @@ Tue Jan 20 11:40:16 CET 2026 - nik.borisov@suse.com
 - x86/mce: Add support for physical address valid bit (jsc#PED-15311).
 - commit 905eb98

+-------------------------------------------------------------------
+Tue Jan 20 11:14:50 CET 2026 - tzimmermann@suse.com
+
+- drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128 CVE-2025-68296)
+- commit 77ece13
+
+-------------------------------------------------------------------
+Tue Jan 20 11:13:20 CET 2026 - tzimmermann@suse.com
+
+- Remove patches.suse/0001-drm-fbcon-vga_switcheroo-Avoid-race-condition-in-fbc.patch
+  Remove this patch before remaking it in an appropriate way.
+- commit f91d20a
+
 -------------------------------------------------------------------
 Tue Jan 20 10:52:37 CET 2026 - ailiop@suse.com