<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="78">
<package pkgid="0ccc429b390cc4e3401628df5fa0767360fd39774f2f8e7ea9faf615a8cd64d819cead6f5c55920495668bee722befcd4853c27560fd0c911ea51e870481b26e" name="acpi_call" arch="aarch64">
  <version epoch="0" ver="git.1707315555.ede6ea7" rel="75.103"/>
  <changelog author="maxf@njsm.de" date="1443441600">- Fixed build on openSUSE 13.2
- Module is now loaded automatically
- Added README to package
  Mon Sep 28 07:15:44 UTC 2015
- Initial spec for version 1.1.0</changelog>
  <changelog author="maxf@njsm.de" date="1443441601">- Fixed directory ownership.</changelog>
  <changelog author="maxf@njsm.de" date="1444996800">- Fixed build on Tumbleweed.</changelog>
  <changelog author="sbrabec@suse.com" date="1511265600">- Fixed build on Tumbleweed:
  * include linux/uaccess.h instead of asm/uaccess.h
    (0001-include_fix.patch)
  * Build requires libelf-devel</changelog>
  <changelog author="timuzhti@gmail.com" date="1597320000">- Fixed build on Tumbleweed
  * change struct file_operation to proc_ops used in newer kernels</changelog>
  <changelog author="popov895@ukr.net" date="1632312000">- Switched to version 1.2.2 from nix-community
- Dropped patches:
  * 0001-include_fix.patch
  * 0002-proc_ops_fix.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648987200">- Description adjusted</changelog>
</package>
<package pkgid="8308eab1206f880ae073abe9c0c6ee242f7eb0a275fbc4769f27320185587a5ebd7b94004b2dcf2820a75f5757d8f446b5a4f3543548842d8b7d33828da4f46a" name="acpi_call" arch="src">
  <version epoch="0" ver="git.1707315555.ede6ea7" rel="75.103"/>
  <changelog author="maxf@njsm.de" date="1443441600">- Fixed build on openSUSE 13.2
- Module is now loaded automatically
- Added README to package
  Mon Sep 28 07:15:44 UTC 2015
- Initial spec for version 1.1.0</changelog>
  <changelog author="maxf@njsm.de" date="1443441601">- Fixed directory ownership.</changelog>
  <changelog author="maxf@njsm.de" date="1444996800">- Fixed build on Tumbleweed.</changelog>
  <changelog author="sbrabec@suse.com" date="1511265600">- Fixed build on Tumbleweed:
  * include linux/uaccess.h instead of asm/uaccess.h
    (0001-include_fix.patch)
  * Build requires libelf-devel</changelog>
  <changelog author="timuzhti@gmail.com" date="1597320000">- Fixed build on Tumbleweed
  * change struct file_operation to proc_ops used in newer kernels</changelog>
  <changelog author="popov895@ukr.net" date="1632312000">- Switched to version 1.2.2 from nix-community
- Dropped patches:
  * 0001-include_fix.patch
  * 0002-proc_ops_fix.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648987200">- Description adjusted</changelog>
</package>
<package pkgid="f70ba17a1156282384bc1c2225323b9de1d08db90103777d13162469edc76fe0206ef47072de30b85d8bce42df3e4d94f0fa62e34284d01c1d5013d678bbd2fc" name="acpi_call-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="git.1707315555.ede6ea7_k7.1.3_76.g342bd0e" rel="75.103"/>
  <changelog author="maxf@njsm.de" date="1443441600">- Fixed build on openSUSE 13.2
- Module is now loaded automatically
- Added README to package
  Mon Sep 28 07:15:44 UTC 2015
- Initial spec for version 1.1.0</changelog>
  <changelog author="maxf@njsm.de" date="1443441601">- Fixed directory ownership.</changelog>
  <changelog author="maxf@njsm.de" date="1444996800">- Fixed build on Tumbleweed.</changelog>
  <changelog author="sbrabec@suse.com" date="1511265600">- Fixed build on Tumbleweed:
  * include linux/uaccess.h instead of asm/uaccess.h
    (0001-include_fix.patch)
  * Build requires libelf-devel</changelog>
  <changelog author="timuzhti@gmail.com" date="1597320000">- Fixed build on Tumbleweed
  * change struct file_operation to proc_ops used in newer kernels</changelog>
  <changelog author="popov895@ukr.net" date="1632312000">- Switched to version 1.2.2 from nix-community
- Dropped patches:
  * 0001-include_fix.patch
  * 0002-proc_ops_fix.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648987200">- Description adjusted</changelog>
</package>
<package pkgid="96d78a1f4344bc3b9d877d5eeb5a9e402355dd68328737f603ca6c979b949e35f8b07a7861981dbf57a0edd942f5411cf92066dd1eb50ef4416bc54942e3239f" name="acpi_call-kmp-default" arch="aarch64">
  <version epoch="0" ver="git.1707315555.ede6ea7_k7.1.3_76.g342bd0e" rel="75.103"/>
  <changelog author="maxf@njsm.de" date="1443441600">- Fixed build on openSUSE 13.2
- Module is now loaded automatically
- Added README to package
  Mon Sep 28 07:15:44 UTC 2015
- Initial spec for version 1.1.0</changelog>
  <changelog author="maxf@njsm.de" date="1443441601">- Fixed directory ownership.</changelog>
  <changelog author="maxf@njsm.de" date="1444996800">- Fixed build on Tumbleweed.</changelog>
  <changelog author="sbrabec@suse.com" date="1511265600">- Fixed build on Tumbleweed:
  * include linux/uaccess.h instead of asm/uaccess.h
    (0001-include_fix.patch)
  * Build requires libelf-devel</changelog>
  <changelog author="timuzhti@gmail.com" date="1597320000">- Fixed build on Tumbleweed
  * change struct file_operation to proc_ops used in newer kernels</changelog>
  <changelog author="popov895@ukr.net" date="1632312000">- Switched to version 1.2.2 from nix-community
- Dropped patches:
  * 0001-include_fix.patch
  * 0002-proc_ops_fix.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648987200">- Description adjusted</changelog>
</package>
<package pkgid="8d6672820b137999e3362fc707824241dabe62c14a67046859da6bc67b069a1b4e724859d38016c3ff597460bc41237814b76c1a2fc3f405ba956288c368f816" name="dtb-aarch64" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="25bbafc9f52c1dc40f0bcc4fe239e1f3553339975474d046b091e83b68cd33966d2bab39cafd67d5d18f7f58c05aa17142cbdfec29ced0915382395fbdc2be42" name="dtb-allwinner" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="04016ff627ac967175dfa6040c49ef247ccbf5fb5236c0af93a12e93e4cd1ba7dc631267a8d3ef03f0bfc42f10d9b8c333bb81fe930387a19890e21058aa9923" name="dtb-altera" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="a1064e0ee3bfca41f6038c24659587946a5362110efab7aa2607b24d4891241d44ba3287bd05ebc6701d3503883b8a73e68cb9860088cc22131358190142a6f1" name="dtb-amazon" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="a9fa62e159d4de0873666bfb4c0816329e49e247427d96bc4f88828245fcd3d542b5da25d477e274ec2923f6eedb9cdcf7099144ba6096d188c30aac097fa7ba" name="dtb-amd" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="bd6f236ae400bf86489b6dcc97930ca36a2980d9c236da209d216c36990542ff0082f0f52d8f4b592fa12bc7732ceb0ccd0aba7ed868f5b374daa5ad755f5c64" name="dtb-amlogic" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="d8ed7b7e30c08a649350ca4ca48b2781bbae8adb737775cb47fbaa2aebebd50dc6640f28ea320ef092fbe6aa8f50dd4b90ae088f8687d6c5e2a197fffb5a7467" name="dtb-apm" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="937123beb72d6920e4d5f85534b74891df2561268d0ec2939fc51ef054ed7165f6955333d4edbd9dbf2d4fdfffed95bb790db6fe79ca9041528e0c7cf6b91113" name="dtb-apple" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="f15a6050f78fef7445032732d2b518effd9fe224bda88eace97390364c3d60c295f7e5ebfb366f3cc9e6a06c4eabe9da1538ba6c8bebfb158617cb406757cb10" name="dtb-arm" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="a6f974f292dc48adde0abdea776ca879f1e3615d14a682920f9fa5dd80c8a7e49f499f6c21d3a68071c2cc45965bb00a73a0f4fc257296f8f4d1ec3d6e50e7ae" name="dtb-broadcom" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="eb841faaa78fad056549f84c75474ca0262dd96b51cf9362952c9b4f1003654834a12bef12c00fd4e5ff8872f774fbc25fcd2db48d034f7552459faac06a4bac" name="dtb-cavium" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="6b7f678f7c2b3c548fa4f740f39c76cfddc911f7c87199304bc88fb59e14ff52a717b283b1c59655f663f11968e39b4fe661fe9141265ab55ffe7ff2f7241dd9" name="dtb-exynos" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="3665944f93f6e1a86706634889127f3a1482fb91447c8300e0178e21352276531cb650cef88e79bcdf90b7e4bb0c564a57e66f47bce978c4a60123203d3eed02" name="dtb-freescale" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="15d0224adf1592a007c863919f1c300ee078c1ec75d32f5909298d45e7f6c1863746979d9370ea5c9160a3008bb4a38779da85d529e4a40d374b5d19eb4bfde2" name="dtb-hisilicon" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="5e77b8d898415e989719fd922bcaea4c7e5c072f20b0fe17ce90b4ecbb488e16251afab073033b3d61cc69afb4abc1408432f5afe76ae84584502dd4ba744cb4" name="dtb-lg" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="e750f59c933db1f6d32bf1d4fc9df88f51b3afaa143ee66ca788cc2e0187a0efc19f177394c62be63f8d1ade67b4a8e0c8ee22724b3aa224b9a4147bba5ba0c1" name="dtb-marvell" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="93243c3af6237678ef2e3f10e75d1922b33b6d3db6d5f4a9fe31a54c79d51534310f1c3e07dfc02d3bcb645af7b446393ff9555bb130993267b060fea7734d7e" name="dtb-mediatek" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="ceecf9fb462cef0296471feb500e32c8fcf45616a371077bf9f69523fd2abc43c655c1a30c3c90c3d8de3d2f5fc277398c8408a5a4ea51f8393fcdc50c610a3d" name="dtb-nvidia" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="c1a88af5bcac54371021a50caff3d59a2548de9333a807e7da3312347590119d40ebe2ebbe977618be3fb376b73b5866debb5d75bc4e2b874ba5816cd0b20b45" name="dtb-qcom" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="4bc1a8fa983d84bcc6de45ef45de70869c95edc3c235fa8a558e15a49e5ce57ceb88626c9fd0b0c83a46aa2465e9733ff5cf68765942813a716ee279fb93d12c" name="dtb-renesas" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="9a188471b875dbe28eb64e8208d21205fc7cd8bc444e4e00ba78f3ea9a9d5e948fddf8270bda183a68e206d0b4145844e916c16b3a9caee84f6202087361dd4b" name="dtb-rockchip" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="26d596c639fd82ee3b047cf58a54fab1f47e056069fc43748d6206c907515c46c4371e6af1ca2b8a98cf3bc5a864df0144108d8a68729468f4cc61fda11baf03" name="dtb-socionext" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="b6ad55c39d6d8e789b4cba97c8390e7412e4ae324548383209b6485bec2c174c85d53034a48f79be989c259c6c201bd088b196a4989fa827e2854ac081a26c5e" name="dtb-sprd" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="e7246f7bb9c35314e74de624c2fe2086f7dd124373c6d3ebd89022aef06072c87b22a17ad2ac69053a8c95eae91d2f262c7db7d8f68d9afbef1f5fb275ec061b" name="dtb-xilinx" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="046a89b6e87bd05c0355db1869e6bf21904ec94279ed2875654245c04c4652967327d4ebac0f2c01549e4b7ff56d44023cc9bf870a11912a32e4c15ff6829df2" name="gasket-driver" arch="aarch64">
  <version epoch="0" ver="1.0.18_5815ee3" rel="33.64"/>
  <changelog author="Chris Bradbury &lt;obs@chrbrd.com&gt;" date="1683806400">- Initialise package.</changelog>
  <changelog author="Chris Bradbury &lt;obs@chrbrd.com&gt;" date="1683806401">- Add `fix-for-backported-dma-buf-ns.patch`.
  The dma-buf symbols used by this driver were moved into their own
  `DMA_BUF` module namespace in kernel 5.16. Consequently, the
    upstream source conditionally imports the `DMA_BUF` module
  namespace if the kernel version is &gt;= 5.16.
  However, the `DMA_BUF` module namespace changes have been
  backported to the 5.14 kernel used in Leap 15.5, causing
  unpatched source builds to fail.
  This change incorporates a patch that removes the conditional
  check in the upstream source, importing the `DMA_BUF` module
  namespace regardless of kernel version, and applies that patch
  when `sle_version` is equal to "150500" (ie. is Leap 15.5 or
  greater).
  The patch is taken from the PR at:
  https://github.com/google/gasket-driver/pull/10</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1689768000">- Add `fix-kernel-gte-6.4.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;chris@binaryspanner.com&gt;" date="1697544000">- Remove `fix-kernel-gte-6.4.patch` as it has been merged upstream.
- Fix ueficert package builds.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1721217600">- Fix `eventfd_signal` for kernels &gt;= 6.8.
- Apply `fix-for-backported-dma-buf-ns.patch` to Leap 15.6 builds.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1735473600">- Add `fix-for-no_llseek.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1737720000">- Add `fix-for-module-import-ns.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1767700800">- Fix for Leap/SLES 15 builds greater than 15.6</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1776427200">- Exclude bulding for 32 bit architectures (%{ix86} %arm): this
  package/driver has not ever built on those arches.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1778068800">- Add `fix-renamed-zap_vma_ptes.patch`.</changelog>
</package>
<package pkgid="2b512f2174c966dd4853893a848845f9e21f70cfa67ddee2bb40ce6af867659250d715e8d1ee9fd3eea44d0457df406d16bcc6ffb04159f6c95e7295eeb38fef" name="gasket-driver" arch="src">
  <version epoch="0" ver="1.0.18_5815ee3" rel="33.64"/>
  <changelog author="Chris Bradbury &lt;obs@chrbrd.com&gt;" date="1683806400">- Initialise package.</changelog>
  <changelog author="Chris Bradbury &lt;obs@chrbrd.com&gt;" date="1683806401">- Add `fix-for-backported-dma-buf-ns.patch`.
  The dma-buf symbols used by this driver were moved into their own
  `DMA_BUF` module namespace in kernel 5.16. Consequently, the
    upstream source conditionally imports the `DMA_BUF` module
  namespace if the kernel version is &gt;= 5.16.
  However, the `DMA_BUF` module namespace changes have been
  backported to the 5.14 kernel used in Leap 15.5, causing
  unpatched source builds to fail.
  This change incorporates a patch that removes the conditional
  check in the upstream source, importing the `DMA_BUF` module
  namespace regardless of kernel version, and applies that patch
  when `sle_version` is equal to "150500" (ie. is Leap 15.5 or
  greater).
  The patch is taken from the PR at:
  https://github.com/google/gasket-driver/pull/10</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1689768000">- Add `fix-kernel-gte-6.4.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;chris@binaryspanner.com&gt;" date="1697544000">- Remove `fix-kernel-gte-6.4.patch` as it has been merged upstream.
- Fix ueficert package builds.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1721217600">- Fix `eventfd_signal` for kernels &gt;= 6.8.
- Apply `fix-for-backported-dma-buf-ns.patch` to Leap 15.6 builds.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1735473600">- Add `fix-for-no_llseek.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1737720000">- Add `fix-for-module-import-ns.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1767700800">- Fix for Leap/SLES 15 builds greater than 15.6</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1776427200">- Exclude bulding for 32 bit architectures (%{ix86} %arm): this
  package/driver has not ever built on those arches.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1778068800">- Add `fix-renamed-zap_vma_ptes.patch`.</changelog>
</package>
<package pkgid="9b74d4bcb3fc254e741ac3bf228acbd2c029e21a1146b800ca3c441b0365c206a2ca22c3b956e6b1bf7db62c6af632ddf9d24fed41d63b1c0fc61f0e0222effb" name="gasket-driver-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="1.0.18_5815ee3_k7.1.3_76.g342bd0e" rel="33.64"/>
  <changelog author="Chris Bradbury &lt;obs@chrbrd.com&gt;" date="1683806400">- Initialise package.</changelog>
  <changelog author="Chris Bradbury &lt;obs@chrbrd.com&gt;" date="1683806401">- Add `fix-for-backported-dma-buf-ns.patch`.
  The dma-buf symbols used by this driver were moved into their own
  `DMA_BUF` module namespace in kernel 5.16. Consequently, the
    upstream source conditionally imports the `DMA_BUF` module
  namespace if the kernel version is &gt;= 5.16.
  However, the `DMA_BUF` module namespace changes have been
  backported to the 5.14 kernel used in Leap 15.5, causing
  unpatched source builds to fail.
  This change incorporates a patch that removes the conditional
  check in the upstream source, importing the `DMA_BUF` module
  namespace regardless of kernel version, and applies that patch
  when `sle_version` is equal to "150500" (ie. is Leap 15.5 or
  greater).
  The patch is taken from the PR at:
  https://github.com/google/gasket-driver/pull/10</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1689768000">- Add `fix-kernel-gte-6.4.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;chris@binaryspanner.com&gt;" date="1697544000">- Remove `fix-kernel-gte-6.4.patch` as it has been merged upstream.
- Fix ueficert package builds.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1721217600">- Fix `eventfd_signal` for kernels &gt;= 6.8.
- Apply `fix-for-backported-dma-buf-ns.patch` to Leap 15.6 builds.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1735473600">- Add `fix-for-no_llseek.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1737720000">- Add `fix-for-module-import-ns.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1767700800">- Fix for Leap/SLES 15 builds greater than 15.6</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1776427200">- Exclude bulding for 32 bit architectures (%{ix86} %arm): this
  package/driver has not ever built on those arches.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1778068800">- Add `fix-renamed-zap_vma_ptes.patch`.</changelog>
</package>
<package pkgid="aa026236c8e684aed03ef11e134d0806db1ab9b265ede217b108b0e1995c2d447ab6ee469a3f96d5ee33c78dfc2d37110d45de4c86b6a802699a3437422b6f96" name="gasket-driver-kmp-default" arch="aarch64">
  <version epoch="0" ver="1.0.18_5815ee3_k7.1.3_76.g342bd0e" rel="33.64"/>
  <changelog author="Chris Bradbury &lt;obs@chrbrd.com&gt;" date="1683806400">- Initialise package.</changelog>
  <changelog author="Chris Bradbury &lt;obs@chrbrd.com&gt;" date="1683806401">- Add `fix-for-backported-dma-buf-ns.patch`.
  The dma-buf symbols used by this driver were moved into their own
  `DMA_BUF` module namespace in kernel 5.16. Consequently, the
    upstream source conditionally imports the `DMA_BUF` module
  namespace if the kernel version is &gt;= 5.16.
  However, the `DMA_BUF` module namespace changes have been
  backported to the 5.14 kernel used in Leap 15.5, causing
  unpatched source builds to fail.
  This change incorporates a patch that removes the conditional
  check in the upstream source, importing the `DMA_BUF` module
  namespace regardless of kernel version, and applies that patch
  when `sle_version` is equal to "150500" (ie. is Leap 15.5 or
  greater).
  The patch is taken from the PR at:
  https://github.com/google/gasket-driver/pull/10</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1689768000">- Add `fix-kernel-gte-6.4.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;chris@binaryspanner.com&gt;" date="1697544000">- Remove `fix-kernel-gte-6.4.patch` as it has been merged upstream.
- Fix ueficert package builds.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1709035200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1721217600">- Fix `eventfd_signal` for kernels &gt;= 6.8.
- Apply `fix-for-backported-dma-buf-ns.patch` to Leap 15.6 builds.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1735473600">- Add `fix-for-no_llseek.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1737720000">- Add `fix-for-module-import-ns.patch`.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1767700800">- Fix for Leap/SLES 15 builds greater than 15.6</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1776427200">- Exclude bulding for 32 bit architectures (%{ix86} %arm): this
  package/driver has not ever built on those arches.</changelog>
  <changelog author="Chris Bradbury &lt;opensuse@chrbrd.com&gt;" date="1778068800">- Add `fix-renamed-zap_vma_ptes.patch`.</changelog>
</package>
<package pkgid="e2242ea58088c9036014343c34b98d3d6bef14d5073cb2846d50a5dd7eaa7763dc48bf563363d0f48dd64b6034feb930aed92735957223b95805585ecbbec038" name="i2c-nct6793-driver" arch="aarch64">
  <version epoch="0" ver="1750943988.129f6ff" rel="23.239"/>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1751112000">- Create</changelog>
</package>
<package pkgid="f43e103f3ac931ffb25288684fb663a03aa967750aea88cd8bdbb27036d951b26f7f4f46e30f8a35822e73c633d535fca178fbc9a68f1a0825930b26c57905f4" name="i2c-nct6793-driver" arch="src">
  <version epoch="0" ver="1750943988.129f6ff" rel="23.239"/>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1751112000">- Create</changelog>
</package>
<package pkgid="19fac4742de8fb7eb8ff24e839977a173f3b585d2134f02872c311cdd81049e9bdffb85eb7f92dfb0fa3b7eeba4dcfc43c119883b32318f0103c0647f29eb11d" name="i2c-nct6793-driver-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="1750943988.129f6ff_k7.1.3_76.g342bd0e" rel="23.239"/>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1751112000">- Create</changelog>
</package>
<package pkgid="636781f61d48de56f19ed541688f4b6ffda0c4de2d5bbaab9af163dc97ec7969f4a4ffb69aa2fc82346825cc7b0570875a2c27aaf401eb33d2d6330ef7600f47" name="i2c-nct6793-driver-kmp-default" arch="aarch64">
  <version epoch="0" ver="1750943988.129f6ff_k7.1.3_76.g342bd0e" rel="23.239"/>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1751112000">- Create</changelog>
</package>
<package pkgid="86fef2ba0eb26727604c68aae4b6d0284895b4e9ea95c6c97725a9d9dac259e0f6bc79fcd04144c4c437433560bfbf2367acc82309cd32f699bcbe98b9299469" name="kernel-64kb" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="68db863acfe88e23aa446c39630fa730fda9afbe0752eb3ae7eace39bd338b7bee94a7025232fcd64f7de183d8c4c93530549c46e77de2efb16c916c54ea1c96" name="kernel-64kb" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="de9bd8c6a7f675ebd398636b52b5abd543cc41f26d031950ff9e305a3d198cb099837e981996f0807e738db180e18bbaf99db648219437bb3742afc70ec6308b" name="kernel-64kb-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="98e6c1772f535c7a6eec184889a80d8930768438e920592be65f4c01c1ba49e26ced81b6f0a5e16b10415962030adf34f2f3ac256df0780fe6df340c6f74434e" name="kernel-64kb-debugsource" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="3eaab5f0efdf4379456d587ebeccd3cef39a05c60b8dc6a71a3b5d3d2f578a77dbcc240e67296f7d68dc33215fb6104a5f619d660d101ee7757e08339247658d" name="kernel-64kb-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="e2d44f4deb6135824859296a816a6cff00f17864d430562decd6039919393b2dc36d67b2aac6de24254710278011e18a73718d8f08d5554255bf88ac42ec2807" name="kernel-64kb-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="0eb0abc24b40495bed485899e91c337ba11284cee528833e95f653cfff3f623066a223ddbef84a2205e1b386026837b03561c6b487f1aed5dc65a7f23217b974" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="a1d77e250479c58ed9c230c1a60a3bc844c1a3e3ae253f556f26838fdd02cf4477d3cb74a709608ad5d13fc6c39c489ece6c35247fb27d0a101062f73968d0a7" name="kernel-default" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="b43dd0f41e1300c80269203754dde7cfdea38c95f3af2544a787b0b6da16dc9f49cda64876fc192ab54874f0f36068b2e0a2eb6c505017b28df78ac75e6a35c9" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e.112.35"/>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="Guilherme Moro &lt;gmoro@suse.com&gt;" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1702468800">- Add macvlan</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1736856000">- Add virtiofs</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="ce87c893fd9a00ae8f1b5db1e2b81635bfe755281b6553b0252e0da77ef1540475e83f96774717bed3cd31595e71305018928854a81d7a03df32f2fb665571b8" name="kernel-default-base" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e.112.35"/>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="Guilherme Moro &lt;gmoro@suse.com&gt;" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1702468800">- Add macvlan</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1736856000">- Add virtiofs</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="a785c016c2808c99a09e4380e0d3afe4f8f26f51517fbff8b79481d7289a77b6c04221e50ee6bc142977ffd3aa330631754d4431177c59ae9e045f303e14e282" name="kernel-default-base-rebuild" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e.112.35"/>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="Guilherme Moro &lt;gmoro@suse.com&gt;" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1702468800">- Add macvlan</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.com&gt;" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1736856000">- Add virtiofs</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="d57ba1ff7fefd50d533e7457f00efabdc975abed9aa70f74fe9d348d4a4c3abeadc3ae42253f23a42b31f5a6d7cd9d767115859c561a33da348a33f46d2ed0b3" name="kernel-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="95f83ffba322cb91952456ab64e233bf9379d2189578f93d9e96cb63ed3bc042706cca40f6c6534077ac58bd5fbc9fd1fa875b5c08e30a68a40f2282523eb32f" name="kernel-default-debugsource" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="f0e0ee91ee2cf32ddb92298116c7a029a9323411ea720d16cac14de3990af300232d5f005138fa34cb1c1bbd5ecfd6088ae05068528fd67fd81326555d0f1957" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="2c9dd8764fb9da75b46d78ce3a857a35bad21bcbd5bfcf22a90ebb4e1ca1f033e50686cec42376f4c0030b4b6722ef659430314d15b088a06450217ba59442b7" name="kernel-default-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="75e886521b91ce8d1432ac37bc3a1b087898b1561411412c04da0b9a342f8a24a3ae076306501b7a45386e1d98d8a021c1f9a437a0eec0824d38673acf02c2a2" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="1a159f0f27306637fcb385944541e9a34aabbcc4f0e63344c2960118cbdcb32afcc4f21185c145a2092ca9d57d72b1c5a1867a20006cd6dfed33016f4327ae25" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="7ab1247848e19f50acdd77f0331dd1da15635104e38e2d9df0933b5552875d1d59e37e7a600fd99406b33bc4f21ea3ae7daee3aa7ad677b9860d659e4c171ec1" name="kernel-docs" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="bf0e9a54e8972164f47c5e3d7c01b5cfddeeb7bb75d77215444cca959e1cefca25cf8affa8e0bbdea7e1cb44810541aa22b0a36e424031f9179b1054f337eafe" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="d5a43beb766adee0ed423a4fd2b392efd2dc7ccc2ea3e97f2b0ff51cdc9865c5acc84de6b23b3d21dc199594f17d6af2ce3f2f916c63e2b9e656cdc0f18a775b" name="kernel-kvmsmall" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="86c5aad7019d7a69871c840384530bb5f6579475936e0adf1bb3890aa883de464786661ce90d2b10e997167ef67cde59f4b407443924aa26336172e5568d9928" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="9aab4490ef2df4a582b281b68c397969be1c7ab1554cceecfc61777f44569968a90179470c1e0457df459b3958f5d570fadaf0d39c973bcbb9b222c966b911e8" name="kernel-kvmsmall-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="9a93e5259ecaf134891f1ee0ef92dc424c66cb5bc72fcda631cfac901c471285c66a7cfcb52a71f418a68757f2a7a9f674db21bb201cf4eb731eaf6dbfa48795" name="kernel-kvmsmall-debugsource" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="d83f388776affc6df2504c93c61a739cc55c220722e888f3988925a1d73ee22d2e28cdac2675367ae4000e48ce03a83361e22360f0c64f2834898d5522193ac7" name="kernel-kvmsmall-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="c5eb57f1659b96597320f969c3d0223c2c019a587d23a1dd0594fbfcb820bd0446d5b504663421b0723c4d38ac008dda82313e1eaf4fc50d65d566662b7f4cfa" name="kernel-kvmsmall-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="bc96a1eebfe5908239e88c1c03d3b4d013d2eb533f7b5f30f9d5680922922988dd3a79339ff07d8fd723755570ca3d61521fe4b6dfc46fd8dca4e32ff3e87dbb" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="20177c92e0339b0fc17588f96fef64f8487f0e74caddfca43ef2eabcc2970a596b4ca53354a4ce38eb525597090c76d75d5d58f1b61fec9312967b7a9ae6bfd6" name="kernel-obs-build" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="e85e0a60fc004ef54427e71fd94bc7da3db729538a39f0a17c0b869550ba858ba81a4d1b96a510d94da96d1562372acb727049ef41817deec9c46c0296c243c2" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="4888c118176e980887a2d64e5eac1c8962501403493d6be0b42cfe347412db172e3c1835f844efc4d4ed90ce5dc2db720b10c42684c591be761eee5c4b35ef39" name="kernel-obs-build-debugsource" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="8c942e2729b4b66ba359e11167298416213429f39a7072813e4ef8c2a6c6f400bcf8f8eda00ab43fdd59f1e1117b63ff51ca1eb5c6805e9aa24234021928b64d" name="kernel-source" arch="noarch">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="1233f95e64eda1e4defcb523ef13b1178feaa87bf35fa238f81e22f76f0ea026bf4f4db867f1f98f11ab76775e4f6b0f559c9184ae6fed94ed791874990eff6b" name="kernel-source" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="57866c0549e5ec586d4d3a4dc38f3737acf251751195200411ce4dff4d85bc9be7a73bd9b43de5741b661e56612ba7888034203c6452d875b5463c106dffcf78" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="d69e6528aaf10fe9af296997d8e2358373c0f6c2e1baed346980243c154a7c32a1cf3b0e49b58b2e3236b55634afd3b7d52fda2747d304850adee9aeda8566f8" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="92afd637051a8002479964cd2fc709cd926df858bf4ecbf34aafd9dab64d5fbfb88b34af58a28de99bff3d8799fccd88c79becad8f23ecc9f98c1ac2b42a8137" name="kernel-syms" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="1a218b6adc02a9ff7df8b1e7d61e3af4ff557ccb1cfaac06e4971a15395f9e98bbdd03a5a6e92f905d77e1cf666e6fa3bd860830652b7332bef49d625799e52b" name="kernel-vanilla" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="83cf9fa575fd9a60306e0e3c195e5c2d2ed2fe4cf34f632a5839a19bb52fd108bc8bcf3b9ba0d4f71e538371219fa3b7014a221e91f69bb8533ecfb2d54243ec" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="39b8b73a85e88e0db4dd330083f709cb7066b3a1bbbea2f761533cbe8db0ed92bc1b2652b9e96b514cd04c3148cef96858271ae853f41301798c1c9c30a090a8" name="kernel-vanilla-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="a734976fbc32acd7bbf6e9748c76ec46f078def3ef319339d52182cbf01069305a53b171c8d05448782f0b9f02c5aa2af023a50e685d5ec4499c59b346a25080" name="kernel-vanilla-debugsource" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="108e44ab53f2e248ebb833cb67e7a84111a14a2739286cfc544a5058e3091d3d0fad6454f04fcc8e3c85fa3d8f687d0550487e5ec606a5d9c0607e548a60ab70" name="kernel-vanilla-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3" rel="76.1.g342bd0e"/>
  <changelog author="ddiss@suse.de" date="1781524800">- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
  (cherry picked from commit c7a57a2b24918f1dd3365e56210b4f0aae663f16)
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 5807b63</changelog>
  <changelog author="mkubecek@suse.cz" date="1781524801">- Update patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch.
  Replace arch_ima_get_secureboot() call by arch_get_secureboot() to update
  for 7.1 kernel.
- commit e6e2f10</changelog>
  <changelog author="jslaby@suse.cz" date="1781524802">- Refresh
  patches.suse/selftests-namespaces-Fix-waitpid-race-in-listns_efault_tes.patch.
- Refresh
  patches.suse/selftests-namespaces-Kill-grandchild-in-nsid-fixture-teard.patch.
- Refresh
  patches.suse/selftests-namespaces-Skip-efault-tests-when-listns-is-not-.patch.
  Update upstream status.
- commit 2ebf0bc</changelog>
  <changelog author="jslaby@suse.cz" date="1781524803">- Delete
  patches.suse/media-ipu-bridge-Add-upside-down-sensor-DMI-quirk-fo.patch.
  This patch was merged to 7.1-rc1, so it was applied twice.
- commit b572de5</changelog>
  <changelog author="jslaby@suse.cz" date="1781784000">- Revert "ACPICA: Replace strncpy() with strscpy_pad() in
  acpi_ut_safe_strncpy()" (bsc#1268472).
- commit 55dbe47</changelog>
  <changelog author="jslaby@suse.cz" date="1781870400">- HID: Input: Add battery list cleanup with devm action
  (git-fixes).
- drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages
  (git-fixes).
- commit 396d3f6</changelog>
  <changelog author="jslaby@suse.cz" date="1782043200">- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
  (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
  100 CPU (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.1-009-HID-Input-Add-battery-list-cleanup-with-devm-ac.patch.
- Rename to
  patches.kernel.org/7.1.1-010-drm-amdgpu-drop-retry-loop-in-amdgpu_hmm_range_.patch.
- Update config files.
- commit 937e122</changelog>
  <changelog author="jslaby@suse.cz" date="1782216000">- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8</changelog>
  <changelog author="rbm@suse.com" date="1782216001">- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9</changelog>
  <changelog author="jslaby@suse.cz" date="1782475200">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc</changelog>
  <changelog author="jslaby@suse.cz" date="1782475201">- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34</changelog>
  <changelog author="mkoutny@suse.com" date="1782475202">- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042</changelog>
  <changelog author="jslaby@suse.cz" date="1782561600">- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem-&gt;altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1</changelog>
  <changelog author="jslaby@suse.cz" date="1782561601">- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022</changelog>
  <changelog author="jslaby@suse.cz" date="1782993600">- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6</changelog>
  <changelog author="jslaby@suse.cz" date="1782993601">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c</changelog>
  <changelog author="jslaby@suse.cz" date="1783080000">- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit 0709164</changelog>
  <changelog author="jslaby@suse.cz" date="1783166400">- Linux 7.1.3 (bsc#1012628).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
  role (bsc#1012628).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (bsc#1012628).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (bsc#1012628).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (bsc#1012628).
- batman-adv: tp_meter: avoid window underflow (bsc#1012628).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (bsc#1012628).
- batman-adv: tp_meter: fix fast recovery precondition
  (bsc#1012628).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (bsc#1012628).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (bsc#1012628).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (bsc#1012628).
- batman-adv: prevent ELP transmission interval underflow
  (bsc#1012628).
- batman-adv: tp_meter: initialize last_recv_time during init
  (bsc#1012628).
- batman-adv: gw: don't deselect gateway with active hardif
  (bsc#1012628).
- batman-adv: ensure bcast is writable before modifying TTL
  (bsc#1012628).
- batman-adv: fix (m|b)cast csum after decrementing TTL
  (bsc#1012628).
- batman-adv: frag: ensure fragment is writable before modifying
  TTL (bsc#1012628).
- batman-adv: frag: avoid underflow of TTL (bsc#1012628).
- batman-adv: v: prevent OGM aggregation on disabled hardif
  (bsc#1012628).
- batman-adv: tp_meter: restrict number of unacked list entries
  (bsc#1012628).
- batman-adv: tp_meter: annotate last_recv_time access with
  READ/WRITE_ONCE (bsc#1012628).
- batman-adv: tp_meter: prevent parallel modifications of
  last_recv (bsc#1012628).
- batman-adv: tp_meter: handle overlapping packets (bsc#1012628).
- batman-adv: tt: don't merge change entries with different VIDs
  (bsc#1012628).
- batman-adv: tt: track roam count per VID (bsc#1012628).
- batman-adv: dat: prevent false sharing between VLANs
  (bsc#1012628).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1012628).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
  (bsc#1012628).
- ipv6: account for fraggap on the paged allocation path
  (bsc#1012628).
- ipv4: account for fraggap on the paged allocation path
  (bsc#1012628).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
  (bsc#1012628).
- wifi: mt76: add wcid publish check in mt76_sta_add
  (bsc#1012628).
- mac802154: llsec: add skb_cow_data() before in-place crypto
  (bsc#1012628).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1012628).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
  changelink (bsc#1012628).
- PCI/P2PDMA: Add Intel QAT, DSA, IAA devices to whitelist
  (bsc#1012628).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
  (bsc#1012628).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
  CONFIG share BAR (bsc#1012628).
- fbdev: fix use-after-free in store_modes() (bsc#1012628).
- fscrypt: Fix key setup in edge case with multiple data unit
  sizes (bsc#1012628).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1012628).
- block: invalidate cached plug timestamp after task switch
  (bsc#1012628).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
  (bsc#1012628).
- err.h: use __always_inline on all error pointer helpers
  (bsc#1012628).
- gcov: use atomic counter updates to fix concurrent access
  crashes (bsc#1012628).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1012628).
- keys: Pin request_key_auth payload in instantiate paths
  (bsc#1012628).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
  mmap_changing (bsc#1012628).
- userfaultfd: build __VMA_UFFD_FLAGS from config-gated masks
  (bsc#1012628).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
  (bsc#1012628).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
  (bsc#1012628).
- wifi: ath11k: fix warning when unbinding (bsc#1012628).
- wifi: rtl8xxxu: Detect the maximum supported channel width
  (bsc#1012628).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (bsc#1012628).
- wifi: rtw88: increase TX report timeout to fix race condition
  (bsc#1012628).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (bsc#1012628).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: fix race condition in PTP removal
  (bsc#1012628).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
  session handlers (bsc#1012628).
- f2fs: fix missing read bio submission on large folio error
  (bsc#1012628).
- f2fs: pass correct iostat type for single node writes
  (bsc#1012628).
- f2fs: reject setattr size changes on large folio files
  (bsc#1012628).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
  (bsc#1012628).
- f2fs: validate orphan inode entry count (bsc#1012628).
- f2fs: validate compress cache inode only when enabled
  (bsc#1012628).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
  (bsc#1012628).
- f2fs: fix to round down start offset of fallocate for pin file
  (bsc#1012628).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
  (bsc#1012628).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
  (bsc#1012628).
- Revert "f2fs: remove non-uptodate folio from the page cache
  in move_data_block" (bsc#1012628).
- f2fs: fix incorrect FI_NO_EXTENT handling in
  __destroy_extent_node() (bsc#1012628).
- f2fs: keep atomic write retry from zeroing original data
  (bsc#1012628).
- f2fs: read COW data with the original inode during atomic write
  (bsc#1012628).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
  (bsc#1012628).
- bpf: use kvfree() for replaced sysctl write buffer
  (bsc#1012628).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
  (bsc#1012628).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
  (bsc#1012628).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
  max mapping level (bsc#1012628).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
  with get_unaligned() (bsc#1012628).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1012628).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1012628).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
  (bsc#1012628).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
  (bsc#1012628).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1012628).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
  (bsc#1012628).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1012628).
- sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in
  fixup path (bsc#1012628).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
  cleanup on remove (bsc#1012628).
- fpga: region: fix use-after-free in
  child_regions_with_firmware() (bsc#1012628).
- rpmsg: char: Fix use-after-free on probe error path
  (bsc#1012628).
- ocfs2: reject oversized group bitmap descriptors (bsc#1012628).
- 9p: avoid putting oldfid in p9_client_walk() error path
  (bsc#1012628).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
  (bsc#1012628).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
  banks (bsc#1012628).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
  (bsc#1012628).
- power: reset: linkstation-poweroff: fix use-after-free in the
  linkstation_poweroff_init() (bsc#1012628).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1012628).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
  (bsc#1012628).
- ntfs: serialize volume label accesses (bsc#1012628).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
  fb_videomode_to_var (bsc#1012628).
- fbdev: fbcon: fix out-of-bounds read in err_out of
  fbcon_do_set_font() (bsc#1012628).
- fbdev: omap2: fix use-after-free in omapfb_mmap (bsc#1012628).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
  (bsc#1012628).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
  (bsc#1012628).
- i2c: core: fix adapter registration race (bsc#1012628).
- nfsd: release layout stid on setlease failure (bsc#1012628).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1012628).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1012628).
- nfsd: fix inverted cp_ttl check in async copy reaper
  (bsc#1012628).
- nfsd: fix posix_acl leak and ignored error in nfsd4_create_file
  (bsc#1012628).
- nfsd: check get_user() return when reading princhashlen
  (bsc#1012628).
- nfsd: fix dead ACL conflict guard in nfsd4_create (bsc#1012628).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
  retry race (bsc#1012628).
- nfsd: reset write verifier on deferred writeback errors
  (bsc#1012628).
- NFSv4/flexfiles: reject zero filehandle version count
  (bsc#1012628).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
  (bsc#1012628).
- NFSv4: clear exception state on successful mkdir retry
  (bsc#1012628).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1012628).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
  (bsc#1012628).
- net/tcp-ao: fix use-after-free of key in del_async path
  (bsc#1012628).
- apparmor: advertise the tcp fast open fix is applied
  (bsc#1012628).
- Rename to
  patches.kernel.org/7.1.3-037-apparmor-fix-use-after-free-in-rawdata-dedup-lo.patch.
- commit 208f777</changelog>
  <changelog author="jslaby@suse.cz" date="1783166401">- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354 bsc#1270230).
- Update
  patches.kernel.org/7.1.3-001-KVM-x86-Fix-shadow-paging-use-after-free-due-to.patch
  (bsc#1012628 CVE-2026-53359).
- Update
  patches.kernel.org/7.1.3-028-ipv6-account-for-fraggap-on-the-paged-allocatio.patch
  (bsc#1012628 CVE-2026-53362).
  suse-add-cves
- commit 1cb5006</changelog>
  <changelog author="schwab@suse.de" date="1783425600">- config: riscv64: raise CONFIG_NR_CPUS
  Set CONFIG_NR_CPUS to the new default of 256.
  (cherry picked from commit f0d265ff98f6017a55d6d485edb437e57d843f1e)
- commit 342bd0e</changelog>
</package>
<package pkgid="266c3fb0b360146157ad77d3cb2781456f1ef09f626c6f0f695b1d400fa1c284d852cf164ff3f05ed7f639ca40581dfee1738d1ba2f844896b017c4ea1e118ef" name="openrazer-kernel-modules" arch="src">
  <version epoch="0" ver="3.12.1+git41.g6820f9da" rel="2.3"/>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1773921600">- OBS compiled &amp; signed Kernel Module Package
- udev rules moved to openrazer-daemon</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1775304000">- Update to version 3.12.1+git1.ge1376917:
  * razerkbd: Store fn_on and fn_pressed in drvdata of usb_dev
  * Release version 3.12.1
  * Add support for Lian Li O11 Dynamic - Razer Edition
  * Add support for Razer Basilisk Mobile (Wired and Receiver)
  * examples: Fix handling of devices without a battery
  * Add scroll and DPI cycle buttons to Basilisk V3 35K
  * daemon: Apply driver mode to Basilisk V3</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1779451200">- Update to version 3.12.1+git4.gef574225:
  * razerkbd: Adjust to hid_report_raw_event() signature change</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1782561600">- Update to version 3.12.1+git39.g685290bb:
  * driver: Use sizeof() for size param of razer_send_control_msg_old_device()
  * driver: Use usb_control_msg_send/recv() instead of usb_control_msg()
  * driver: Add error handling for razer_send_payload() calls
  * daemon: Add error handling for setting DPI, poll rate &amp; brightness
  * pylib: Make getFirmware() call lazy
  * driver: Add missing Razer Huntsman V3 Pro TKL in set_device_mode()
  * driver: Pass struct hid_device down to razercommon
  * driver: Use hid_warn() for print_erroneous_report()
  * driver: Add retry handling in razer_send_payload()
  * driver: Move struct razer_key_translation to razerkbd
  * driver: Drop unnecessary forward declaration of struct razer_report
  * driver: Drop unused get_empty_razer_report()
  * driver: Use kernel clamp() macro
  * driver: Use standard kernel integer data types for structs
  * driver: Use size_t for size argument in razer_send_argb_msg()
  * driver: Zero-initialize struct razer_argb_report
  * driver: Replace strncpy() usages with strscpy()
  * driver: Clean up "wait"/delay handling with USB responses
  * driver: Use new kzalloc_obj() where applicable
  * driver: Simplify &amp;foo[0] syntax
  * driver: Use kstrtou*() instead of simple_strtoul()
  * driver: Store hid_device instead of usb_device
  * driver: Use dev_*()/hid_*() instead of printk
  * driver: Use hid_*() for printing where applicable
  * driver: Use sysfs_emit() for sysfs return
  * driver: Add sysfs_emit() implementation for kernels before 5.10
  * driver: Move compat code to compat.h
  * razeraccessory: Lock mutex around razer_send_argb_msg()
  * scripts: Add typing to create_fake_device.py
  * pylib: Add typing to _fake_driver module
  * ci: Add mypy checking
  * pylib: Clean up remaining mypy issues
  * pylib: Clean up return types of various methods
  * ci: vermin: Remove backport parameters
  * ci: vermin: Bump Python minimum version to 3.10</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1783339200">- Update to version 3.12.1+git41.g6820f9da:
  * Update DEVELOPMENT.md to add 'kernel-devel' to build requirements for Fedora
  * razerkbd: Adjust for more backports of hid_report_raw_event() change</changelog>
</package>
<package pkgid="a4b3dd52fb179528fc090e791e82e87bc318a344c2c4892996211638a2d4996653d6fa1d50308ce14e5f10bd1fef1e03d4c4825296eaaf2834ade765aaf86746" name="openrazer-kernel-modules-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="3.12.1+git41.g6820f9da_k7.1.3_76.g342bd0e" rel="2.3"/>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1773921600">- OBS compiled &amp; signed Kernel Module Package
- udev rules moved to openrazer-daemon</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1775304000">- Update to version 3.12.1+git1.ge1376917:
  * razerkbd: Store fn_on and fn_pressed in drvdata of usb_dev
  * Release version 3.12.1
  * Add support for Lian Li O11 Dynamic - Razer Edition
  * Add support for Razer Basilisk Mobile (Wired and Receiver)
  * examples: Fix handling of devices without a battery
  * Add scroll and DPI cycle buttons to Basilisk V3 35K
  * daemon: Apply driver mode to Basilisk V3</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1779451200">- Update to version 3.12.1+git4.gef574225:
  * razerkbd: Adjust to hid_report_raw_event() signature change</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1782561600">- Update to version 3.12.1+git39.g685290bb:
  * driver: Use sizeof() for size param of razer_send_control_msg_old_device()
  * driver: Use usb_control_msg_send/recv() instead of usb_control_msg()
  * driver: Add error handling for razer_send_payload() calls
  * daemon: Add error handling for setting DPI, poll rate &amp; brightness
  * pylib: Make getFirmware() call lazy
  * driver: Add missing Razer Huntsman V3 Pro TKL in set_device_mode()
  * driver: Pass struct hid_device down to razercommon
  * driver: Use hid_warn() for print_erroneous_report()
  * driver: Add retry handling in razer_send_payload()
  * driver: Move struct razer_key_translation to razerkbd
  * driver: Drop unnecessary forward declaration of struct razer_report
  * driver: Drop unused get_empty_razer_report()
  * driver: Use kernel clamp() macro
  * driver: Use standard kernel integer data types for structs
  * driver: Use size_t for size argument in razer_send_argb_msg()
  * driver: Zero-initialize struct razer_argb_report
  * driver: Replace strncpy() usages with strscpy()
  * driver: Clean up "wait"/delay handling with USB responses
  * driver: Use new kzalloc_obj() where applicable
  * driver: Simplify &amp;foo[0] syntax
  * driver: Use kstrtou*() instead of simple_strtoul()
  * driver: Store hid_device instead of usb_device
  * driver: Use dev_*()/hid_*() instead of printk
  * driver: Use hid_*() for printing where applicable
  * driver: Use sysfs_emit() for sysfs return
  * driver: Add sysfs_emit() implementation for kernels before 5.10
  * driver: Move compat code to compat.h
  * razeraccessory: Lock mutex around razer_send_argb_msg()
  * scripts: Add typing to create_fake_device.py
  * pylib: Add typing to _fake_driver module
  * ci: Add mypy checking
  * pylib: Clean up remaining mypy issues
  * pylib: Clean up return types of various methods
  * ci: vermin: Remove backport parameters
  * ci: vermin: Bump Python minimum version to 3.10</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1783339200">- Update to version 3.12.1+git41.g6820f9da:
  * Update DEVELOPMENT.md to add 'kernel-devel' to build requirements for Fedora
  * razerkbd: Adjust for more backports of hid_report_raw_event() change</changelog>
</package>
<package pkgid="5d669d25ba95f6b03cbd64fd846508ed37b781ffcaa863be30984cc7f01d6f9223ea46a6351f312fdb6b317ea955fa2fe165e8fc549710a1a9e610c7d13c89f7" name="openrazer-kernel-modules-kmp-default" arch="aarch64">
  <version epoch="0" ver="3.12.1+git41.g6820f9da_k7.1.3_76.g342bd0e" rel="2.3"/>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1773921600">- OBS compiled &amp; signed Kernel Module Package
- udev rules moved to openrazer-daemon</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1775304000">- Update to version 3.12.1+git1.ge1376917:
  * razerkbd: Store fn_on and fn_pressed in drvdata of usb_dev
  * Release version 3.12.1
  * Add support for Lian Li O11 Dynamic - Razer Edition
  * Add support for Razer Basilisk Mobile (Wired and Receiver)
  * examples: Fix handling of devices without a battery
  * Add scroll and DPI cycle buttons to Basilisk V3 35K
  * daemon: Apply driver mode to Basilisk V3</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1779451200">- Update to version 3.12.1+git4.gef574225:
  * razerkbd: Adjust to hid_report_raw_event() signature change</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1782561600">- Update to version 3.12.1+git39.g685290bb:
  * driver: Use sizeof() for size param of razer_send_control_msg_old_device()
  * driver: Use usb_control_msg_send/recv() instead of usb_control_msg()
  * driver: Add error handling for razer_send_payload() calls
  * daemon: Add error handling for setting DPI, poll rate &amp; brightness
  * pylib: Make getFirmware() call lazy
  * driver: Add missing Razer Huntsman V3 Pro TKL in set_device_mode()
  * driver: Pass struct hid_device down to razercommon
  * driver: Use hid_warn() for print_erroneous_report()
  * driver: Add retry handling in razer_send_payload()
  * driver: Move struct razer_key_translation to razerkbd
  * driver: Drop unnecessary forward declaration of struct razer_report
  * driver: Drop unused get_empty_razer_report()
  * driver: Use kernel clamp() macro
  * driver: Use standard kernel integer data types for structs
  * driver: Use size_t for size argument in razer_send_argb_msg()
  * driver: Zero-initialize struct razer_argb_report
  * driver: Replace strncpy() usages with strscpy()
  * driver: Clean up "wait"/delay handling with USB responses
  * driver: Use new kzalloc_obj() where applicable
  * driver: Simplify &amp;foo[0] syntax
  * driver: Use kstrtou*() instead of simple_strtoul()
  * driver: Store hid_device instead of usb_device
  * driver: Use dev_*()/hid_*() instead of printk
  * driver: Use hid_*() for printing where applicable
  * driver: Use sysfs_emit() for sysfs return
  * driver: Add sysfs_emit() implementation for kernels before 5.10
  * driver: Move compat code to compat.h
  * razeraccessory: Lock mutex around razer_send_argb_msg()
  * scripts: Add typing to create_fake_device.py
  * pylib: Add typing to _fake_driver module
  * ci: Add mypy checking
  * pylib: Clean up remaining mypy issues
  * pylib: Clean up return types of various methods
  * ci: vermin: Remove backport parameters
  * ci: vermin: Bump Python minimum version to 3.10</changelog>
  <changelog author="Michael Gumsley &lt;gumsley_6@hotmail.com&gt;" date="1783339200">- Update to version 3.12.1+git41.g6820f9da:
  * Update DEVELOPMENT.md to add 'kernel-devel' to build requirements for Fedora
  * razerkbd: Adjust for more backports of hid_report_raw_event() change</changelog>
</package>
</otherdata>