<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="98">
<package pkgid="b881c7b30d7ccb5f83274afd1e1c8a204316b3adc4cb4dcc9810575388195126" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="53241ec318ce7c540d683f62cbc28d66d3d1e3a173d270e9c3bb27fc9dea6a11" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="2404efa6c9e2748e392bf51b400b92c9c364444d115b22cc2adb0bfb0cb49676" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="3bf4657d397e05b49c8b160b7c71a335275caf66b4086eb0a39d775a8fdb1913" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="c053611aee3b73924df7ab63673c9f4f8c4d7337a7e7ec980b27d31794beaa51" name="cluster-md-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="edb8939cd1f8a7f391d58c4f78631005597002370f8178757c75a1173527ab55" name="cluster-md-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="d6a8e0543994dd30f8ed4f8f7a0dffa17e1ec79a7bfba9d6055f6a0c10b87fc0" name="cluster-md-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="a2102f38d54e1507d25c2cf69e06470b458dcb8e857074796e2b782d7c6409eb" name="cluster-md-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="2477660f7366f948f73887ed9b93c7fd6b86fa7c065d4e0ccca36335ff9c310e" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="c28c39fb74b872ca33638b7f5b0597c1dfd6dd6ee274ade6cf0606e0677026a4" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="771bec6dbf298bf45744a0beefbe4ca7fcb182f53830a2670c07e30d2afdff0e" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="01253340d5f8877282d98744849f678332de536f520ee7b4ac464990f0e969d3" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="b63cc56b2c9a7c84cb64f833c6499ab94cf5614f3319e017d6368cf72369bbcf" name="dlm-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="dd1adf94c86d1e42f42834b95891a88e6e8ad90a0f50382e878ee4a35444c385" name="dlm-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="be5253d93f11a150e198d8535603304fe0c8dca8c89439d8416da46db5d05256" name="dlm-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="a4eae05f4b977d558614085d9b242659f523e324e41a195fa405b8e9c8c77c29" name="dlm-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="03bad20c28c144ebaab554a90850627795f71c3a22ba17a2c7e376a4914d58ce" name="gcc13-override" arch="aarch64">
  <version epoch="0" ver="13" rel="150600.1.1"/>
  <changelog author="tiwai@suse.com" date="1707480000">- initial pkg</changelog>
</package>
<package pkgid="3f5ce37f5e07e407228265ec5c92bc4828ce80f7dcc79be1539791c60d588b81" name="gcc13-override" arch="ppc64le">
  <version epoch="0" ver="13" rel="150600.1.1"/>
  <changelog author="tiwai@suse.com" date="1707480000">- initial pkg</changelog>
</package>
<package pkgid="635166a45b6a6351c42d600d293084a2b8bf9ee15b4192f39da98cefd3a1e1b7" name="gcc13-override" arch="s390x">
  <version epoch="0" ver="13" rel="150600.1.1"/>
  <changelog author="tiwai@suse.com" date="1707480000">- initial pkg</changelog>
</package>
<package pkgid="d465ff7c8a4607d932abc4d6968f46d44495db83d6c66c8fee07d497ae23fdf8" name="gcc13-override" arch="src">
  <version epoch="0" ver="13" rel="150600.1.1"/>
  <changelog author="tiwai@suse.com" date="1707480000">- initial pkg</changelog>
</package>
<package pkgid="1f27a5917a1f6e847462c96f2d06df24ac246eebd4c1d5ee6fb1adeae6c0c43a" name="gcc13-override" arch="x86_64">
  <version epoch="0" ver="13" rel="150600.1.1"/>
  <changelog author="tiwai@suse.com" date="1707480000">- initial pkg</changelog>
</package>
<package pkgid="91c80d56c6a86bdc01ae6f5415faa93f99778b31b4e1b704daf9111d03cdcd29" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="645b8fc0fef7ac2a4a1b978295ae846f429474b001b17505f402446efa05d8f4" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="734bef96ee43ac0eec61ec5f3bbd1e3c4d3e7799a98cb149b981f2274550197e" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="22a7656bbf373f4b0fc1a562f73e1c89379181fe0e7be12581edbbf7b65ca92b" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="caa6db7aab8c7053d863a36b45e633610f1010876e4159846e15f8e82896c1d1" name="gfs2-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="4d3779579593ab1743fc462323b8e75974f0cc523c4eaba48ac06eaef78bb7af" name="gfs2-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="646eef899febe7daf8eee3fa0846f2b9f73f65187ef16b575016855be04c554f" name="gfs2-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="96034272bb09d4836407b6d92ff2af582ac2d442fbc9e46d6aabd4c1cf6a86ab" name="gfs2-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="4e4a3cb9a9b87b43a2275092a30f44e5651a2131b15b0040c8273a201a00631d" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="0df76da36bc665fdc3bb0710c7e5687681a672a7f6a45e232777a091a912c64d" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="e260b480ccdd7fa377f657c0ccec535ebb443b7d6c2a9e8b04c91ffb4165308a" name="kernel-default" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="1dc011d5b9351c03ab67f0341d983da58f4be98cb89e3dbcd5438572feba63de" name="kernel-default" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="217692c332312ec65b80f0eadbed2fac207727f7ed88d8ef398440194440bd6a" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="1a8c11b39e272e885c568c613366a68a67780dc71dcb26bd394d750327fef91e" name="kernel-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="9100dc1013d41c5626c8e447113169e4120b110b1209351f32ae1b46d23b4bbc" name="kernel-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="9a2de37551f3221a55d8a14fac3d38ea9d36a865953239686eea3cdd095f922a" name="kernel-default-debuginfo" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="a1c982d9b5f022af42de99fbd7b05a6b4ed1d84fbc8d99052559cb4105ea1a81" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="845a3a66480f9025237f4c030888198bbaae689f5163a8c2ed7a36f4bb4a9c84" name="kernel-default-debugsource" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="a6a20fab381fe275b1ef9832f49645e4c149f6949c74f80a31fb6caa51fb2a2e" name="kernel-default-debugsource" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="5f1bc6dcf008bbbd0c9900fec95920044d549dc197503f495bb04587ff949bbc" name="kernel-default-debugsource" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="f1c20586ddf95a6ef09ef74f905b830c39e3ab82bacf3ee07c2818e0198ae403" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="3faf1cee9c0196579276f7ffaaaff2a486a1ad778c2f0bf06af1b93c055f8520" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="960b426edda5b8ad63fc6e7adc753ac7de6ea9e656f87390e3613ad16e1d625e" name="kernel-default-devel" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="0d4daebd5b6c75a6a093d8b45904ab681fecd2cd83d0e051e07601e81ae419e2" name="kernel-default-devel" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="7383936e2d2d28d0cb6d02b0791bdac9eee49a44d63c661c0b22d06e27ee5217" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="c366b79a168e33cee774f0985da7d57182143df65e2d2c59662aa257d0e6ad2a" name="kernel-default-devel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="fead8cda598b8ad59d31f04954da594cf6c85aff1dbc71b0c68127213fe5581c" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="e96d46e3815f13c26ac884511f0972e226053e9b72b0d41e880f6a03073bb633" name="kernel-default-extra" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="62dc1318cad334e8a4135aa6cf94ff62d44fc6a6ceeeaa794010324f327cf210" name="kernel-default-extra" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="5b04aa04392b8491c1c17d5f6a5409f555f01163faa4260da44d3e20df0449d9" name="kernel-default-extra" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="76d9850ea22ade7ffb914908bcf7c971f6a4daa91bcb78b77ac3623f9bdd5342" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="68fa6026af43f8727c3cc3145ca11fc6c48c3ef995589141f9a523ce55cfca38" name="kernel-default-extra-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="f05aaa02e6101a1f93798a6ae905492661f68d1b7c98d5f7d66f8bda0551a2fb" name="kernel-default-extra-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="54e70173ed63db4854c157366ad4005c1dcccb3b2e634795cfa9869c37a5fc0f" name="kernel-default-extra-debuginfo" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="09ac5aece4a20ca27dbe54765873010213529ee4b5a34cbe074911843c396329" name="kernel-default-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="a4a70d814600425289dd72860b979174e60203c1a7fa3df75879a75deef0d3ec" name="kernel-default-livepatch" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="759ac72a71bbfa142d6ff99cb20401c533f47964e1ef0b97ac23e8009ab0d6f1" name="kernel-default-livepatch" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="1556b27b4908d0d2252716dbcf2881a2824c7bb1baf8a3c4e9f5294462109938" name="kernel-default-livepatch" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="a2d80f4c5a8f882769d8752fd8b385f9289c051825d77e4375964f0f0875d2e3" name="kernel-default-livepatch" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="4def5a7109e9f5059e659daa77a14dcc7de479298b155248a9db9fceba3f95dc" name="kernel-default-optional" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="6b8c454f130ece5f23c51782091291bdddce02ee6110b448791e0178de39cb0c" name="kernel-default-optional" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="d81855a5c67ea940a3dc2bd428741d490394cd34eb6e1e393b40590db1c6ae2d" name="kernel-default-optional" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="315688b6d9169a304d8f52116ae10197049ed588c12a0bf5abb77f8df074aef7" name="kernel-default-optional" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="b5dd06266358fb6d7b2295a5c0784b8f60e7af8dd33baa35c9b71c1322d02ae0" name="kernel-default-optional-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="9c8bb2daa5f1cbc70c379806cdf859a5d6ada60fd91f0999f87ddee8a91880be" name="kernel-default-optional-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="859d17c76a8a9d92e4fad7fc97b10efa9aebf9c8e222221a9784a16246fda2a7" name="kernel-default-optional-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="816a184fc8ab616c0b29701d94251e27e13e33b8548d5b4744dae21a1a0854a7" name="kernel-default-vdso" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="f9be8c0beb4121c76bb5366e4abd5937c4eb137ab224e2c93f1013bbd997c907" name="kernel-default-vdso-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="fd133fae2fce2e25ca92973317a874f82826d460f8c4d0eadb60592c9b06dd49" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="87b1e0161c9b55e3ac1ea9af31784fd4f4f59495526b5e019f5042619f030a2d" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="9a1dc8356bcac92301821933e6645826ccb4df2cc1d8fad03b62880781620513" name="kernel-source" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="eb69967f0e2729102ef18960f8407abbdf43110a6e3e5d3cf301f13da91a613a" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="29b53e579eeceafcd8762efd18605013e68a1e08bbb064df6238fb58b1afd3e8" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="7234adfbb00e6d44564bfe113f14026a942b919d9c828ca18691769a7711d7c7" name="kselftests-kmp-default" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="188bff46582010b4fc6afaa74dd208fbbda364fffec7882c9656b2216ed74f8b" name="kselftests-kmp-default" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="6d321bcf4b6478b4e1a0dcb5e064c9b1797fa2aa83aea19d5c565a68feb70b71" name="kselftests-kmp-default" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="8e8b3f127e2c450c28c9a316966d8a37d582304a0a2af6774cc7b131c7c36490" name="kselftests-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="4f230dba2d71fd9e3335d95f12d555fd5b81969630d24b3ce960007374bb42eb" name="kselftests-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="a9543ef0ce7a31c1bd7746ae5000972579a4306ce685701741eb315591cdad6e" name="kselftests-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="953918ae16fea4078146552b931d3cb68a543e83264abdaacea75bd7f410637d" name="kselftests-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="33f8e492883aef8d0d86c990c8db4c9460802536112a9e6f6a74a13dad2f5dd2" name="kselftests-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="83e3558174926cd6fe990656f40bd36589472058d94e5369372e9298609e39ee" name="ocfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="d377c9fdbc11b2576ef761ec55333f34417504dcd2e7211431ecf5d2b5d55a57" name="ocfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="90934721be49aaf3a72cfe66a5cf65e27cff1a620c2b7cf50a963133d16f8bf8" name="ocfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="1455156d2a2fa988ecb8369a376e2154a7574a78109b93dc07201dbd7ff72ad6" name="ocfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="19eb2c554a3df95e3269805f106ef2acc3002744c47097d4029665e91230de50" name="ocfs2-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="45daf66054dbbc0156dfe8086f8fa2bec9bbc47d14bbb261d6ecb49cb647a16e" name="ocfs2-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="570ef1580cfa480c580f95f0fb8c8b190bda031a25bc2a4eaa21912545078777" name="ocfs2-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="6f57a78601cfc83e65a7d6c3a04ea515cb65f80103db39f1eb69fcdea81dd096" name="ocfs2-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="14faa961df43b0da208be2d2de768e846f67ce774355267cf6c1e42a4506a1a2" name="reiserfs-kmp-default" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="1f554e96cca035e83955d74fb364b9044631cbc01caa948817c1d06931f513cc" name="reiserfs-kmp-default" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="15b8ccb692a79cc74c761683120b5d2c0274424f36abf62c7de542eb8343bf52" name="reiserfs-kmp-default" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="63930872ebfca7e46baffbcef1c7145a17c76fab78c128d7c9d46382ca42acb1" name="reiserfs-kmp-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="0f790caef72375739fc94dc2d4678f31d6e87334d8a241f7034c0d33225afe37" name="reiserfs-kmp-default-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="e526d58599162d773cf8fac650fce3e5c27791149c35e7992bb70a2c68ca5ea6" name="reiserfs-kmp-default-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="f9db5ba2847ef287fbecc6530489d7e50194d167d76e1029ccdc1639ed2de06e" name="reiserfs-kmp-default-debuginfo" arch="s390x">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
<package pkgid="1a1f7230eba4af9e864d5888138a0c80718ae9b430f04b93e624d98df500c83c" name="reiserfs-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.531.1"/>
  <changelog author="rgoldwyn@suse.com" date="1781611200">- libceph: Fix slab-out-of-bounds access in auth message processing (CVE-2026-46119 bsc#1267628).
- commit 9f3128e</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611201">- apparmor: fix invalid deref of rawdata when export_binary is unset (CVE-2026-45965 bsc#1267208).
- commit f325213</changelog>
  <changelog author="rgoldwyn@suse.com" date="1781611202">- ext4: convert inline data to extents when truncate exceeds inline size (CVE-2026-31452 bsc#1262620).
- commit 2076b97</changelog>
  <changelog author="clopez@suse.de" date="1781697600">- KVM: SEV: Ignore MMIO requests of length '0' (git-fixes).
- commit 932a965</changelog>
  <changelog author="clopez@suse.de" date="1781697601">- KVM: SEV: Ignore Port I/O requests of length '0' (git-fixes).
- commit 0709065</changelog>
  <changelog author="clopez@suse.de" date="1781697602">- KVM: arm64: Discard PC update state on vcpu reset (git-fixes).
- commit d16e788</changelog>
  <changelog author="clopez@suse.de" date="1781697603">- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
  value (git-fixes).
- commit aa1b279</changelog>
  <changelog author="clopez@suse.de" date="1781697604">- KVM: arm64: Treat vCPU with pending SError as runnable
  (git-fixes).
- commit 63eecf3</changelog>
  <changelog author="clopez@suse.de" date="1781697605">- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  (git-fixes).
- commit ef45687</changelog>
  <changelog author="clopez@suse.de" date="1781697606">- KVM: arm64: Guard against NULL vcpu on VHE hyp panic path
  (git-fixes).
- commit f01d5d2</changelog>
  <changelog author="clopez@suse.de" date="1781697607">- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
  num_eventid_bits (git-fixes).
- commit 66e5da3</changelog>
  <changelog author="clopez@suse.de" date="1781697608">- KVM: arm64: PMU: Preserve AArch32 counter low bits (git-fixes).
- commit 5901e22</changelog>
  <changelog author="jwiesner@suse.de" date="1781697609">- futex: Clear stale exiting pointer in futex_lock_pi() retry path
  (CVE-2026-31555 bsc#1263178).
- commit bd7cbb0</changelog>
  <changelog author="jgross@suse.com" date="1781784000">- scripts/submit_branch: add SLE15-SP7 submission script
- commit 7ec25f3</changelog>
  <changelog author="tiwai@suse.de" date="1781784001">- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
  GPIO (git-fixes).
- ASoC: topology: Check PCM and DAI name strings before use
  (git-fixes).
- ASoC: tegra: tegra210_ahub: Validate written enum value
  (git-fixes).
- ASoC: fsl: fsl_audmix: Validate written enum values (git-fixes).
- ASoC: meson: aiu: Validate written enum values (git-fixes).
- ASoC: codecs: hdac_hdmi: Validate written enum value
  (git-fixes).
- ASoC: SOF: topology: validate vendor array size before parsing
  (git-fixes).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
  fails (git-fixes).
- ASoC: cs35l56: Cleanup if component_probe fails (git-fixes).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
  (git-fixes).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
  (git-fixes).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
  (git-fixes).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
  size calc (git-fixes).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
  (git-fixes).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
  (git-fixes).
- ALSA: aloop: Drop superfluous break (git-fixes).
- ALSA: seq: Clear variable event pointer on read (git-fixes).
- ALSA: seq: Fix partial userptr event expansion (git-fixes).
- ALSA: cmipci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ymfpci: check snd_ctl_new1() return value (git-fixes).
- ALSA: ice1712: check snd_ctl_new1() return value (git-fixes).
- ALSA: gus: check snd_ctl_new1() return value (git-fixes).
- ALSA: es1938: check snd_ctl_new1() return value (git-fixes).
- ALSA: seq: midi: Serialize output teardown with event_input
  (git-fixes).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (git-fixes).
- ALSA: usb-audio: Update Babyface Pro control caches only after
  successful writes (git-fixes).
- ALSA: usb-audio: Roll back quirk control caches on write errors
  (git-fixes).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
  successful writes (git-fixes).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
  EQ-switch put callbacks (git-fixes).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
  (git-fixes).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (git-fixes).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
  failure (git-fixes).
- drm/radeon: fix integer overflow in radeon_align_pitch()
  (git-fixes).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
  (git-fixes).
- drm/tidss: Fix missing drm_bridge_add() call (git-fixes).
- drm/tidss: Drop extra drm_mode_config_reset() call (git-fixes).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
  (git-fixes).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
  (git-fixes).
- Bluetooth: vhci: validate devcoredump state before side effects
  (git-fixes).
- Bluetooth: hci: validate codec capability element length
  (git-fixes).
- Bluetooth: btusb: fix wakeup irq devres lifetime (git-fixes).
- Bluetooth: btusb: fix wakeup source leak on probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
  (git-fixes).
- Bluetooth: btusb: fix use-after-free on registration failure
  (git-fixes).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
  (git-fixes).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
  (git-fixes).
- batman-adv: tp_meter: add only finished tp_vars to lists
  (git-fixes).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
  detection (git-fixes).
- batman-adv: tp_meter: fix fast recovery precondition
  (git-fixes).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
  (git-fixes).
- batman-adv: tp_meter: avoid window underflow (git-fixes).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
  (git-fixes).
- batman-adv: tp_meter: initialize dup_acks explicitly
  (git-fixes).
- batman-adv: tp_meter: keep unacked list in ascending ordered
  (git-fixes).
- commit 17b623a</changelog>
  <changelog author="tiwai@suse.de" date="1781784002">- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
  (git-fixes).
- firmware: arm_scmi: Read sensor config as 32-bit value
  (git-fixes).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
  (git-fixes).
- drm/amd/display: Add missing kdoc for ALLM parameters
  (git-fixes).
- drm/msm/dp: Fix the ISR_* enum values (git-fixes).
- drm/msm/dp: fix HPD state status bit shift value (git-fixes).
- drm/nouveau/bios: specify correct display fuse register for
  Ampere and Ada (git-fixes).
- drm/tegra: Fix iommu_map_sgtable() return value check
  (git-fixes).
- drm/tegra: dc: Fix device node reference leak in
  tegra_dc_has_output() (git-fixes).
- gpu: host1x: Allow entries in BO caches to be freed (git-fixes).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
  parsers (git-fixes).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
  parsers (git-fixes).
- drm/hisilicon/hibmc: use clock to look up the PLL value
  (git-fixes).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
  (git-fixes).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
  (git-fixes).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
  (git-fixes).
- drm/hyperv: use VMBUS_RING_SIZE() (git-fixes).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
  (git-fixes).
- commit 4affa42</changelog>
  <changelog author="tiwai@suse.de" date="1781784003">- of: cpu: add check in __of_find_n_match_cpu_property()
  (git-fixes).
- hwrng: virtio: clamp device-reported used.len at copy_data()
  (git-fixes).
- soc: ti: k3-ringacc: Fix access mode for
  k3_ringacc_ring_pop_tail_io/proxy (git-fixes).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
  (git-fixes).
- gpu: host1x: Fix iommu_map_sgtable() return value check
  (git-fixes).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
  response (git-fixes).
- wifi: wcn36xx: fix OOB read from firmware count in
  PRINT_REG_INFO indication (git-fixes).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
  response (git-fixes).
- wifi: mt76: mt7996: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7925: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7921: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: mt7915: fix potential tx_retries underflow
  (git-fixes).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
  (git-fixes).
- wifi: mt76: mt7925: clean up DMA on probe failure (git-fixes).
- wifi: mac80211: fix monitor mode frame capture for real chanctx
  drivers (git-fixes).
- wifi: rtw88: usb: fix memory leaks on USB write failures
  (git-fixes).
- wifi: rtw88: increase TX report timeout to fix race condition
  (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
  (git-fixes).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
  DMA buffer (git-fixes).
- wifi: rtw89: Correct data type for scan index to avoid infinite
  loop (git-fixes).
- wifi: ath11k: fix warning when unbinding (git-fixes).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
  (git-fixes).
- wifi: cfg80211: fix grammar in MLO group key error message
  (git-fixes).
- commit f3af1ec</changelog>
  <changelog author="tiwai@suse.de" date="1781784004">- ASoC: mediatek: mt8192: Release reserved memory on cleanup
  (git-fixes).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
  (git-fixes).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
  (git-fixes).
- ALSA: hda/cs35l41: Fix firmware load work teardown (git-fixes).
- drm/amdkfd: always resume_all after suspend_all (git-fixes).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
  (git-fixes).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
  macro (git-fixes).
- drm/gpuvm: Do not prepare NULL objects (git-fixes).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
  (git-fixes).
- drm/imagination: Fit paired fragment job in the correct CCCB
  (git-fixes).
- drm/imagination: Count paired job fence as dependency in
  prepare_job() (git-fixes).
- drm/panthor: Fix kernel-doc warning in panthor_sched.c
  (git-fixes).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
  (git-fixes).
- Bluetooth: hci_qca: fix NULL pointer dereference in
  qca_dmp_hdr() for non-serdev device (git-fixes).
- commit 52f8808</changelog>
  <changelog author="jlee@suse.com" date="1781784005">- EFI/CPER: don't dump the entire memory region (bsc#1264549
  CVE-2026-43171).
- commit 0b53ad7</changelog>
  <changelog author="ailiop@suse.com" date="1781784006">- xfs: fix a resource leak in xfs_alloc_buftarg() (CVE-2026-46005
  bsc#1267431).
- commit 08b4554</changelog>
</package>
</otherdata>