dtb-aarch64-6.12.0-160000.29.1

- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 66d7b47

- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit d5fe1c6

- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 3e7ba77

- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2

- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2

- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit 02b8598

- crypto: algif_aead - use memcpy_sglist() instead of null skciphe
  (bsc#1262573 CVE-2026-31431).
- commit 28e785f

- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit 748d5b2

- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4

- powerpc/crash: adjust the elfcorehdr size (jsc#PED-11175
  git-fixes).
- powerpc/kdump: Fix size calculation for hot-removed memory
  ranges (jsc#PED-11175 git-fixes).
- commit cfb9cde

- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  (CVE-2026-23304 bsc#1260544).
- commit 51fafb4

- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  (bsc#1261669 ltc#212590).
- commit e7cec47

- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit f1d41b2

- xdp: produce a warning when calculated tailroom is negative
  (CVE-2026-23343 bsc#1260527).
- commit 72b74a3

- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
  atomic tearing (CVE-2026-23383 bsc#1260497).
- commit b5b5e19

- nvmet: move async event work off nvmet-wq (git-fixes).
- nvme-pci: cap queue creation to used queues (git-fixes).
- nvme-pci: ensure we're polling a polled queue (git-fixes).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  (git-fixes).
- commit 5ccf382

- tg3: Fix race for querying speed/duplex (bsc#1257183).
- commit 4d083ab

- KVM: arm64: Fix ID register initialization for non-protected
  pKVM guests (CVE-2026-23425 bsc#1261506).
- commit b02fb9f

- Refresh
  patches.suse/scsi-scsi_transport_sas-Fix-the-maximum-channel-scan.patch.
- commit bf87874

- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b2a0fd6

- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit d6eb6ea

- dm: remove fake timeout to avoid leak request (git-fixes).
- commit bf8f04d

- add bugnumber to existing mana change (bsc#1252266).
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- net: mana: Fix use-after-free in reset service rescan path (git-fixes).
- net: mana: Handle hardware recovery events when probing the device (bsc#1257466).
- net: mana: Drop TX skb on post_work_request failure and unmap resources (git-fixes).
- net: mana: Handle SKB if TX SGEs exceed hardware limit (git-fixes).
- net: mana: Add standard counter rx_missed_errors (git-fixes).
- commit dde91c8

- btrfs: fallback to buffered IO if the data profile has
  duplication (git-fixes).
- commit c194c61

- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS (bsc#1259329)
- commit c775b21

- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit 9625613

- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  (git-fixes).
- hwmon: (it87) Check the it87_lock() return value (git-fixes).
- commit 8d41466

- drm/xe/reg_sr: Fix leak on xa_store failure (git-fixes).
- drm/xe: Do not preempt fence signaling CS instructions
  (git-fixes).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  (git-fixes).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  (git-fixes).
- drm/solomon: Fix page start when updating rectangle in page
  addressing mode (git-fixes).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
  data (git-fixes).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
  (git-fixes).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (git-fixes).
- commit a06b327

- tracing: Fix crash on synthetic stacktrace field usage
  (CVE-2026-23088 bsc#1257814).
- commit 41fea09

- idpf: detach and close netdevs while handling a reset
  (CVE-2026-22981 bsc#1257225).
- commit 6e399ef

- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR
  (failed VMRUN) (git-fixes).
- commit ea24b4e

- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested
  VM-Exits (git-fixes).
- commit 39ff5cb

- KVM: x86: Explicitly set new periodic hrtimer expiration in
  apic_timer_fn() (git-fixes).
- commit e059ee8

- KVM: x86: WARN if hrtimer callback for periodic APIC timer
  fires with period=0 (git-fixes).
- commit 2c24d91

- platform/x86: intel_telemetry: Fix PSS event register mask
  (git-fixes).
- platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  (git-fixes).
- platform/x86: toshiba_haps: Fix memory leaks in add/remove
  routines (git-fixes).
- commit 35ce7c7

- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled
  (e.g. on #SMI) (git-fixes).
- commit c57db6d

- btrfs: scrub: always update btrfs_scrub_progress::last_physical
  (git-fixes).
- commit 9d5464b

- slimbus: core: Constify slim_eaddr_equal() (jsc#PED-10906
  git-fixes).
- commit 6c2c54b

- bus: fsl-mc: Constify fsl_mc_device_match() (jsc#PED-10906
  git-fixes).
- commit b3ff1a5