dtb-aarch64-6.12.0-160000.9.1

- Refresh
  patches.kabi/bpf-Enforce-expected_attach_type-for-tailcall-compat.patch.
  Refresh kABI workaround to use 'unsigned char' instead
  of the original 'enum bpf_attach_type' as the data type.
  It was discovered at SL-16.0 MU submission time that the kABI workaround
  currently in-place does not work on -rt flavor. The reason is that due
  to preceding spinlock_t having a different size, the hole was only 2
  bytes instead of 6 bytes, and thus too small to fit 'enum'.
  Since all the possible enum values are small enough to fit within
  'unsigned char', switch the data type of the new field to that instead.
- commit 06ff4d9

- efi/cper: Fix cper_bits_to_str buffer handling and return value
  (git-fixes).
- lib/buildid: use __kernel_read() for sleepable context
  (git-fixes).
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate
  session upon receiving the second rts (git-fixes).
- can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher
  than 1 MBit (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  (git-fixes).
- can: etas_es58x: allow partial RX URB allocation to succeed
  (git-fixes).
- commit 6b2a65b

- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit bfcbd27

- landlock: Fix handling of disconnected directories
  (CVE-2025-68736 bsc#1255698).
- landlock: Optimize file path walks and prepare for audit support
  (CVE-2025-68736 bsc#1255698).
- commit 255f197

- libceph: fix invalid accesses to ceph_connection_v1_info (CVE-2025-39880 bsc#1250388).
- commit f8b4e56

- ceph: fix race condition validating r_parent before applying state (CVE-2025-39880 bsc#1250388).
- commit 5a88d0a

- cpuset: fix warning when disabling remote partition
  (bsc#1256794).
- commit ab4d052

- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (CVE-2025-71096 bsc#1256606)
- commit 6757234

- Refresh
  patches.suse/smb-client-introduce-close_cached_dir_locked-.patch.
  Just refresh to fix:
  warning: patches.suse/smb-client-introduce-close_cached_dir_locked-.patch:
    Patch unexpectedly ends in the middle of a line.
- commit 675e06b

- x86/fpu: Ensure XFD state on signal delivery (CVE-2025-68171
  bsc#1255255).
- commit 74e061b

- exfat: fix refcount leak in exfat_find (git-fixes).
- commit eb1ffd0

- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431 CVE-2025-38084 bsc#1245498).
- commit ae3cd1c

- i2c: amd-mp2: fix reference leak in MP2 PCI device (git-fixes).
- i2c: i2c.h: fix a bad kernel-doc line (git-fixes).
- platform/x86: asus-wmi: use brightness_set_blocking() for kbd
  led (git-fixes).
- platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
  (git-fixes).
- commit 73f17dd

- smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256,
  CVE-2025-38728).
- commit 0f61287

- mount: handle NULL values in mnt_ns_release() (bsc#1254308)
- commit 08256f9

- smb: Log an error when close_all_cached_dirs fails (bsc#1246328,
  CVE-2025-38321).
- commit c5a4d00

- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431
  CVE-2025-38085 bsc#1245499).
- commit 50d9103

- arm64: mte: Do not warn if the page is already tagged in (git-fixes)
- commit 52c9758

- arm64: zynqmp: Revert usb node drive strength and slew rate for (git-fixes)
- commit 2f61b01

- arm64: zynqmp: Disable coresight by default (git-fixes)
- commit 11d63c1

- mm/ksm: fix flag-dropping behavior in ksm_madvise
  (CVE-2025-40040 bsc#1252780).
- commit 095dc3d

- cpuset: Use new excpus for nocpu error check when enabling
  root partition (bsc#1241166).
- cgroup/cpuset: Remove remote_partition_check() & make
  update_cpumasks_hier() handle remote partition (bsc#1241166).
- commit d4c3a1b

- cpuset: fix failure to enable isolated partition when containing
  isolcpus (bsc#1241166).
- commit 9093c25

- nbd: restrict sockets to TCP and UDP (bsc#1252774
  CVE-2025-40080).
- commit 3fbbb49

- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6

- RDMA/hns: Fix wrong WQE data when QP wraps around (git-fixes)
- commit 6ea0097

- RDMA/hns: Fix the modification of max_send_sge (git-fixes)
- commit f143d8d

- RDMA/hns: Fix recv CQ and QP cache affinity (git-fixes)
- commit 61f6ae6

- RDMA/irdma: Set irdma_cq cq_num field during CQ create (git-fixes)
- commit be2c8f8

- RDMA/irdma: Fix SD index calculation (git-fixes)
- commit 0aad166

- cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition
  latency (stable-fixes git-fixes).
- commit 41821ef

- cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
  (stable-fixes).
- commit 4f5afab

- cpufreq: scmi: Account for malformed DT in
  scmi_dev_used_by_cpus() (git-fixes).
- commit e9a9ed4

- cpufreq: armada-8k: Fix off by one in
  armada_8k_cpufreq_free_table() (stable-fixes).
- commit 1b00366

- cpufreq: armada-8k: make both cpu masks static (git-fixes).
- commit 3ab6135

- cpufreq: sun50i: prevent out-of-bounds access (git-fixes).
- commit 815165b

- cpufreq: intel_pstate: Fix object lifecycle issue in
  update_qos_request() (git-fixes).
- commit 330c599

- skmsg: Return copied bytes in sk_msg_memcopy_from_iter
  (bsc#1250650).
- commit 6650ce1

- scsi: mpi3mr: Update driver version to 8.15.0.5.50
  (bsc#1251186).
- scsi: mpi3mr: Fix premature TM timeouts on virtual drives
  (bsc#1251186).
- scsi: mpi3mr: Update MPI headers to revision 37 (bsc#1251186).
- scsi: mpi3mr: Fix I/O failures during controller reset
  (bsc#1251186).
- scsi: mpi3mr: Fix controller init failure on fault during
  queue creation (bsc#1251186).
- scsi: mpi3mr: Fix device loss during enclosure reboot due to
  zero link speed (bsc#1251186).
- scsi: mpi3mr: Event processing debug improvement (bsc#1251186).
- commit 15f7129

- iommu/amd: Fix alias device DTE setting (git-fixes).
- iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement
  (git-fixes).
- iommu/amd: Enable PASID and ATS capabilities in the correct
  order (git-fixes).
- commit 6e3bf58

- Fix OOB access in "drm/amdgpu: read back register after written for VCN v4.0.5" (bsc#1249251)
- commit 3545bbd

- sched/psi: Fix psi_seq initialization (bsc#1248155).
- commit 2dd3707

- Move pesign-obs-integration requirement from kernel-syms to kernel devel
  subpackage (bsc#1248108).
- commit e707e41

- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev->rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 5c830c5

- kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred
  (CVE-2025-38453 bsc#1247234).
  Conflicts:
  series.conf
- commit 909d7fe

- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
  (CVE-2025-38453 bsc#1247234).
- commit 171360a

- tls: always refresh the queue when reading sock (CVE-2025-38471
  bsc#1247450).
- commit 2bcb640

- smc: Fix various oops due to inet_sock type confusion
  (CVE-2025-38475 bsc#1247308).
- commit 05e8074

- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374)
- commit cb82edb

- nvme-tcp: fix selinux denied when calling sock_sendmsg
  (bsc#1247497).
- commit 6082643