kernel-azure-6.12.0-160000.9.1

- Refresh
  patches.kabi/bpf-Enforce-expected_attach_type-for-tailcall-compat.patch.
  Refresh kABI workaround to use 'unsigned char' instead
  of the original 'enum bpf_attach_type' as the data type.
  It was discovered at SL-16.0 MU submission time that the kABI workaround
  currently in-place does not work on -rt flavor. The reason is that due
  to preceding spinlock_t having a different size, the hole was only 2
  bytes instead of 6 bytes, and thus too small to fit 'enum'.
  Since all the possible enum values are small enough to fit within
  'unsigned char', switch the data type of the new field to that instead.
- commit 06ff4d9

- efi/cper: Fix cper_bits_to_str buffer handling and return value
  (git-fixes).
- lib/buildid: use __kernel_read() for sleepable context
  (git-fixes).
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate
  session upon receiving the second rts (git-fixes).
- can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher
  than 1 MBit (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  (git-fixes).
- can: etas_es58x: allow partial RX URB allocation to succeed
  (git-fixes).
- commit 6b2a65b

- libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285 bsc#1255401).
- commit bfcbd27

- landlock: Fix handling of disconnected directories
  (CVE-2025-68736 bsc#1255698).
- landlock: Optimize file path walks and prepare for audit support
  (CVE-2025-68736 bsc#1255698).
- commit 255f197

- libceph: fix invalid accesses to ceph_connection_v1_info (CVE-2025-39880 bsc#1250388).
- commit f8b4e56

- ceph: fix race condition validating r_parent before applying state (CVE-2025-39880 bsc#1250388).
- commit 5a88d0a

- cpuset: fix warning when disabling remote partition
  (bsc#1256794).
- commit ab4d052

- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (CVE-2025-71096 bsc#1256606)
- commit 6757234

- Refresh
  patches.suse/smb-client-introduce-close_cached_dir_locked-.patch.
  Just refresh to fix:
  warning: patches.suse/smb-client-introduce-close_cached_dir_locked-.patch:
    Patch unexpectedly ends in the middle of a line.
- commit 675e06b

- x86/fpu: Ensure XFD state on signal delivery (CVE-2025-68171
  bsc#1255255).
- commit 74e061b

- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b2a0fd6

- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit d6eb6ea

- dm: remove fake timeout to avoid leak request (git-fixes).
- commit bf8f04d

- add bugnumber to existing mana change (bsc#1252266).
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- net: mana: Fix use-after-free in reset service rescan path (git-fixes).
- net: mana: Handle hardware recovery events when probing the device (bsc#1257466).
- net: mana: Drop TX skb on post_work_request failure and unmap resources (git-fixes).
- net: mana: Handle SKB if TX SGEs exceed hardware limit (git-fixes).
- net: mana: Add standard counter rx_missed_errors (git-fixes).
- commit dde91c8

- btrfs: fallback to buffered IO if the data profile has
  duplication (git-fixes).
- commit c194c61

- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS (bsc#1259329)
- commit c775b21

- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit 9625613

- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  (git-fixes).
- hwmon: (it87) Check the it87_lock() return value (git-fixes).
- commit 8d41466

- drm/xe/reg_sr: Fix leak on xa_store failure (git-fixes).
- drm/xe: Do not preempt fence signaling CS instructions
  (git-fixes).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  (git-fixes).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  (git-fixes).
- drm/solomon: Fix page start when updating rectangle in page
  addressing mode (git-fixes).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
  data (git-fixes).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
  (git-fixes).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (git-fixes).
- commit a06b327

- tracing: Fix crash on synthetic stacktrace field usage
  (CVE-2026-23088 bsc#1257814).
- commit 41fea09

- idpf: detach and close netdevs while handling a reset
  (CVE-2026-22981 bsc#1257225).
- commit 6e399ef

- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR
  (failed VMRUN) (git-fixes).
- commit ea24b4e

- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested
  VM-Exits (git-fixes).
- commit 39ff5cb

- KVM: x86: Explicitly set new periodic hrtimer expiration in
  apic_timer_fn() (git-fixes).
- commit e059ee8

- KVM: x86: WARN if hrtimer callback for periodic APIC timer
  fires with period=0 (git-fixes).
- commit 2c24d91

- platform/x86: intel_telemetry: Fix PSS event register mask
  (git-fixes).
- platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  (git-fixes).
- platform/x86: toshiba_haps: Fix memory leaks in add/remove
  routines (git-fixes).
- commit 35ce7c7

- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled
  (e.g. on #SMI) (git-fixes).
- commit c57db6d

- btrfs: scrub: always update btrfs_scrub_progress::last_physical
  (git-fixes).
- commit 9d5464b

- slimbus: core: Constify slim_eaddr_equal() (jsc#PED-10906
  git-fixes).
- commit 6c2c54b

- bus: fsl-mc: Constify fsl_mc_device_match() (jsc#PED-10906
  git-fixes).
- commit b3ff1a5

- kABI workaround for bluetooth hci_dev changes (CVE-2025-38250
  bsc#1246182).
- commit 9363e74

- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  (CVE-2025-38250 bsc#1246182).
- commit 7979f02

- tools/hv: fcopy: Fix irregularities with size of ring buffer
  (git-fixes).
- PCI: hv: Use the correct hypercall for unmasking interrupts
  on nested (git-fixes).
- x86/hyperv: Expose hv_map_msi_interrupt() (git-fixes).
- Drivers: hv: Use nested hypercall for post message and signal
  event (git-fixes).
- x86/hyperv: Clean up hv_map/unmap_interrupt() return values
  (git-fixes).
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
  (git-fixes).
- PCI: hv: Don't load the driver for baremetal root partition
  (git-fixes).
- net: mana: Fix warnings for missing export.h header inclusion
  (git-fixes).
- PCI: hv: Fix warnings for missing export.h header inclusion
  (git-fixes).
- clocksource: hyper-v: Fix warnings for missing export.h header
  inclusion (git-fixes).
- x86/hyperv: Fix warnings for missing export.h header inclusion
  (git-fixes).
- Drivers: hv: Fix warnings for missing export.h header inclusion
  (git-fixes).
- Drivers: hv: Fix the check for HYPERVISOR_CALLBACK_VECTOR
  (git-fixes).
- tools/hv: fcopy: Fix incorrect file path conversion (git-fixes).
- Drivers: hv: Select CONFIG_SYSFB only if EFI is enabled
  (git-fixes).
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open
  to prevent IPv6 addrconf (git-fixes).
- commit 6fce57d

- i2c: stm32f7: unmap DMA mapped buffer (git-fixes).
- i2c: stm32: fix the device used for the DMA map (git-fixes).
- usb: hub: Don't try to recover devices lost during warm reset
  (git-fixes).
- usb: dwc2: gadget: Fix enter to hibernation for UTMI+ PHY
  (git-fixes).
- usb: musb: fix gadget state on disconnect (git-fixes).
- thunderbolt: Fix bit masking in tb_dp_port_set_hops()
  (git-fixes).
- thunderbolt: Fix wake on connect at runtime (git-fixes).
- pch_uart: Fix dma_sync_sg_for_device() nents value (git-fixes).
- serial: core: fix OF node leak (git-fixes).
- comedi: Fix initialization of data for instructions that write
  to subdevice (git-fixes).
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  (git-fixes).
- comedi: das6402: Fix bit shift out of bounds (git-fixes).
- comedi: aio_iiro_16: Fix bit shift out of bounds (git-fixes).
- comedi: pcl812: Fix bit shift out of bounds (git-fixes).
- comedi: das16m1: Fix bit shift out of bounds (git-fixes).
- comedi: Fix some signed shift left operations (git-fixes).
- comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
  (git-fixes).
- interconnect: icc-clk: destroy nodes in case of memory
  allocation failures (git-fixes).
- interconnect: exynos: handle node name allocation failure
  (git-fixes).
- interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1
  node (git-fixes).
- iio: adc: ad7949: use spi_is_bpw_supported() (git-fixes).
- iio: accel: fxls8962af: Fix use after free in
  fxls8962af_fifo_flush (git-fixes).
- iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC
  channel maps (git-fixes).
- iio: adc: stm32-adc: Fix race in installing chained IRQ handler
  (git-fixes).
- iio: backend: fix out-of-bound write (git-fixes).
- spi: Add check for 8-bit transfer with 8 IO mode support
  (git-fixes).
- regmap: fix potential memory leak of regmap_bus (git-fixes).
- Input: xpad - set correct controller type for Acer NGR200
  (git-fixes).
- commit efa1e54

- hwmon: (corsair-cpro) Validate the size of the received input
  buffer (git-fixes).
- drm/mediatek: only announce AFBC if really supported
  (git-fixes).
- drm/mediatek: Add wait_event_timeout when disabling plane
  (git-fixes).
- drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
  (git-fixes).
- drm/nouveau: check ioctl command codes better (git-fixes).
- soundwire: amd: fix for clearing command status register
  (git-fixes).
- dmaengine: nbpfaxi: Fix memory corruption in probe()
  (git-fixes).
- phy: tegra: xusb: Fix unbalanced regulator disable in UTMI
  PHY mode (git-fixes).
- memstick: core: Zero initialize id_reg in
  h_memstick_read_dev_id() (git-fixes).
- mmc: bcm2835: Fix dma_unmap_sg() nents value (git-fixes).
- mmc: sdhci_am654: Workaround for Errata i2312 (git-fixes).
- mmc: sdhci-pci: Quirk for broken command queuing on Intel
  GLK-based Positivo models (git-fixes).
- commit f4e7d99

- virtio-net: fix recursived rtnl_lock() during probe()
  (git-fixes).
- commit 0bc7aff

- vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also
  `transport_local` (git-fixes).
- commit 615e0f1

- vsock: Fix transport_* TOCTOU (git-fixes).
- commit 704674f

- vsock: Fix transport_{g2h,h2g} TOCTOU (git-fixes).
- commit 3024c81

- vsock/vmci: Clear the vmci transport packet properly when
  initializing it (git-fixes).
- commit ec91da1