* Thu Sep 10 2026 shung-hsi.yu@suse.com
- bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
(CVE-2026-74363 bsc#1278070).
- commit 68a5ef7
* Wed Sep 09 2026 mwilck@suse.com
- md/raid1: free r1_bio when REQ_NOWAIT is set and read would
block on retry (CVE-2026-72437 bsc#1277874).
- commit 96a5733
* Wed Sep 09 2026 clopez@suse.de
- drivers/virt: pkvm: Fix end calculation in
mmio_guard_ioremap_hook() (git-fixes).
- commit 12c865d
* Wed Sep 09 2026 mwilck@suse.com
- dm thin metadata: fix metadata snapshot consistency on commit
failure (CVE-2026-72108 bsc#1277350).
- commit 3862f3b
* Wed Sep 09 2026 nik.borisov@suse.com
- x86/mce: Set up the polling timer before CMCI discovery (bsc#1278703 CVE-2026-80727).
- commit 4166204
* Wed Sep 09 2026 tiwai@suse.de
- KVM: SVM: Add support to initialize SEV/SNP functionality in
KVM (bsc#1279887).
- commit 6e070b9
* Wed Sep 09 2026 mwilck@suse.com
- dm: avoid leaking the caller's thread keyring via the table
device file (CVE-2026-72103 bsc#1277315).
mwilck: adapted because of lack of commits 4c7ceeb62d33 ("cred:
add kernel_cred() helper") and ae40e6c65791 ("cred: add
scoped_with_kernel_creds()").
- commit ab71303
* Wed Sep 09 2026 mwilck@suse.com
- dm-integrity: fix a bug if the bio is out of limits
(CVE-2026-72100 bsc#1277311).
- commit b4db10f
* Wed Sep 09 2026 oneukum@suse.com
- Bluetooth: ISO: avoid deadlocks in iso_sock_timeout
(CVE-2026-74535 bsc#1275812).
- Refresh
patches.kabi/replace-additional-lock-in-hci_conn-with-a-common-sp.patch.
- Refresh
patches.suse/Bluetooth-ISO-ensure-no-dangling-hcon-references-in-.patch.
- Refresh
patches.suse/Bluetooth-ISO-fix-race-of-kfree-vs-kref_get_unless_z.patch.
- commit cd73d51
* Wed Sep 09 2026 clopez@suse.de
- KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on
nested VMRUN (git-fixes).
- commit 45b854d