kernel-source-nvidia-6.12.0-160100.7.1

- Add Reviewed-by to patches.suse/fs-resctrl-Fix-use-after-free-during-unmount.patch
- commit 0b0f834

- drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction (bsc#1282756 CVE-2026-97498)
- commit 5a4ba85

- gpiolib: clear requested flag if line is invalid (git-fixes).
- commit baf3e8d

- gpio: Respect valid_mask when requesting GPIOs (stable-fixes).
- gpiolib: sanitize the return value of gpio_chip::request()
  (stable-fixes).
- commit 613b99b

- rtc: ds1685: do not sleep in the power-off handler (git-fixes).
- rtc: ds1685: arm the wake-up alarm at power-off only if an
  alarm is set (git-fixes).
- rtc: s35390a: Fix alarm not disabling (git-fixes).
- rtc: s35390a: Add missing newline to dev_err (git-fixes).
- rtc: mpfs: Fix alarm register word order (git-fixes).
- platform/x86/amd/pmc: Fix RTC reference leak in
  amd_pmc_verify_czn_rtc() (git-fixes).
- rtc: cmos: Disable ACPI RTC event before handling it
  (git-fixes).
- rtc: abx80x: properly handle shared IRQs (git-fixes).
- rtc: abx80x: fix error check after i2c_smbus_read in
  read_alarm() (git-fixes).
- rtc: ftrtc010: fix integer overflow in time calculation
  (git-fixes).
- commit e92b2b4

- workqueue: Fix unbound pool lifetime for pending pwqs
  (bsc#1289119).
- commit b458719

- workqueue: release pwq pools by pool type (bsc#1289119).
- commit 6340a5b

- nvme: bound FDP config log reads to the received buffer
  (git-fixes).
- commit 1984c3c

- nvme: validate FDP configuration descriptor sizes (bsc#1282973
  CVE-2026-97433).
  Update blacklist.conf: drop entry from it
- commit d782e08

- nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT
  (git-fixes).
- commit ca7981e

- Update
  patches.suse/ACPI-button-Fix-ACPI-GPE-handler-leak-during-removal.patch
  (git-fixes git-stable CVE-2026-64013 bsc#1273543).
- Update
  patches.suse/ALSA-FCP-Fix-NULL-pointer-dereference-in-interface-l.patch
  (git-fixes CVE-2026-72403 bsc#1277126).
- Update
  patches.suse/ALSA-FCP-Use-a-private-URB-for-the-notification-endp.patch
  (git-fixes CVE-2026-80816 bsc#1279703).
- Update
  patches.suse/ALSA-FCP-do-not-copy-out-an-uninitialised-init-respo.patch
  (git-fixes CVE-2026-80970 bsc#1280340).
- Update
  patches.suse/ALSA-FCP-fix-OOB-write-in-fcp_meter_ctl_get.patch
  (git-fixes CVE-2026-74640 bsc#1277859).
- Update
  patches.suse/ALSA-aoa-check-snd_ctl_new1-return-value.patch
  (git-fixes CVE-2026-64488 bsc#1274577).
- Update
  patches.suse/ALSA-compress-Fix-task-creation-error-unwind.patch
  (git-fixes CVE-2026-64485 bsc#1273792).
- Update
  patches.suse/ALSA-hda-tas2781-Cancel-async-firmware-request-at-un.patch
  (git-fixes CVE-2026-80872 bsc#1279511).
- Update
  patches.suse/ALSA-mtpav-shut-down-output-timer-before-card-teardo.patch
  (git-fixes CVE-2026-90116 bsc#1281627).
- Update
  patches.suse/ALSA-seq-oss-Serialize-readq-reset-state-with-q-lock.patch
  (git-fixes CVE-2026-80628 bsc#1277367).
- Update
  patches.suse/ALSA-ump-do-not-touch-legacy_rmidi-before-it-exists.patch
  (git-fixes CVE-2026-98086 bsc#1283785).
- Update
  patches.suse/ALSA-us122l-Prevent-write-upgrades-for-read-mappings.patch
  (git-fixes CVE-2026-97931 bsc#1283180).
- Update
  patches.suse/ALSA-us144mkii-capture_urb_complete-redundant-usb_an.patch
  (git-fixes CVE-2026-64601 bsc#1274293).
- Update
  patches.suse/ALSA-us144mkii-re-anchor-capture-URBs-on-resubmissio.patch
  (git-fixes CVE-2026-74639 bsc#1277358).
- Update
  patches.suse/ALSA-usb-audio-qcom-clear-opened-when-stream-enable-.patch
  (git-fixes CVE-2026-72445 bsc#1277878).
- Update
  patches.suse/ALSA-usb-audio-qcom-reject-stream-disable-with-no-ac.patch
  (git-fixes CVE-2026-72446 bsc#1277110).
- Update
  patches.suse/ALSA-usx2y-us144mkii-fix-work-UAF-on-disconnect.patch
  (git-fixes CVE-2026-64491 bsc#1273295).
- Update
  patches.suse/ASoC-Intel-avs-Refactor-and-fix-init_config-access.patch
  (git-fixes CVE-2026-98053 bsc#1283740).
- Update
  patches.suse/ASoC-SDCA-Make-UMP-message-size-check-more-robust.patch
  (git-fixes CVE-2026-80900 bsc#1279456).
- Update
  patches.suse/ASoC-SOF-ipc4-pcm-Continue-the-pipeline-trigger-in-c.patch
  (git-fixes CVE-2026-80581 bsc#1277331).
- Update
  patches.suse/ASoC-SOF-topology-fix-memory-leak-in-snd_sof_load_to.patch
  (git-fixes CVE-2026-72263 bsc#1277198).
- Update
  patches.suse/ASoC-amd-acp-sdw-legacy-Bound-DAI-link-iteration.patch
  (git-fixes CVE-2026-74333 bsc#1277116).
- Update
  patches.suse/ASoC-codecs-fs210x-fix-possible-buffer-overflow.patch
  (git-fixes CVE-2026-64041 bsc#1273758).
- Update
  patches.suse/ASoC-codecs-lpass-tx-macro-Fix-enum-kcontrol-accesse.patch
  (git-fixes CVE-2026-80583 bsc#1277327).
- Update
  patches.suse/ASoC-codecs-pcm512x-fix-null-ptr-dereference-in-pcm5.patch
  (git-fixes CVE-2026-64107 bsc#1273257).
- Update
  patches.suse/ASoC-fsl_micfil-balance-mclk-enable-disable.patch
  (git-fixes CVE-2026-98093 bsc#1283784).
- Update
  patches.suse/Bluetooth-ISO-zero-the-sockaddr-before-returning-it-.patch
  (git-fixes CVE-2026-80761 bsc#1279473).
- Update
  patches.suse/RDMA-core-Fix-potential-use-after-free-in-uverbs_fre.patch
  (git-fixes CVE-2026-93267 bsc#1283009).
- Update
  patches.suse/RDMA-cxgb4-Free-debugfs-on-registration-failure.patch
  (git-fixes CVE-2026-90219 bsc#1281700).
- Update
  patches.suse/RDMA-hns-Fix-memory-leak-of-bonding-resources.patch
  (git-fixes CVE-2026-80625 bsc#1277564).
- Update
  patches.suse/RDMA-ionic-Embed-counter-driver-data-in-rdma_counter.patch
  (git-fixes CVE-2026-89509 bsc#1280547).
- Update
  patches.suse/RDMA-mana_ib-drain-QP-references-after-partial-table.patch
  (git-fixes CVE-2026-92513 bsc#1281996).
- Update
  patches.suse/RDMA-mlx5-Fix-UMR-XLT-cleanup-on-ODP-populate-failur.patch
  (git-fixes CVE-2026-74396 bsc#1278093).
- Update
  patches.suse/RDMA-mlx5-Fix-stack-out-of-bounds-read-in-cc_params-.patch
  (git-fixes CVE-2026-90416 bsc#1282015).
- Update
  patches.suse/RDMA-rxe-Fix-UAF-in-ODP-init-error-handling-path.patch
  (git-fixes CVE-2026-90423 bsc#1281975).
- Update
  patches.suse/RDMA-rxe-Restore-HMM_PFN_WRITE-check-in-ODP-write-pa.patch
  (git-fixes CVE-2026-98361 bsc#1284500).
- Update
  patches.suse/RDMA-ucma-Lock-the-handler-in-ucma_write_cm_event.patch
  (git-fixes CVE-2026-89507 bsc#1280543).
- Update
  patches.suse/RDMA-uverbs-Add-UVERBS_ATTR_UHW-to-UVERBS_METHOD_REG.patch
  (git-fixes CVE-2026-89506 bsc#1280458).
- Update
  patches.suse/accel-amdxdna-Fix-potential-amdxdna_umap-lifetime-ra.patch
  (git-fixes CVE-2026-72328 bsc#1277763).
- Update
  patches.suse/accel-amdxdna-Fix-use-after-free-in-amdxdna_gem_dmab.patch
  (git-fixes CVE-2026-72093 bsc#1277288).
- Update
  patches.suse/accel-amdxdna-Fix-use-after-free-of-mm_struct-in-job.patch
  (git-fixes CVE-2026-68380 bsc#1274822).
- Update
  patches.suse/accel-amdxdna-Remove-__counted_by-from-struct-amdxdn.patch
  (git-fixes CVE-2026-98146 bsc#1283024).
- Update
  patches.suse/arm_mpam-Disable-driver-unbind-to-avoid-UAF.patch
  (git-fixes CVE-2026-90270 bsc#1281768).
- Update
  patches.suse/arm_mpam-Fix-a-NULL-pointer-dereference-on-unbinding-after.patch
  (git-fixes CVE-2026-90271 bsc#1281769).
- Update
  patches.suse/arm_mpam-guard-MBWU-state-before-adding-it-to-garbage.patch
  (git-fixes CVE-2026-68345 bsc#1274626).
- Update
  patches.suse/auxdisplay-charlcd-cancel-backlight-work-on-registra.patch
  (git-fixes CVE-2026-89585 bsc#1280562).
- Update
  patches.suse/bpf-Fix-NULL-pointer-dereference-in-bpf_task_from_vp.patch
  (git-fixes CVE-2026-74335 bsc#1277104).
- Update
  patches.suse/bpf-Fix-effective-prog-array-index-with-BPF_F_PREORD.patch
  (git-fixes CVE-2026-72427 bsc#1278049).
- Update
  patches.suse/bpf-Fix-insn_aux_data-leak-on-verifier-err_free_env-.patch
  (git-fixes CVE-2026-72401 bsc#1277826).
- Update
  patches.suse/bpf-Keep-dynamic-inner-array-lookups-nullable.patch
  (git-fixes CVE-2026-64353 bsc#1273264).
- Update
  patches.suse/bpf-Tighten-cgroup-storage-cookie-checks-for-prog-ar.patch
  (git-fixes CVE-2026-74305 bsc#1276441).
- Update
  patches.suse/bpf-fix-BPF_PROG_QUERY-OOB-write-and-cgroup-backward.patch
  (git-fixes CVE-2026-74371 bsc#1278229).
- Update
  patches.suse/dma-fence-Make-dma_fence_dedup_array-robust-against-.patch
  (git-fixes CVE-2026-72095 bsc#1277295).
- Update
  patches.suse/dma-mapping-move-dma_map_resource-sanity-check-into-.patch
  (bsc#1268351 CVE-2026-64149 bsc#1273971).
- Update
  patches.suse/dpll-fix-NULL-pointer-dereference-in-dpll_msg_add_pi.patch
  (git-fixes CVE-2026-68378 bsc#1274830).
- Update
  patches.suse/drm-amd-display-fix-dc_lock-leak-on-GPU-reset-error-.patch
  (git-fixes CVE-2026-89820 bsc#1281152).
- Update
  patches.suse/drm-amdgpu-Fix-init-ordering-in-amdgpu_vram_mgr_init.patch
  (git-fixes CVE-2026-89828 bsc#1281160).
- Update
  patches.suse/drm-amdgpu-fix-rmmio-iounmap-skipped-on-device-remov.patch
  (git-fixes CVE-2026-98179 bsc#1284535).
- Update
  patches.suse/drm-amdgpu-gfx-fix-cleaner-shader-IB-buffer-overflow.patch
  (git-fixes CVE-2026-68276 bsc#1275124).
- Update
  patches.suse/drm-cirrus-qemu-Validate-BAR0-size-during-probe.patch
  (git-fixes CVE-2026-98142 bsc#1283819).
- Update
  patches.suse/drm-gpusvm-Fix-MM-reference-leak-in-drm_gpusvm_range.patch
  (git-fixes CVE-2026-68232 bsc#1275550).
- Update
  patches.suse/drm-gpusvm-Reject-VMAs-with-VM_IO-or-VM_PFNMAP-when-.patch
  (git-fixes CVE-2026-74420 bsc#1276329).
- Update
  patches.suse/drm-log-Fix-infinite-loop-when-scale-is-too-large-fo.patch
  (git-fixes CVE-2026-80740 bsc#1279484).
- Update
  patches.suse/drm-log-Fix-out-of-bounds-read-on-empty-message-leng.patch
  (git-fixes CVE-2026-80741 bsc#1279492).
- Update
  patches.suse/drm-msm-Only-fini-scheduler-after-successful-init.patch
  (git-fixes CVE-2026-93058 bsc#1282037).
- Update
  patches.suse/drm-panthor-Always-use-the-IRQ-safe-variant-when-acq.patch
  (git-fixes CVE-2026-72388 bsc#1277825).
- Update
  patches.suse/drm-panthor-harden-firmware-build-info-bounds-checks.patch
  (git-fixes CVE-2026-89826 bsc#1281020).
- Update
  patches.suse/drm-rockchip-analogix_dp-Add-missing-error-check-for.patch
  (git-fixes CVE-2026-68282 bsc#1275929).
- Update
  patches.suse/drm-rockchip-analogix_dp-Fix-OF-node-reference-leak-.patch
  (git-fixes CVE-2026-93193 bsc#1281624).
- Update
  patches.suse/drm-rockchip-analogix_dp-fix-unchecked-bound-endpoin.patch
  (git-fixes CVE-2026-97621 bsc#1283669).
- Update
  patches.suse/drm-sysfb-Avoid-possible-truncation-with-calculating.patch
  (git-fixes CVE-2026-68270 bsc#1275135).
- Update
  patches.suse/drm-sysfb-ofdrm-Fix-integer-overflow-in-fb_size-calc.patch
  (git-fixes CVE-2026-89806 bsc#1281140).
- Update
  patches.suse/drm-sysfb-simpledrm-Improve-stride-validation.patch
  (git-fixes CVE-2026-93244 bsc#1282678).
- Update
  patches.suse/drm-ttm-Account-for-NULL-and-handle-pages-in-ttm_poo.patch
  (git-fixes CVE-2026-68239 bsc#1275705).
- Update
  patches.suse/drm-vmwgfx-enforce-cursor-size-limits-for-MOB-cursor.patch
  (git-fixes CVE-2026-80701 bsc#1278338).
- Update
  patches.suse/firmware-arm_ffa-Bound-PARTITION_INFO_GET_REGS-copies.patch
  (bsc#1266326 CVE-2026-64520 bsc#1274263).
- Update
  patches.suse/firmware-arm_ffa-Fix-out-of-bound-writes-in-ffa_setup_and_.patch
  (bsc#1274912 CVE-2026-68400 CVE-2026-68401 bsc#1274903).
- Update
  patches.suse/firmware-arm_ffa-Validate-framework-notification-message-l.patch
  (git-fixes CVE-2026-64081 bsc#1273470).
- Update
  patches.suse/i2c-tegra-fix-pm_runtime-leak-on-mutex_lock-failure.patch
  (git-fixes CVE-2026-64171 bsc#1273684).
- Update
  patches.suse/ice-prevent-tstamp-ring-allocation-for-non-PF-VSI-ty.patch
  (git-fixes CVE-2026-68292 bsc#1275095).
- Update
  patches.suse/igc-fix-potential-skb-leak-in-igc_fpe_xmit_smd_frame.patch
  (git-fixes CVE-2026-64110 bsc#1273425).
- Update
  patches.suse/io_uring-nop-fix-file-reference-leak-with-IOSQE_FIXE.patch
  (git-fixes CVE-2026-64426 bsc#1273893).
- Update
  patches.suse/iommu-dma-iommu-Fix-wrong-scatterlist-length-assignm.patch
  (git-fixes CVE-2026-74277 bsc#1276477).
- Update
  patches.suse/iommu-s390-Fix-NULL-dereference-in-iova_to_phys-with.patch
  (git-fixes CVE-2026-97593 bsc#1282971).
- Update
  patches.suse/media-uvcvideo-Fix-deadlock-if-uvc_status_stop-is-ca.patch
  (git-fixes CVE-2026-74437 bsc#1276276).
- Update
  patches.suse/net-handshake-Take-a-long-lived-file-reference-at-su.patch
  (bsc#1251942 CVE-2026-64523 bsc#1273136).
- Update
  patches.suse/net-ip_tunnel-initialize-options_len-before-referencing-op.patch
  (git-fixes CVE-2026-98240 bsc#1284480).
- Update
  patches.suse/net-mlx5-free-mlx5_st_idx_data-on-final-dealloc.patch
  (git-fixes CVE-2026-72006 bsc#1276777).
- Update
  patches.suse/net-mlx5e-Fix-eswitch-mode-block-underflow-on-IPsec-.patch
  (git-fixes CVE-2026-64522 bsc#1274033).
- Update
  patches.suse/net-mlx5e-fix-BQL-reset-on-SQ-re-activation.patch
  (git-fixes CVE-2026-74698 bsc#1276917).
- Update
  patches.suse/nvdimm-btt-Free-arena-sub-allocations-on-discover_ar.patch
  (bsc#1266323 CVE-2026-72223 bsc#1277216).
- Update patches.suse/nvme-fix-FDP-fdpcidx-bounds-check.patch
  (git-fixes CVE-2026-74361 bsc#1277397).
- Update patches.suse/nvme-fix-bio-leak-on-mapping-failure.patch
  (git-fixes CVE-2026-64072 bsc#1273442).
- Update
  patches.suse/nvme-pci-fix-out-of-bounds-access-in-nvme_setup_desc.patch
  (git-fixes CVE-2026-74383 bsc#1278256).
- Update
  patches.suse/perf-arm_pmuv3-Zero-initialize-hw_id-branch-stack-field.patch
  (git-fixes CVE-2026-90272 bsc#1281710).
- Update
  patches.suse/platform-x86-amd-pmc-Fix-LPS0-and-debugfs-leaks-when.patch
  (git-fixes CVE-2026-81015 bsc#1280307).
- Update
  patches.suse/platform-x86-amd-pmc-Propagate-SMU-errors-and-valida.patch
  (git-fixes CVE-2026-81016 bsc#1280329).
- Update
  patches.suse/powerpc-Do-not-restore-KUAP-in-arch_exit_to_user_mode_prepare.patch
  (bsc#1277802 ltc#222379 CVE-2026-98396 bsc#1285592).
- Update
  patches.suse/powerpc-entry-Fix-irq_soft_mask-corruption-on-replayed-interrupt-exit.patch
  (bsc#1277802 ltc#222379 CVE-2026-98395 bsc#1285593).
- Update
  patches.suse/powerpc-syscall-Fix-syscall-skip-handling-for-seccomp-and-ptrace.patch
  (bsc#1268620 jsc#PED-15113 bsc#1269549 CVE-2026-90339
  bsc#1281840).
- Update
  patches.suse/regmap-sdw-mbq-don-t-call-an-unset-readable_reg-call.patch
  (git-fixes CVE-2026-74738 bsc#1278248).
- Update
  patches.suse/serial-amba-pl011-keep-console-clock-enabled-for-atom.patch
  (git-fixes CVE-2026-90338 bsc#1281839).
- Update
  patches.suse/tpm_crb-Check-ACPI_COMPANION-against-NULL-during-pro.patch
  (git-fixes CVE-2026-72432 bsc#1278052).
- Update
  patches.suse/wifi-ath11k-cancel-SSR-work-items-during-PCI-shutdow.patch
  (git-fixes CVE-2026-74407 bsc#1276386).
- Update
  patches.suse/wifi-ath12k-fix-NULL-deref-in-change_sta_links-for-u.patch
  (git-fixes CVE-2026-74366 bsc#1277105).
- Update
  patches.suse/wifi-brcmfmac-cyw-fix-heap-overflow-on-a-short-auth-.patch
  (git-fixes CVE-2026-72003 bsc#1276590).
- Update
  patches.suse/wifi-brcmfmac-cyw-pass-PMKID-to-firmware-if-present.patch
  (git-fixes CVE-2026-98350 bsc#1284646).
- Update
  patches.suse/wifi-cfg80211-Fix-an-error-handling-path-in-cfg80211.patch
  (git-fixes CVE-2026-68412 bsc#1274704).
- Update
  patches.suse/wifi-cfg80211-don-t-free-driver-owned-scan-requests.patch
  (git-fixes CVE-2026-98341 bsc#1284639).
- Update
  patches.suse/wifi-cfg80211-validate-EHT-MLE-before-MLD-ID-read.patch
  (git-fixes CVE-2026-68472 bsc#1276505).
- Update
  patches.suse/wifi-iwlwifi-pcie-null-RX-pointers-after-free.patch
  (stable-fixes CVE-2026-93796 bsc#1283137).
- Update
  patches.suse/wifi-mac80211-bounds-check-link_id-in-ieee80211_ml_e.patch
  (git-fixes CVE-2026-64030 bsc#1273752).
- Update
  patches.suse/wifi-mac80211-don-t-warn-when-an-IBSS-has-no-channel.patch
  (git-fixes CVE-2026-98425 bsc#1285567).
- Update
  patches.suse/wifi-mac80211-refuse-to-make-a-monitor-active-when-i.patch
  (git-fixes CVE-2026-98182 bsc#1284538).
- Update
  patches.suse/wifi-mt76-cancel-reset-and-rc-work-on-device-unregis.patch
  (git-fixes CVE-2026-90365 bsc#1281896).
- Update
  patches.suse/wifi-mt76-fix-RX-data-queuing-of-RRO-3.0.patch
  (git-fixes CVE-2026-90377 bsc#1281876).
- Update
  patches.suse/wifi-mt76-fix-RXDMAD_C-buffer-recycling-race.patch
  (git-fixes CVE-2026-90371 bsc#1281869).
- Update
  patches.suse/wifi-mt76-mt7915-bound-the-device-EEPROM-address-bef.patch
  (git-fixes CVE-2026-80937 bsc#1280156).
- Update
  patches.suse/wifi-mt76-mt7925-cancel-mlo_pm_work-on-stop.patch
  (git-fixes CVE-2026-80936 bsc#1280154).
- Update
  patches.suse/wifi-mt76-mt7925-cancel-pending-mlo_pm_work.patch
  (git-fixes CVE-2026-89523 bsc#1280747).
- Update
  patches.suse/wifi-mt76-mt7996-Fix-possible-NULL-pointer-dereferen.patch
  (git-fixes CVE-2026-74322 bsc#1277164).
- Update
  patches.suse/wifi-mt76-mt7996-Fix-possible-token-leak-in-mt7996_t.patch
  (git-fixes CVE-2026-74323 bsc#1277175).
- Update
  patches.suse/wifi-mt76-mt7996-clear-stale-link-state-on-full-rese.patch
  (git-fixes CVE-2026-90355 bsc#1281892).
- Update
  patches.suse/wifi-mt76-mt7996-do-not-attach-hif2-WED-when-the-mai.patch
  (git-fixes CVE-2026-90351 bsc#1281814).
- Update
  patches.suse/wifi-mt76-mt7996-fix-TX-DMA-mapping-leak-for-AddBA-r.patch
  (git-fixes CVE-2026-80934 bsc#1280147).
- Update
  patches.suse/wifi-mt76-mt7996-fix-out-of-bounds-link-array-access.patch
  (git-fixes CVE-2026-90349 bsc#1281816).
- Update
  patches.suse/wifi-mt76-mt7996-free-vif-links-after-clearing-wcid-.patch
  (git-fixes CVE-2026-90356 bsc#1281893).
- Update
  patches.suse/wifi-mt76-mt7996-hold-dev-mt76.mutex-while-disabling.patch
  (git-fixes CVE-2026-90367 bsc#1281898).
- Update
  patches.suse/wifi-mt76-mt7996-validate-default-EEPROM-firmware-si.patch
  (git-fixes CVE-2026-80933 bsc#1280144).
- Update
  patches.suse/wifi-mt76-reject-out-of-range-link-ids-in-mt76_vif_l.patch
  (git-fixes CVE-2026-90350 bsc#1281815).
- Update
  patches.suse/wifi-mt76-use-kfree_rcu-for-offchannel-link-in-mt76_.patch
  (git-fixes CVE-2026-74325 bsc#1277140).
- Update
  patches.suse/wifi-rtw88-fix-wrong-pci_get_drvdata-type-in-AER-han.patch
  (git-fixes CVE-2026-74412 bsc#1276383).
- Update
  patches.suse/wifi-rtw89-add-bounds-check-on-firmware-mac_id-in-li.patch
  (git-fixes CVE-2026-74409 bsc#1276389).
- Update
  patches.suse/wifi-rtw89-fix-wrong-pci_get_drvdata-type-in-AER-han.patch
  (git-fixes CVE-2026-74413 bsc#1276367).
- Update
  patches.suse/wifi-wilc1000-fix-dma_buffer-leak-on-bus-acquire-fai.patch
  (git-fixes CVE-2026-64145 bsc#1273680).
- Update
  patches.suse/xsk-avoid-data-corruption-on-cq-descriptor-number.patch
  (git-fixes CVE-2025-40290 bsc#1254862).
- commit f9ca04c

- Delete
  patches.suse/userfaultfd-gate-must_wait-writability-check-on-pte_.patch.
  This backport causes regressions in userfaultfd. revert it for now.
- commit 30f25dd

- arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes)
  Enable this workaround by default for aarch64.
- commit 800513d

- arm64: errata: Factor out broken AMU const counter cap (git-fixes)
  Enable this workaround by default for aarch64.
- commit 6fbf266

- Input: byd - synchronize timer deletion before freeing private
  data (CVE-2026-80572 bsc#1277338).
- commit cec8945

- Refresh
  patches.suse/userfaultfd-gate-must_wait-writability-check-on-pte_.patch.
  The original backport of this patch introduced a leak of the pte,
  leaving it mapped in one case.  Fix it.
- commit e5e60b6

- wifi: ath12k: fix memory leak in
  ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103
  CVE-2026-74368).
- commit faf6057

- net: udp_tunnel: prevent double queueing in
  udp_tunnel_nic_device_sync (CVE-2026-72405 bsc#1278033).
- commit 8c6253d

- ipv4: free inet_opt and ireq_opt after an RCU grace period
  (CVE-2026-98432 bsc#1285685).
- commit fa6df11

- iommu/dma: skip swiotlb bounce for DMA_ATTR_MMIO in
  iommu_dma_map_phys (git-fixes).
- commit 7c3df5e

- bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
  (CVE-2026-74363 bsc#1278070).
- commit 68a5ef7

- md/raid1: free r1_bio when REQ_NOWAIT is set and read would
  block on retry (CVE-2026-72437 bsc#1277874).
- commit 96a5733

- drivers/virt: pkvm: Fix end calculation in
  mmio_guard_ioremap_hook() (git-fixes).
- commit 12c865d

- dm thin metadata: fix metadata snapshot consistency on commit
  failure (CVE-2026-72108 bsc#1277350).
- commit 3862f3b

- x86/mce: Set up the polling timer before CMCI discovery (bsc#1278703 CVE-2026-80727).
- commit 4166204

- KVM: SVM: Add support to initialize SEV/SNP functionality in
  KVM (bsc#1279887).
- commit 6e070b9

- dm: avoid leaking the caller's thread keyring via the table
  device file (CVE-2026-72103 bsc#1277315).
  mwilck: adapted because of lack of commits 4c7ceeb62d33 ("cred:
  add kernel_cred() helper") and ae40e6c65791 ("cred: add
  scoped_with_kernel_creds()").
- commit ab71303

- dm-integrity: fix a bug if the bio is out of limits
  (CVE-2026-72100 bsc#1277311).
- commit b4db10f

- Bluetooth: ISO: avoid deadlocks in iso_sock_timeout
  (CVE-2026-74535 bsc#1275812).
- Refresh
  patches.kabi/replace-additional-lock-in-hci_conn-with-a-common-sp.patch.
- Refresh
  patches.suse/Bluetooth-ISO-ensure-no-dangling-hcon-references-in-.patch.
- Refresh
  patches.suse/Bluetooth-ISO-fix-race-of-kfree-vs-kref_get_unless_z.patch.
- commit cd73d51

- KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on
  nested VMRUN (git-fixes).
- commit 45b854d