SUSE-SU-2026:4282-1: kernel-default&distro=SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:4282-1 is a vulnerability in kernel-default&distro=SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise with no CVSS score yet.

Showing 100 of 234. Use Open JSON for the complete list.

Timeline

1. 22-09-2026
   PublishedVulnerability first disclosed.
2. 23-09-2026
   Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894). - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619). - CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541). - CVE-2026-43134: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (bsc#1264308). - CVE-2026-43257: media: cx88: Add missing unmap in snd_cx88_hw_params() (bsc#1264296). - CVE-2026-43277: ACPI / APEI: Make GHES estatus header validation more user friendly (bsc#1264594). - CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068). - CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121). - CVE-2026-45941: tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure (bsc#1266920). - CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501). - CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612). - CVE-2026-46108: ipmi:si: Return state to normal if message allocation fails (bsc#1267615). - CVE-2026-46128: ipmi: Check event message buffer response for bad data (bsc#1267643). - CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). - CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013). - CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987). - CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972). - CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113). - CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114). - CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655). - CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). - CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412). - CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783). - CVE-2026-53091: net: do not use skb_mac_header() in qdisc_pkt_len_init() (bsc#1269530). - CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306). - CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686). - CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381). - CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301). - CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256). - CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774). - CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238). - CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815). - CVE-2026-53403: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in (bsc#1271731). - CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297). - CVE-2026-63823: security: don't use RCU accessors for cred->session_keyring (bsc#1272182). - CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429). - CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385). - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390). - CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). - CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641). - CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877). - CVE-2026-63962: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (bsc#1272482). - CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027). - CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734). - CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). - CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831). - CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). - CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882). - CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891). - CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762). - CVE-2026-64088: batman-adv: tt: fix negative tt_buff_len (bsc#1273463). - CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). - CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748). - CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262). - CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). - CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). - CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749). - CVE-2026-64178: Bluetooth: bnep: Fix UAF read of dev->name (bsc#1273946). - CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210). - CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944). - CVE-2026-64306: crypto: drbg - Fix returning success on failure in CTR_DRBG (bsc#1273939). - CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968). - CVE-2026-64313: crypto: ecc - Fix carry overflow in vli multiplication (bsc#1273940). - CVE-2026-64315: printk: add print_hex_dump_devel() (bsc#1274028). - CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936). - CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958). - CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305). - CVE-2026-64332: USB: ulpi: fix memory leak on registration failure (bsc#1273285). - CVE-2026-64333: USB: serial: digi_acceleport: fix write buffer corruption (bsc#1273933). - CVE-2026-64334: USB: serial: digi_acceleport: fix hard lockup on disconnect (bsc#1273942). - CVE-2026-64340: USB: legousbtower: fix use-after-free on disconnect race (bsc#1274003). - CVE-2026-64341: USB: iowarrior: fix use-after-free on disconnect race (bsc#1273895). - CVE-2026-64343: USB: ldusb: fix use-after-free on disconnect race (bsc#1273974). - CVE-2026-64344: USB: idmouse: simplify disconnect handling (bsc#1274019). - CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860). - CVE-2026-64408: Bluetooth: bnep: pin L2CAP connection during netdev registration (bsc#1273778). - CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077). - CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780). - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274). - CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277). - CVE-2026-64470: Bluetooth: btusb: fix use-after-free on marvell probe failure (bsc#1273892). - CVE-2026-64471: Bluetooth: btusb: fix use-after-free on registration failure (bsc#1274278). - CVE-2026-64512: ACPI: CPPC: Suppress UBSAN warning caused by field misuse (bsc#1273597). - CVE-2026-64513: KVM: x86: Move update_cr8_intercept() to lapic.c (bsc#1273327). - CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303). - CVE-2026-64544: crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents (bsc#1273316). - CVE-2026-64547: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup (bsc#1273319). - CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813). - CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336). - CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930). - CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006). - CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041). - CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040). - CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581). - CVE-2026-68093: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (bsc#1274725). - CVE-2026-68111: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (bsc#1274873). - CVE-2026-68117: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (bsc#1274881). - CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888). - CVE-2026-68123: net: openvswitch: don't call pad_packet if not necessary (bsc#1275169). - CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517). - CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). - CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583). - CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301). - CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303). - CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304). - CVE-2026-68156: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (bsc#1275305). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307). - CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470). - CVE-2026-68188: Bluetooth: RFCOMM: Fix session UAF in set_termios (bsc#1274953). - CVE-2026-68197: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (bsc#1274804). - CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). - CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161). - CVE-2026-68234: drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved (bsc#1275650). - CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704). - CVE-2026-68277: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers (bsc#1275125). - CVE-2026-68278: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (bsc#1275870). - CVE-2026-68279: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers (bsc#1275871). - CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970). - CVE-2026-68289: tipc: keep the skb in rcv queue until the whole data is read (bsc#1275976). - CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088). - CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083). - CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665). - CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662). - CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659). - CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651). - CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646). - CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645). - CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). - CVE-2026-68349: wifi: carl9170: fix buffer overflow in rx_stream failover path (bsc#1274681). - CVE-2026-68351: wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (bsc#1274678). - CVE-2026-68357: watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (bsc#1274737). - CVE-2026-68363: wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (bsc#1275164). - CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898). - CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908). - CVE-2026-68405: wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock (bsc#1274896). - CVE-2026-68410: wifi: libertas: fix memory leak in helper_firmware_cb() (bsc#1274710). - CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700). - CVE-2026-68426: esp: remove the skb from the chain when it's enqueued in cryptd_wq (bsc#1274705). - CVE-2026-68428: KVM: x86/mmu: Fix use-after-free on vendor module reload (bsc#1274699). - CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800). - CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801). - CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834). - CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208). - CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). - CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506). - CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034). - CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535). - CVE-2026-72084: scsi: target: Write NULL to *port_nexus_ptr if no ISID (bsc#1275540). - CVE-2026-72086: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1277179). - CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). - CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). - CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). - CVE-2026-72142: i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (bsc#1277522). - CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). - CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827). - CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). - CVE-2026-72284: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (bsc#1277730). - CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923). - CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). - CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). - CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869). - CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). - CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). - CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057). - CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). - CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542). - CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). - CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). - CVE-2026-74265: net: mana: initialize gdma queue id to INVALID_QUEUE_ID (bsc#1276517). - CVE-2026-74271: power: supply: core: Delete two error messages for a failed memory allocation in power_supply_check_supplies() (bsc#1276502). - CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). - CVE-2026-74279: crypto: cavium/cpt - fix DMA cleanup using wrong loop index (bsc#1276479). - CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452). - CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446). - CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). - CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr->pd (bsc#1277095). - CVE-2026-74341: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response (bsc#1277089). - CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). - CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). - CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). - CVE-2026-74416: drm/radeon: fix memory leak in radeon_ring_restore() on lock failure (bsc#1276343). - CVE-2026-74417: drm/radeon: fix integer overflow in radeon_align_pitch() (bsc#1276363). - CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073). - CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). - CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346). - CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350). - CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864). - CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867). - CVE-2026-74508: Bluetooth: HIDP: reject frames without a transaction header (bsc#1277893). - CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950). - CVE-2026-74519: pinctrl: devicetree: don't free uninitialized dev_name on error path (bsc#1275810). - CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687). - CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695). - CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688). - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). - CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). - CVE-2026-74582: af_packet: fix raw sockets over 6in4 tunnel (bsc#1275784). - CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066). - CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391). - CVE-2026-74673: Input: evdev - fix information leak in evdev_pass_values() (bsc#1277637). - CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). - CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). - CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022). - CVE-2026-80574: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (bsc#1277329). - CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). - CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275). - CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). - CVE-2026-80609: qede: fix out-of-bounds check for cqe->len_list (bsc#1278334). - CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). - CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). - CVE-2026-80765: HID: hyperv: validate initial device info bounds (bsc#1279499). - CVE-2026-80819: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (bsc#1279607). - CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). The following non security issues were fixed: - fcntl: Fix potential deadlock in send_sig{io, urg}() (bsc#1269113). - mkspec-dtb: Move DTS prefix into package list. - mkspec-dtb: Move provides-obsoletes to package list. - mkspec-dtb: Put per-architecture package lists into a hash. - mkspec-dtb: re-indent. - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550). - RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes). - s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1270264). - s390/syscalls: Add spectre boundary for syscall dispatch table (bsc#1270264). - smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902). - smb: client: harden POSIX SID length parsing (bsc#1273557).

No weakness data has been published for this record.