SUSE-SU-2026:4282-1

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

• CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
• CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
• CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
• CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
• CVE-2026-43134: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (bsc#1264308).
• CVE-2026-43257: media: cx88: Add missing unmap in snd_cx88_hw_params() (bsc#1264296).
• CVE-2026-43277: ACPI / APEI: Make GHES estatus header validation more user friendly (bsc#1264594).
• CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
• CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
• CVE-2026-45941: tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure (bsc#1266920).
• CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
• CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
• CVE-2026-46108: ipmi:si: Return state to normal if message allocation fails (bsc#1267615).
• CVE-2026-46128: ipmi: Check event message buffer response for bad data (bsc#1267643).
• CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
• CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
• CVE-2026-52925: vrf: Fix a potential NPD when removing a port from a VRF (bsc#1268987).
• CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
• CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
• CVE-2026-53001: netfilter: xtables: restrict several matches to inet family (bsc#1269114).
• CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655).
• CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685).
• CVE-2026-53077: net/rds: Restrict use of RDS/IB to the initial network namespace (bsc#1269412).
• CVE-2026-53089: bpf: Fix use-after-free in offloaded map/prog info fill (bsc#1269783).
• CVE-2026-53091: net: do not use skb_mac_header() in qdisc_pkt_len_init() (bsc#1269530).
• CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306).
• CVE-2026-53219: netfilter: x_tables: avoid leaking percpu counter pointers (bsc#1269686).
• CVE-2026-53220: netfilter: revalidate bridge ports (bsc#1269381).
• CVE-2026-53223: net: guard timestamp cmsgs to real error queue skbs (bsc#1269301).
• CVE-2026-53228: ipv6: sit: reload inner IPv6 header after GSO offloads (bsc#1269256).
• CVE-2026-53238: netlabel: validate unlabeled address and mask attribute lengths (bsc#1269774).
• CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238).
• CVE-2026-53309: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (bsc#1269815).
• CVE-2026-53403: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in (bsc#1271731).
• CVE-2026-63810: block: Avoid mounting the bdev pseudo-filesystem in userspace (bsc#1272297).
• CVE-2026-63823: security: don't use RCU accessors for cred->session_keyring (bsc#1272182).
• CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).
• CVE-2026-63868: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).
• CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385).
• CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390).
• CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426).
• CVE-2026-63891: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).
• CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877).
• CVE-2026-63962: usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (bsc#1272482).
• CVE-2026-63990: bonding: refuse to enslave CAN devices (bsc#1273027).
• CVE-2026-64001: ALSA: pcm: oss: Fix setup list UAF on proc write error (bsc#1273734).
• CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).
• CVE-2026-64005: net/smc: Do not re-initialize smc hashtables (bsc#1273831).
• CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).
• CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).
• CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).
• CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762).
• CVE-2026-64088: batman-adv: tt: fix negative tt_buff_len (bsc#1273463).
• CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759).
• CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748).
• CVE-2026-64113: ixgbevf: fix use-after-free in VEPA multicast source pruning (bsc#1272262).
• CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
• CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).
• CVE-2026-64118: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).
• CVE-2026-64178: Bluetooth: bnep: Fix UAF read of dev->name (bsc#1273946).
• CVE-2026-64190: net: team: fix NULL pointer dereference in team_xmit during mode change (bsc#1272210).
• CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944).
• CVE-2026-64306: crypto: drbg - Fix returning success on failure in CTR_DRBG (bsc#1273939).
• CVE-2026-64312: crypto: pcrypt - restore callback for non-parallel fallback (bsc#1273968).
• CVE-2026-64313: crypto: ecc - Fix carry overflow in vli multiplication (bsc#1273940).
• CVE-2026-64315: printk: add print_hex_dump_devel() (bsc#1274028).
• CVE-2026-64317: isofs: bound Rock Ridge symlink components to the SL record (bsc#1273936).
• CVE-2026-64322: udf: validate sparing table length as an entry count, not a byte count (bsc#1273958).
• CVE-2026-64323: udf: validate VAT header length against the VAT inode size (bsc#1273305).
• CVE-2026-64332: USB: ulpi: fix memory leak on registration failure (bsc#1273285).
• CVE-2026-64333: USB: serial: digi_acceleport: fix write buffer corruption (bsc#1273933).
• CVE-2026-64334: USB: serial: digi_acceleport: fix hard lockup on disconnect (bsc#1273942).
• CVE-2026-64340: USB: legousbtower: fix use-after-free on disconnect race (bsc#1274003).
• CVE-2026-64341: USB: iowarrior: fix use-after-free on disconnect race (bsc#1273895).
• CVE-2026-64343: USB: ldusb: fix use-after-free on disconnect race (bsc#1273974).
• CVE-2026-64344: USB: idmouse: simplify disconnect handling (bsc#1274019).
• CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard() (bsc#1273860).
• CVE-2026-64408: Bluetooth: bnep: pin L2CAP connection during netdev registration (bsc#1273778).
• CVE-2026-64411: netfilter: ebtables: terminate table name before find_table_lock() (bsc#1274077).
• CVE-2026-64412: netfilter: ebtables: module names must be null-terminated (bsc#1273780).
• CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274).
• CVE-2026-64436: net: af_key: initialize alg_key_len for IPComp states (bsc#1274277).
• CVE-2026-64470: Bluetooth: btusb: fix use-after-free on marvell probe failure (bsc#1273892).
• CVE-2026-64471: Bluetooth: btusb: fix use-after-free on registration failure (bsc#1274278).
• CVE-2026-64512: ACPI: CPPC: Suppress UBSAN warning caused by field misuse (bsc#1273597).
• CVE-2026-64513: KVM: x86: Move update_cr8_intercept() to lapic.c (bsc#1273327).
• CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303).
• CVE-2026-64544: crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents (bsc#1273316).
• CVE-2026-64547: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup (bsc#1273319).
• CVE-2026-64551: sctp: validate STALE_COOKIE cause length before reading staleness (bsc#1273813).
• CVE-2026-64553: net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1273336).
• CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930).
• CVE-2026-64567: btrfs: reject free space cache with more entries than pages (bsc#1274006).
• CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041).
• CVE-2026-64582: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1274040).
• CVE-2026-68082: libceph: fix two unsafe bare decodes in decode_lockers() (bsc#1274581).
• CVE-2026-68093: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (bsc#1274725).
• CVE-2026-68111: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (bsc#1274873).
• CVE-2026-68117: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (bsc#1274881).
• CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888).
• CVE-2026-68123: net: openvswitch: don't call pad_packet if not necessary (bsc#1275169).
• CVE-2026-68129: gve: fix Rx queue stall on alloc failure (bsc#1275517).
• CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094).
• CVE-2026-68143: net: slip: serialize receive against buffer reallocation (bsc#1275583).
• CVE-2026-68153: libceph: remove debugfs files before client teardown (bsc#1275301).
• CVE-2026-68154: libceph: reject zero bucket types in crush_decode (bsc#1275303).
• CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304).
• CVE-2026-68156: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (bsc#1275305).
• CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307).
• CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470).
• CVE-2026-68188: Bluetooth: RFCOMM: Fix session UAF in set_termios (bsc#1274953).
• CVE-2026-68197: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper (bsc#1274804).
• CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803).
• CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161).
• CVE-2026-68234: drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved (bsc#1275650).
• CVE-2026-68238: drm/amdgpu: Release VFCT ACPI table reference (bsc#1275704).
• CVE-2026-68277: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers (bsc#1275125).
• CVE-2026-68278: drm/dp/mst: fix buffer overflows in sideband chunk accumulation (bsc#1275870).
• CVE-2026-68279: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers (bsc#1275871).
• CVE-2026-68284: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() (bsc#1275970).
• CVE-2026-68289: tipc: keep the skb in rcv queue until the whole data is read (bsc#1275976).
• CVE-2026-68299: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (bsc#1275088).
• CVE-2026-68300: sctp: auth: verify auth requirement when auth_chunk is NULL (bsc#1275083).
• CVE-2026-68313: tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1274665).
• CVE-2026-68315: sctp: validate stream count in sctp_process_strreset_inreq() (bsc#1274662).
• CVE-2026-68320: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid (bsc#1274659).
• CVE-2026-68325: iommu/amd: Bound the early ACPI HID map (bsc#1274651).
• CVE-2026-68328: nfp: Check resource mutex allocation (bsc#1274646).
• CVE-2026-68329: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() (bsc#1274645).
• CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637).
• CVE-2026-68349: wifi: carl9170: fix buffer overflow in rx_stream failover path (bsc#1274681).
• CVE-2026-68351: wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read (bsc#1274678).
• CVE-2026-68357: watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() (bsc#1274737).
• CVE-2026-68363: wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (bsc#1275164).
• CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898).
• CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908).
• CVE-2026-68405: wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock (bsc#1274896).
• CVE-2026-68410: wifi: libertas: fix memory leak in helper_firmware_cb() (bsc#1274710).
• CVE-2026-68425: IB/mad: Drop unmatched RMPP responses before reassembly (bsc#1274700).
• CVE-2026-68426: esp: remove the skb from the chain when it's enqueued in cryptd_wq (bsc#1274705).
• CVE-2026-68428: KVM: x86/mmu: Fix use-after-free on vendor module reload (bsc#1274699).
• CVE-2026-68432: vxlan: require CAP_NET_ADMIN in the device netns for changelink (bsc#1274800).
• CVE-2026-68433: libceph: bound get_version reply decode to front len (bsc#1274801).
• CVE-2026-68450: btrfs: free mapping node on duplicate reloc root insert (bsc#1274834).
• CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208).
• CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840).
• CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506).
• CVE-2026-72036: net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1277034).
• CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535).
• CVE-2026-72084: scsi: target: Write NULL to *port_nexus_ptr if no ISID (bsc#1275540).
• CVE-2026-72086: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1277179).
• CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350).
• CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571).
• CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235).
• CVE-2026-72142: i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (bsc#1277522).
• CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553).
• CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827).
• CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728).
• CVE-2026-72284: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs (bsc#1277730).
• CVE-2026-72296: net: ife: require ETH_HLEN to be pullable in ife_decode() (bsc#1275923).
• CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738).
• CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985).
• CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006).
• CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869).
• CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023).
• CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113).
• CVE-2026-72466: xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1277057).
• CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767).
• CVE-2026-72502: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) (bsc#1276542).
• CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547).
• CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528).
• CVE-2026-74265: net: mana: initialize gdma queue id to INVALID_QUEUE_ID (bsc#1276517).
• CVE-2026-74271: power: supply: core: Delete two error messages for a failed memory allocation in power_supply_check_supplies() (bsc#1276502).
• CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132).
• CVE-2026-74279: crypto: cavium/cpt - fix DMA cleanup using wrong loop index (bsc#1276479).
• CVE-2026-74296: RDMA/mlx5: Release the HW-provided UAR index rather than the SW one (bsc#1276452).
• CVE-2026-74297: RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1276446).
• CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445).
• CVE-2026-74334: RDMA/nldev: Fix locking when accessing mr->pd (bsc#1277095).
• CVE-2026-74341: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response (bsc#1277089).
• CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236).
• CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233).
• CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240).
• CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253).
• CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395).
• CVE-2026-74416: drm/radeon: fix memory leak in radeon_ring_restore() on lock failure (bsc#1276343).
• CVE-2026-74417: drm/radeon: fix integer overflow in radeon_align_pitch() (bsc#1276363).
• CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073).
• CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354).
• CVE-2026-74482: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios (bsc#1276346).
• CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350).
• CVE-2026-74495: igbvf: Fix leak in TX DMA error cleanup (bsc#1275864).
• CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867).
• CVE-2026-74508: Bluetooth: HIDP: reject frames without a transaction header (bsc#1277893).
• CVE-2026-74510: Bluetooth: mgmt: fix UAF in pair command cancellation (bsc#1275950).
• CVE-2026-74519: pinctrl: devicetree: don't free uninitialized dev_name on error path (bsc#1275810).
• CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687).
• CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove (bsc#1275695).
• CVE-2026-74550: net: do not send ICMP/NDISC Redirects when peer allocation fails (bsc#1275688).
• CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696).
• CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685).
• CVE-2026-74582: af_packet: fix raw sockets over 6in4 tunnel (bsc#1275784).
• CVE-2026-74584: RDMA/bnxt_re: zero shared page before exposing to userspace (bsc#1277066).
• CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391).
• CVE-2026-74673: Input: evdev - fix information leak in evdev_pass_values() (bsc#1277637).
• CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922).
• CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908).
• CVE-2026-80534: xfs: fix ilock leak on error in xfs_dq_get_next_id (bsc#1277022).
• CVE-2026-80574: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet (bsc#1277329).
• CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294).
• CVE-2026-80590: inet: frags: strip GSO state from fragments before reassembly (bsc#1277275).
• CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293).
• CVE-2026-80609: qede: fix out-of-bounds check for cqe->len_list (bsc#1278334).
• CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561).
• CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487).
• CVE-2026-80765: HID: hyperv: validate initial device info bounds (bsc#1279499).
• CVE-2026-80819: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept (bsc#1279607).
• CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422).

The following non security issues were fixed:

• fcntl: Fix potential deadlock in send_sig{io, urg}() (bsc#1269113).
• mkspec-dtb: Move DTS prefix into package list.
• mkspec-dtb: Move provides-obsoletes to package list.
• mkspec-dtb: Put per-architecture package lists into a hash.
• mkspec-dtb: re-indent.
• net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550).
• RDMA/mlx5: Fix integer overflow of user QP buffer size (git-fixes).
• s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1270264).
• s390/syscalls: Add spectre boundary for syscall dispatch table (bsc#1270264).
• smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902).
• smb: client: harden POSIX SID length parsing (bsc#1273557).