Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kernel-source for openSUSE:Factory checked in at 2026-09-07 11:28:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kernel-source (Old) and /work/SRC/openSUSE:Factory/.kernel-source.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kernel-source" Mon Sep 7 11:28:03 2026 rev:857 rq:1375506 version:7.2.3 Changes: -------- --- /work/SRC/openSUSE:Factory/kernel-source/dtb-aarch64.changes 2026-08-30 19:07:00.341519994 +0200 +++ /work/SRC/openSUSE:Factory/.kernel-source.new.1265/dtb-aarch64.changes 2026-09-07 11:28:45.346803371 +0200 @@ -1,0 +2,188 @@ +Thu Sep 3 07:42:23 CEST 2026 - [email protected] + +- Update + patches.kernel.org/7.2.1-083-ptp-vmclock-prevent-read-only-mappings-from-bec.patch + (bsc#1012628 CVE-2026-80724 bsc#1277850). +- Update + patches.kernel.org/7.2.2-001-inet-frags-strip-GSO-state-from-fragments-befor.patch + (bsc#1012628 CVE-2026-80590 bsc#1277275). + suse-add-cves +- commit 263d925 + +------------------------------------------------------------------- +Thu Sep 3 06:23:43 CEST 2026 - [email protected] + +- Update config files. +- commit a590eb7 + +------------------------------------------------------------------- +Thu Sep 3 06:21:51 CEST 2026 - [email protected] + +- Update config files. +- commit f305596 + +------------------------------------------------------------------- +Thu Sep 3 06:17:25 CEST 2026 - [email protected] + +- Linux 7.2.3 (bsc#1012628). +- usb: usbfs: fix use-after-free of usb_device in usbdev_release() + (bsc#1012628). +- wifi: mt76: mt7925: ensure tx headroom in + usb_sdio_tx_prepare_skb (bsc#1012628). +- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() + (bsc#1012628). +- USB: serial: spcp8x5: drop broken carrier detect support + (bsc#1012628). +- USB: serial: option: fix slab OOB read in interrupt URB callback + (bsc#1012628). +- ALSA: usb-audio: Complete cleanup after system-resume errors + (bsc#1012628). +- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() + (bsc#1012628). +- ALSA: usb-audio: Fix sample rates for PreSonus AudioBox USB + (bsc#1012628). +- usb: core: Strengthen error handling in hub_hub_status() + (bsc#1012628). +- usb: core: Add lock to usb_wakeup_notification() (bsc#1012628). +- KVM: s390: vsie: zero stale crypto bits (bsc#1012628). +- crypto: qce - Remove unsafe/deprecated algorithms (bsc#1012628). +- crypto: mxs-dcp - fix source scatterlist length access + (bsc#1012628). +- crypto: iaa - fall back to software for multi-entry scatterlists + (bsc#1012628). +- crypto: qce - fix CCM AAD buffer underallocation (bsc#1012628). +- crypto: krb5 - use kfree_sensitive() for derived key buffers + (bsc#1012628). +- crypto: atmel-tdes - use scatterlist length before DMA mapping + (bsc#1012628). +- crypto: sun8i-ss - Remove crypto_rng interface (bsc#1012628). +- crypto: sun8i-ce - Remove crypto_rng interface (bsc#1012628). +- crypto: qcom-rng - Allow zero as a random number (bsc#1012628). +- crypto: qcom-rng - Remove crypto_rng interface (bsc#1012628). +- crypto: qcom-rng - Enable clock in hwrng case (bsc#1012628). +- crypto: virtio - bound the akcipher result length (bsc#1012628). +- kunit: irq: Continue increasing hrtimer interval for longer + (bsc#1012628). +- mm/swap: reject swapon() on filesystem-level encrypted files + (bsc#1012628). +- netfilter: nf_tables: don't queue packet path object + notifications (bsc#1012628). +- netfilter: nft_set_pipapo_avx2: add missing vzeroupper + (bsc#1012628). +- vxlan: keep the last remote linked during FDB flush + (bsc#1012628). +- batman-adv: reject unrepresentable multicast TVLV offsets + (bsc#1012628). +- ipv6: seg6: clear IPv4 control block on IPIP decapsulation + (bsc#1012628). +- net/packet: defer vmalloc TX_RING free until skbs finish + (bsc#1012628). +- vlan: fix skb_under_panic and races when toggling HW VLAN + offload (bsc#1012628). +- net: bridge: mcast: fix use-after-free of a master VLAN's + multicast context (bsc#1012628). +- xfrm: bound nat keepalive state collection (bsc#1012628). +- xfrm: fix xfrm_state_construct() auth-trunc leak (bsc#1012628). +- xfrm: ah6: validate routing header segments_left (bsc#1012628). +- xfrm: avoid lock inversion in nat keepalive work (bsc#1012628). +- xfrm: drop ESP-in-TCP packets with no ingress device + (bsc#1012628). +- tcp: clamp route advmss to TCP_MIN_MSS (bsc#1012628). +- xfrm: espintcp: fix UAF during close (bsc#1012628). +- net: advertise TCP MSS from the configured MTU, not the learned + PMTU (bsc#1012628). +- net/tcp-ao: fix use-after-free of current_key on reconnect to + another peer (bsc#1012628). +- tcp: fix AO info use-after-free in tcp_ao_connect_init() + (bsc#1012628). +- net/tcp: fix TCP-AO key deletion in VRFs (bsc#1012628). +- gtp: serialize PDP context updates (bsc#1012628). +- tls: device: fix out-of-bounds write in tls_append_frag() + (bsc#1012628). +- KVM: SEV: Wire up kvm_x86_ops.gmem_xxx() if and only if + CONFIG_KVM_AMD_SEV=y (bsc#1012628). +- KVM: SEV: Mark vCPU RUNNABLE after AP_CREATE, even if VMSA is + unusable (bsc#1012628). +- KVM: SEV: Extract loading of guest-provided VMSA to a separate + helper (bsc#1012628). +- KVM: SEV: Track the GPA of the guest-controlled VMSA used for + SNP guests (bsc#1012628). +- KVM: SEV: Drop FOLL_WRITE for encrypted region registration + (bsc#1012628). +- KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on + SNP-enabled hosts (bsc#1012628). +- usb: gadget: f_tcm: keep port count until LUN teardown completes + (bsc#1012628). +- usb: usbtest: disable dynamic ID support (bsc#1012628). +- fuse: fix invalidate lock leak on open O_TRUNC DAX failure + (bsc#1012628). +- fuse: fix invalidate lock leak on setattr writeback failure + (bsc#1012628). +- fuse: wait for FR_FINISHED on abort_on_kill to prevent + use-after-free (bsc#1012628). +- fuse: publish io-uring queues with release semantics + (bsc#1012628). +- fuse: fix missing barrier when checking io-uring readiness + (bsc#1012628). +- fuse: fix race between interrupt and resend (bsc#1012628). +- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure + (bsc#1012628). +- xhci: dbgtty: Fix unregister on tty_register_driver() failure + (bsc#1012628). +- usb: xhci: bail out of setup if the controller is inaccessible + (bsc#1012628). +- usb: xhci: Handle USB3 port events when there is one roothub + (bsc#1012628). +- usb: xhci: Handle bogus TRB pointers in Missed Service Error + events (bsc#1012628). +- accessibility: speakup: unregister tty ldisc on later init + failures (bsc#1012628). +- fpga: dfl: fme: add error handling (bsc#1012628). +- selftests/bpf: Fix test_maps sockmap failure (bsc#1012628). +- nvme-tcp: fix usage of page_frag_cache (bsc#1012628). +- RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1012628). +- RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC + modify_qp (bsc#1012628). +- commit b337258 + +------------------------------------------------------------------- +Wed Sep 2 16:48:18 CEST 2026 - [email protected] + +- rpm/kernel-obs-build.spec.in: Add more nft modules for docker + nft_compat and nft_chain_nat this time. +- commit 50912bc + +------------------------------------------------------------------- +Tue Sep 1 16:42:04 CEST 2026 - [email protected] + +- config: Update armv6hl config files for 7.2 + From the 7.3 configs from the below commit merged using: + ./scripts/kconfig/merge_config.sh -m config-7.1 config-7.3 + (cherry picked from commit a1eacb59146415c72587ce7793cd62c6e13cea10) +- commit bace45b + +------------------------------------------------------------------- +Tue Sep 1 16:24:43 CEST 2026 - [email protected] + +- config: Update armv7hl config files for 7.2 + From the 7.3 configs from the below commit merged using: + ./scripts/kconfig/merge_config.sh -m config-7.1 config-7.3 + (cherry picked from commit f7622cd51c9c6b3c85364610ba9c5192ee0a1ac5) +- commit 9c0aa80 + +------------------------------------------------------------------- +Mon Aug 31 13:59:09 CEST 2026 - [email protected] + +- Update config files: enable AMD ISP4 camera driver (bsc#1277447) + Set CONFIG_VIDEO_AMD_ISP4_CAPTURE=m for x86_64 and i386 archs. + No other media platform drivers are enabled, so far. +- commit dcfc956 + +------------------------------------------------------------------- +Fri Aug 28 10:47:32 CEST 2026 - [email protected] + +- drm/qxl: fix use-after-free and NULL pointer deref + (bsc#1271081). +- commit a4d4168 + +------------------------------------------------------------------- dtb-armv6l.changes: same change dtb-armv7l.changes: same change dtb-riscv64.changes: same change kernel-64kb.changes: same change kernel-default.changes: same change kernel-docs.changes: same change kernel-kvmsmall.changes: same change New Changes file: --- /dev/null 2026-08-27 09:03:19.220000000 +0200 +++ /work/SRC/openSUSE:Factory/.kernel-source.new.1265/kernel-lpae.changes 2026-09-07 11:28:58.131251718 +0200 @@ -0,0 +1,224746 @@ +------------------------------------------------------------------- +Thu Sep 3 07:42:23 CEST 2026 - [email protected] + +- Update + patches.kernel.org/7.2.1-083-ptp-vmclock-prevent-read-only-mappings-from-bec.patch + (bsc#1012628 CVE-2026-80724 bsc#1277850). +- Update + patches.kernel.org/7.2.2-001-inet-frags-strip-GSO-state-from-fragments-befor.patch + (bsc#1012628 CVE-2026-80590 bsc#1277275). + suse-add-cves +- commit 263d925 + +------------------------------------------------------------------- +Thu Sep 3 06:23:43 CEST 2026 - [email protected] + +- Update config files. +- commit a590eb7 + +------------------------------------------------------------------- +Thu Sep 3 06:21:51 CEST 2026 - [email protected] + +- Update config files. +- commit f305596 + +------------------------------------------------------------------- +Thu Sep 3 06:17:25 CEST 2026 - [email protected] + +- Linux 7.2.3 (bsc#1012628). +- usb: usbfs: fix use-after-free of usb_device in usbdev_release() + (bsc#1012628). +- wifi: mt76: mt7925: ensure tx headroom in + usb_sdio_tx_prepare_skb (bsc#1012628). +- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() + (bsc#1012628). +- USB: serial: spcp8x5: drop broken carrier detect support + (bsc#1012628). +- USB: serial: option: fix slab OOB read in interrupt URB callback + (bsc#1012628). +- ALSA: usb-audio: Complete cleanup after system-resume errors + (bsc#1012628). +- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() + (bsc#1012628). +- ALSA: usb-audio: Fix sample rates for PreSonus AudioBox USB + (bsc#1012628). +- usb: core: Strengthen error handling in hub_hub_status() + (bsc#1012628). +- usb: core: Add lock to usb_wakeup_notification() (bsc#1012628). +- KVM: s390: vsie: zero stale crypto bits (bsc#1012628). +- crypto: qce - Remove unsafe/deprecated algorithms (bsc#1012628). +- crypto: mxs-dcp - fix source scatterlist length access + (bsc#1012628). +- crypto: iaa - fall back to software for multi-entry scatterlists + (bsc#1012628). +- crypto: qce - fix CCM AAD buffer underallocation (bsc#1012628). +- crypto: krb5 - use kfree_sensitive() for derived key buffers + (bsc#1012628). +- crypto: atmel-tdes - use scatterlist length before DMA mapping + (bsc#1012628). +- crypto: sun8i-ss - Remove crypto_rng interface (bsc#1012628). +- crypto: sun8i-ce - Remove crypto_rng interface (bsc#1012628). +- crypto: qcom-rng - Allow zero as a random number (bsc#1012628). +- crypto: qcom-rng - Remove crypto_rng interface (bsc#1012628). +- crypto: qcom-rng - Enable clock in hwrng case (bsc#1012628). +- crypto: virtio - bound the akcipher result length (bsc#1012628). +- kunit: irq: Continue increasing hrtimer interval for longer + (bsc#1012628). +- mm/swap: reject swapon() on filesystem-level encrypted files + (bsc#1012628). +- netfilter: nf_tables: don't queue packet path object + notifications (bsc#1012628). +- netfilter: nft_set_pipapo_avx2: add missing vzeroupper + (bsc#1012628). +- vxlan: keep the last remote linked during FDB flush + (bsc#1012628). +- batman-adv: reject unrepresentable multicast TVLV offsets + (bsc#1012628). +- ipv6: seg6: clear IPv4 control block on IPIP decapsulation + (bsc#1012628). +- net/packet: defer vmalloc TX_RING free until skbs finish + (bsc#1012628). +- vlan: fix skb_under_panic and races when toggling HW VLAN + offload (bsc#1012628). +- net: bridge: mcast: fix use-after-free of a master VLAN's + multicast context (bsc#1012628). +- xfrm: bound nat keepalive state collection (bsc#1012628). +- xfrm: fix xfrm_state_construct() auth-trunc leak (bsc#1012628). +- xfrm: ah6: validate routing header segments_left (bsc#1012628). +- xfrm: avoid lock inversion in nat keepalive work (bsc#1012628). +- xfrm: drop ESP-in-TCP packets with no ingress device + (bsc#1012628). +- tcp: clamp route advmss to TCP_MIN_MSS (bsc#1012628). +- xfrm: espintcp: fix UAF during close (bsc#1012628). +- net: advertise TCP MSS from the configured MTU, not the learned + PMTU (bsc#1012628). +- net/tcp-ao: fix use-after-free of current_key on reconnect to + another peer (bsc#1012628). +- tcp: fix AO info use-after-free in tcp_ao_connect_init() + (bsc#1012628). +- net/tcp: fix TCP-AO key deletion in VRFs (bsc#1012628). +- gtp: serialize PDP context updates (bsc#1012628). +- tls: device: fix out-of-bounds write in tls_append_frag() + (bsc#1012628). +- KVM: SEV: Wire up kvm_x86_ops.gmem_xxx() if and only if + CONFIG_KVM_AMD_SEV=y (bsc#1012628). +- KVM: SEV: Mark vCPU RUNNABLE after AP_CREATE, even if VMSA is + unusable (bsc#1012628). +- KVM: SEV: Extract loading of guest-provided VMSA to a separate + helper (bsc#1012628). +- KVM: SEV: Track the GPA of the guest-controlled VMSA used for + SNP guests (bsc#1012628). +- KVM: SEV: Drop FOLL_WRITE for encrypted region registration + (bsc#1012628). +- KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on + SNP-enabled hosts (bsc#1012628). +- usb: gadget: f_tcm: keep port count until LUN teardown completes + (bsc#1012628). +- usb: usbtest: disable dynamic ID support (bsc#1012628). +- fuse: fix invalidate lock leak on open O_TRUNC DAX failure + (bsc#1012628). +- fuse: fix invalidate lock leak on setattr writeback failure + (bsc#1012628). +- fuse: wait for FR_FINISHED on abort_on_kill to prevent + use-after-free (bsc#1012628). +- fuse: publish io-uring queues with release semantics + (bsc#1012628). +- fuse: fix missing barrier when checking io-uring readiness + (bsc#1012628). +- fuse: fix race between interrupt and resend (bsc#1012628). +- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure + (bsc#1012628). +- xhci: dbgtty: Fix unregister on tty_register_driver() failure + (bsc#1012628). +- usb: xhci: bail out of setup if the controller is inaccessible + (bsc#1012628). +- usb: xhci: Handle USB3 port events when there is one roothub + (bsc#1012628). +- usb: xhci: Handle bogus TRB pointers in Missed Service Error + events (bsc#1012628). +- accessibility: speakup: unregister tty ldisc on later init + failures (bsc#1012628). +- fpga: dfl: fme: add error handling (bsc#1012628). +- selftests/bpf: Fix test_maps sockmap failure (bsc#1012628). +- nvme-tcp: fix usage of page_frag_cache (bsc#1012628). +- RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1012628). +- RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC + modify_qp (bsc#1012628). +- commit b337258 + +------------------------------------------------------------------- +Wed Sep 2 16:48:18 CEST 2026 - [email protected] + +- rpm/kernel-obs-build.spec.in: Add more nft modules for docker + nft_compat and nft_chain_nat this time. +- commit 50912bc + +------------------------------------------------------------------- +Tue Sep 1 16:42:04 CEST 2026 - [email protected] + +- config: Update armv6hl config files for 7.2 + From the 7.3 configs from the below commit merged using: + ./scripts/kconfig/merge_config.sh -m config-7.1 config-7.3 + (cherry picked from commit a1eacb59146415c72587ce7793cd62c6e13cea10) +- commit bace45b + +------------------------------------------------------------------- +Tue Sep 1 16:24:43 CEST 2026 - [email protected] + +- config: Update armv7hl config files for 7.2 + From the 7.3 configs from the below commit merged using: + ./scripts/kconfig/merge_config.sh -m config-7.1 config-7.3 + (cherry picked from commit f7622cd51c9c6b3c85364610ba9c5192ee0a1ac5) +- commit 9c0aa80 + +------------------------------------------------------------------- +Mon Aug 31 13:59:09 CEST 2026 - [email protected] + +- Update config files: enable AMD ISP4 camera driver (bsc#1277447) + Set CONFIG_VIDEO_AMD_ISP4_CAPTURE=m for x86_64 and i386 archs. + No other media platform drivers are enabled, so far. +- commit dcfc956 + +------------------------------------------------------------------- +Fri Aug 28 10:47:32 CEST 2026 - [email protected] + +- drm/qxl: fix use-after-free and NULL pointer deref + (bsc#1271081). +- commit a4d4168 + +------------------------------------------------------------------- +Fri Aug 28 08:55:47 CEST 2026 - [email protected] + +- Linux 7.2.2 (bsc#1012628). +- inet: frags: strip GSO state from fragments before reassembly + (bsc#1012628 CVE-2026-80590). +- commit 820247d + +------------------------------------------------------------------- +Thu Aug 27 19:28:59 CEST 2026 - [email protected] + +- Linux 7.2.1 (bsc#1012628). +- ptp: vmclock: prevent read-only mappings from becoming writable + (bsc#1012628). +- futex: Fix might_sleep() warning in futex_pivot_pending() + (bsc#1012628). +- Bluetooth: hci_aml: validate firmware segment lengths + (bsc#1012628). +- Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 + (bsc#1012628). +- Bluetooth: ISO: zero the sockaddr before returning it in getname + (bsc#1012628). +- Bluetooth: ISO: do not force BT_LISTEN after a failed BIG sync + (bsc#1012628). +- Bluetooth: hci_sync: Fix accept list UAF during suspend + (bsc#1012628). +- Bluetooth: hci_event: validate LE Set CIG Parameters response + (bsc#1012628). +- Bluetooth: hci_event: fix LE list UAF on reset (bsc#1012628). +- HID: input: read battery capacity from its actual report offset + (bsc#1012628). +- HID: hyperv: validate initial device info bounds (bsc#1012628). +- HID: uclogic: fix use-after-free of inrange_timer on remove + (bsc#1012628). +- HID: sensor: custom: Fix use-after-free in enable_sensor + (bsc#1012628). +- HID: ft260: fix stack-use-after-return write in I2C read race + (bsc#1012628). +- HID: core: fix number/pointer type confusion on long items + (bsc#1012628). +- HID: rapoo: fix missing hid_is_usb() check (bsc#1012628). +- HID: nintendo: stop device IO before hid_hw_stop on probe + failure (bsc#1012628). +- HID: nintendo: register input device after capabilities are set + (bsc#1012628). +- HID: nintendo: fix out-of-bounds read in + joycon_ctlr_read_handler() (bsc#1012628). +- HID: huawei: fix missing hid_is_usb() check (bsc#1012628). +- HID: asus: fix missing hid_is_usb() check (bsc#1012628). +- net/ionic: avoid OOB TX partner lookup for hwstamp RXQ + (bsc#1012628). +- HID: pidff: fix OOB write when hid->inputs is empty + (bsc#1012628). +- HID: core: fix OOB read of field->usage in hid_set_field() + (bsc#1012628). +- HID: magicmouse: do not keep a stale msc->input if no input + is claimed (bsc#1012628). +- HID: magicmouse: re-enable multitouch after reset-resume + (bsc#1012628). +- HID: magicmouse: prevent unbounded recursion in + magicmouse_raw_event() (bsc#1012628). +- HID: magicmouse: fix battery reporting for Bluetooth Magic + Trackpad USB-C (bsc#1012628). +- nvmet: pci-epf: put CQ ref on create_cq mapping failure + (bsc#1012628). +- nvmet: pci-epf: fix use-after-free in + nvmet_pci_epf_exec_iod_work() (bsc#1012628). +- nvmet-tcp: Do not WARN on remotely-controlled oversized SGL + allocations (bsc#1012628). +- nvmet-tcp: bound SGL data length before allocating command + buffers (bsc#1012628). +- nvmet-fc: fix invalid free in LS IOD error path (bsc#1012628). +- nvmet-auth: zero the AUTH_RECEIVE response buffer (bsc#1012628). +- dmaengine: fsl-edma: Add error handling for devm_kasprintf + (bsc#1012628). +- mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() + (bsc#1012628). +- ipv6: fix use-after-free in ip6_finish_output2() (bsc#1012628). +- ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1012628). +- nfc: nci: free destination parameters when closing a connection + (bsc#1012628). +- nfc: nci: fix uninit-value in the RF discover/activated NTF + handlers (bsc#1012628). +- nfc: nci: fix out-of-bounds write in nci_target_auto_activated() + (bsc#1012628). +- nfc: nci: add data_len bound checks to activation parameter + extractors (bsc#1012628). +- nfc: st21nfca: validate ATR_REQ length against the received + frame (bsc#1012628). +- nfc: pn533: purge fragmented skbs during cleanup (bsc#1012628). +- nfc: llcp: reject PDUs shorter than the LLCP header + (bsc#1012628). +- nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers + (bsc#1012628). +- nfc: llcp: bound the connect_sn TLV walk to the skb + (bsc#1012628). +- nfc: microread: validate target discovery payload lengths + (bsc#1012628). +- nfc: fdp: bound the device-reported read length and fix an + skb leak (bsc#1012628). +- nfc: digital: clamp SENSF_RES length to the destination buffer + (bsc#1012628). +- xfs: restore nofs context unconditionally in xfs_trans_roll + (bsc#1012628). +- xfs: validate attr entry pointer before field access + (bsc#1012628). +- ext4: fix incorrect function call when initializing s_resgid + (bsc#1012628). +- ext4: don't enable DAX on new encrypted files (bsc#1012628). ++++ 224449 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:Factory/.kernel-source.new.1265/kernel-lpae.changes --- /work/SRC/openSUSE:Factory/kernel-source/kernel-obs-build.changes 2026-08-30 19:07:04.312658106 +0200 +++ /work/SRC/openSUSE:Factory/.kernel-source.new.1265/kernel-obs-build.changes 2026-09-07 11:29:00.047318914 +0200 @@ -1,0 +2,188 @@ +Thu Sep 3 07:42:23 CEST 2026 - [email protected] + +- Update + patches.kernel.org/7.2.1-083-ptp-vmclock-prevent-read-only-mappings-from-bec.patch + (bsc#1012628 CVE-2026-80724 bsc#1277850). +- Update + patches.kernel.org/7.2.2-001-inet-frags-strip-GSO-state-from-fragments-befor.patch + (bsc#1012628 CVE-2026-80590 bsc#1277275). + suse-add-cves +- commit 263d925 + +------------------------------------------------------------------- +Thu Sep 3 06:23:43 CEST 2026 - [email protected] + +- Update config files. +- commit a590eb7 + +------------------------------------------------------------------- +Thu Sep 3 06:21:51 CEST 2026 - [email protected] + +- Update config files. +- commit f305596 + +------------------------------------------------------------------- +Thu Sep 3 06:17:25 CEST 2026 - [email protected] + +- Linux 7.2.3 (bsc#1012628). +- usb: usbfs: fix use-after-free of usb_device in usbdev_release() + (bsc#1012628). +- wifi: mt76: mt7925: ensure tx headroom in + usb_sdio_tx_prepare_skb (bsc#1012628). +- USB: c67x00: fix use-after-free in c67x00_add_iso_urb() + (bsc#1012628). +- USB: serial: spcp8x5: drop broken carrier detect support + (bsc#1012628). +- USB: serial: option: fix slab OOB read in interrupt URB callback + (bsc#1012628). +- ALSA: usb-audio: Complete cleanup after system-resume errors + (bsc#1012628). +- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() + (bsc#1012628). +- ALSA: usb-audio: Fix sample rates for PreSonus AudioBox USB + (bsc#1012628). +- usb: core: Strengthen error handling in hub_hub_status() + (bsc#1012628). +- usb: core: Add lock to usb_wakeup_notification() (bsc#1012628). +- KVM: s390: vsie: zero stale crypto bits (bsc#1012628). +- crypto: qce - Remove unsafe/deprecated algorithms (bsc#1012628). +- crypto: mxs-dcp - fix source scatterlist length access + (bsc#1012628). +- crypto: iaa - fall back to software for multi-entry scatterlists + (bsc#1012628). +- crypto: qce - fix CCM AAD buffer underallocation (bsc#1012628). +- crypto: krb5 - use kfree_sensitive() for derived key buffers + (bsc#1012628). +- crypto: atmel-tdes - use scatterlist length before DMA mapping + (bsc#1012628). +- crypto: sun8i-ss - Remove crypto_rng interface (bsc#1012628). +- crypto: sun8i-ce - Remove crypto_rng interface (bsc#1012628). +- crypto: qcom-rng - Allow zero as a random number (bsc#1012628). +- crypto: qcom-rng - Remove crypto_rng interface (bsc#1012628). +- crypto: qcom-rng - Enable clock in hwrng case (bsc#1012628). +- crypto: virtio - bound the akcipher result length (bsc#1012628). +- kunit: irq: Continue increasing hrtimer interval for longer + (bsc#1012628). +- mm/swap: reject swapon() on filesystem-level encrypted files + (bsc#1012628). +- netfilter: nf_tables: don't queue packet path object + notifications (bsc#1012628). +- netfilter: nft_set_pipapo_avx2: add missing vzeroupper + (bsc#1012628). +- vxlan: keep the last remote linked during FDB flush + (bsc#1012628). +- batman-adv: reject unrepresentable multicast TVLV offsets + (bsc#1012628). +- ipv6: seg6: clear IPv4 control block on IPIP decapsulation + (bsc#1012628). +- net/packet: defer vmalloc TX_RING free until skbs finish + (bsc#1012628). +- vlan: fix skb_under_panic and races when toggling HW VLAN + offload (bsc#1012628). +- net: bridge: mcast: fix use-after-free of a master VLAN's + multicast context (bsc#1012628). +- xfrm: bound nat keepalive state collection (bsc#1012628). +- xfrm: fix xfrm_state_construct() auth-trunc leak (bsc#1012628). +- xfrm: ah6: validate routing header segments_left (bsc#1012628). +- xfrm: avoid lock inversion in nat keepalive work (bsc#1012628). +- xfrm: drop ESP-in-TCP packets with no ingress device + (bsc#1012628). +- tcp: clamp route advmss to TCP_MIN_MSS (bsc#1012628). +- xfrm: espintcp: fix UAF during close (bsc#1012628). +- net: advertise TCP MSS from the configured MTU, not the learned + PMTU (bsc#1012628). +- net/tcp-ao: fix use-after-free of current_key on reconnect to + another peer (bsc#1012628). +- tcp: fix AO info use-after-free in tcp_ao_connect_init() + (bsc#1012628). +- net/tcp: fix TCP-AO key deletion in VRFs (bsc#1012628). +- gtp: serialize PDP context updates (bsc#1012628). +- tls: device: fix out-of-bounds write in tls_append_frag() + (bsc#1012628). +- KVM: SEV: Wire up kvm_x86_ops.gmem_xxx() if and only if + CONFIG_KVM_AMD_SEV=y (bsc#1012628). +- KVM: SEV: Mark vCPU RUNNABLE after AP_CREATE, even if VMSA is + unusable (bsc#1012628). +- KVM: SEV: Extract loading of guest-provided VMSA to a separate + helper (bsc#1012628). +- KVM: SEV: Track the GPA of the guest-controlled VMSA used for + SNP guests (bsc#1012628). +- KVM: SEV: Drop FOLL_WRITE for encrypted region registration + (bsc#1012628). +- KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on + SNP-enabled hosts (bsc#1012628). +- usb: gadget: f_tcm: keep port count until LUN teardown completes + (bsc#1012628). +- usb: usbtest: disable dynamic ID support (bsc#1012628). +- fuse: fix invalidate lock leak on open O_TRUNC DAX failure + (bsc#1012628). +- fuse: fix invalidate lock leak on setattr writeback failure + (bsc#1012628). +- fuse: wait for FR_FINISHED on abort_on_kill to prevent + use-after-free (bsc#1012628). +- fuse: publish io-uring queues with release semantics + (bsc#1012628). +- fuse: fix missing barrier when checking io-uring readiness + (bsc#1012628). +- fuse: fix race between interrupt and resend (bsc#1012628). +- xhci: dbgtty: Fix unregister on tty_alloc_driver() failure + (bsc#1012628). +- xhci: dbgtty: Fix unregister on tty_register_driver() failure + (bsc#1012628). +- usb: xhci: bail out of setup if the controller is inaccessible + (bsc#1012628). +- usb: xhci: Handle USB3 port events when there is one roothub + (bsc#1012628). +- usb: xhci: Handle bogus TRB pointers in Missed Service Error + events (bsc#1012628). +- accessibility: speakup: unregister tty ldisc on later init + failures (bsc#1012628). +- fpga: dfl: fme: add error handling (bsc#1012628). +- selftests/bpf: Fix test_maps sockmap failure (bsc#1012628). +- nvme-tcp: fix usage of page_frag_cache (bsc#1012628). +- RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1012628). +- RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC + modify_qp (bsc#1012628). +- commit b337258 + +------------------------------------------------------------------- +Wed Sep 2 16:48:18 CEST 2026 - [email protected] + +- rpm/kernel-obs-build.spec.in: Add more nft modules for docker + nft_compat and nft_chain_nat this time. +- commit 50912bc + +------------------------------------------------------------------- +Tue Sep 1 16:42:04 CEST 2026 - [email protected] + +- config: Update armv6hl config files for 7.2 + From the 7.3 configs from the below commit merged using: + ./scripts/kconfig/merge_config.sh -m config-7.1 config-7.3 + (cherry picked from commit a1eacb59146415c72587ce7793cd62c6e13cea10) +- commit bace45b + +------------------------------------------------------------------- +Tue Sep 1 16:24:43 CEST 2026 - [email protected] + +- config: Update armv7hl config files for 7.2 + From the 7.3 configs from the below commit merged using: + ./scripts/kconfig/merge_config.sh -m config-7.1 config-7.3 + (cherry picked from commit f7622cd51c9c6b3c85364610ba9c5192ee0a1ac5) +- commit 9c0aa80 + +------------------------------------------------------------------- +Mon Aug 31 13:59:09 CEST 2026 - [email protected] + +- Update config files: enable AMD ISP4 camera driver (bsc#1277447) + Set CONFIG_VIDEO_AMD_ISP4_CAPTURE=m for x86_64 and i386 archs. + No other media platform drivers are enabled, so far. +- commit dcfc956 + +------------------------------------------------------------------- +Fri Aug 28 10:47:32 CEST 2026 - [email protected] + +- drm/qxl: fix use-after-free and NULL pointer deref + (bsc#1271081). +- commit a4d4168 + +------------------------------------------------------------------- kernel-obs-qa.changes: same change kernel-pae.changes: same change kernel-source.changes: same change kernel-syms.changes: same change kernel-vanilla.changes: same change kernel-zfcpdump.changes: same change New: ---- kernel-lpae.changes kernel-lpae.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dtb-aarch64.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.353890781 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.355890851 +0200 @@ -17,7 +17,7 @@ %define srcversion 7.2 -%define patchversion 7.2.2 +%define patchversion 7.2.3 %define variant %{nil} %include %_sourcedir/kernel-spec-macros @@ -25,9 +25,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: dtb-aarch64 -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif dtb-armv6l.spec: same change dtb-armv7l.spec: same change dtb-riscv64.spec: same change ++++++ kernel-64kb.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.474895025 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.476895095 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.2 -%define patchversion 7.2.2 -%define git_commit 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%define patchversion 7.2.3 +%define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-64kb -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif ++++++ kernel-default.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.508896217 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.510896287 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.2 -%define patchversion 7.2.2 -%define git_commit 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%define patchversion 7.2.3 +%define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-default -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif @@ -98,7 +98,7 @@ # Remove some packages that are installed automatically by the build system, # but are not needed to build the kernel #!BuildIgnore: autoconf automake gettext-runtime libtool cvs gettext-tools udev insserv -ExclusiveArch: aarch64 %ix86 ppc64le riscv64 s390x x86_64 +ExclusiveArch: aarch64 armv6hl armv7hl %ix86 ppc64le riscv64 s390x x86_64 %ifarch %ix86 x86_64 %define image vmlinuz ++++++ kernel-docs.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.538897269 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.540897339 +0200 @@ -17,8 +17,8 @@ %define srcversion 7.2 -%define patchversion 7.2.2 -%define git_commit 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%define patchversion 7.2.3 +%define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %define build_html 1 %define build_pdf 0 @@ -28,9 +28,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-docs -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif ++++++ kernel-kvmsmall.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.564898181 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.566898251 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.2 -%define patchversion 7.2.2 -%define git_commit 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%define patchversion 7.2.3 +%define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-kvmsmall -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif ++++++ kernel-lpae.spec ++++++ # # spec file for package kernel-lpae # # Copyright (c) 2026 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via https://bugs.opensuse.org/ # # needssslcertforbuild %define srcversion 7.2 %define patchversion 7.2.3 %define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz %define livepatch livepatch%{nil} %define livepatch_rt %{nil} %define sb_efi_only 0 %define split_base 0 %define split_optional 0 %define supported_modules_check 0 %define build_flavor lpae %define generate_compile_commands 1 %define use_suse_kabi_tools 1 %define gcc_package gcc %define gcc_compiler gcc %include %_sourcedir/kernel-spec-macros %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-lpae Version: 7.2.3 %if 0%{?is_kotd} Release: <RELEASE>.g263d925 %else Release: 0 %endif Summary: Kernel for LPAE enabled systems License: GPL-2.0-only Group: System/Kernel URL: https://www.kernel.org/ %if 0%{?suse_version} > 1500 || 0%{?sle_version} > 150300 BuildRequires: bash-sh %endif BuildRequires: bc BuildRequires: bison BuildRequires: coreutils BuildRequires: fdupes BuildRequires: flex # Cannot test %%CONFIG_GCC_PLUGINS here because the buildservice parser # does not expand %%(...) %if "%build_flavor" == "syzkaller" # Needed by scripts/gcc-plugin.sh BuildRequires: %gcc_package-c++ BuildRequires: %gcc_package-devel %endif BuildRequires: hmaccalc BuildRequires: libopenssl-devel BuildRequires: modutils BuildRequires: python3-base # Used to sign the kernel in the buildservice BuildRequires: openssl BuildRequires: pesign-obs-integration %if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150300 # pahole for CONFIG_DEBUG_INFO_BTF BuildRequires: dwarves >= 1.22 %endif BuildRequires: %gcc_package # for objtool BuildRequires: libelf-devel # part of elfutils not shipped on SLE 12 %if 0%{?suse_version} >= 1500 # for gendwarfksyms BuildRequires: libdw-devel %endif # required for 50-check-kernel-build-id rpm check BuildRequires: elfutils %ifarch %arm BuildRequires: u-boot-tools %endif %if %use_suse_kabi_tools BuildRequires: suse-kabi-tools %endif # Do not install p-b and dracut for the install check, the %post script is # able to handle this #!BuildIgnore: perl-Bootloader dracut distribution-release suse-kernel-rpm-scriptlets # Remove some packages that are installed automatically by the build system, # but are not needed to build the kernel #!BuildIgnore: autoconf automake gettext-runtime libtool cvs gettext-tools udev insserv ExclusiveArch: armv7hl %ifarch %ix86 x86_64 %define image vmlinuz %endif %ifarch ppc ppc64 ppc64le %define image vmlinux %endif %ifarch s390 s390x %define image image %endif %ifarch %arm %define image zImage %endif %ifarch aarch64 riscv64 %define image Image %endif %ifarch %ix86 x86_64 %define install_vdso 1 %if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150500 %define separate_vdso 1 %endif %else %define install_vdso 0 %endif %define build_default ("%build_flavor" == "default") %define build_vanilla ("%build_flavor" == "vanilla") %define vanilla_only %{lua: if (rpm.expand("%variant") == "-vanilla") then print(1) else print(0) end} %if ! %build_vanilla %define src_install_dir /usr/src/linux-%kernelrelease%variant %else %define src_install_dir /usr/src/linux-%kernelrelease-vanilla %endif %define obj_install_dir /usr/src/linux-%kernelrelease%variant-obj %define rpm_install_dir %buildroot%obj_install_dir %define kernel_build_dir %my_builddir/linux-%srcversion/linux-obj %define modules_dir %kernel_module_directory/%kernelrelease-%build_flavor %global cpu_arch %(%_sourcedir/arch-symbols %_target_cpu) %define cpu_arch_flavor %cpu_arch/%build_flavor %if 0%{?_project:1} && ( %(echo %_project | grep -Ex -f %_sourcedir/release-projects | grep -vc ^PTF) || %(echo %_project | grep -Ec "^(Devel:)?Kernel:") ) %define klp_ipa_clones 1 %endif # Define some CONFIG variables as rpm macros as well. (rpm cannot handle # defining them all at once.) %define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_MODULE_SIG_HASH CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES CONFIG_DEBUG_INFO_BTF_MODULES CONFIG_PREEMPT_DYNAMIC %{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)} %define split_extra ("%CONFIG_MODULES" == "y" && "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y") %if "%CONFIG_MODULES" != "y" %define klp_ipa_clones 0 %endif %global certs %( space="" ; for f in %_sourcedir/*.crt; do \ if ! test -e "$f"; then \ continue \ fi \ h=$(openssl x509 -inform PEM -fingerprint -noout -in "$f") \ if [ -z "$h" ] ; then \ echo Cannot parse "$f" >&2 \ confinue \ fi \ cert=$(echo "$h" | sed -rn 's/^SHA1 Fingerprint=//; T; s/://g; s/(.{8}).*/\\1/p') \ echo Found signing certificate "$f" "($cert)" >&2 \ cat "$f" >>%_sourcedir/.kernel_signing_key.pem \ mkdir -p %_sourcedir/.kernel_signing_certs \ openssl x509 -inform PEM -in "$f" -outform DER -out %_sourcedir/.kernel_signing_certs/"$cert".crt \ echo -n "$space$cert" ; space=" " \ done ) Source0: https://www.kernel.org/pub/linux/kernel/v7.x/linux-%srcversion.tar.xz Source3: kernel-source.rpmlintrc Source14: series.conf Source16: guards Source17: apply-patches Source19: kernel-binary-conflicts Source20: obsolete-kmps Source21: config.conf Source23: supported.conf Source33: check-for-config-changes Source35: group-source-files.pl Source36: README.PATCH-POLICY.SUSE Source37: README.SUSE Source38: README.KSYMS Source40: source-timestamp Source46: split-modules Source47: modversions Source48: macros.kernel-source Source49: kernel-module-subpackage Source50: kabi.pl Source52: kernel-source%variant.changes Source57: kernel-cert-subpackage Source60: config.sh Source63: arch-symbols Source65: kernel-spec-macros Source75: release-projects Source76: check-module-license Source78: modules.fips Source79: splitflist Source80: mergedep Source81: moddep Source82: modflist Source83: kernel-subpackage-build Source84: kernel-subpackage-spec Source85: kernel-default-base.spec.txt Source86: old_changelog.txt Source100: config.tar.bz2 Source101: config.addon.tar.bz2 Source102: patches.arch.tar.bz2 Source103: patches.drivers.tar.bz2 Source104: patches.fixes.tar.bz2 Source105: patches.rpmify.tar.bz2 Source106: patches.suse.tar.bz2 Source108: patches.addon.tar.bz2 Source109: patches.kernel.org.tar.bz2 Source110: patches.apparmor.tar.bz2 Source111: patches.rt.tar.bz2 Source113: patches.kabi.tar.bz2 Source114: patches.drm.tar.bz2 Source120: kabi.tar.bz2 Source121: sysctl.tar.bz2 # These files are found in the kernel-source package: NoSource: 0 NoSource: 3 NoSource: 14 NoSource: 16 NoSource: 17 NoSource: 19 NoSource: 20 NoSource: 21 NoSource: 23 NoSource: 33 NoSource: 35 NoSource: 36 NoSource: 37 NoSource: 38 NoSource: 40 NoSource: 46 NoSource: 47 NoSource: 48 NoSource: 49 NoSource: 50 NoSource: 52 NoSource: 57 NoSource: 60 NoSource: 63 NoSource: 65 NoSource: 75 NoSource: 76 NoSource: 78 NoSource: 79 NoSource: 80 NoSource: 81 NoSource: 82 NoSource: 83 NoSource: 84 NoSource: 85 NoSource: 86 NoSource: 100 NoSource: 101 NoSource: 102 NoSource: 103 NoSource: 104 NoSource: 105 NoSource: 106 NoSource: 108 NoSource: 109 NoSource: 110 NoSource: 111 NoSource: 113 NoSource: 114 NoSource: 120 NoSource: 121 %ifarch %ix86 # Only i386/default supports i586, mark other flavors' packages as i686 %if ! %build_default BuildArch: i686 %endif %endif # Force bzip2 instead of lzma compression to # 1) allow install on older dist versions, and # 2) decrease build times (bsc#962356 boo#1175882) %define _binary_payload w9.bzdio # Do not recompute the build-id of vmlinux in find-debuginfo.sh (bsc#964063) %undefine _unique_build_ids %define _no_recompute_build_ids 1 # prevent usr/lib/debug/boot/vmlinux-4.12.14-11.10-default-4.12.14-11.10.ppc64le.debug %undefine _unique_debug_names %if "%{compress_modules}" == "zstd" BuildRequires: zstd # Make sure kmod supports zstd compressed modules Requires(post): kmod-zstd %endif Provides: %name = %version-%source_rel # bnc#901925 Provides: %name-%version-%source_rel Provides: %{name}_%_target_cpu = %version-%source_rel Provides: kernel-base = %version-%source_rel Provides: multiversion(kernel) # In SLE11, kernel-$flavor complemented kernel-$flavor-base. With SLE12, # kernel-$flavor itself contains all the needed files and kernel-$flavor-base # is a subset that can replace kernel-$flavor in some scenarios. We need to # obsolete the -base subpackage from SLE11, so that the base files are not # owned by multiple packages now. The dependency is not correct wrt openSUSE # 11.2 - 11.4, but we primarily care about the supported upgrade path. Obsoletes: %name-base < 3.1 %if ("%build_flavor" != "kvmsmall") && ("%build_flavor" != "azure") Recommends: kernel-firmware %endif # The following is copied to the -base subpackage as well # BEGIN COMMON DEPS Requires(pre): suse-kernel-rpm-scriptlets Requires(post): suse-kernel-rpm-scriptlets Requires: suse-kernel-rpm-scriptlets Requires(preun): suse-kernel-rpm-scriptlets Requires(postun): suse-kernel-rpm-scriptlets Requires(pre): coreutils awk # For /usr/lib/module-init-tools/weak-modules2 and /usr/lib/modprobe.d/*.conf Requires(post): suse-module-tools Requires: suse-module-tools # For depmod (modutils is a dependency provided by both module-init-tools and # kmod-compat) Requires(post): modutils # Use OrderWithRequires to instruct the package manager to schedule the # installation of bootloader and dracut related tools as if they were # required. This will ensure they're there for post scripts without hard # requiring them. (boo#1228659, boo#1240785) # But OrderWithRequires is not correctly implemented (bsc#1241513, bsc#1241353) # Workaround: Add extra suggests for the ordered package OrderWithRequires(post): udev Suggests: udev OrderWithRequires(post): systemd-boot Suggests: systemd-boot OrderWithRequires(post): perl-Bootloader Suggests: perl-Bootloader OrderWithRequires(post): update-bootloader Suggests: update-bootloader OrderWithRequires(post): dracut Suggests: dracut # Install the package providing /etc/SuSE-release early enough, so that # the grub entry has correct title (bnc#757565) Requires(post): distribution-release %if %{usrmerged} # make sure we have a post-usrmerge system Conflicts: filesystem < 16 %endif Obsoletes: microcode_ctl < 1.18 %{lua: fd, err = io.open(rpm.expand('%_sourcedir') .. '/kernel-binary-conflicts') if not fd then io.stderr:write(err) end unpack = table.unpack or unpack for l in fd:lines() do if #l > 0 and l:sub(1,1) ~= '#' then words = {} ; for w in l:gmatch("([^%s]+)%s*") do table.insert(words, w) end package, version = unpack(words) print('Conflicts: ' .. package .. ' < '.. version .. '\n') end end fd:close() } %ifarch %ix86 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel Provides: kernel-%build_flavor-base-srchash-%git_commit Provides: kernel-srchash-%git_commit # END COMMON DEPS Provides: %name-srchash-%git_commit %obsolete_rebuilds %name %define kmp_target_cpu %_target_cpu %ifarch %ix86 # KMPs are always built as i586, because rpm does not allow to build # subpackages for different architectures. Therefore, we change the # /usr/src/linux-obj/<arch> symlink to i586. %define kmp_target_cpu i586 %endif %if %build_default %if "%CONFIG_PREEMPT_DYNAMIC" == "y" Provides: kernel-preempt = %version-%release Provides: kernel-preempt_%_target_cpu = %version-%source_rel %endif %endif %{lua: fd, err = io.open(rpm.expand('%_sourcedir') .. '/obsolete-kmps') if not fd then io.stderr:write(err) end unpack = table.unpack or unpack for l in fd:lines() do if #l > 0 and l:sub(1,1) ~= '#' then words = {} ; for w in l:gmatch("([^%s]+)%s*") do table.insert(words, w) end package, version = unpack(words) print('Obsoletes: ' .. package .. '-kmp-' .. rpm.expand('%build_flavor') .. ' <= '.. version .. '\n') print('Provides: ' .. package .. '-kmp = ' .. version .. '.1\n') print('Provides: ' .. package .. '-kmp-' .. rpm.expand('%build_flavor') .. ' = '.. version .. '.1\n') end end fd:close() } %description The kernel for all 32-bit ARM platforms that support LPAE. This includes all Cortex A15 based SoCs, like the Exynos5, OMAP5 or Calxeda ECX-2000. %source_timestamp %pre %if "%build_flavor" != "zfcpdump" %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-pre --name "%name" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %endif %post %if "%build_flavor" != "zfcpdump" %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-post --name "%name" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %endif %preun %if "%build_flavor" != "zfcpdump" %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-preun --name "%name" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %endif %postun %if "%build_flavor" != "zfcpdump" %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-postun --name "%name" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %endif %posttrans %if "%build_flavor" != "zfcpdump" %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-posttrans --name "%name" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %endif %files -f kernel-main.files %if "%CONFIG_MODULES" == "y" && %split_base %package base Summary: Kernel for LPAE enabled systems - base modules Group: System/Kernel Url: http://www.kernel.org/ Provides: kernel-base = %version-%source_rel Provides: multiversion(kernel) Conflicts: %name = %version-%source_rel Requires(pre): suse-kernel-rpm-scriptlets Requires(post): suse-kernel-rpm-scriptlets Requires: suse-kernel-rpm-scriptlets Requires(preun): suse-kernel-rpm-scriptlets Requires(postun): suse-kernel-rpm-scriptlets Requires(pre): coreutils awk # For /usr/lib/module-init-tools/weak-modules2 and /usr/lib/modprobe.d/*.conf Requires(post): suse-module-tools Requires: suse-module-tools # For depmod (modutils is a dependency provided by both module-init-tools and # kmod-compat) Requires(post): modutils # Use OrderWithRequires to instruct the package manager to schedule the # installation of bootloader and dracut related tools as if they were # required. This will ensure they're there for post scripts without hard # requiring them. (boo#1228659, boo#1240785) # But OrderWithRequires is not correctly implemented (bsc#1241513, bsc#1241353) # Workaround: Add extra suggests for the ordered package OrderWithRequires(post): udev Suggests: udev OrderWithRequires(post): systemd-boot Suggests: systemd-boot OrderWithRequires(post): perl-Bootloader Suggests: perl-Bootloader OrderWithRequires(post): update-bootloader Suggests: update-bootloader OrderWithRequires(post): dracut Suggests: dracut # Install the package providing /etc/SuSE-release early enough, so that # the grub entry has correct title (bnc#757565) Requires(post): distribution-release %if %{usrmerged} # make sure we have a post-usrmerge system Conflicts: filesystem < 16 %endif Obsoletes: microcode_ctl < 1.18 %{lua: fd, err = io.open(rpm.expand('%_sourcedir') .. '/kernel-binary-conflicts') if not fd then io.stderr:write(err) end unpack = table.unpack or unpack for l in fd:lines() do if #l > 0 and l:sub(1,1) ~= '#' then words = {} ; for w in l:gmatch("([^%s]+)%s*") do table.insert(words, w) end package, version = unpack(words) print('Conflicts: ' .. package .. ' < '.. version .. '\n') end end fd:close() } %ifarch %ix86 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel Provides: kernel-%build_flavor-base-srchash-%git_commit Provides: kernel-srchash-%git_commit %obsolete_rebuilds %name-base %ifarch %ix86 Conflicts: libc.so.6()(64bit) %endif %description base The kernel for all 32-bit ARM platforms that support LPAE. This includes all Cortex A15 based SoCs, like the Exynos5, OMAP5 or Calxeda ECX-2000. This package contains only the base modules, required in all installs. %source_timestamp %pre base %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-pre --name "%name-base" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %post base %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-post --name "%name-base" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %preun base %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-preun --name "%name-base" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %postun base %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-postun --name "%name-base" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %posttrans base %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/rpm-posttrans --name "%name-base" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %files base -f kernel-base.files %endif %package extra Summary: Kernel for LPAE enabled systems - Unsupported kernel modules Group: System/Kernel URL: https://www.kernel.org/ Provides: %name-extra_%_target_cpu = %version-%source_rel Provides: kernel-extra = %version-%source_rel Provides: multiversion(kernel) Requires: %{name}_%_target_cpu = %version-%source_rel Requires(pre): coreutils awk Requires(post): modutils Requires(post): perl-Bootloader Requires(post): dracut %obsolete_rebuilds %name-extra Supplements: packageand(product(SLED):%{name}_%_target_cpu) Supplements: packageand(product(sle-we):%{name}_%_target_cpu) Supplements: packageand(product(Leap):%{name}_%_target_cpu) %ifarch %ix86 Conflicts: libc.so.6()(64bit) %endif %if %build_default %if "%CONFIG_PREEMPT_DYNAMIC" == "y" Provides: kernel-preempt-extra = %version-%release Provides: kernel-preempt-extra_%_target_cpu = %version-%source_rel %endif %endif %description extra The kernel for all 32-bit ARM platforms that support LPAE. This includes all Cortex A15 based SoCs, like the Exynos5, OMAP5 or Calxeda ECX-2000. This package contains additional modules not supported by SUSE. %source_timestamp %pre extra %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-pre --name "%name-extra" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %post extra %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-post --name "%name-extra" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %preun extra %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-preun --name "%name-extra" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %postun extra %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-postun --name "%name-extra" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %posttrans extra %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-posttrans --name "%name-extra" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %if %split_extra %files extra -f kernel-extra.files %endif %if %split_extra && %split_optional %package optional Summary: Kernel for LPAE enabled systems - Optional kernel modules Group: System/Kernel URL: https://www.kernel.org/ Provides: %name-optional_%_target_cpu = %version-%source_rel Provides: kernel-optional = %version-%source_rel Provides: multiversion(kernel) Requires: %name-extra_%_target_cpu = %version-%source_rel Requires(pre): coreutils awk Requires(post): modutils Requires(post): perl-Bootloader Requires(post): dracut %obsolete_rebuilds %name-optional Supplements: packageand(product(Leap):%{name}_%_target_cpu) %ifarch %ix86 Conflicts: libc.so.6()(64bit) %endif %if %build_default %if "%CONFIG_PREEMPT_DYNAMIC" == "y" Provides: kernel-preempt-optional = %version-%release Provides: kernel-preempt-optional_%_target_cpu = %version-%source_rel %endif %endif %description optional The kernel for all 32-bit ARM platforms that support LPAE. This includes all Cortex A15 based SoCs, like the Exynos5, OMAP5 or Calxeda ECX-2000. This package contains optional modules only for openSUSE Leap. %source_timestamp %pre optional %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-pre --name "%name-optional" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %post optional %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-post --name "%name-optional" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %preun optional %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-preun --name "%name-optional" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %postun optional %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-postun --name "%name-optional" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %posttrans optional %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-posttrans --name "%name-optional" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %files optional -f kernel-optional.files %endif %if "%CONFIG_KMSG_IDS" == "y" %package man Summary: The collection of man pages generated by the kmsg script Group: System/Kernel %description man This package includes the man pages that have been generated from the kmsg message documentation comments. %source_timestamp %files man /usr/share/man/man9/* %endif %if 0%{?separate_vdso} %package vdso Summary: vdso binaries for debugging purposes Group: System/Kernel %description vdso This package includes the vdso binaries. They can be used for debugging. The actual binary linked to the programs is loaded from the in-memory image, not from this package. %source_timestamp %files vdso %dir %modules_dir %modules_dir/vdso/ %endif %package devel Summary: Development files necessary for building kernel modules Group: Development/Sources Provides: %name-devel = %version-%source_rel Provides: multiversion(kernel) %if ! %build_vanilla && ! %vanilla_only Requires: kernel-devel%variant = %version-%source_rel Requires: pesign-obs-integration Recommends: make Recommends: gcc Recommends: perl # for objtool Requires: libelf-devel Supplements: packageand(%name:kernel-devel%variant) %else Requires: kernel-source-vanilla = %version-%source_rel Supplements: packageand(%name:kernel-source-vanilla) %endif %if "%{compress_modules}" == "zstd" Requires: zstd %endif %if "%CONFIG_DEBUG_INFO_BTF_MODULES" == "y" Requires: dwarves >= 1.22 %endif %if %build_default %if "%CONFIG_PREEMPT_DYNAMIC" == "y" Provides: kernel-preempt-devel = %version-%release %endif %endif Requires: %gcc_package %obsolete_rebuilds %name-devel PreReq: coreutils %description devel This package contains files necessary for building kernel modules (and kernel module packages) against the %build_flavor flavor of the kernel. %source_timestamp %if "%CONFIG_MODULES" == "y" %pre devel # handle update from an older kernel-source with linux-obj as symlink if [ -h /usr/src/linux-obj ]; then rm -vf /usr/src/linux-obj fi %post devel %relink_function relink ../../linux-%{kernelrelease}%{variant}-obj/"%cpu_arch_flavor" /usr/src/linux-obj/"%cpu_arch_flavor" %files devel -f kernel-devel.files %dir /usr/src/linux-obj %dir /usr/src/linux-obj/%cpu_arch %ghost /usr/src/linux-obj/%cpu_arch_flavor %if %generate_compile_commands %exclude %obj_install_dir/%cpu_arch_flavor/compile_commands.json %endif %if "%kmp_target_cpu" != "%cpu_arch" %obj_install_dir/%kmp_target_cpu /usr/src/linux-obj/%kmp_target_cpu %endif %if "%livepatch" != "" && "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" && (("%variant" == "" && %build_default) || ("%build_flavor" == "rt" && 0%livepatch_rt)) %if "%livepatch" == "kgraft" %define patch_package %{livepatch}-patch %else %define patch_package kernel-%{livepatch} %endif %package %{livepatch} Summary: Metapackage to pull in matching %patch_package package Group: System/Kernel Requires: %{patch_package}-%(echo %{version}-%{source_rel} | sed 'y/\./_/')-%{build_flavor} Provides: multiversion(kernel) %if "%variant" != "-rt" Provides: kernel-default-kgraft = %version Provides: kernel-xen-kgraft = %version %if "%livepatch" != "kgraft" Obsoletes: kernel-default-kgraft < %version Obsoletes: kernel-xen-kgraft < %version %endif %endif %description %{livepatch} This is a metapackage that pulls in the matching %patch_package package for a given kernel version. The advantage of the metapackage is that its name is static, unlike the %{patch_package}-<kernel-version>-flavor package names. %files %{livepatch} # rpmlint complains about empty packages, so lets own something %dir %modules_dir %endif %if 0%{?klp_ipa_clones} && "%livepatch" != "" && "%CONFIG_LIVEPATCH_IPA_CLONES" == "y" %package %{livepatch}-devel Summary: Kernel symbols file used during kGraft patch development Group: System/Kernel %description %{livepatch}-devel This package brings ipa-clones files, which are used to to track set of functions where a code from another function can eventually occur. %files %{livepatch}-devel -f livepatch-files %endif %if "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" %package -n cluster-md-kmp-%build_flavor Summary: Clustering support for MD devices Group: System/Kernel Requires: %name = %version-%source_rel Provides: cluster-md-kmp = %version-%source_rel Provides: multiversion(kernel) # tell weak-modules2 to ignore this package Provides: kmp_in_kernel Requires(post): suse-module-tools >= 12.4 %if %build_default %if "%CONFIG_PREEMPT_DYNAMIC" == "y" Provides: cluster-md-kmp-preempt = %version-%release %endif %endif Enhances: %name Supplements: packageand(%name:cluster-md-kmp-%build_flavor) Requires: dlm-kmp-%build_flavor = %version-%release %description -n cluster-md-kmp-%build_flavor Clustering support for MD devices. This enables locking and synchronization across multiple systems on the cluster, so all nodes in the cluster can access the MD devices simultaneously. %pre -n cluster-md-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-pre --name "cluster-md-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %post -n cluster-md-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-post --name "cluster-md-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %preun -n cluster-md-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-preun --name "cluster-md-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %postun -n cluster-md-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-postun --name "cluster-md-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %posttrans -n cluster-md-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-posttrans --name "cluster-md-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %files -n cluster-md-kmp-%build_flavor -f cluster-md-kmp.files %package -n dlm-kmp-%build_flavor Summary: DLM kernel modules Group: System/Kernel Requires: %name = %version-%source_rel Provides: dlm-kmp = %version-%source_rel Provides: multiversion(kernel) # tell weak-modules2 to ignore this package Provides: kmp_in_kernel Requires(post): suse-module-tools >= 12.4 %if %build_default %if "%CONFIG_PREEMPT_DYNAMIC" == "y" Provides: dlm-kmp-preempt = %version-%release %endif %endif Enhances: %name Supplements: packageand(%name:dlm-kmp-%build_flavor) %description -n dlm-kmp-%build_flavor DLM stands for Distributed Lock Manager, a means to synchronize access to shared resources over the cluster. %pre -n dlm-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-pre --name "dlm-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %post -n dlm-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-post --name "dlm-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %preun -n dlm-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-preun --name "dlm-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %postun -n dlm-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-postun --name "dlm-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %posttrans -n dlm-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-posttrans --name "dlm-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %files -n dlm-kmp-%build_flavor -f dlm-kmp.files %package -n gfs2-kmp-%build_flavor Summary: GFS2 kernel modules Group: System/Kernel Requires: %name = %version-%source_rel Provides: gfs2-kmp = %version-%source_rel Provides: multiversion(kernel) # tell weak-modules2 to ignore this package Provides: kmp_in_kernel Requires(post): suse-module-tools >= 12.4 %if %build_default %if "%CONFIG_PREEMPT_DYNAMIC" == "y" Provides: gfs2-kmp-preempt = %version-%release %endif %endif Enhances: %name Supplements: packageand(%name:gfs2-kmp-%build_flavor) Requires: dlm-kmp-%build_flavor = %version-%release %description -n gfs2-kmp-%build_flavor GFS2 is Global Filesystem, a shared device filesystem. %pre -n gfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-pre --name "gfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %post -n gfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-post --name "gfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %preun -n gfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-preun --name "gfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %postun -n gfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-postun --name "gfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %posttrans -n gfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-posttrans --name "gfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %files -n gfs2-kmp-%build_flavor -f gfs2-kmp.files %package -n kselftests-kmp-%build_flavor Summary: Kernel sefltests Group: System/Kernel Requires: %name = %version-%source_rel Provides: kselftests-kmp = %version-%source_rel Provides: multiversion(kernel) # tell weak-modules2 to ignore this package Provides: kmp_in_kernel Requires(post): suse-module-tools >= 12.4 %if %build_default %if "%CONFIG_PREEMPT_DYNAMIC" == "y" Provides: kselftests-kmp-preempt = %version-%release %endif %endif Enhances: %name Supplements: packageand(%name:kselftests-kmp-%build_flavor) %description -n kselftests-kmp-%build_flavor This package contains kernel modules which are part of the upstream kernel selftest effort. kselftest is the name of the upstream kernel target to build and run all selftests. You can also run each test individually from the respective upstream tools/testing/selftests/ directory, this package is intended to be used using individial upstream selftest scripts given only select supported selftest drivers are enabled. It should always be possible to always run the latest linux-next version of the selftest scripts and tests against any older kernel selftest driver. Certain tests facilities may be backported onto older kernels to enable further testing. Selftests also provide for a vehicle or proof of concept issues to be reproduced, verified and corrected. Selftest drivers are intended to be supported only in testing and QA environments, they are not intended to be run on production systems. %pre -n kselftests-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-pre --name "kselftests-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %post -n kselftests-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-post --name "kselftests-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %preun -n kselftests-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-preun --name "kselftests-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %postun -n kselftests-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-postun --name "kselftests-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %posttrans -n kselftests-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-posttrans --name "kselftests-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %files -n kselftests-kmp-%build_flavor -f kselftests-kmp.files %package -n ocfs2-kmp-%build_flavor Summary: OCFS2 kernel modules Group: System/Kernel Requires: %name = %version-%source_rel Provides: ocfs2-kmp = %version-%source_rel Provides: multiversion(kernel) # tell weak-modules2 to ignore this package Provides: kmp_in_kernel Requires(post): suse-module-tools >= 12.4 %if %build_default %if "%CONFIG_PREEMPT_DYNAMIC" == "y" Provides: ocfs2-kmp-preempt = %version-%release %endif %endif Enhances: %name Supplements: packageand(%name:ocfs2-kmp-%build_flavor) Requires: dlm-kmp-%build_flavor = %version-%release %description -n ocfs2-kmp-%build_flavor OCFS2 is the Oracle Cluster Filesystem, a filesystem for shared devices accessible simultaneously from multiple nodes of a cluster. %pre -n ocfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-pre --name "ocfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %post -n ocfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-post --name "ocfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %preun -n ocfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-preun --name "ocfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %postun -n ocfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-postun --name "ocfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %posttrans -n ocfs2-kmp-%build_flavor %run_if_exists /usr/lib/module-init-tools/kernel-scriptlets/inkmp-posttrans --name "ocfs2-kmp-%build_flavor" \ --version "%version" --release "%release" --kernelrelease "%kernelrelease" \ --image "%image" --flavor "%build_flavor" --variant "%variant" \ --usrmerged "%{usrmerged}" --certs "%certs" "$@" %files -n ocfs2-kmp-%build_flavor -f ocfs2-kmp.files %endif # %CONFIG_SUSE_KERNEL_SUPPORTED %endif # %CONFIG_MODULES %prep if ! [ -e %{S:0} ]; then echo "The %name-%version.nosrc.rpm package does not contain the" \ "complete sources. Please install kernel-source-%version.src.rpm." exit 1 fi # Unpack all sources and patches %setup -q -c -T -a 0 -a 100 -a 101 -a 102 -a 103 -a 104 -a 105 -a 106 -a 108 -a 109 -a 110 -a 111 -a 113 -a 114 -a 120 -a 121 mkdir -p %kernel_build_dir # Generate a list of modules with their support status marking # The first marker is supposed to be either "+external", "-" or "-!optional", # where "+external" is for an externally supported module, "-" is for an # unsuppored module, "-!optional" is for Leap-only unsupported module. # There can be an optional arch-specific second marker with "+arch" (e.g. # +arm64), which enforces the module to be supported on the specific arch. %_sourcedir/guards --list --with-guards <%_sourcedir/supported.conf | \ awk '{ t = ""; for (i = 1; i < NF; i++) { if ($i == "+external") { t = " external"; } else if ($i == "+'%cpu_arch'") { t = ""; } else if ($i ~ "^-") { t = " no"; } } print $(NF) t; }' >%kernel_build_dir/Module.supported subpackages=( base %if "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" cluster-md-kmp dlm-kmp gfs2-kmp kselftests-kmp ocfs2-kmp %endif ) for package in "${subpackages[@]}"; do %_sourcedir/guards --default=0 "$package" \ <%_sourcedir/supported.conf | sed 's,.*/,,; s,\.ko$,,' | \ sort -u >%kernel_build_dir/Module."$package" done %if %split_extra && %split_optional # Module.optional is in a special form, containing guard markers for # both extra and optional modules, which is processed by split-modules %_sourcedir/guards --list --with-guards <%_sourcedir/supported.conf | \ awk '{ t = ""; for (i = 1; i < NF; i++) { if ($i == "+'%cpu_arch'") { t = ""; } else if ($i ~ "^-") { t = $i } } if (t != "") {print t,$(NF);} }' >%kernel_build_dir/Module.optional %endif cd linux-%srcversion %_sourcedir/apply-patches \ %if %{build_vanilla} && ! %vanilla_only --vanilla \ %endif %_sourcedir/series.conf .. sed -i -e 's/\$(CROSS_COMPILE)gcc/\$(CROSS_COMPILE)%gcc_compiler/g' Makefile grep '\$(CROSS_COMPILE)%gcc_compiler' Makefile cd %kernel_build_dir # Override the timestamp 'uname -v' reports with the source timestamp and # the commit hash. date=$(head -n 1 %_sourcedir/source-timestamp) commit=$(sed -n 's/GIT Revision: //p' %_sourcedir/source-timestamp) cat > .kernel-binary.spec.buildenv <<EOF export KBUILD_BUILD_TIMESTAMP="$(LANG=C date -d "$date") (${commit:0:7})" export KBUILD_VERBOSE=0 export KBUILD_SYMTYPES=1 export KBUILD_BUILD_USER=geeko export KBUILD_BUILD_HOST=buildhost EOF source .kernel-binary.spec.buildenv if [ -f %_sourcedir/localversion ] ; then cat %_sourcedir/localversion > localversion fi config_base="default" %ifarch %ix86 config_base="pae" %endif if ! [ -f %my_builddir/config/%cpu_arch/$config_base ] ; then config_base=%variant config_base=${config_base#-} fi if ! grep -q CONFIG_MMU= "%my_builddir/config/%cpu_arch_flavor"; then cp "%my_builddir/config/%cpu_arch/$config_base" .config ../scripts/kconfig/merge_config.sh -m .config \ %my_builddir/config/%cpu_arch_flavor else cp %my_builddir/config/%cpu_arch_flavor .config fi if test -e %my_builddir/config.addon/%cpu_arch_flavor; then # FIXME: config.addon doesn't affect the %CONFIG_ macros defined at # the top of the specfile ../scripts/kconfig/merge_config.sh -m .config %my_builddir/config.addon/%cpu_arch_flavor fi CONFIG_SUSE_KERNEL_RELEASED="--disable CONFIG_SUSE_KERNEL_RELEASED" %if 0%{?_project:1} if echo %_project | grep -Eqx -f %_sourcedir/release-projects; then CONFIG_SUSE_KERNEL_RELEASED="--enable CONFIG_SUSE_KERNEL_RELEASED" fi %endif CONFIG_SUSE_HAVE_STABLE_KABI="" SHSK_VAL="$(../scripts/config --state SUSE_HAVE_STABLE_KABI)" if test -e %my_builddir/kabi/%cpu_arch/symvers-%build_flavor -a $SHSK_VAL = "n" ; then echo "CONFIG_SUSE_HAVE_STABLE_KABI=n is a mistake with KABI reference data." \ "Create IGNORE-KABI-BADNESS to disable KABI checking." exit 1 elif test ! -e %my_builddir/kabi/%cpu_arch/symvers-%build_flavor \ -o 0%{?ignore_kabi_badness} -ne 0 \ -o -e %_sourcedir/IGNORE-KABI-BADNESS ; then CONFIG_SUSE_HAVE_STABLE_KABI="--disable CONFIG_SUSE_HAVE_STABLE_KABI" elif test ! -e %my_builddir/kabi/%cpu_arch/symvers-%build_flavor -a $SHSK_VAL = "y" ; then # only message, not an error echo "Disable CONFIG_SUSE_HAVE_STABLE_KABI or supply KABI reference data in -%build_flavor." fi DEBUG_INFO_TYPE="$(grep "CONFIG_DEBUG_INFO_DWARF.*=y" .config)" DEBUG_INFO_TYPE="${DEBUG_INFO_TYPE%%=y}" DEBUG_INFO_TYPE="${DEBUG_INFO_TYPE##CONFIG_DEBUG_INFO_}" echo "Kernel debuginfo type: ${DEBUG_INFO_TYPE}" ../scripts/config \ --set-str CONFIG_LOCALVERSION -%source_rel-%build_flavor \ --enable CONFIG_SUSE_KERNEL \ $CONFIG_SUSE_KERNEL_RELEASED \ $CONFIG_SUSE_HAVE_STABLE_KABI if [ %CONFIG_MODULE_SIG = "y" ]; then if [ -n "%certs" ] ; then ln -s %_sourcedir/.kernel_signing_key.pem . else if ! [ -f .kernel.genkey ] ; then cat > .kernel.genkey <<EOF [ req ] default_bits = 4096 distinguished_name = req_distinguished_name prompt = no string_mask = utf8only x509_extensions = myexts [ req_distinguished_name ] CN = Build time autogenerated kernel key [ myexts ] basicConstraints=critical,CA:FALSE keyUsage=digitalSignature subjectKeyIdentifier=hash authorityKeyIdentifier=keyid extendedKeyUsage=codeSigning EOF fi openssl req -new -nodes -utf8 -%CONFIG_MODULE_SIG_HASH -days 36500 \ -batch -x509 -config .kernel.genkey \ -outform PEM -out .kernel_signing_key.pem \ -keyout .kernel_signing_key.pem fi ../scripts/config --set-str CONFIG_MODULE_SIG_KEY ".kernel_signing_key.pem" fi case %cpu_arch in x86_64 | i386) MAKE_ARGS="$MAKE_ARGS ARCH=x86" ;; ppc*) MAKE_ARGS="$MAKE_ARGS ARCH=powerpc" ;; s390x) MAKE_ARGS="$MAKE_ARGS ARCH=s390" ;; arm64) MAKE_ARGS="$MAKE_ARGS ARCH=arm64" ;; armv*) MAKE_ARGS="$MAKE_ARGS ARCH=arm" ;; riscv*) MAKE_ARGS="$MAKE_ARGS ARCH=riscv" ;; *) MAKE_ARGS="$MAKE_ARGS ARCH=%cpu_arch" ;; esac makeoutputsync= if make --output-sync --help >/dev/null 2>&1 ; then makeoutputsync=--output-sync else echo make does not support --output-sync flag. Build messages may be mangled. 1>&2 fi MAKE_ARGS="$MAKE_ARGS $makeoutputsync %{?_smp_mflags}" echo export MAKE_ARGS=\""$MAKE_ARGS"\" >> .kernel-binary.spec.buildenv KERN_DIRS="-C .. O=$PWD" if test -e %_sourcedir/TOLERATE-UNKNOWN-NEW-CONFIG-OPTIONS; then yes '' | make oldconfig $MAKE_ARGS $KERN_DIRS else cp .config .config.orig if test -f ../scripts/kconfig/Makefile && \ grep -q syncconfig ../scripts/kconfig/Makefile; then syncconfig="syncconfig" else syncconfig="silentoldconfig" fi make $syncconfig $MAKE_ARGS $KERN_DIRS < /dev/null %_sourcedir/check-for-config-changes .config.orig .config rm .config.orig fi make prepare $MAKE_ARGS make scripts $MAKE_ARGS krel=$(make -s kernelrelease $MAKE_ARGS) if [ "$krel" != "%kernelrelease-%build_flavor" ]; then echo "Kernel release mismatch: $krel != %kernelrelease-%build_flavor" >&2 exit 1 fi make clean $MAKE_ARGS rm -f source find . ! -type d ! -name 'Module.base' ! -name 'Module.*-kmp' ! -name 'Module.optional' -printf '%%P\n' \ > %my_builddir/obj-files %build cd %kernel_build_dir source .kernel-binary.spec.buildenv %if !%use_suse_kabi_tools # create *.symref files in the tree if test -e %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor; then %_sourcedir/modversions --unpack . < $_ fi %endif %if "%CONFIG_KMSG_IDS" == "y" chmod +x ../scripts/kmsg-doc MAKE_ARGS="$MAKE_ARGS D=2" %endif mkdir -p %_topdir/OTHER log=%_topdir/OTHER/make-stderr.log make all $MAKE_ARGS 2> >(tee "$log") result="${PIPESTATUS[0]}" if ! test "$result" -eq 0; then exit "$result" fi %if 0%{?klp_ipa_clones} && %generate_compile_commands # Generate compile_commands.json make compile_commands.json $MAKE_ARGS %endif %install # bsc#1265456: Truncate the uncompressed vmlinux after ALL post scripts finish. # make sure debuginfo extraction and brp-* scripts complete before truncating. %if "%image" != "vmlinux" && 0%{?suse_version} >= 1500 %define __spec_install_post \ %{?__debug_package:%{__debug_install_post}} \ %{__arch_install_post} \ %{__os_install_post} \ [ -f %{buildroot}/boot/vmlinux-%{kernelrelease}-%{build_flavor} ] && truncate -s 0 %{buildroot}/boot/vmlinux-%{kernelrelease}-%{build_flavor} \ %{nil} %endif %if 0%{?__debug_package:1} # get rid of /usr/lib/rpm/brp-strip-debug export NO_BRP_STRIP_DEBUG=true %endif # strip removes too much from the vmlinux ELF binary export STRIP_KEEP_SYMTAB='*/vmlinux*' # %kernel_module_directory/%kernelrelease-%build_flavor/source points to the source # directory installed by kernel-devel. The kernel-%build_flavor-devel package # has a correct dependency on kernel-devel, but the brp check does not see # kernel-devel during build. export NO_BRP_STALE_LINK_ERROR=yes cd %kernel_build_dir source .kernel-binary.spec.buildenv mkdir -p %buildroot/boot # (Could strip out non-public symbols.) cp -p System.map %buildroot/boot/System.map-%kernelrelease-%build_flavor add_vmlinux() { local vmlinux=boot/vmlinux-%kernelrelease-%build_flavor cp vmlinux %buildroot/$vmlinux # make sure that find-debuginfo.sh picks it up. In the filelist, we # mark the file 0644 again chmod +x %buildroot/$vmlinux if test $1 == "--compressed"; then ts="$(head -n1 %_sourcedir/source-timestamp)" touch -d "$ts" %buildroot/$vmlinux touch %buildroot/$vmlinux.%{compress_vmlinux} ghost_vmlinux=true else ghost_vmlinux=false fi } # architecture specifics %ifarch %ix86 x86_64 add_vmlinux --compressed cp -p arch/x86/boot/bzImage %buildroot/boot/%image-%kernelrelease-%build_flavor %endif %ifarch ppc ppc64 ppc64le add_vmlinux %endif %ifarch s390 s390x add_vmlinux --compressed image=image if test ! -f arch/s390/boot/$image; then image=bzImage fi cp -p arch/s390/boot/$image %buildroot/boot/%image-%kernelrelease-%build_flavor %if "%CONFIG_KMSG_IDS" == "y" mkdir -p %buildroot/usr/share/man/man9 find man -name '*.9' -exec install -m 644 -D '{}' %buildroot/usr/share/man/man9/ ';' %endif %if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150300 s390x_vmlinux=arch/s390/boot/compressed/vmlinux if [ ! -f "$s390x_vmlinux" ]; then s390x_vmlinux=arch/s390/boot/vmlinux fi objcopy -R .rodata.compressed "$s390x_vmlinux" %buildroot/boot/zdebug-%kernelrelease-%build_flavor %endif %endif %ifarch %arm add_vmlinux --compressed cp -p arch/arm/boot/%image %buildroot/boot/%image-%kernelrelease-%build_flavor %endif %ifarch aarch64 add_vmlinux --compressed cp -p arch/arm64/boot/%image %buildroot/boot/%image-%kernelrelease-%build_flavor %endif %ifarch riscv64 add_vmlinux --compressed cp -p arch/riscv/boot/%image %buildroot/boot/%image-%kernelrelease-%build_flavor %endif # sign the modules, firmware and possibly the kernel in the buildservice BRP_PESIGN_FILES="" %if "%CONFIG_EFI_STUB" == "y" %if %{usrmerged} BRP_PESIGN_FILES="%modules_dir/%image" %else BRP_PESIGN_FILES="/boot/%image-%kernelrelease-%build_flavor" %endif %endif %if ! %sb_efi_only %ifarch s390x ppc64 ppc64le %if %{usrmerged} BRP_PESIGN_FILES="%modules_dir/%image" %else BRP_PESIGN_FILES="/boot/%image-%kernelrelease-%build_flavor" %endif %endif %endif %if "%CONFIG_MODULE_SIG" == "y" BRP_PESIGN_FILES="$BRP_PESIGN_FILES *.ko" %endif %ifarch %ix86 # XXX: do not sign on x86, as the repackaging changes kernel-pae # from i686 to i586 BRP_PESIGN_FILES="" %endif export BRP_PESIGN_FILES %if "%{compress_modules}" != "none" export BRP_PESIGN_COMPRESS_MODULE=%{compress_modules} %endif # Do not sign vanilla kernels released in official projects %if %build_vanilla && ! %vanilla_only BRP_PESIGN_FILES="" %endif if test -x /usr/lib/rpm/pesign/gen-hmac; then $_ -r %buildroot /boot/%image-%kernelrelease-%build_flavor fi # Package the compiled-in certificates as DER files in /etc/uefi/certs # and have mokutil enroll them when the kernel is installed echo Signing certificates "%certs" if test %CONFIG_MODULE_SIG = "y" -a -d %_sourcedir/.kernel_signing_certs ; then for f in %_sourcedir/.kernel_signing_certs/*.crt; do mkdir -p %buildroot/etc/uefi/certs cp -v $f %buildroot/etc/uefi/certs done fi cp -p .config %buildroot/boot/config-%kernelrelease-%build_flavor sysctl_file=%buildroot/boot/sysctl.conf-%kernelrelease-%build_flavor for file in %my_builddir/sysctl/{defaults,%cpu_arch/arch-defaults,%cpu_arch_flavor}; do if [ -f "$file" ]; then cat "$file" fi done | sed '1i # Generated file - do not edit.' >$sysctl_file if [ ! -s $sysctl_file ]; then rm $sysctl_file fi %if %install_vdso # Install the unstripped vdso's that are linked in the kernel image make vdso_install $MAKE_ARGS INSTALL_MOD_PATH=%buildroot rm -rf %buildroot%kernel_module_directory/%kernelrelease-%build_flavor/vdso/.build-id %endif # Create a dummy initrd with roughly the size the real one will have. # That way, YaST will know that this package requires some additional # space in /boot. dd if=/dev/zero of=%buildroot/boot/initrd-%kernelrelease-%build_flavor \ bs=1024 seek=2047 count=1 # Also reserve some space for the kdump initrd cp %buildroot/boot/initrd-%kernelrelease-%build_flavor{,-kdump} %if 0%{?suse_version} >= 1500 # Use same permissions as dracut chmod 0600 %buildroot/boot/initrd-%kernelrelease-%build_flavor{,-kdump} %endif if [ %CONFIG_MODULES = y ]; then mkdir -p %rpm_install_dir/%cpu_arch_flavor mkdir -p %buildroot/usr/src/linux-obj/%cpu_arch install -m 755 -D -t %rpm_install_dir/%cpu_arch_flavor/scripts/mod/ scripts/mod/ksym-provides gzip -n -c9 < Module.symvers > %buildroot/boot/symvers-%kernelrelease-%build_flavor.gz make modules_install $MAKE_ARGS INSTALL_MOD_PATH=%buildroot %ifarch s390 s390x expoline=arch/s390/lib/expoline/expoline.o if test -f arch/s390/lib/expoline/expoline.o ; then install -m 644 -D -t %rpm_install_dir/%cpu_arch_flavor/$(dirname $expoline) $expoline fi %endif # Also put the resulting file in %rpm_install_dir/%cpu_arch/%build_flavor # so that kernel-devel + kernel-%build_flavor is sufficient for building # modules that have modversions as well. mkdir -p %rpm_install_dir/%cpu_arch/%build_flavor cp Module.symvers %rpm_install_dir/%cpu_arch/%build_flavor # List of ipa-clones that are used to to track set of functions where a code from another function can eventually occur. %if 0%{?klp_ipa_clones} && "%CONFIG_LIVEPATCH_IPA_CLONES" == "y" %if %generate_compile_commands cp compile_commands.json %rpm_install_dir/%cpu_arch/%build_flavor echo %obj_install_dir/%cpu_arch/%build_flavor/compile_commands.json >> %my_builddir/livepatch-files.no_dir %endif find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' | sort > ipa-clones.list cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir tar -C %kernel_build_dir \ %if ! 0%{?suse_version} || 0%{?suse_version} >= 1500 --verbatim-files-from \ %endif -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf- cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir %endif # Table of types used in exported symbols (for modversion debugging). %if %use_suse_kabi_tools ksymtypes consolidate %{?_smp_mflags} \ --output=%my_builddir/symtypes-%build_flavor . %else %_sourcedir/modversions --pack . > %my_builddir/symtypes-%build_flavor %endif if [ -s %my_builddir/symtypes-%build_flavor ]; then gzip -n -9 -c %my_builddir/symtypes-%build_flavor \ > %buildroot/boot/symtypes-%kernelrelease-%build_flavor.gz fi # Some architecture's $(uname -m) output is different from the ARCH # parameter that needs to be passed to kbuild. Create symlinks from # $(uname -m) to the ARCH directory. if [ ! -e %rpm_install_dir/%kmp_target_cpu ]; then ln -sf %cpu_arch %rpm_install_dir/%kmp_target_cpu ln -sf %cpu_arch %buildroot/usr/src/linux-obj/%kmp_target_cpu fi # We were building in %my_builddir/linux-%srcversion, but the sources will # later be installed in /usr/src/linux-%srcversion-%source_rel. Fix up the # build symlink. rm -f %buildroot%kernel_module_directory/%kernelrelease-%build_flavor/{source,build} ln -s %src_install_dir \ %buildroot%kernel_module_directory/%kernelrelease-%build_flavor/source ln -s %obj_install_dir/%cpu_arch/%build_flavor \ %buildroot%kernel_module_directory/%kernelrelease-%build_flavor/build # Abort if there are any undefined symbols msg="$(/sbin/depmod -F %buildroot/boot/System.map-%kernelrelease-%build_flavor \ -b %buildroot -ae %kernelrelease-%build_flavor 2>&1)" if [ $? -ne 0 ] || echo "$msg" | grep 'needs unknown symbol'; then exit 1 fi %_sourcedir/split-modules -d %buildroot \ -o %my_builddir \ -b %kernel_build_dir \ %if "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" -e \ %endif %if ! %supported_modules_check -i \ %endif %nil %if ! %split_extra cat %my_builddir/unsupported-modules >>%my_builddir/main-modules %endif # The modules.dep file is sorted randomly which produces strange file # checksums. As the file is not included in the resulting RPM, it's # pointless to rely on its contents. Replacing by zeros to make the # checksums always the same for several builds of the same package. test -s %buildroot%kernel_module_directory/%kernelrelease-%build_flavor/modules.dep && \ dd if=/dev/zero of=%buildroot%kernel_module_directory/%kernelrelease-%build_flavor/modules.dep ibs=$(stat -c%s %buildroot%kernel_module_directory/%kernelrelease-%build_flavor/modules.dep) count=1 res=0 if test -e %my_builddir/kabi/%cpu_arch/symvers-%build_flavor; then # check for kabi changes %if %use_suse_kabi_tools ksymvers compare --rules=%my_builddir/kabi/severities \ --format=symbols:%my_builddir/changed-exports \ %my_builddir/kabi/%cpu_arch/symvers-%build_flavor \ Module.symvers || res=$? %else %_sourcedir/kabi.pl --rules %my_builddir/kabi/severities \ %my_builddir/kabi/%cpu_arch/symvers-%build_flavor \ Module.symvers || res=$? %endif fi if [ $res -ne 0 ]; then %if %use_suse_kabi_tools ksymtypes compare %{?_smp_mflags} \ --filter-symbol-list=%my_builddir/changed-exports \ %my_builddir/kabi/%cpu_arch/symtypes-%build_flavor \ %my_builddir/symtypes-%build_flavor || true %endif # %ignore_kabi_badness is defined in the Kernel:* projects in the # OBS to be able to build the KOTD in spite of kabi errors if [ 0%{?ignore_kabi_badness} -eq 0 -a \ ! -e %_sourcedir/IGNORE-KABI-BADNESS ]; then echo "Create a file IGNORE-KABI-BADNESS in the kernel-source" \ "directory to build this kernel even though its badness is" \ "higher than allowed for an official kernel." exit 1 fi fi # Check the license in each module if ! sh %_sourcedir/check-module-license %buildroot; then echo "Please fix the missing licenses!" %if "%CONFIG_SUSE_KERNEL_SUPPORTED" == "y" exit 1 %endif fi # These files are required for building external modules for FILE in arch/powerpc/lib/crtsavres.o arch/arm64/kernel/ftrace-mod.o \ arch/*/kernel/macros.s scripts/module.lds do if [ -f %kernel_build_dir/$FILE ]; then echo $FILE >> %my_builddir/obj-files fi done tar --exclude=\*.ipa-clones --exclude=.config.old --exclude=.kernel-binary.spec.buildenv \ --exclude=.kernel_signing_key.pem --exclude=.kernel.genkey \ -cf - -T %my_builddir/obj-files | \ tar -xf - -C %rpm_install_dir/%cpu_arch_flavor # bnc#507084 find %rpm_install_dir/%cpu_arch_flavor/scripts -type f -perm -111 | \ while read f; do case "$(file -b "$f")" in ELF\ *\ executable*) strip "$f" esac done # Recreate the generated Makefile with correct path # # Linux 5.13 no longer has mkmakefile if [ -f ../scripts/mkmakefile ] ; then sh ../scripts/mkmakefile ../../../%{basename:%src_install_dir} \ %rpm_install_dir/%cpu_arch_flavor \ $(echo %srcversion | sed -r 's/^([0-9]+)\.([0-9]+).*/\1 \2/') else echo 'export KBUILD_OUTPUT = %obj_install_dir/%cpu_arch_flavor' > %rpm_install_dir/%cpu_arch_flavor/Makefile echo 'include ../../../%{basename:%src_install_dir}/Makefile' >> %rpm_install_dir/%cpu_arch_flavor/Makefile fi fi # CONFIG_GDB_SCRIPTS if [ -e vmlinux-gdb.py ]; then DEST=%rpm_install_dir/%cpu_arch_flavor/ install -m 755 -d "$DEST" # set sys.path to our devel.rpm scripts sed 's@\(sys\.path\.insert(0, \).*@\1"%obj_install_dir/%cpu_arch_flavor/scripts/gdb/")@' vmlinux-gdb.py > "$DEST/vmlinux-gdb.py" DEST=%rpm_install_dir/%cpu_arch_flavor/scripts/gdb/linux install -m 755 -d "$DEST" pushd scripts/gdb/linux/ for file in *.py; do if test -L "$file"; then # relink against our devel.rpm sources, not of buildroot's ln -s "%src_install_dir/scripts/gdb/linux/$file" "$DEST/$file" else cp -p "$file" "$DEST" fi done popd DEST=%{buildroot}%{_datadir}/gdb/auto-load%modules_dir install -m 755 -d "$DEST" ln -s %obj_install_dir/%cpu_arch_flavor/vmlinux-gdb.py "$DEST/vmlinux-gdb.py" fi rm -rf %{buildroot}/lib/firmware add_dirs_to_filelist() { sed -rn ' # print file name p # remove filelist macros s:%%[a-z]+(\([^)]+\))? ?::g # add %%dir prefix s:^:%%dir : # print all parents :a # skip directories owned by other packages s:^%%dir (/boot|/etc|(/usr)?/lib/(modules|firmware)|/usr/share|/usr/src)/[^/]+$:: s:/[^/]+$::p ta ' "$@" | sort -u } # Collect the file lists. if [ -f %my_builddir/livepatch-files.no_dir ] ; then cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files fi # does not exist for non-modularized kernels %if %{usrmerged} mkdir -p %{buildroot}%modules_dir %endif shopt -s nullglob dotglob > %my_builddir/kernel-devel.files { echo "%modules_dir/build" echo "%modules_dir/source" cd %buildroot for file in boot/symtypes*; do %if %{usrmerged} l="${file##*/}" l="%modules_dir/${l//-%kernelrelease-%build_flavor}" mv "$file" "%{buildroot}$l" ln -s "..$l" $file echo "$l" echo "%%ghost /$file" %else echo "/$file" %endif done if test -d .%{_datadir}/gdb/; then find .%obj_install_dir/%cpu_arch_flavor/scripts/gdb/linux/ -name '*.py' -type l | sed -e 's/^[.]//' echo "%{_datadir}/gdb/auto-load%modules_dir/vmlinux-gdb.py" fi } | add_dirs_to_filelist >%my_builddir/kernel-devel.files ( cd %buildroot ; find .%obj_install_dir/%cpu_arch_flavor -type f ; ) | \ sed -e 's/^[.]//' | grep -v -e '[.]ipa-clones$' -e '/ipa-clones[.]list$'| \ add_dirs_to_filelist >> %my_builddir/kernel-devel.files { echo %ghost /boot/%image echo %ghost /boot/initrd cd %buildroot for f in boot/*; do l="${f##*/}" l="%modules_dir/${l//-%kernelrelease-%build_flavor}" if test -L "$f"; then echo "%%ghost /$f" continue elif test ! -f "$f"; then continue fi case "$f" in boot/initrd-*) echo "%%ghost /$f" continue ;; boot/vmlinux-*.%{compress_vmlinux}) ;; boot/vmlinux-*) if $ghost_vmlinux; then # fall through to mark next echo as %ghost echo -n "%%ghost " fi ;; %if %{usrmerged} boot/vmlinuz-*) echo -n "%%attr(0644, root, root) " ;; %endif boot/symtypes*) %if %{usrmerged} echo "%exclude $l" %endif continue ;; esac %if %{usrmerged} mv "$f" "./$l" ln -s "..$l" $f # the find in the CONFIG_MODULES condition below also finds the files # but there's sort -u later, so this is ok echo "$l" # note: must be first after case statement above echo "%%ghost /$f" %else echo "%%attr(0644, root, root) /$f" %endif done if [ %CONFIG_MODULES = y ]; then MODULES=%{lua: print(rpm.expand('%kernel_module_directory'):sub(2))}/%kernelrelease-%build_flavor find "$MODULES" \ %if 0%{?separate_vdso} -path "$MODULES/vdso" -prune -o \ %endif -type d -o \ \( -path '*/modules.*' ! -path '*/modules.order' \ ! -path '*/modules.builtin' \ ! -path '*/modules.builtin.modinfo' \) -printf '%%%%ghost /%%p\n' \ -o -name '*.ko' -prune \ -o \( -type f \ %if %{usrmerged} ! -path '*/symtypes*' ! -path '*/vmlinu*' \ %endif \) -printf '/%%p\n' cat %my_builddir/base-modules fi if test %CONFIG_MODULE_SIG = "y" -a -d etc/uefi/certs; then find etc/uefi/certs -type f -printf '/%%p\n' fi if test -d lib/firmware/%kernelrelease-%build_flavor; then echo "%%dir /lib/firmware/%kernelrelease-%build_flavor" cat %my_builddir/base-firmware fi if [ -e .%_docdir/%name ]; then echo "%%doc %_docdir/%name" fi } | sort -u | add_dirs_to_filelist >%my_builddir/kernel-base.files { add_dirs_to_filelist %my_builddir/kernel-base.files if [ %CONFIG_MODULES = y ]; then add_dirs_to_filelist %my_builddir/main-modules fi if test -d %buildroot/lib/firmware/%kernelrelease-%build_flavor; then echo "/lib/firmware/%kernelrelease-%build_flavor" fi } > %my_builddir/kernel-main.files %if %split_extra add_dirs_to_filelist %my_builddir/unsupported-modules > %my_builddir/kernel-extra.files %if %split_extra && %split_optional add_dirs_to_filelist %my_builddir/optional-modules > %my_builddir/kernel-optional.files %endif %if 0%{?suse_version} > 1500 || 0%{?sle_version} >= 150000 # By default, loading unsupported modules is disabled on SLE through # /etc/modprobe.d/10-unsupported-modules.conf from the suse-module-tools # package. # modules in kernel-$flavor-extra don't have the supported flag set, # yet loading them should be possible if the package is installed. # CAUTION PACKAGERS: The file content below must not change between # kernel versions, otherwise file conflicts might arise with # multiversion(kernel). modprobe_d_dir=/etc/modprobe.d %if 0%{?suse_version} > 1500 || 0%{?sle_version} > 150300 modprobe_d_dir=/lib/modprobe.d %endif %if %{usrmerged} modprobe_d_dir=/usr/lib/modprobe.d %endif mkdir -p %buildroot$modprobe_d_dir cat >%buildroot$modprobe_d_dir/20-kernel-%{build_flavor}-extra.conf <<EOF # This file overrides the default from 10-unsupported-modules.conf. # This is necessary to load kernel modules from the # kernel-%{build_flavor}-extra package. # # WARNING: loading unsupported modules may compromise SLE support. # Please read the comments in 10-unsupported-modules.conf. allow_unsupported_modules 1 EOF echo "%%dir $modprobe_d_dir" >> %my_builddir/kernel-extra.files echo "%%config(noreplace) $modprobe_d_dir/20-kernel-%{build_flavor}-extra.conf" >> %my_builddir/kernel-extra.files %endif %endif for f in %my_builddir/*-kmp-modules; do f2=${f%%-modules}.files add_dirs_to_filelist "$f" >"$f2" done if [ %CONFIG_MODULES = y ]; then install -m 644 %_sourcedir/modules.fips %{buildroot}%modules_dir/modules.fips echo %modules_dir/modules.fips >> %my_builddir/kernel-base.files echo %modules_dir/modules.fips >> %my_builddir/kernel-main.files fi # Hardlink duplicate files automatically (from package fdupes): It doesn't save # much, but it keeps rpmlint from breaking the package build. Note that we skip # /usr/src/linux-obj intentionally, to not accidentally break timestamps there %fdupes %buildroot%modules_dir %changelog ++++++ kernel-obs-build.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.617900040 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.619900110 +0200 @@ -19,7 +19,7 @@ #!BuildIgnore: post-build-checks -%define patchversion 7.2.2 +%define patchversion 7.2.3 %define variant %{nil} %include %_sourcedir/kernel-spec-macros @@ -38,23 +38,23 @@ %endif %endif %endif -%global kernel_package kernel%kernel_flavor-srchash-93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%global kernel_package kernel%kernel_flavor-srchash-263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %endif %if 0%{?rhel_version} %global kernel_package kernel %endif Name: kernel-obs-build -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif Summary: package kernel and initrd for OBS VM builds License: GPL-2.0-only Group: SLES -Provides: kernel-obs-build-srchash-93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +Provides: kernel-obs-build-srchash-263d9258ef078247c90a6b2b59d6e65ef2f26ae6 BuildRequires: coreutils BuildRequires: device-mapper BuildRequires: dracut @@ -63,7 +63,7 @@ %if 0%{?suse_version} > 1550 || 0%{?sle_version} > 150200 BuildRequires: zstd %endif -ExclusiveArch: aarch64 ppc64le riscv64 s390x x86_64 +ExclusiveArch: aarch64 armv6hl armv7hl ppc64le riscv64 s390x x86_64 %description This package is repackaging already compiled kernels to make them usable @@ -125,7 +125,7 @@ xfs nf_conntrack_ipv6 binfmt_misc virtio_pci virtio_mmio virtio_blk virtio_rng fat vfat nls_cp437 nls_iso8859-1 ibmvscsi sd_mod e1000 ibmveth overlay 9p 9pnet_virtio qemu_fw_cfg algif_hash aegis128 xts bridge br_netfilter nf_nat nf_tables xt_conntrack iptable_nat iptable_filter - iso9660 xt_addrtype" + iso9660 xt_addrtype nft_compat nft_chain_nat" # manually load all modules to make sure they're available for i in $KERNEL_MODULES; do ++++++ kernel-obs-qa.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.645901022 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.647901092 +0200 @@ -17,15 +17,15 @@ # needsrootforbuild -%define patchversion 7.2.2 +%define patchversion 7.2.3 %define variant %{nil} %include %_sourcedir/kernel-spec-macros Name: kernel-obs-qa -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif @@ -36,10 +36,10 @@ # kernel-obs-build must be also configured as VMinstall, but is required # here as well to avoid that qa and build package build parallel %if ! 0%{?qemu_user_space_build} -BuildRequires: kernel-obs-build-srchash-93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +BuildRequires: kernel-obs-build-srchash-263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %endif BuildRequires: modutils -ExclusiveArch: aarch64 ppc64le riscv64 s390x x86_64 +ExclusiveArch: aarch64 armv6hl armv7hl ppc64le riscv64 s390x x86_64 %description This package is using the kernel compiled within Open Build Service(OBS) ++++++ kernel-pae.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.672901969 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.675902074 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.2 -%define patchversion 7.2.2 -%define git_commit 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%define patchversion 7.2.3 +%define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-pae -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif ++++++ kernel-source.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.702903021 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.704903091 +0200 @@ -17,8 +17,8 @@ %define srcversion 7.2 -%define patchversion 7.2.2 -%define git_commit 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%define patchversion 7.2.3 +%define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %define gcc_package gcc %define gcc_compiler gcc @@ -28,9 +28,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-source -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif ++++++ kernel-syms.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.736904213 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.737904248 +0200 @@ -16,15 +16,15 @@ # -%define git_commit 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %include %_sourcedir/kernel-spec-macros Name: kernel-syms -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif @@ -33,16 +33,19 @@ Group: Development/Sources URL: https://www.kernel.org/ BuildRequires: coreutils -ExclusiveArch: %ix86 aarch64 ppc64le riscv64 s390x x86_64 +ExclusiveArch: %ix86 aarch64 armv6hl armv7hl ppc64le riscv64 s390x x86_64 Prefix: /usr/src AutoReqProv: off Source: README.KSYMS %ifarch aarch64 Requires: kernel-64kb-devel = %version-%source_rel %endif -%ifarch aarch64 %ix86 ppc64le riscv64 s390x x86_64 +%ifarch aarch64 armv6hl armv7hl %ix86 ppc64le riscv64 s390x x86_64 Requires: kernel-default-devel = %version-%source_rel %endif +%ifarch armv7hl +Requires: kernel-lpae-devel = %version-%source_rel +%endif %ifarch %ix86 Requires: kernel-pae-devel = %version-%source_rel %endif ++++++ kernel-vanilla.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.763905160 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.765905230 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.2 -%define patchversion 7.2.2 -%define git_commit 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%define patchversion 7.2.3 +%define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-vanilla -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif @@ -98,7 +98,7 @@ # Remove some packages that are installed automatically by the build system, # but are not needed to build the kernel #!BuildIgnore: autoconf automake gettext-runtime libtool cvs gettext-tools udev insserv -ExclusiveArch: aarch64 %ix86 ppc64le riscv64 s390x x86_64 +ExclusiveArch: aarch64 armv6hl armv7hl %ix86 ppc64le riscv64 s390x x86_64 %ifarch %ix86 x86_64 %define image vmlinuz ++++++ kernel-zfcpdump.spec ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.797906353 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.799906423 +0200 @@ -18,8 +18,8 @@ %define srcversion 7.2 -%define patchversion 7.2.2 -%define git_commit 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +%define patchversion 7.2.3 +%define git_commit 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 %define variant %{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-zfcpdump -Version: 7.2.2 +Version: 7.2.3 %if 0%{?is_kotd} -Release: <RELEASE>.g93c77bd +Release: <RELEASE>.g263d925 %else Release: 0 %endif ++++++ _constraints ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.906910175 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.909910281 +0200 @@ -8,6 +8,8 @@ <package>kernel-source:kernel-default</package> <package>kernel-kvmsmall</package> <package>kernel-source:kernel-kvmsmall</package> +<package>kernel-lpae</package> +<package>kernel-source:kernel-lpae</package> <package>kernel-pae</package> <package>kernel-source:kernel-pae</package> <package>kernel-vanilla</package> @@ -75,6 +77,8 @@ <package>kernel-source:kernel-default</package> <package>kernel-kvmsmall</package> <package>kernel-source:kernel-kvmsmall</package> +<package>kernel-lpae</package> +<package>kernel-source:kernel-lpae</package> <package>kernel-pae</package> <package>kernel-source:kernel-pae</package> <package>kernel-vanilla</package> @@ -99,6 +103,8 @@ <package>kernel-source:kernel-default</package> <package>kernel-kvmsmall</package> <package>kernel-source:kernel-kvmsmall</package> +<package>kernel-lpae</package> +<package>kernel-source:kernel-lpae</package> <package>kernel-pae</package> <package>kernel-source:kernel-pae</package> <package>kernel-vanilla</package> @@ -128,6 +134,8 @@ <package>kernel-source:kernel-default</package> <package>kernel-kvmsmall</package> <package>kernel-source:kernel-kvmsmall</package> +<package>kernel-lpae</package> +<package>kernel-source:kernel-lpae</package> <package>kernel-pae</package> <package>kernel-source:kernel-pae</package> <package>kernel-vanilla</package> @@ -152,6 +160,8 @@ <package>kernel-source:kernel-default</package> <package>kernel-kvmsmall</package> <package>kernel-source:kernel-kvmsmall</package> +<package>kernel-lpae</package> +<package>kernel-source:kernel-lpae</package> <package>kernel-pae</package> <package>kernel-source:kernel-pae</package> <package>kernel-vanilla</package> @@ -176,6 +186,8 @@ <package>kernel-source:kernel-default</package> <package>kernel-kvmsmall</package> <package>kernel-source:kernel-kvmsmall</package> +<package>kernel-lpae</package> +<package>kernel-source:kernel-lpae</package> <package>kernel-pae</package> <package>kernel-source:kernel-pae</package> <package>kernel-vanilla</package> @@ -211,6 +223,8 @@ <package>kernel-source:kernel-default</package> <package>kernel-kvmsmall</package> <package>kernel-source:kernel-kvmsmall</package> +<package>kernel-lpae</package> +<package>kernel-source:kernel-lpae</package> <package>kernel-pae</package> <package>kernel-source:kernel-pae</package> <package>kernel-vanilla</package> @@ -235,6 +249,8 @@ <package>kernel-source:kernel-default</package> <package>kernel-kvmsmall</package> <package>kernel-source:kernel-kvmsmall</package> +<package>kernel-lpae</package> +<package>kernel-source:kernel-lpae</package> <package>kernel-pae</package> <package>kernel-source:kernel-pae</package> <package>kernel-vanilla</package> ++++++ _multibuild ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.934911157 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.937911263 +0200 @@ -7,6 +7,7 @@ <package>kernel-default</package> <package>kernel-docs</package> <package>kernel-kvmsmall</package> + <package>kernel-lpae</package> <package>kernel-obs-build</package> <package>kernel-obs-qa</package> <package>kernel-pae</package> ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:16.958911999 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:16.962912139 +0200 @@ -1,6 +1,6 @@ -mtime: 1787900260 -commit: 678622dcf412822d72064571158b3176390442d181921c801b54fd5fbc61da47 +mtime: 1788414228 +commit: bc47402a8f0b7bfd77fb34a9f7380eb1b2387e15ae66e4747ffe59c246070c92 url: https://src.opensuse.org/jirislaby/kernel-source -revision: 678622dcf412822d72064571158b3176390442d181921c801b54fd5fbc61da47 +revision: bc47402a8f0b7bfd77fb34a9f7380eb1b2387e15ae66e4747ffe59c246070c92 trackingbranch: Kernel/stable ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-09-03 07:43:48.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ config.conf ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:17.140918382 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:17.143918487 +0200 @@ -22,11 +22,11 @@ +ppc64le -syms ppc64le/kvmsmall # ARM architectures -+armv6hl -!needs_updating armv6hl/default -+armv6hl -!needs_updating armv6hl/vanilla -+armv7hl -!needs_updating armv7hl/default -+armv7hl -!needs_updating armv7hl/vanilla -+armv7hl -!needs_updating armv7hl/lpae ++armv6hl armv6hl/default ++armv6hl armv6hl/vanilla ++armv7hl armv7hl/default ++armv7hl armv7hl/vanilla ++armv7hl armv7hl/lpae +arm64 arm64/default +arm64 arm64/64kb +arm64 arm64/vanilla ++++++ config.tar.bz2 ++++++ ++++ 1918 lines of diff (skipped) ++++++ patches.kernel.org.tar.bz2 ++++++ ++++ 8134 lines of diff (skipped) ++++++ patches.suse.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.suse/drm-qxl-fix-use-after-free-and-NULL-pointer-deref.patch new/patches.suse/drm-qxl-fix-use-after-free-and-NULL-pointer-deref.patch --- old/patches.suse/drm-qxl-fix-use-after-free-and-NULL-pointer-deref.patch 1970-01-01 01:00:00.000000000 +0100 +++ new/patches.suse/drm-qxl-fix-use-after-free-and-NULL-pointer-deref.patch 2026-08-28 10:54:09.000000000 +0200 @@ -0,0 +1,99 @@ +From: "Jiri Slaby (SUSE)" <[email protected]> +Date: Fri, 28 Aug 2026 10:35:00 +0200 +Subject: drm/qxl: fix use-after-free and NULL pointer deref +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit +References: bsc#1271081 +Patch-mainline: Submitted <[email protected]> + +When allocating a `qxl_release` structure with `kmalloc()`, the underlying +memory contained uninitialized garbage. Specifically, `release->base.flags` +(part of the embedded `dma_fence`) was not cleared. + +This garbage in `base.flags` caused helper functions such as +`dma_fence_was_initialized()` to return true even for releases where the +fence was never actually initialized (e.g. via `dma_fence_init()`). + +Consequently, during release cleanup in `qxl_release_free()`, the driver +attempted to put/free an uninitialized `dma_fence`, leading to refcount +underflows (`refcount_t: underflow; use-after-free`) and subsequent NULL +pointer dereferences in `dma_fence_signal_timestamp_locked()`. + +Fix this by switching from `kmalloc()` to `kzalloc_obj()` in +`qxl_release_alloc()`, ensuring all fields (including embedded fence +flags) are properly zero-initialized upon allocation, and remove +redundant explicit zero-initializations. + +The dumps in question: + refcount_t: underflow; use-after-free. + WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x59/0x90, CPU#0: kworker/0:0/1534 + Modules linked in: af_packet nft_fib_inet ... + CPU: 0 UID: 0 PID: 1534 Comm: kworker/0:0 Not tainted 7.1.3-1-default #1 PREEMPT(full) openSUSE Tumbleweed b041a6527f6e58424f4cd3de0fade8d408b378fd + ... + RIP: 0010:refcount_warn_saturate+0x59/0x90 + ... + Call Trace: + <TASK> + qxl_release_free+0xee/0xf0 [qxl d93e9381353e619799d56790f5f8dda6cce491f6] + qxl_garbage_collect+0xd1/0x1b0 [qxl d93e9381353e619799d56790f5f8dda6cce491f6] + process_one_work+0x19e/0x3a0 + ... + +And then of course: + BUG: kernel NULL pointer dereference, address: 0000000000000028 + ... + RIP: 0010:dma_fence_signal_timestamp_locked+0x32/0x120 + +Signed-off-by: Jiri Slaby (SUSE) <[email protected]> +Assisted-by: Gemini <[email protected]> # only commit log +Fixes: 2bcbc706dfa0 ("dma-buf: add dma_fence_was_initialized function v2") +Closes: https://bugzilla.suse.com/show_bug.cgi?id=1271081 +Cc: Christian König <[email protected]> +Cc: Tvrtko Ursulin <[email protected]> +Cc: Dave Airlie <[email protected]> +Cc: Gerd Hoffmann <[email protected]> +Cc: Maarten Lankhorst <[email protected]> +Cc: Maxime Ripard <[email protected]> +Cc: Thomas Zimmermann <[email protected]> +Cc: David Airlie <[email protected]> +Cc: Simona Vetter <[email protected]> +Cc: [email protected] +--- +Cc: [email protected] +Cc: [email protected] +Cc: [email protected] + +[v2] use kzalloc_obj() instead of bare kzalloc() + +Signed-off-by: Jiri Slaby <[email protected]> +--- + drivers/gpu/drm/qxl/qxl_release.c | 6 +----- + 1 file changed, 1 insertion(+), 5 deletions(-) + +diff --git a/drivers/gpu/drm/qxl/qxl_release.c b/drivers/gpu/drm/qxl/qxl_release.c +index 06979d0e8a9f..07dc6eafe6f7 100644 +--- a/drivers/gpu/drm/qxl/qxl_release.c ++++ b/drivers/gpu/drm/qxl/qxl_release.c +@@ -89,17 +89,13 @@ qxl_release_alloc(struct qxl_device *qdev, int type, + { + struct qxl_release *release; + int handle; +- size_t size = sizeof(*release); + +- release = kmalloc(size, GFP_KERNEL); ++ release = kzalloc_obj(*release); + if (!release) { + DRM_ERROR("Out of memory\n"); + return -ENOMEM; + } +- release->base.ops = NULL; + release->type = type; +- release->release_offset = 0; +- release->surface_release_id = 0; + INIT_LIST_HEAD(&release->bos); + + idr_preload(GFP_KERNEL); +-- +2.55.0 + ++++++ series.conf ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:17.937946333 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:17.941946474 +0200 @@ -113,6 +113,78 @@ patches.kernel.org/7.2.1-084-Linux-7.2.1.patch patches.kernel.org/7.2.2-001-inet-frags-strip-GSO-state-from-fragments-befor.patch patches.kernel.org/7.2.2-002-Linux-7.2.2.patch + patches.kernel.org/7.2.3-001-RDMA-rxe-Fix-responder-UAF-on-IB_QP_MAX_DEST_RD.patch + patches.kernel.org/7.2.3-002-RDMA-rxe-Fix-OOB-in-free_rd_atomic_resources.patch + patches.kernel.org/7.2.3-003-nvme-tcp-fix-usage-of-page_frag_cache.patch + patches.kernel.org/7.2.3-004-selftests-bpf-Fix-test_maps-sockmap-failure.patch + patches.kernel.org/7.2.3-005-fpga-dfl-fme-add-error-handling.patch + patches.kernel.org/7.2.3-006-accessibility-speakup-unregister-tty-ldisc-on-l.patch + patches.kernel.org/7.2.3-007-usb-xhci-Handle-bogus-TRB-pointers-in-Missed-Se.patch + patches.kernel.org/7.2.3-008-usb-xhci-Handle-USB3-port-events-when-there-is-.patch + patches.kernel.org/7.2.3-009-usb-xhci-bail-out-of-setup-if-the-controller-is.patch + patches.kernel.org/7.2.3-010-xhci-dbgtty-Fix-unregister-on-tty_register_driv.patch + patches.kernel.org/7.2.3-011-xhci-dbgtty-Fix-unregister-on-tty_alloc_driver-.patch + patches.kernel.org/7.2.3-012-fuse-fix-race-between-interrupt-and-resend.patch + patches.kernel.org/7.2.3-013-fuse-fix-missing-barrier-when-checking-io-uring.patch + patches.kernel.org/7.2.3-014-fuse-publish-io-uring-queues-with-release-seman.patch + patches.kernel.org/7.2.3-015-fuse-wait-for-FR_FINISHED-on-abort_on_kill-to-p.patch + patches.kernel.org/7.2.3-016-fuse-fix-invalidate-lock-leak-on-setattr-writeb.patch + patches.kernel.org/7.2.3-017-fuse-fix-invalidate-lock-leak-on-open-O_TRUNC-D.patch + patches.kernel.org/7.2.3-018-usb-usbtest-disable-dynamic-ID-support.patch + patches.kernel.org/7.2.3-019-usb-gadget-f_tcm-keep-port-count-until-LUN-tear.patch + patches.kernel.org/7.2.3-020-KVM-SEV-Allocate-full-pages-for-DE-EN-CRYPT-ops.patch + patches.kernel.org/7.2.3-021-KVM-SEV-Drop-FOLL_WRITE-for-encrypted-region-re.patch + patches.kernel.org/7.2.3-022-KVM-SEV-Track-the-GPA-of-the-guest-controlled-V.patch + patches.kernel.org/7.2.3-023-KVM-SEV-Extract-loading-of-guest-provided-VMSA-.patch + patches.kernel.org/7.2.3-024-KVM-SEV-Mark-vCPU-RUNNABLE-after-AP_CREATE-even.patch + patches.kernel.org/7.2.3-025-KVM-SEV-Wire-up-kvm_x86_ops.gmem_xxx-if-and-onl.patch + patches.kernel.org/7.2.3-026-tls-device-fix-out-of-bounds-write-in-tls_appen.patch + patches.kernel.org/7.2.3-027-gtp-serialize-PDP-context-updates.patch + patches.kernel.org/7.2.3-028-net-tcp-fix-TCP-AO-key-deletion-in-VRFs.patch + patches.kernel.org/7.2.3-029-tcp-fix-AO-info-use-after-free-in-tcp_ao_connec.patch + patches.kernel.org/7.2.3-030-net-tcp-ao-fix-use-after-free-of-current_key-on.patch + patches.kernel.org/7.2.3-031-net-advertise-TCP-MSS-from-the-configured-MTU-n.patch + patches.kernel.org/7.2.3-032-xfrm-espintcp-fix-UAF-during-close.patch + patches.kernel.org/7.2.3-033-tcp-clamp-route-advmss-to-TCP_MIN_MSS.patch + patches.kernel.org/7.2.3-034-xfrm-drop-ESP-in-TCP-packets-with-no-ingress-de.patch + patches.kernel.org/7.2.3-035-xfrm-avoid-lock-inversion-in-nat-keepalive-work.patch + patches.kernel.org/7.2.3-036-xfrm-ah6-validate-routing-header-segments_left.patch + patches.kernel.org/7.2.3-037-xfrm-fix-xfrm_state_construct-auth-trunc-leak.patch + patches.kernel.org/7.2.3-038-xfrm-bound-nat-keepalive-state-collection.patch + patches.kernel.org/7.2.3-039-net-bridge-mcast-fix-use-after-free-of-a-master.patch + patches.kernel.org/7.2.3-040-vlan-fix-skb_under_panic-and-races-when-togglin.patch + patches.kernel.org/7.2.3-041-net-packet-defer-vmalloc-TX_RING-free-until-skb.patch + patches.kernel.org/7.2.3-042-ipv6-seg6-clear-IPv4-control-block-on-IPIP-deca.patch + patches.kernel.org/7.2.3-043-batman-adv-reject-unrepresentable-multicast-TVL.patch + patches.kernel.org/7.2.3-044-vxlan-keep-the-last-remote-linked-during-FDB-fl.patch + patches.kernel.org/7.2.3-045-netfilter-nft_set_pipapo_avx2-add-missing-vzero.patch + patches.kernel.org/7.2.3-046-netfilter-nf_tables-don-t-queue-packet-path-obj.patch + patches.kernel.org/7.2.3-047-mm-swap-reject-swapon-on-filesystem-level-encry.patch + patches.kernel.org/7.2.3-048-kunit-irq-Continue-increasing-hrtimer-interval-.patch + patches.kernel.org/7.2.3-049-crypto-virtio-bound-the-akcipher-result-length.patch + patches.kernel.org/7.2.3-050-crypto-qcom-rng-Enable-clock-in-hwrng-case.patch + patches.kernel.org/7.2.3-051-crypto-qcom-rng-Remove-crypto_rng-interface.patch + patches.kernel.org/7.2.3-052-crypto-qcom-rng-Allow-zero-as-a-random-number.patch + patches.kernel.org/7.2.3-053-crypto-sun8i-ce-Remove-crypto_rng-interface.patch + patches.kernel.org/7.2.3-054-crypto-sun8i-ss-Remove-crypto_rng-interface.patch + patches.kernel.org/7.2.3-055-crypto-atmel-tdes-use-scatterlist-length-before.patch + patches.kernel.org/7.2.3-056-crypto-krb5-use-kfree_sensitive-for-derived-key.patch + patches.kernel.org/7.2.3-057-crypto-qce-fix-CCM-AAD-buffer-underallocation.patch + patches.kernel.org/7.2.3-058-crypto-iaa-fall-back-to-software-for-multi-entr.patch + patches.kernel.org/7.2.3-059-crypto-mxs-dcp-fix-source-scatterlist-length-ac.patch + patches.kernel.org/7.2.3-060-crypto-qce-Remove-unsafe-deprecated-algorithms.patch + patches.kernel.org/7.2.3-061-KVM-s390-vsie-zero-stale-crypto-bits.patch + patches.kernel.org/7.2.3-062-usb-core-Add-lock-to-usb_wakeup_notification.patch + patches.kernel.org/7.2.3-063-usb-core-Strengthen-error-handling-in-hub_hub_s.patch + patches.kernel.org/7.2.3-064-ALSA-usb-audio-Fix-sample-rates-for-PreSonus-Au.patch + patches.kernel.org/7.2.3-065-ALSA-usb-audio-fix-OOB-write-in-snd_usbmidi_nov.patch + patches.kernel.org/7.2.3-066-ALSA-usb-audio-Complete-cleanup-after-system-re.patch + patches.kernel.org/7.2.3-067-USB-serial-option-fix-slab-OOB-read-in-interrup.patch + patches.kernel.org/7.2.3-068-USB-serial-spcp8x5-drop-broken-carrier-detect-s.patch + patches.kernel.org/7.2.3-069-USB-c67x00-fix-use-after-free-in-c67x00_add_iso.patch + patches.kernel.org/7.2.3-070-wifi-mt76-mt7925-ensure-tx-headroom-in-usb_sdio.patch + patches.kernel.org/7.2.3-071-usb-usbfs-fix-use-after-free-of-usb_device-in-u.patch + patches.kernel.org/7.2.3-072-Linux-7.2.3.patch ######################################################## # Build fixes that apply to the vanilla kernel too. @@ -172,6 +244,7 @@ patches.suse/x86-mm-pat-allocate-split-page-tables-as-kernel-page-table.patch patches.suse/x86-mm-pat-fix-effective-RW-computation-in-lookup_address_.patch patches.suse/x86-alternative-exclude-text-poking-against-change_page_at.patch + patches.suse/drm-qxl-fix-use-after-free-and-NULL-pointer-deref.patch ######################################################## # kbuild/module infrastructure fixes ++++++ source-timestamp ++++++ --- /var/tmp/diff_new_pack.sJuJWO/_old 2026-09-07 11:29:17.979947806 +0200 +++ /var/tmp/diff_new_pack.sJuJWO/_new 2026-09-07 11:29:17.984947982 +0200 @@ -1,4 +1,4 @@ -2026-08-28 06:56:48 +0000 -GIT Revision: 93c77bdd9a1dc19c6c656eac93fc5f263d5fd2dd +2026-09-03 05:42:23 +0000 +GIT Revision: 263d9258ef078247c90a6b2b59d6e65ef2f26ae6 GIT Branch: stable
