CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTRTOFLOW_KEYS (bsc#1220255).
CVE-2024-26591: Fixed re-attachment branch in bpftracingprog_attach (bsc#1220254).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326).
CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
CVE-2024-26622: Fixed UAF write bug in tomoyowritecontrol() (bsc#1220825).
The following non-security bugs were fixed:
bpf: fix verification of indirect var-off stack access (git-fixes).
bpf: guard stack limits against 32bit overflow (git-fixes).
drop 2 git-fixes patches which are suspicious to introduce regression reported in bsc#1219073
fix unresolved hunks in readme.branch
kvm: vmx: move verw closer to vmentry for mds mitigation (git-fixes).
kvm: vmx: use bt+jnc, i.e. eflags.cf to select vmresume vs. vmlaunch (git-fixes).
nfs: avoid infinite loop in pnfsupdatelayout (bsc#1219633).
nvme: move nvmestopkeep_alive() back to original position (bsc#1211515).
nvme: remove nvmeallocrequest and nvmeallocrequest_qid (bsc#1214064).
nvme: start keep-alive after admin queue setup (bsc#1211515).
readme.branch: use correct mail for roy
rpm/kernel-binary.spec.in: install scripts/gdb when enabled in config (bsc#1219653) they are put into -devel subpackage. and a proper link to /usr/share/gdb/auto-load/ is created.
x86/asm: add asmrip() macro for x86-64 (%rip) suffix (git-fixes).
x86/bugs: add asm helpers for executing verw (git-fixes).
x86/bugs: use alternative() instead of mdsuserclear static key (git-fixes). also add the removed mdsuserclear symbol to kabi severities as it is exposed just for kvm module and is generally a core kernel component so removing it is low risk.
x86/entry_32: add verw just before userspace transition (git-fixes).
x86/entry_64: Add VERW just before userspace transition (git-fixes).