diff --git a/.files b/.files
index 107a5a5..622bb1f 100644
Binary files a/.files and b/.files differ
diff --git a/.rev b/.rev
index 1cfb759..847ede6 100644
--- a/.rev
+++ b/.rev
@@ -6298,4 +6298,12 @@ As this is a serious local privilege escalation, I would like to see a timely in
     <comment>6.3.6 &amp; 6.3.5 &amp; XFS CVE fix &amp; one AMD GPU fix (one bug still remaining) &amp; set X86_KERNEL_IBT=y (as per other distros and upstream default)</comment>
     <requestid>1090845</requestid>
   </revision>
+  <revision rev="693" vrev="1">
+    <srcmd5>ed881630a0370a8b77daab217b7bbb63</srcmd5>
+    <version>6.3.7</version>
+    <time>1686665331</time>
+    <user>dimstar_suse</user>
+    <comment>6.3.7 &amp; CVE fixes</comment>
+    <requestid>1092458</requestid>
+  </revision>
 </revisionlist>
diff --git a/dtb-aarch64.changes b/dtb-aarch64.changes
index 191490b..0765cac 100644
--- a/dtb-aarch64.changes
+++ b/dtb-aarch64.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/dtb-aarch64.spec b/dtb-aarch64.spec
index d546b8d..531acd8 100644
--- a/dtb-aarch64.spec
+++ b/dtb-aarch64.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
 %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,klp-symbols,splitflist,mergedep,moddep,modflist,kernel-subpackage-build})
 
 Name:           dtb-aarch64
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
diff --git a/dtb-armv6l.changes b/dtb-armv6l.changes
index 191490b..0765cac 100644
--- a/dtb-armv6l.changes
+++ b/dtb-armv6l.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/dtb-armv6l.spec b/dtb-armv6l.spec
index daa2eb5..d34b100 100644
--- a/dtb-armv6l.spec
+++ b/dtb-armv6l.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
 %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,klp-symbols,splitflist,mergedep,moddep,modflist,kernel-subpackage-build})
 
 Name:           dtb-armv6l
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
diff --git a/dtb-armv7l.changes b/dtb-armv7l.changes
index 191490b..0765cac 100644
--- a/dtb-armv7l.changes
+++ b/dtb-armv7l.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/dtb-armv7l.spec b/dtb-armv7l.spec
index a0ab293..dcd56d7 100644
--- a/dtb-armv7l.spec
+++ b/dtb-armv7l.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
 %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,klp-symbols,splitflist,mergedep,moddep,modflist,kernel-subpackage-build})
 
 Name:           dtb-armv7l
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
diff --git a/dtb-riscv64.changes b/dtb-riscv64.changes
index 191490b..0765cac 100644
--- a/dtb-riscv64.changes
+++ b/dtb-riscv64.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/dtb-riscv64.spec b/dtb-riscv64.spec
index 46f7f60..84ea85c 100644
--- a/dtb-riscv64.spec
+++ b/dtb-riscv64.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
 %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,klp-symbols,splitflist,mergedep,moddep,modflist,kernel-subpackage-build})
 
 Name:           dtb-riscv64
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
diff --git a/kernel-64kb.changes b/kernel-64kb.changes
index 191490b..0765cac 100644
--- a/kernel-64kb.changes
+++ b/kernel-64kb.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-64kb.spec b/kernel-64kb.spec
index 75fc823..0b3ec86 100644
--- a/kernel-64kb.spec
+++ b/kernel-64kb.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-64kb
 Summary:        Kernel with 64kb PAGE_SIZE
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-f583ba475430f56b79aabec05c7c036099baec27
-Provides:       kernel-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       kernel-%build_flavor-base-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
+Provides:       kernel-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 # END COMMON DEPS
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/kernel-debug.changes b/kernel-debug.changes
index 191490b..0765cac 100644
--- a/kernel-debug.changes
+++ b/kernel-debug.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-debug.spec b/kernel-debug.spec
index a124fd7..f25866a 100644
--- a/kernel-debug.spec
+++ b/kernel-debug.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-debug
 Summary:        A Debug Version of the Kernel
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-f583ba475430f56b79aabec05c7c036099baec27
-Provides:       kernel-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       kernel-%build_flavor-base-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
+Provides:       kernel-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 # END COMMON DEPS
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 %ifarch ppc64
 Provides:       kernel-kdump = 2.6.28
 Obsoletes:      kernel-kdump <= 2.6.28
diff --git a/kernel-default.changes b/kernel-default.changes
index 191490b..0765cac 100644
--- a/kernel-default.changes
+++ b/kernel-default.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-default.spec b/kernel-default.spec
index 5f9261b..1ae8af8 100644
--- a/kernel-default.spec
+++ b/kernel-default.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-default
 Summary:        The Standard Kernel
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-f583ba475430f56b79aabec05c7c036099baec27
-Provides:       kernel-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       kernel-%build_flavor-base-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
+Provides:       kernel-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 # END COMMON DEPS
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 %ifarch %ix86
 Provides:       kernel-smp = 2.6.17
 Obsoletes:      kernel-smp <= 2.6.17
diff --git a/kernel-docs.changes b/kernel-docs.changes
index 191490b..0765cac 100644
--- a/kernel-docs.changes
+++ b/kernel-docs.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-docs.spec b/kernel-docs.spec
index 71e680a..8178fe1 100644
--- a/kernel-docs.spec
+++ b/kernel-docs.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -31,9 +31,9 @@ Name:           kernel-docs
 Summary:        Kernel Documentation
 License:        GPL-2.0-only
 Group:          Documentation/Man
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -67,7 +67,7 @@ BuildRequires:  texlive-zapfding
 %endif
 URL:            https://www.kernel.org/
 Provides:       %name = %version-%source_rel
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 BuildArch:      noarch
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/kernel-kvmsmall.changes b/kernel-kvmsmall.changes
index 191490b..0765cac 100644
--- a/kernel-kvmsmall.changes
+++ b/kernel-kvmsmall.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-kvmsmall.spec b/kernel-kvmsmall.spec
index 3e8ee69..fbe2090 100644
--- a/kernel-kvmsmall.spec
+++ b/kernel-kvmsmall.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-kvmsmall
 Summary:        The Small Developer Kernel for KVM
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-f583ba475430f56b79aabec05c7c036099baec27
-Provides:       kernel-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       kernel-%build_flavor-base-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
+Provides:       kernel-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 # END COMMON DEPS
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/kernel-lpae.changes b/kernel-lpae.changes
index 191490b..0765cac 100644
--- a/kernel-lpae.changes
+++ b/kernel-lpae.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-lpae.spec b/kernel-lpae.spec
index 6693936..98dcd1f 100644
--- a/kernel-lpae.spec
+++ b/kernel-lpae.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-lpae
 Summary:        Kernel for LPAE enabled systems
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-f583ba475430f56b79aabec05c7c036099baec27
-Provides:       kernel-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       kernel-%build_flavor-base-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
+Provides:       kernel-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 # END COMMON DEPS
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/kernel-obs-build.changes b/kernel-obs-build.changes
index 191490b..0765cac 100644
--- a/kernel-obs-build.changes
+++ b/kernel-obs-build.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-obs-build.spec b/kernel-obs-build.spec
index ab29a74..8911226 100644
--- a/kernel-obs-build.spec
+++ b/kernel-obs-build.spec
@@ -19,7 +19,7 @@
 
 #!BuildIgnore: post-build-checks
 
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -44,7 +44,7 @@ BuildRequires:  util-linux
 %endif
 %endif
 %endif
-BuildRequires:  kernel%kernel_flavor-srchash-f583ba475430f56b79aabec05c7c036099baec27
+BuildRequires:  kernel%kernel_flavor-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 
 %if 0%{?rhel_version}
 BuildRequires:  kernel
@@ -56,9 +56,9 @@ BuildRequires:  dracut
 Summary:        package kernel and initrd for OBS VM builds
 License:        GPL-2.0-only
 Group:          SLES
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
diff --git a/kernel-obs-qa.changes b/kernel-obs-qa.changes
index 191490b..0765cac 100644
--- a/kernel-obs-qa.changes
+++ b/kernel-obs-qa.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-obs-qa.spec b/kernel-obs-qa.spec
index e79ae84..3dafa83 100644
--- a/kernel-obs-qa.spec
+++ b/kernel-obs-qa.spec
@@ -17,7 +17,7 @@
 # needsrootforbuild
 
 
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -32,9 +32,9 @@ ExclusiveArch:  aarch64 armv6hl armv7hl ppc64 ppc64le riscv64 s390x x86_64
 Summary:        Basic QA tests for the kernel
 License:        GPL-2.0-only
 Group:          SLES
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
diff --git a/kernel-pae.changes b/kernel-pae.changes
index 191490b..0765cac 100644
--- a/kernel-pae.changes
+++ b/kernel-pae.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-pae.spec b/kernel-pae.spec
index 2da42ae..4bd04b9 100644
--- a/kernel-pae.spec
+++ b/kernel-pae.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-pae
 Summary:        Kernel with PAE Support
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-f583ba475430f56b79aabec05c7c036099baec27
-Provides:       kernel-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       kernel-%build_flavor-base-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
+Provides:       kernel-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 # END COMMON DEPS
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 %ifarch %ix86
 Provides:       kernel-bigsmp = 2.6.17
 Obsoletes:      kernel-bigsmp <= 2.6.17
diff --git a/kernel-source.changes b/kernel-source.changes
index 191490b..0765cac 100644
--- a/kernel-source.changes
+++ b/kernel-source.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-source.spec b/kernel-source.spec
index d135793..9f2b6bc 100644
--- a/kernel-source.spec
+++ b/kernel-source.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -30,9 +30,9 @@
 %endif
 
 Name:           kernel-source
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -49,7 +49,7 @@ BuildRequires:  fdupes
 BuildRequires:  sed
 Requires(post): coreutils sed
 Provides:       %name = %version-%source_rel
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 Provides:       linux
 Provides:       multiversion(kernel)
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
diff --git a/kernel-syms.changes b/kernel-syms.changes
index 191490b..0765cac 100644
--- a/kernel-syms.changes
+++ b/kernel-syms.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-syms.spec b/kernel-syms.spec
index e674068..8fb5fed 100644
--- a/kernel-syms.spec
+++ b/kernel-syms.spec
@@ -24,10 +24,10 @@ Name:           kernel-syms
 Summary:        Kernel Symbol Versions (modversions)
 License:        GPL-2.0-only
 Group:          Development/Sources
-Version:        6.3.6
+Version:        6.3.7
 %if %using_buildservice
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -52,7 +52,7 @@ Requires:       kernel-pae-devel = %version-%source_rel
 %endif
 Requires:       pesign-obs-integration
 Provides:       %name = %version-%source_rel
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 Provides:       multiversion(kernel)
 Source:         README.KSYMS
 Requires:       kernel-devel%variant = %version-%source_rel
diff --git a/kernel-vanilla.changes b/kernel-vanilla.changes
index 191490b..0765cac 100644
--- a/kernel-vanilla.changes
+++ b/kernel-vanilla.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-vanilla.spec b/kernel-vanilla.spec
index 24699c8..224bdb0 100644
--- a/kernel-vanilla.spec
+++ b/kernel-vanilla.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-vanilla
 Summary:        The Standard Kernel - without any SUSE patches
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-f583ba475430f56b79aabec05c7c036099baec27
-Provides:       kernel-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       kernel-%build_flavor-base-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
+Provides:       kernel-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 # END COMMON DEPS
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/kernel-zfcpdump.changes b/kernel-zfcpdump.changes
index 191490b..0765cac 100644
--- a/kernel-zfcpdump.changes
+++ b/kernel-zfcpdump.changes
@@ -1,4 +1,545 @@
 -------------------------------------------------------------------
+Mon Jun 12 07:01:32 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.7 (bsc#1012628).
+- RDMA/bnxt_re: Fix the page_size used during the MR creation
+  (bsc#1012628).
+- phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix
+  CNTL2_DIF_TX_CTL0 value (bsc#1012628).
+- RDMA/efa: Fix unsupported page sizes in device (bsc#1012628).
+- RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628).
+- RDMA/hns: Fix base address table allocation (bsc#1012628).
+- RDMA/hns: Modify the value of long message loopback slice
+  (bsc#1012628).
+- dmaengine: at_xdmac: fix potential Oops in
+  at_xdmac_prep_interleaved() (bsc#1012628).
+- RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628).
+- RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
+  (bsc#1012628).
+- iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628).
+- iommu/rockchip: Fix unwind goto issue (bsc#1012628).
+- iommu/amd: Don't block updates to GATag if guest mode is on
+  (bsc#1012628).
+- iommu/amd: Handle GALog overflows (bsc#1012628).
+- iommu/amd: Fix up merge conflict resolution (bsc#1012628).
+- iommu/amd: Add missing domain type checks (bsc#1012628).
+- nfsd: make a copy of struct iattr before calling notify_change
+  (bsc#1012628).
+- dmaengine: pl330: rename _start to prevent build error
+  (bsc#1012628).
+- crypto: x86/aria - Use 16 byte alignment for GFNI constant
+  vectors (bsc#1012628).
+- riscv: Fix unused variable warning when BUILTIN_DTB is set
+  (bsc#1012628).
+- net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628).
+- net/mlx5e: TC, Move main flow attribute cleanup to helper func
+  (bsc#1012628).
+- net/mlx5e: Extract remaining tunnel encap code to dedicated file
+  (bsc#1012628).
+- net/mlx5e: Prevent encap offload when neigh update is running
+  (bsc#1012628).
+- net/mlx5e: Consider internal buffers size in port buffer
+  calculations (bsc#1012628).
+- net/mlx5e: Do not update SBCM when prio2buffer command is
+  invalid (bsc#1012628).
+- net/mlx5: Drain health before unregistering devlink
+  (bsc#1012628).
+- net/mlx5: SF, Drain health before removing device (bsc#1012628).
+- net/mlx5: fw_tracer, Fix event handling (bsc#1012628).
+- net/mlx5e: Use query_special_contexts cmd only once per mdev
+  (bsc#1012628).
+- net/mlx5e: CT: Use per action stats (bsc#1012628).
+- net/mlx5e: TC, Remove CT action reordering (bsc#1012628).
+- net/mlx5: Fix post parse infra to only parse every action once
+  (bsc#1012628).
+- net/mlx5e: Don't attach netdev profile while handling internal
+  error (bsc#1012628).
+- net/mlx5e: Move Ethernet driver debugfs to profile init callback
+  (bsc#1012628).
+- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
+  pressure (bsc#1012628).
+- net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked
+  (bsc#1012628).
+- netrom: fix info-leak in nr_write_internal() (bsc#1012628).
+- af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628).
+- tls: improve lockless access safety of tls_err_abort()
+  (bsc#1012628).
+- amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628).
+- perf ftrace latency: Remove unnecessary "--" from --use-nsec
+  option (bsc#1012628).
+- mtd: rawnand: ingenic: fix empty stub helper definitions
+  (bsc#1012628).
+- efi: Bump stub image version for macOS HVF compatibility
+  (bsc#1012628).
+- RDMA/irdma: Prevent QP use after free (bsc#1012628).
+- RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628).
+- af_packet: do not use READ_ONCE() in packet_bind()
+  (bsc#1012628).
+- tcp: deny tcp_disconnect() when threads are waiting
+  (bsc#1012628).
+- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if
+  user_mss set (bsc#1012628).
+- rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628).
+- net/smc: Scan from current RMB list when no position specified
+  (bsc#1012628).
+- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD
+  LINK (bsc#1012628).
+- net/sched: sch_ingress: Only create under TC_H_INGRESS
+  (bsc#1012628).
+- net/sched: sch_clsact: Only create under TC_H_CLSACT
+  (bsc#1012628).
+- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress
+  (clsact) Qdiscs (bsc#1012628).
+- net/sched: Prohibit regrafting ingress or clsact Qdiscs
+  (bsc#1012628).
+- net: sched: fix NULL pointer dereference in mq_attach
+  (bsc#1012628).
+- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
+  (bsc#1012628).
+- udp6: Fix race condition in udp6_sendmsg & connect
+  (bsc#1012628).
+- nfsd: fix double fget() bug in __write_ports_addfd()
+  (bsc#1012628).
+- HID: logitech-hidpp: Handle timeout differently from busy
+  (bsc#1012628).
+- nvme: fix the name of Zone Append for verbose logging
+  (bsc#1012628).
+- net/mlx5e: Fix error handling in mlx5e_refresh_tirs
+  (bsc#1012628).
+- net/mlx5: Read embedded cpu after init bit cleared
+  (bsc#1012628).
+- sfc: fix error unwinds in TC offload (bsc#1012628).
+- iommu/mediatek: Flush IOTLB completely only if domain has been
+  attached (bsc#1012628).
+- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
+  (bsc#1012628).
+- tcp: fix mishandling when the sack compression is deferred
+  (bsc#1012628).
+- net: ipa: Use correct value for IPA_STATUS_SIZE (bsc#1012628).
+- net: dsa: mv88e6xxx: Increase wait after reset deactivation
+  (bsc#1012628).
+- mtd: rawnand: marvell: ensure timing values are written
+  (bsc#1012628).
+- mtd: rawnand: marvell: don't set the NAND frequency select
+  (bsc#1012628).
+- net: renesas: rswitch: Fix return value in error path of xmit
+  (bsc#1012628).
+- net: phy: mxl-gpy: extend interrupt fix to all impacted variants
+  (bsc#1012628).
+- ice: recycle/free all of the fragments from multi-buffer frame
+  (bsc#1012628).
+- rtnetlink: call validate_linkmsg in rtnl_create_link
+  (bsc#1012628).
+- rtnetlink: move IFLA_GSO_ tb check to validate_linkmsg
+  (bsc#1012628).
+- rtnetlink: add the missing IFLA_GRO_ tb check in
+  validate_linkmsg (bsc#1012628).
+- mptcp: avoid unneeded __mptcp_nmpc_socket() usage (bsc#1012628).
+- mptcp: add annotations around msk->subflow accesses
+  (bsc#1012628).
+- mptcp: avoid unneeded address copy (bsc#1012628).
+- mptcp: simplify subflow_syn_recv_sock() (bsc#1012628).
+- mptcp: consolidate passive msk socket initialization
+  (bsc#1012628).
+- mptcp: fix data race around msk->first access (bsc#1012628).
+- mptcp: add annotations around sk->sk_shutdown accesses
+  (bsc#1012628).
+- drm/amdgpu: release gpu full access after
+  "amdgpu_device_ip_late_init" (bsc#1012628).
+- watchdog: menz069_wdt: fix watchdog initialisation
+  (bsc#1012628).
+- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
+  IDs (bsc#1012628).
+- drm/amd/display: fix memleak in aconnector->timing_requested
+  (bsc#1012628).
+- LoongArch: Add ARCH_HAS_FORTIFY_SOURCE selection (bsc#1012628).
+- ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet
+  (bsc#1012628).
+- drm/amdgpu: Use the default reset when loading or reloading
+  the driver (bsc#1012628).
+- mailbox: mailbox-test: Fix potential double-free in
+  mbox_test_message_write() (bsc#1012628).
+- drm/ast: Fix ARM compatibility (bsc#1012628).
+- btrfs: abort transaction when sibling keys check fails for
+  leaves (bsc#1012628).
+- ARM: 9295/1: unwind:fix unwind abort for uleb128 case
+  (bsc#1012628).
+- perf/x86/intel/ds: Flush PEBS DS when changing PEBS_DATA_CFG
+  (bsc#1012628).
+- hwmon: (k10temp) Add PCI ID for family 19, model 78h
+  (bsc#1012628).
+- media: rcar-vin: Gen3 can not scale NV12 (bsc#1012628).
+- media: rcar-vin: Fix NV12 size alignment (bsc#1012628).
+- media: rcar-vin: Select correct interrupt mode for
+  V4L2_FIELD_ALTERNATE (bsc#1012628).
+- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
+  (bsc#1012628).
+- platform/mellanox: fix potential race in mlxbf-tmfifo driver
+  (bsc#1012628).
+- gfs2: Don't deref jdesc in evict (bsc#1012628).
+- drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution
+  (bsc#1012628).
+- drm/amdgpu: set gfx9 onwards APU atomics support to be true
+  (bsc#1012628).
+- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
+  (bsc#1012628).
+- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (bsc#1012628).
+- fbdev: stifb: Fix info entry in sti_struct on error path
+  (bsc#1012628).
+- nbd: Fix debugfs_create_dir error checking (bsc#1012628).
+- block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
+  (bsc#1012628).
+- nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
+  (bsc#1012628).
+- nvme-pci: add quirk for missing secondary temperature thresholds
+  (bsc#1012628).
+- nvme-pci: clamp max_hw_sectors based on DMA optimized limitation
+  (bsc#1012628).
+- ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12
+  (bsc#1012628).
+- ASoC: dwc: limit the number of overrun messages (bsc#1012628).
+- cpupower:Fix resource leaks in sysfs_get_enabled()
+  (bsc#1012628).
+- ASoC: SOF: amd: Fix NULL pointer crash in acp_sof_ipc_msg_data
+  function (bsc#1012628).
+- um: harddog: fix modular build (bsc#1012628).
+- xfrm: Check if_id in inbound policy/secpath match (bsc#1012628).
+- ASoC: jz4740-i2s: Make I2S divider calculations more robust
+  (bsc#1012628).
+- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI
+  codecs (bsc#1012628).
+- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
+  (bsc#1012628).
+- ASoC: ssm2602: Add workaround for playback distortions
+  (bsc#1012628).
+- media: dvb_demux: fix a bug for the continuity counter
+  (bsc#1012628).
+- media: dvb-usb: az6027: fix three null-ptr-deref in
+  az6027_i2c_xfer() (bsc#1012628).
+- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
+  ce6230_i2c_master_xfer() (bsc#1012628).
+- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
+  rtl28xxu_i2c_xfer (bsc#1012628).
+- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
+  (bsc#1012628).
+- media: dvb-usb: dw2102: fix uninit-value in
+  su3000_read_mac_address (bsc#1012628).
+- media: netup_unidvb: fix irq init by register it at the end
+  of probe (bsc#1012628).
+- media: dvb_ca_en50221: fix a size write bug (bsc#1012628).
+- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
+  from ID table (bsc#1012628).
+- ASoC: SOF: debug: conditionally bump runtime_pm counter on
+  exceptions (bsc#1012628).
+- ASoC: SOF: pcm: fix pm_runtime imbalance in error handling
+  (bsc#1012628).
+- ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in
+  error handling (bsc#1012628).
+- ASoC: SOF: pm: save io region state in case of errors in resume
+  (bsc#1012628).
+- s390/pkey: zeroize key blobs (bsc#1012628).
+- s390/topology: honour nr_cpu_ids when adding CPUs (bsc#1012628).
+- s390/ipl: fix IPIB virtual vs physical address confusion
+  (bsc#1012628).
+- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
+  (bsc#1012628).
+- wifi: rtl8xxxu: fix authentication timeout due to incorrect
+  RCR value (bsc#1012628).
+- ARM: dts: stm32: add pin map for CAN controller on stm32f7
+  (bsc#1012628).
+- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
+  (bsc#1012628).
+- arm64: vdso: Pass (void *) to virt_to_page() (bsc#1012628).
+- wifi: mac80211: simplify chanctx allocation (bsc#1012628).
+- wifi: mac80211: consider reserved chanctx for mindef
+  (bsc#1012628).
+- wifi: mac80211: recalc chanctx mindef before assigning
+  (bsc#1012628).
+- wifi: iwlwifi: mvm: Add locking to the rate read flow
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ tag calculation (bsc#1012628).
+- scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc()
+  (bsc#1012628).
+- scsi: ufs: core: Fix MCQ nr_hw_queues (bsc#1012628).
+- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch
+  failed (bsc#1012628).
+- wifi: b43: fix incorrect __packed annotation (bsc#1012628).
+- net: wwan: t7xx: Ensure init is completed before system sleep
+  (bsc#1012628).
+- netfilter: conntrack: define variables exp_nat_nla_policy and
+  any_addr with CONFIG_NF_NAT (bsc#1012628).
+- nvme-multipath: don't call blk_mark_disk_dead in
+  nvme_mpath_remove_disk (bsc#1012628).
+- nvme: do not let the user delete a ctrl before a complete
+  initialization (bsc#1012628).
+- ALSA: oss: avoid missing-prototype warnings (bsc#1012628).
+- drm/msm: Be more shouty if per-process pgtables aren't working
+  (bsc#1012628).
+- atm: hide unused procfs functions (bsc#1012628).
+- ceph: silence smatch warning in reconnect_caps_cb()
+  (bsc#1012628).
+- drm/amdgpu: skip disabling fence driver src_irqs when device
+  is unplugged (bsc#1012628).
+- ublk: fix AB-BA lockdep warning (bsc#1012628).
+- nvme-pci: Add quirk for Teamgroup MP33 SSD (bsc#1012628).
+- block: Deny writable memory mapping if block is read-only
+  (bsc#1012628).
+- iio: adc: imx93: fix a signedness bug in imx93_adc_read_raw()
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix a circular locking issue (bsc#1012628).
+- KVM: arm64: vgic: Wrap vgic_its_create() with config_lock
+  (bsc#1012628).
+- KVM: arm64: vgic: Fix locking comment (bsc#1012628).
+- KVM: arm64: Prevent unconditional donation of unmapped regions
+  from the host (bsc#1012628).
+- scsi: qla2xxx: Fix NULL pointer dereference in target mode
+  (bsc#1012628).
+- perf/x86/intel: Save/restore cpuc->active_pebs_data_cfg when
+  using guest PEBS (bsc#1012628).
+- KVM: arm64: Reload PTE after invoking walker callback on
+  preorder traversal (bsc#1012628).
+- media: mediatek: vcodec: Only apply 4K frame sizes on decoder
+  formats (bsc#1012628).
+- mailbox: mailbox-test: fix a locking issue in
+  mbox_test_message_write() (bsc#1012628).
+- drivers: base: cacheinfo: Fix shared_cpu_map changes in event
+  of CPU hotplug (bsc#1012628).
+- drivers: base: cacheinfo: Update cpu_map_populated during CPU
+  Hotplug (bsc#1012628).
+- dt-bindings: serial: 8250_omap: add rs485-rts-active-high
+  (bsc#1012628).
+- media: uvcvideo: Don't expose unsupported formats to userspace
+  (bsc#1012628).
+- selftests/ftrace: Choose target function for filter test from
+  samples (bsc#1012628).
+- iio: accel: st_accel: Fix invalid mount_matrix on devices
+  without ACPI _ONT method (bsc#1012628).
+- iio: adc: mxs-lradc: fix the order of two cleanup operations
+  (bsc#1012628).
+- iio: tmag5273: Fix runtime PM leak on measurement error
+  (bsc#1012628).
+- iio: ad4130: Make sure clock provider gets removed
+  (bsc#1012628).
+- iio: adc: mt6370: Fix ibus and ibat scaling value of some
+  specific vendor ID chips (bsc#1012628).
+- HID: google: add jewel USB id (bsc#1012628).
+- HID: wacom: avoid integer overflow in wacom_intuos_inout()
+  (bsc#1012628).
+- iio: imu: inv_icm42600: fix timestamp reset (bsc#1012628).
+- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
+  compatible value (bsc#1012628).
+- iio: light: vcnl4035: fixed chip ID check (bsc#1012628).
+- iio: accel: kx022a fix irq getting (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-channels setup if none is present
+  (bsc#1012628).
+- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
+  IRQ_DISABLE_UNLAZY flag (bsc#1012628).
+- iio: dac: mcp4725: Fix i2c_master_send() return value handling
+  (bsc#1012628).
+- iio: addac: ad74413: fix resistance input processing
+  (bsc#1012628).
+- iio: adc: ad7192: Change "shorted" channels to differential
+  (bsc#1012628).
+- iio: adc: stm32-adc: skip adc-diff-channels setup if none is
+  present (bsc#1012628).
+- iio: dac: build ad5758 driver when AD5758 is selected
+  (bsc#1012628).
+- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
+  (bsc#1012628).
+- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
+  (bsc#1012628).
+- usb: cdns3: fix NCM gadget RX speed 20x slow than expection
+  at iMX8QM (bsc#1012628).
+- usb: gadget: f_fs: Add unbind event before functionfs_unbind
+  (bsc#1012628).
+- md/raid5: fix miscalculation of 'end_sector' in
+  raid5_read_one_chunk() (bsc#1012628).
+- misc: fastrpc: Reassign memory ownership only for remote heap
+  (bsc#1012628).
+- misc: fastrpc: return -EPIPE to invocations on device removal
+  (bsc#1012628).
+- misc: fastrpc: reject new invocations during device removal
+  (bsc#1012628).
+- scsi: stex: Fix gcc 13 warnings (bsc#1012628).
+- ata: libata-scsi: Use correct device no in ata_find_dev()
+  (bsc#1012628).
+- drm/amdgpu: enable tmz by default for GC 11.0.1 (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
+  (bsc#1012628).
+- drm/amd/pm: resolve reboot exception for si oland (bsc#1012628).
+- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
+  (bsc#1012628).
+- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
+  (bsc#1012628).
+- mmc: vub300: fix invalid response handling (bsc#1012628).
+- mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
+  (bsc#1012628).
+- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
+  instead of UARTCTRL_SBK (bsc#1012628).
+- btrfs: fix csum_tree_block page iteration to avoid tripping
+  on -Werror=array-bounds (bsc#1012628).
+- phy: qcom-qmp-combo: fix init-count imbalance (bsc#1012628).
+- phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
+  (bsc#1012628).
+- block: fix revalidate performance regression (bsc#1012628).
+- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
+  (bsc#1012628).
+- iommu/amd: Fix domain flush size when syncing iotlb
+  (bsc#1012628).
+- tpm, tpm_tis: correct tpm_tis_flags enumeration values
+  (bsc#1012628).
+- module/decompress: Fix error checking on zstd decompression
+  (bsc#1012628).
+- firmware: qcom_scm: Use fixed width src vm bitmap (bsc#1012628).
+- misc: fastrpc: Pass proper scm arguments for secure map request
+  (bsc#1012628).
+- btrfs: call btrfs_orig_bbio_end_io in btrfs_end_bio_work
+  (bsc#1012628).
+- HID: hidpp: terminate retry loop on success (bsc#1012628).
+- dmaengine: at_hdmac: Repair bitfield macros for peripheral ID
+  handling (bsc#1012628).
+- dmaengine: at_hdmac: Extend the Flow Controller bitfield to
+  three bits (bsc#1012628).
+- riscv: perf: Fix callchain parse error with kernel tracepoint
+  events (bsc#1012628).
+- io_uring: undeprecate epoll_ctl support (bsc#1012628).
+- selinux: don't use make's grouped targets feature yet
+  (bsc#1012628).
+- mtdchar: mark bits of ioctl handler noinline (bsc#1012628).
+- tracing/timerlat: Always wakeup the timerlat thread
+  (bsc#1012628).
+- tracing/histograms: Allow variables to have some modifiers
+  (bsc#1012628).
+- tracing/probe: trace_probe_primary_from_call(): checked
+  list_first_entry (bsc#1012628).
+- selftests: mptcp: connect: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: pm nl: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: join: avoid using 'cmp --bytes' (bsc#1012628).
+- selftests: mptcp: diag: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: simult flows: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: sockopt: skip if MPTCP is not supported
+  (bsc#1012628).
+- selftests: mptcp: userspace pm: skip if MPTCP is not supported
+  (bsc#1012628).
+- mptcp: fix connect timeout handling (bsc#1012628).
+- mptcp: fix active subflow finalization (bsc#1012628).
+- ext4: add EA_INODE checking to ext4_iget() (bsc#1012628).
+- ext4: set lockdep subclass for the ea_inode in
+  ext4_xattr_inode_cache_find() (bsc#1012628).
+- ext4: disallow ea_inodes with extended attributes (bsc#1012628).
+- ext4: add lockdep annotations for i_data_sem for ea_inode's
+  (bsc#1012628).
+- fbcon: Fix null-ptr-deref in soft_cursor (bsc#1012628).
+- serial: 8250_tegra: Fix an error handling path in
+  tegra_uart_probe() (bsc#1012628).
+- serial: cpm_uart: Fix a COMPILE_TEST dependency (bsc#1012628).
+- powerpc/xmon: Use KSYM_NAME_LEN in array size (bsc#1012628).
+- test_firmware: prevent race conditions by a correct
+  implementation of locking (bsc#1012628).
+- test_firmware: fix a memory leak with reqs buffer (bsc#1012628).
+- test_firmware: fix the memory leak of the allocated firmware
+  buffer (bsc#1012628).
+- KVM: arm64: Populate fault info for watchpoint (bsc#1012628).
+- KVM: arm64: Drop last page ref in
+  kvm_pgtable_stage2_free_removed() (bsc#1012628).
+- KVM: x86/mmu: Grab memslot for correct address space in NX
+  recovery worker (bsc#1012628).
+- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
+  (bsc#1012628).
+- KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID
+  is out-of-bounds (bsc#1012628).
+- ksmbd: fix credit count leakage (bsc#1012628).
+- ksmbd: fix UAF issue from opinfo->conn (bsc#1012628).
+- ksmbd: fix incorrect AllocationSize set in smb2_get_info
+  (bsc#1012628).
+- ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
+  (bsc#1012628).
+- ksmbd: fix multiple out-of-bounds read during context decoding
+  (bsc#1012628).
+- KEYS: asymmetric: Copy sig and digest in
+  public_key_verify_signature() (bsc#1012628).
+- regmap: Account for register length when chunking (bsc#1012628).
+- tpm, tpm_tis: Request threaded interrupt handler (bsc#1012628).
+- iommu/amd/pgtbl_v2: Fix domain max address (bsc#1012628).
+- riscv: vmlinux.lds.S: Explicitly handle '.got' section
+  (bsc#1012628).
+- ext4: enable the lazy init thread when remounting read/write
+  (bsc#1012628).
+- commit b5f9ff5
+
+-------------------------------------------------------------------
+Fri Jun  9 12:31:43 CEST 2023 - tiwai@suse.de
+
+- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
+- commit 2c9fe82
+
+-------------------------------------------------------------------
+Tue Jun  6 16:58:50 CEST 2023 - msuchanek@suse.de
+
+- Refresh patches.suse/add-suse-supported-flag.patch.
+  Fix table alignment.
+- commit 6152a50
+
+-------------------------------------------------------------------
+Mon Jun  5 15:51:03 CEST 2023 - mfranc@suse.cz
+
+- s390/ap: add ap status asynch error support (jsc#PED-3332).
+- s390/ap: implement SE AP bind, unbind and associate
+  (jsc#PED-3332).
+- s390/ap: introduce low frequency polling possibility
+  (jsc#PED-3332).
+- s390/ap: new low level inline functions ap_bapq() and ap_aapq()
+  (jsc#PED-3332).
+- s390/ap: provide F bit parameter for ap_rapq() and ap_zapq()
+  (jsc#PED-3332).
+- s390/ap: filter ap card functions, new queue functions attribute
+  (jsc#PED-3332).
+- s390/ap: make tapq gr2 response a struct (jsc#PED-3332).
+- s390/ap: introduce new AP bus sysfs attribute features
+  (jsc#PED-3332).
+- s390/ap: exploit new B bit from QCI config info (jsc#PED-3332).
+- s390/zcrypt: replace scnprintf with sysfs_emit (jsc#PED-3332).
+- s390/zcrypt: rework length information for dqap (jsc#PED-3332).
+- s390/zcrypt: make psmid unsigned long instead of long long
+  (jsc#PED-3332).
+- commit 589eabc
+
+-------------------------------------------------------------------
+Mon Jun  5 13:41:25 CEST 2023 - tiwai@suse.de
+
+- media: dvb-core: Fix use-after-free due to race condition at
+  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
+- media: dvb-core: Fix kernel WARNING for blocking operation in
+  wait_event*() (CVE-2023-31084 bsc#1210783).
+- media: dvb-core: Fix use-after-free due to race at
+  dvb_register_device() (CVE-2022-45884 bsc#1205756).
+- media: dvb-core: Fix use-after-free due on race condition at
+  dvb_net (CVE-2022-45886 bsc#1205760).
+- media: dvb-core: Fix use-after-free on race condition at
+  dvb_frontend (CVE-2022-45885 bsc#1205758).
+- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
+  (CVE-2022-45887 bsc#1205762).
+- commit c56eadf
+
+-------------------------------------------------------------------
+Mon Jun  5 13:37:12 CEST 2023 - tiwai@suse.de
+
+- Update patch metadata for security fixes (bsc#1209287 CVE-2023-1380 bsc#1210533 CVE-2023-2002 bsc#1210806 CVE-2023-2269 CVE-2023-32233 bsc#1211043)
+- commit 461c57a
+
+-------------------------------------------------------------------
 Mon Jun  5 09:58:15 CEST 2023 - jslaby@suse.cz
 
 - Linux 6.3.6 (bsc#1012628).
diff --git a/kernel-zfcpdump.spec b/kernel-zfcpdump.spec
index 3272fdb..62f0d1a 100644
--- a/kernel-zfcpdump.spec
+++ b/kernel-zfcpdump.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.6
+%define patchversion 6.3.7
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-zfcpdump
 Summary:        The IBM System Z zfcpdump Kernel
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.6
+Version:        6.3.7
 %if 0%{?is_kotd}
-Release:        <RELEASE>.gf583ba4
+Release:        <RELEASE>.gb5f9ff5
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-f583ba475430f56b79aabec05c7c036099baec27
-Provides:       kernel-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       kernel-%build_flavor-base-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
+Provides:       kernel-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 # END COMMON DEPS
-Provides:       %name-srchash-f583ba475430f56b79aabec05c7c036099baec27
+Provides:       %name-srchash-b5f9ff562b088767ac46cc215eaecdd209a0b42a
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/patches.kernel.org.tar.bz2 b/patches.kernel.org.tar.bz2
index 3c1cc1c..5814272 120000
--- a/patches.kernel.org.tar.bz2
+++ b/patches.kernel.org.tar.bz2
@@ -1 +1 @@
-/ipfs/bafybeib37cagvoeneadk4iy3ttcf5nyiwav6x2nklwp5sqqc5z4mo2pqbq
\ No newline at end of file
+/ipfs/bafybeih3jmwj4fiddmrl2k6wj6gbhmwssov3263mub2kd3mlnjxb4guvgy
\ No newline at end of file
diff --git a/patches.suse.tar.bz2 b/patches.suse.tar.bz2
index 5232fc2..592dd8e 120000
--- a/patches.suse.tar.bz2
+++ b/patches.suse.tar.bz2
@@ -1 +1 @@
-/ipfs/bafkreiexbu74mxoa3bu5ymkiqqvlusq5bs3kfn47gdtt4s73oupbomzrzi
\ No newline at end of file
+/ipfs/bafkreiemjidbxqhmjb6uogn732gghitjq6tgphg6ehbywtwnfb5e7w7gxa
\ No newline at end of file
diff --git a/series.conf b/series.conf
index 743e067..8827f16 100644
--- a/series.conf
+++ b/series.conf
@@ -1518,6 +1518,292 @@
 	patches.kernel.org/6.3.6-044-cpufreq-amd-pstate-Add-fast_switch-callback.patch
 	patches.kernel.org/6.3.6-045-netfilter-ctnetlink-Support-offloaded-conntrack.patch
 	patches.kernel.org/6.3.6-046-Linux-6.3.6.patch
+	patches.kernel.org/6.3.7-001-RDMA-bnxt_re-Fix-the-page_size-used-during-the-.patch
+	patches.kernel.org/6.3.7-002-phy-amlogic-phy-meson-g12a-mipi-dphy-analog-fix.patch
+	patches.kernel.org/6.3.7-003-RDMA-efa-Fix-unsupported-page-sizes-in-device.patch
+	patches.kernel.org/6.3.7-004-RDMA-hns-Fix-timeout-attr-in-query-qp-for-HIP08.patch
+	patches.kernel.org/6.3.7-005-RDMA-hns-Fix-base-address-table-allocation.patch
+	patches.kernel.org/6.3.7-006-RDMA-hns-Modify-the-value-of-long-message-loopb.patch
+	patches.kernel.org/6.3.7-007-dmaengine-at_xdmac-fix-potential-Oops-in-at_xdm.patch
+	patches.kernel.org/6.3.7-008-RDMA-bnxt_re-Fix-a-possible-memory-leak.patch
+	patches.kernel.org/6.3.7-009-RDMA-bnxt_re-Fix-return-value-of-bnxt_re_proces.patch
+	patches.kernel.org/6.3.7-010-iommu-Make-IPMMU_VMSA-dependencies-more-strict.patch
+	patches.kernel.org/6.3.7-011-iommu-rockchip-Fix-unwind-goto-issue.patch
+	patches.kernel.org/6.3.7-012-iommu-amd-Don-t-block-updates-to-GATag-if-guest.patch
+	patches.kernel.org/6.3.7-013-iommu-amd-Handle-GALog-overflows.patch
+	patches.kernel.org/6.3.7-014-iommu-amd-Fix-up-merge-conflict-resolution.patch
+	patches.kernel.org/6.3.7-015-iommu-amd-Add-missing-domain-type-checks.patch
+	patches.kernel.org/6.3.7-016-nfsd-make-a-copy-of-struct-iattr-before-calling.patch
+	patches.kernel.org/6.3.7-017-dmaengine-pl330-rename-_start-to-prevent-build-.patch
+	patches.kernel.org/6.3.7-018-crypto-x86-aria-Use-16-byte-alignment-for-GFNI-.patch
+	patches.kernel.org/6.3.7-019-riscv-Fix-unused-variable-warning-when-BUILTIN_.patch
+	patches.kernel.org/6.3.7-020-net-mlx5e-TC-Remove-unused-vf_tun-variable.patch
+	patches.kernel.org/6.3.7-021-net-mlx5e-TC-Move-main-flow-attribute-cleanup-t.patch
+	patches.kernel.org/6.3.7-022-net-mlx5e-Extract-remaining-tunnel-encap-code-t.patch
+	patches.kernel.org/6.3.7-023-net-mlx5e-Prevent-encap-offload-when-neigh-upda.patch
+	patches.kernel.org/6.3.7-024-net-mlx5e-Consider-internal-buffers-size-in-por.patch
+	patches.kernel.org/6.3.7-025-net-mlx5e-Do-not-update-SBCM-when-prio2buffer-c.patch
+	patches.kernel.org/6.3.7-026-net-mlx5-Drain-health-before-unregistering-devl.patch
+	patches.kernel.org/6.3.7-027-net-mlx5-SF-Drain-health-before-removing-device.patch
+	patches.kernel.org/6.3.7-028-net-mlx5-fw_tracer-Fix-event-handling.patch
+	patches.kernel.org/6.3.7-029-net-mlx5e-Use-query_special_contexts-cmd-only-o.patch
+	patches.kernel.org/6.3.7-030-net-mlx5e-CT-Use-per-action-stats.patch
+	patches.kernel.org/6.3.7-031-net-mlx5e-TC-Remove-CT-action-reordering.patch
+	patches.kernel.org/6.3.7-032-net-mlx5-Fix-post-parse-infra-to-only-parse-eve.patch
+	patches.kernel.org/6.3.7-033-net-mlx5e-Don-t-attach-netdev-profile-while-han.patch
+	patches.kernel.org/6.3.7-034-net-mlx5e-Move-Ethernet-driver-debugfs-to-profi.patch
+	patches.kernel.org/6.3.7-035-net-mellanox-mlxbf_gige-Fix-skb_panic-splat-und.patch
+	patches.kernel.org/6.3.7-036-net-stmmac-fix-call-trace-when-stmmac_xdp_xmit-.patch
+	patches.kernel.org/6.3.7-037-netrom-fix-info-leak-in-nr_write_internal.patch
+	patches.kernel.org/6.3.7-038-af_packet-Fix-data-races-of-pkt_sk-sk-num.patch
+	patches.kernel.org/6.3.7-039-tls-improve-lockless-access-safety-of-tls_err_a.patch
+	patches.kernel.org/6.3.7-040-amd-xgbe-fix-the-false-linkup-in-xgbe_phy_statu.patch
+	patches.kernel.org/6.3.7-041-perf-ftrace-latency-Remove-unnecessary-from-use.patch
+	patches.kernel.org/6.3.7-042-mtd-rawnand-ingenic-fix-empty-stub-helper-defin.patch
+	patches.kernel.org/6.3.7-043-efi-Bump-stub-image-version-for-macOS-HVF-compa.patch
+	patches.kernel.org/6.3.7-044-RDMA-irdma-Prevent-QP-use-after-free.patch
+	patches.kernel.org/6.3.7-045-RDMA-irdma-Fix-Local-Invalidate-fencing.patch
+	patches.kernel.org/6.3.7-046-af_packet-do-not-use-READ_ONCE-in-packet_bind.patch
+	patches.kernel.org/6.3.7-047-tcp-deny-tcp_disconnect-when-threads-are-waitin.patch
+	patches.kernel.org/6.3.7-048-tcp-Return-user_mss-for-TCP_MAXSEG-in-CLOSE-LIS.patch
+	patches.kernel.org/6.3.7-049-rxrpc-Truncate-UTS_RELEASE-for-rxrpc-version.patch
+	patches.kernel.org/6.3.7-050-net-smc-Scan-from-current-RMB-list-when-no-posi.patch
+	patches.kernel.org/6.3.7-051-net-smc-Don-t-use-RMBs-not-mapped-to-new-link-i.patch
+	patches.kernel.org/6.3.7-052-net-sched-sch_ingress-Only-create-under-TC_H_IN.patch
+	patches.kernel.org/6.3.7-053-net-sched-sch_clsact-Only-create-under-TC_H_CLS.patch
+	patches.kernel.org/6.3.7-054-net-sched-Reserve-TC_H_INGRESS-TC_H_CLSACT-for-.patch
+	patches.kernel.org/6.3.7-055-net-sched-Prohibit-regrafting-ingress-or-clsact.patch
+	patches.kernel.org/6.3.7-056-net-sched-fix-NULL-pointer-dereference-in-mq_at.patch
+	patches.kernel.org/6.3.7-057-net-netlink-fix-NETLINK_LIST_MEMBERSHIPS-length.patch
+	patches.kernel.org/6.3.7-058-udp6-Fix-race-condition-in-udp6_sendmsg-connect.patch
+	patches.kernel.org/6.3.7-059-nfsd-fix-double-fget-bug-in-__write_ports_addfd.patch
+	patches.kernel.org/6.3.7-060-HID-logitech-hidpp-Handle-timeout-differently-f.patch
+	patches.kernel.org/6.3.7-061-nvme-fix-the-name-of-Zone-Append-for-verbose-lo.patch
+	patches.kernel.org/6.3.7-062-net-mlx5e-Fix-error-handling-in-mlx5e_refresh_t.patch
+	patches.kernel.org/6.3.7-063-net-mlx5-Read-embedded-cpu-after-init-bit-clear.patch
+	patches.kernel.org/6.3.7-064-sfc-fix-error-unwinds-in-TC-offload.patch
+	patches.kernel.org/6.3.7-065-iommu-mediatek-Flush-IOTLB-completely-only-if-d.patch
+	patches.kernel.org/6.3.7-066-net-sched-flower-fix-possible-OOB-write-in-fl_s.patch
+	patches.kernel.org/6.3.7-067-tcp-fix-mishandling-when-the-sack-compression-i.patch
+	patches.kernel.org/6.3.7-068-net-ipa-Use-correct-value-for-IPA_STATUS_SIZE.patch
+	patches.kernel.org/6.3.7-069-net-dsa-mv88e6xxx-Increase-wait-after-reset-dea.patch
+	patches.kernel.org/6.3.7-070-mtd-rawnand-marvell-ensure-timing-values-are-wr.patch
+	patches.kernel.org/6.3.7-071-mtd-rawnand-marvell-don-t-set-the-NAND-frequenc.patch
+	patches.kernel.org/6.3.7-072-net-renesas-rswitch-Fix-return-value-in-error-p.patch
+	patches.kernel.org/6.3.7-073-net-phy-mxl-gpy-extend-interrupt-fix-to-all-imp.patch
+	patches.kernel.org/6.3.7-074-ice-recycle-free-all-of-the-fragments-from-mult.patch
+	patches.kernel.org/6.3.7-075-rtnetlink-call-validate_linkmsg-in-rtnl_create_.patch
+	patches.kernel.org/6.3.7-076-rtnetlink-move-IFLA_GSO_-tb-check-to-validate_l.patch
+	patches.kernel.org/6.3.7-077-rtnetlink-add-the-missing-IFLA_GRO_-tb-check-in.patch
+	patches.kernel.org/6.3.7-078-mptcp-avoid-unneeded-__mptcp_nmpc_socket-usage.patch
+	patches.kernel.org/6.3.7-079-mptcp-add-annotations-around-msk-subflow-access.patch
+	patches.kernel.org/6.3.7-080-mptcp-avoid-unneeded-address-copy.patch
+	patches.kernel.org/6.3.7-081-mptcp-simplify-subflow_syn_recv_sock.patch
+	patches.kernel.org/6.3.7-082-mptcp-consolidate-passive-msk-socket-initializa.patch
+	patches.kernel.org/6.3.7-083-mptcp-fix-data-race-around-msk-first-access.patch
+	patches.kernel.org/6.3.7-084-mptcp-add-annotations-around-sk-sk_shutdown-acc.patch
+	patches.kernel.org/6.3.7-085-drm-amdgpu-release-gpu-full-access-after-amdgpu.patch
+	patches.kernel.org/6.3.7-086-watchdog-menz069_wdt-fix-watchdog-initialisatio.patch
+	patches.kernel.org/6.3.7-087-ALSA-hda-Glenfly-add-HD-Audio-PCI-IDs-and-HDMI-.patch
+	patches.kernel.org/6.3.7-088-drm-amd-display-fix-memleak-in-aconnector-timin.patch
+	patches.kernel.org/6.3.7-089-LoongArch-Add-ARCH_HAS_FORTIFY_SOURCE-selection.patch
+	patches.kernel.org/6.3.7-090-ASoC-Intel-soc-acpi-cht-Add-quirk-for-Nextbook-.patch
+	patches.kernel.org/6.3.7-091-drm-amdgpu-Use-the-default-reset-when-loading-o.patch
+	patches.kernel.org/6.3.7-092-mailbox-mailbox-test-Fix-potential-double-free-.patch
+	patches.kernel.org/6.3.7-093-drm-ast-Fix-ARM-compatibility.patch
+	patches.kernel.org/6.3.7-094-btrfs-abort-transaction-when-sibling-keys-check.patch
+	patches.kernel.org/6.3.7-095-ARM-9295-1-unwind-fix-unwind-abort-for-uleb128-.patch
+	patches.kernel.org/6.3.7-096-perf-x86-intel-ds-Flush-PEBS-DS-when-changing-P.patch
+	patches.kernel.org/6.3.7-097-hwmon-k10temp-Add-PCI-ID-for-family-19-model-78.patch
+	patches.kernel.org/6.3.7-098-media-rcar-vin-Gen3-can-not-scale-NV12.patch
+	patches.kernel.org/6.3.7-099-media-rcar-vin-Fix-NV12-size-alignment.patch
+	patches.kernel.org/6.3.7-100-media-rcar-vin-Select-correct-interrupt-mode-fo.patch
+	patches.kernel.org/6.3.7-101-platform-x86-intel_scu_pcidrv-Add-back-PCI-ID-f.patch
+	patches.kernel.org/6.3.7-102-platform-mellanox-fix-potential-race-in-mlxbf-t.patch
+	patches.kernel.org/6.3.7-103-gfs2-Don-t-deref-jdesc-in-evict.patch
+	patches.kernel.org/6.3.7-104-drm-amdgpu-nv-update-VCN-3-max-HEVC-encoding-re.patch
+	patches.kernel.org/6.3.7-105-drm-amdgpu-set-gfx9-onwards-APU-atomics-support.patch
+	patches.kernel.org/6.3.7-106-fbdev-imsttfb-Fix-use-after-free-bug-in-imsttfb.patch
+	patches.kernel.org/6.3.7-107-fbdev-modedb-Add-1920x1080-at-60-Hz-video-mode.patch
+	patches.kernel.org/6.3.7-108-fbdev-stifb-Fix-info-entry-in-sti_struct-on-err.patch
+	patches.kernel.org/6.3.7-109-nbd-Fix-debugfs_create_dir-error-checking.patch
+	patches.kernel.org/6.3.7-110-block-rnbd-replace-REQ_OP_FLUSH-with-REQ_OP_WRI.patch
+	patches.kernel.org/6.3.7-111-nvme-pci-add-NVME_QUIRK_BOGUS_NID-for-HS-SSD-FU.patch
+	patches.kernel.org/6.3.7-112-nvme-pci-add-quirk-for-missing-secondary-temper.patch
+	patches.kernel.org/6.3.7-113-nvme-pci-clamp-max_hw_sectors-based-on-DMA-opti.patch
+	patches.kernel.org/6.3.7-114-ASoC-amd-yc-Add-DMI-entry-to-support-System76-P.patch
+	patches.kernel.org/6.3.7-115-ASoC-dwc-limit-the-number-of-overrun-messages.patch
+	patches.kernel.org/6.3.7-116-cpupower-Fix-resource-leaks-in-sysfs_get_enable.patch
+	patches.kernel.org/6.3.7-117-ASoC-SOF-amd-Fix-NULL-pointer-crash-in-acp_sof_.patch
+	patches.kernel.org/6.3.7-118-um-harddog-fix-modular-build.patch
+	patches.kernel.org/6.3.7-119-xfrm-Check-if_id-in-inbound-policy-secpath-matc.patch
+	patches.kernel.org/6.3.7-120-ASoC-jz4740-i2s-Make-I2S-divider-calculations-m.patch
+	patches.kernel.org/6.3.7-121-ASoC-dt-bindings-Adjust-sound-dai-cells-on-TI-s.patch
+	patches.kernel.org/6.3.7-122-ALSA-hda-realtek-Add-quirks-for-ASUS-GU604V-and.patch
+	patches.kernel.org/6.3.7-123-ASoC-ssm2602-Add-workaround-for-playback-distor.patch
+	patches.kernel.org/6.3.7-124-media-dvb_demux-fix-a-bug-for-the-continuity-co.patch
+	patches.kernel.org/6.3.7-125-media-dvb-usb-az6027-fix-three-null-ptr-deref-i.patch
+	patches.kernel.org/6.3.7-126-media-dvb-usb-v2-ec168-fix-null-ptr-deref-in-ec.patch
+	patches.kernel.org/6.3.7-127-media-dvb-usb-v2-ce6230-fix-null-ptr-deref-in-c.patch
+	patches.kernel.org/6.3.7-128-media-dvb-usb-v2-rtl28xxu-fix-null-ptr-deref-in.patch
+	patches.kernel.org/6.3.7-129-media-dvb-usb-digitv-fix-null-ptr-deref-in-digi.patch
+	patches.kernel.org/6.3.7-130-media-dvb-usb-dw2102-fix-uninit-value-in-su3000.patch
+	patches.kernel.org/6.3.7-131-media-netup_unidvb-fix-irq-init-by-register-it-.patch
+	patches.kernel.org/6.3.7-132-media-dvb_ca_en50221-fix-a-size-write-bug.patch
+	patches.kernel.org/6.3.7-133-media-ttusb-dec-fix-memory-leak-in-ttusb_dec_ex.patch
+	patches.kernel.org/6.3.7-134-media-mn88443x-fix-CONFIG_OF-error-by-drop-of_m.patch
+	patches.kernel.org/6.3.7-135-media-dvb-core-Fix-use-after-free-on-race-condi.patch
+	patches.kernel.org/6.3.7-136-media-dvb-core-Fix-use-after-free-due-on-race-c.patch
+	patches.kernel.org/6.3.7-137-media-dvb-core-Fix-use-after-free-due-to-race-a.patch
+	patches.kernel.org/6.3.7-138-media-dvb-core-Fix-kernel-WARNING-for-blocking-.patch
+	patches.kernel.org/6.3.7-139-media-dvb-core-Fix-use-after-free-due-to-race-c.patch
+	patches.kernel.org/6.3.7-140-ASoC-SOF-debug-conditionally-bump-runtime_pm-co.patch
+	patches.kernel.org/6.3.7-141-ASoC-SOF-pcm-fix-pm_runtime-imbalance-in-error-.patch
+	patches.kernel.org/6.3.7-142-ASoC-SOF-sof-client-probes-fix-pm_runtime-imbal.patch
+	patches.kernel.org/6.3.7-143-ASoC-SOF-pm-save-io-region-state-in-case-of-err.patch
+	patches.kernel.org/6.3.7-144-s390-pkey-zeroize-key-blobs.patch
+	patches.kernel.org/6.3.7-145-s390-topology-honour-nr_cpu_ids-when-adding-CPU.patch
+	patches.kernel.org/6.3.7-146-s390-ipl-fix-IPIB-virtual-vs-physical-address-c.patch
+	patches.kernel.org/6.3.7-147-ACPI-resource-Add-IRQ-override-quirk-for-LG-Ult.patch
+	patches.kernel.org/6.3.7-148-wifi-rtl8xxxu-fix-authentication-timeout-due-to.patch
+	patches.kernel.org/6.3.7-149-ARM-dts-stm32-add-pin-map-for-CAN-controller-on.patch
+	patches.kernel.org/6.3.7-150-arm64-mm-mark-private-VM_FAULT_X-defines-as-vm_.patch
+	patches.kernel.org/6.3.7-151-arm64-vdso-Pass-void-to-virt_to_page.patch
+	patches.kernel.org/6.3.7-152-wifi-mac80211-simplify-chanctx-allocation.patch
+	patches.kernel.org/6.3.7-153-wifi-mac80211-consider-reserved-chanctx-for-min.patch
+	patches.kernel.org/6.3.7-154-wifi-mac80211-recalc-chanctx-mindef-before-assi.patch
+	patches.kernel.org/6.3.7-155-wifi-iwlwifi-mvm-Add-locking-to-the-rate-read-f.patch
+	patches.kernel.org/6.3.7-156-scsi-ufs-core-Fix-MCQ-tag-calculation.patch
+	patches.kernel.org/6.3.7-157-scsi-ufs-core-Rename-symbol-sizeof_utp_transfer.patch
+	patches.kernel.org/6.3.7-158-scsi-ufs-core-Fix-MCQ-nr_hw_queues.patch
+	patches.kernel.org/6.3.7-159-scsi-core-Decrease-scsi_device-s-iorequest_cnt-.patch
+	patches.kernel.org/6.3.7-160-wifi-b43-fix-incorrect-__packed-annotation.patch
+	patches.kernel.org/6.3.7-161-net-wwan-t7xx-Ensure-init-is-completed-before-s.patch
+	patches.kernel.org/6.3.7-162-netfilter-conntrack-define-variables-exp_nat_nl.patch
+	patches.kernel.org/6.3.7-163-nvme-multipath-don-t-call-blk_mark_disk_dead-in.patch
+	patches.kernel.org/6.3.7-164-nvme-do-not-let-the-user-delete-a-ctrl-before-a.patch
+	patches.kernel.org/6.3.7-165-ALSA-oss-avoid-missing-prototype-warnings.patch
+	patches.kernel.org/6.3.7-166-drm-msm-Be-more-shouty-if-per-process-pgtables-.patch
+	patches.kernel.org/6.3.7-167-atm-hide-unused-procfs-functions.patch
+	patches.kernel.org/6.3.7-168-ceph-silence-smatch-warning-in-reconnect_caps_c.patch
+	patches.kernel.org/6.3.7-169-drm-amdgpu-skip-disabling-fence-driver-src_irqs.patch
+	patches.kernel.org/6.3.7-170-ublk-fix-AB-BA-lockdep-warning.patch
+	patches.kernel.org/6.3.7-171-nvme-pci-Add-quirk-for-Teamgroup-MP33-SSD.patch
+	patches.kernel.org/6.3.7-172-block-Deny-writable-memory-mapping-if-block-is-.patch
+	patches.kernel.org/6.3.7-173-iio-adc-imx93-fix-a-signedness-bug-in-imx93_adc.patch
+	patches.kernel.org/6.3.7-174-KVM-arm64-vgic-Fix-a-circular-locking-issue.patch
+	patches.kernel.org/6.3.7-175-KVM-arm64-vgic-Wrap-vgic_its_create-with-config.patch
+	patches.kernel.org/6.3.7-176-KVM-arm64-vgic-Fix-locking-comment.patch
+	patches.kernel.org/6.3.7-177-KVM-arm64-Prevent-unconditional-donation-of-unm.patch
+	patches.kernel.org/6.3.7-178-scsi-qla2xxx-Fix-NULL-pointer-dereference-in-ta.patch
+	patches.kernel.org/6.3.7-179-perf-x86-intel-Save-restore-cpuc-active_pebs_da.patch
+	patches.kernel.org/6.3.7-180-KVM-arm64-Reload-PTE-after-invoking-walker-call.patch
+	patches.kernel.org/6.3.7-181-media-mediatek-vcodec-Only-apply-4K-frame-sizes.patch
+	patches.kernel.org/6.3.7-182-mailbox-mailbox-test-fix-a-locking-issue-in-mbo.patch
+	patches.kernel.org/6.3.7-183-drivers-base-cacheinfo-Fix-shared_cpu_map-chang.patch
+	patches.kernel.org/6.3.7-184-drivers-base-cacheinfo-Update-cpu_map_populated.patch
+	patches.kernel.org/6.3.7-185-dt-bindings-serial-8250_omap-add-rs485-rts-acti.patch
+	patches.kernel.org/6.3.7-186-media-uvcvideo-Don-t-expose-unsupported-formats.patch
+	patches.kernel.org/6.3.7-187-selftests-ftrace-Choose-target-function-for-fil.patch
+	patches.kernel.org/6.3.7-188-drm-amd-display-Only-wait-for-blank-completion-.patch
+	patches.kernel.org/6.3.7-189-iio-accel-st_accel-Fix-invalid-mount_matrix-on-.patch
+	patches.kernel.org/6.3.7-190-iio-adc-mxs-lradc-fix-the-order-of-two-cleanup-.patch
+	patches.kernel.org/6.3.7-191-iio-tmag5273-Fix-runtime-PM-leak-on-measurement.patch
+	patches.kernel.org/6.3.7-192-iio-ad4130-Make-sure-clock-provider-gets-remove.patch
+	patches.kernel.org/6.3.7-193-iio-adc-mt6370-Fix-ibus-and-ibat-scaling-value-.patch
+	patches.kernel.org/6.3.7-194-HID-google-add-jewel-USB-id.patch
+	patches.kernel.org/6.3.7-195-HID-wacom-avoid-integer-overflow-in-wacom_intuo.patch
+	patches.kernel.org/6.3.7-196-iio-imu-inv_icm42600-fix-timestamp-reset.patch
+	patches.kernel.org/6.3.7-197-dt-bindings-iio-adc-renesas-rcar-gyroadc-Fix-ad.patch
+	patches.kernel.org/6.3.7-198-iio-light-vcnl4035-fixed-chip-ID-check.patch
+	patches.kernel.org/6.3.7-199-iio-accel-kx022a-fix-irq-getting.patch
+	patches.kernel.org/6.3.7-200-iio-adc-stm32-adc-skip-adc-channels-setup-if-no.patch
+	patches.kernel.org/6.3.7-201-iio-adc-ad_sigma_delta-Fix-IRQ-issue-by-setting.patch
+	patches.kernel.org/6.3.7-202-iio-dac-mcp4725-Fix-i2c_master_send-return-valu.patch
+	patches.kernel.org/6.3.7-203-iio-addac-ad74413-fix-resistance-input-processi.patch
+	patches.kernel.org/6.3.7-204-iio-adc-ad7192-Change-shorted-channels-to-diffe.patch
+	patches.kernel.org/6.3.7-205-iio-adc-stm32-adc-skip-adc-diff-channels-setup-.patch
+	patches.kernel.org/6.3.7-206-iio-dac-build-ad5758-driver-when-AD5758-is-sele.patch
+	patches.kernel.org/6.3.7-207-net-usb-qmi_wwan-Set-DTR-quirk-for-BroadMobi-BM.patch
+	patches.kernel.org/6.3.7-208-dt-bindings-usb-snps-dwc3-Fix-snps-hsphy_interf.patch
+	patches.kernel.org/6.3.7-209-usb-cdns3-fix-NCM-gadget-RX-speed-20x-slow-than.patch
+	patches.kernel.org/6.3.7-210-usb-gadget-f_fs-Add-unbind-event-before-functio.patch
+	patches.kernel.org/6.3.7-211-md-raid5-fix-miscalculation-of-end_sector-in-ra.patch
+	patches.kernel.org/6.3.7-212-misc-fastrpc-Reassign-memory-ownership-only-for.patch
+	patches.kernel.org/6.3.7-213-misc-fastrpc-return-EPIPE-to-invocations-on-dev.patch
+	patches.kernel.org/6.3.7-214-misc-fastrpc-reject-new-invocations-during-devi.patch
+	patches.kernel.org/6.3.7-215-scsi-stex-Fix-gcc-13-warnings.patch
+	patches.kernel.org/6.3.7-216-ata-libata-scsi-Use-correct-device-no-in-ata_fi.patch
+	patches.kernel.org/6.3.7-217-drm-amdgpu-enable-tmz-by-default-for-GC-11.0.1.patch
+	patches.kernel.org/6.3.7-218-drm-amd-pm-reverse-mclk-and-fclk-clocks-levels-.patch
+	patches.kernel.org/6.3.7-219-drm-amd-pm-reverse-mclk-and-fclk-clocks-levels-.patch
+	patches.kernel.org/6.3.7-220-drm-amd-pm-resolve-reboot-exception-for-si-olan.patch
+	patches.kernel.org/6.3.7-221-drm-amd-pm-reverse-mclk-clocks-levels-for-SMU-v.patch
+	patches.kernel.org/6.3.7-222-drm-amd-pm-reverse-mclk-and-fclk-clocks-levels-.patch
+	patches.kernel.org/6.3.7-223-drm-amd-pm-reverse-mclk-and-fclk-clocks-levels-.patch
+	patches.kernel.org/6.3.7-224-mmc-vub300-fix-invalid-response-handling.patch
+	patches.kernel.org/6.3.7-225-mmc-pwrseq-sd8787-Fix-WILC-CHIP_EN-and-RESETN-t.patch
+	patches.kernel.org/6.3.7-226-tty-serial-fsl_lpuart-use-UARTCTRL_TXINV-to-sen.patch
+	patches.kernel.org/6.3.7-227-btrfs-fix-csum_tree_block-page-iteration-to-avo.patch
+	patches.kernel.org/6.3.7-228-phy-qcom-qmp-combo-fix-init-count-imbalance.patch
+	patches.kernel.org/6.3.7-229-phy-qcom-qmp-pcie-msm8996-fix-init-count-imbala.patch
+	patches.kernel.org/6.3.7-230-block-fix-revalidate-performance-regression.patch
+	patches.kernel.org/6.3.7-231-powerpc-iommu-Limit-number-of-TCEs-to-512-for-H.patch
+	patches.kernel.org/6.3.7-232-iommu-amd-Fix-domain-flush-size-when-syncing-io.patch
+	patches.kernel.org/6.3.7-233-tpm-tpm_tis-correct-tpm_tis_flags-enumeration-v.patch
+	patches.kernel.org/6.3.7-234-module-decompress-Fix-error-checking-on-zstd-de.patch
+	patches.kernel.org/6.3.7-235-firmware-qcom_scm-Use-fixed-width-src-vm-bitmap.patch
+	patches.kernel.org/6.3.7-236-misc-fastrpc-Pass-proper-scm-arguments-for-secu.patch
+	patches.kernel.org/6.3.7-237-btrfs-call-btrfs_orig_bbio_end_io-in-btrfs_end_.patch
+	patches.kernel.org/6.3.7-238-HID-hidpp-terminate-retry-loop-on-success.patch
+	patches.kernel.org/6.3.7-239-dmaengine-at_hdmac-Repair-bitfield-macros-for-p.patch
+	patches.kernel.org/6.3.7-240-dmaengine-at_hdmac-Extend-the-Flow-Controller-b.patch
+	patches.kernel.org/6.3.7-241-riscv-perf-Fix-callchain-parse-error-with-kerne.patch
+	patches.kernel.org/6.3.7-242-io_uring-undeprecate-epoll_ctl-support.patch
+	patches.kernel.org/6.3.7-243-selinux-don-t-use-make-s-grouped-targets-featur.patch
+	patches.kernel.org/6.3.7-244-mtdchar-mark-bits-of-ioctl-handler-noinline.patch
+	patches.kernel.org/6.3.7-245-tracing-timerlat-Always-wakeup-the-timerlat-thr.patch
+	patches.kernel.org/6.3.7-246-tracing-histograms-Allow-variables-to-have-some.patch
+	patches.kernel.org/6.3.7-247-tracing-probe-trace_probe_primary_from_call-che.patch
+	patches.kernel.org/6.3.7-248-selftests-mptcp-connect-skip-if-MPTCP-is-not-su.patch
+	patches.kernel.org/6.3.7-249-selftests-mptcp-pm-nl-skip-if-MPTCP-is-not-supp.patch
+	patches.kernel.org/6.3.7-250-selftests-mptcp-join-skip-if-MPTCP-is-not-suppo.patch
+	patches.kernel.org/6.3.7-251-selftests-mptcp-join-avoid-using-cmp-bytes.patch
+	patches.kernel.org/6.3.7-252-selftests-mptcp-diag-skip-if-MPTCP-is-not-suppo.patch
+	patches.kernel.org/6.3.7-253-selftests-mptcp-simult-flows-skip-if-MPTCP-is-n.patch
+	patches.kernel.org/6.3.7-254-selftests-mptcp-sockopt-skip-if-MPTCP-is-not-su.patch
+	patches.kernel.org/6.3.7-255-selftests-mptcp-userspace-pm-skip-if-MPTCP-is-n.patch
+	patches.kernel.org/6.3.7-256-mptcp-fix-connect-timeout-handling.patch
+	patches.kernel.org/6.3.7-257-mptcp-fix-active-subflow-finalization.patch
+	patches.kernel.org/6.3.7-258-ext4-add-EA_INODE-checking-to-ext4_iget.patch
+	patches.kernel.org/6.3.7-259-ext4-set-lockdep-subclass-for-the-ea_inode-in-e.patch
+	patches.kernel.org/6.3.7-260-ext4-disallow-ea_inodes-with-extended-attribute.patch
+	patches.kernel.org/6.3.7-261-ext4-add-lockdep-annotations-for-i_data_sem-for.patch
+	patches.kernel.org/6.3.7-262-fbcon-Fix-null-ptr-deref-in-soft_cursor.patch
+	patches.kernel.org/6.3.7-263-serial-8250_tegra-Fix-an-error-handling-path-in.patch
+	patches.kernel.org/6.3.7-264-serial-cpm_uart-Fix-a-COMPILE_TEST-dependency.patch
+	patches.kernel.org/6.3.7-265-powerpc-xmon-Use-KSYM_NAME_LEN-in-array-size.patch
+	patches.kernel.org/6.3.7-266-test_firmware-prevent-race-conditions-by-a-corr.patch
+	patches.kernel.org/6.3.7-267-test_firmware-fix-a-memory-leak-with-reqs-buffe.patch
+	patches.kernel.org/6.3.7-268-test_firmware-fix-the-memory-leak-of-the-alloca.patch
+	patches.kernel.org/6.3.7-269-KVM-arm64-Populate-fault-info-for-watchpoint.patch
+	patches.kernel.org/6.3.7-270-KVM-arm64-Drop-last-page-ref-in-kvm_pgtable_sta.patch
+	patches.kernel.org/6.3.7-271-KVM-x86-mmu-Grab-memslot-for-correct-address-sp.patch
+	patches.kernel.org/6.3.7-272-KVM-x86-Account-fastpath-only-VM-Exits-in-vCPU-.patch
+	patches.kernel.org/6.3.7-273-KVM-x86-Bail-from-kvm_recalculate_phys_map-if-x.patch
+	patches.kernel.org/6.3.7-274-ksmbd-fix-credit-count-leakage.patch
+	patches.kernel.org/6.3.7-275-ksmbd-fix-UAF-issue-from-opinfo-conn.patch
+	patches.kernel.org/6.3.7-276-ksmbd-fix-incorrect-AllocationSize-set-in-smb2_.patch
+	patches.kernel.org/6.3.7-277-ksmbd-fix-slab-out-of-bounds-read-in-smb2_handl.patch
+	patches.kernel.org/6.3.7-278-ksmbd-fix-multiple-out-of-bounds-read-during-co.patch
+	patches.kernel.org/6.3.7-279-KEYS-asymmetric-Copy-sig-and-digest-in-public_k.patch
+	patches.kernel.org/6.3.7-280-regmap-Account-for-register-length-when-chunkin.patch
+	patches.kernel.org/6.3.7-281-tpm-tpm_tis-Request-threaded-interrupt-handler.patch
+	patches.kernel.org/6.3.7-282-iommu-amd-pgtbl_v2-Fix-domain-max-address.patch
+	patches.kernel.org/6.3.7-283-xfs-verify-buffer-contents-when-we-skip-log-rep.patch
+	patches.kernel.org/6.3.7-284-riscv-vmlinux.lds.S-Explicitly-handle-.got-sect.patch
+	patches.kernel.org/6.3.7-285-ext4-enable-the-lazy-init-thread-when-remountin.patch
+	patches.kernel.org/6.3.7-286-Linux-6.3.7.patch
 
 	########################################################
 	# Build fixes that apply to the vanilla kernel too.
@@ -1544,10 +1830,20 @@
 	########################################################
 	# sorted patches
 	########################################################
-	patches.suse/drm-amd-display-Only-wait-for-blank-completion-if-OT.patch
 	patches.suse/usbtv-usbtv_set_regs-the-pipe-is-output.patch
 	patches.suse/ath11k-pci-Add-more-MODULE_FIRMWARE-entries.patch
-	patches.suse/xfs-verify-buffer-contents-when-we-skip-log-replay.patch
+	patches.suse/s390-zcrypt-make-psmid-unsigned-long-instead-of-long-long.patch
+	patches.suse/s390-zcrypt-rework-length-information-for-dqap.patch
+	patches.suse/s390-zcrypt-replace-scnprintf-with-sysfs_emit.patch
+	patches.suse/s390-ap-exploit-new-B-bit-from-QCI-config-info.patch
+	patches.suse/s390-ap-introduce-new-AP-bus-sysfs-attribute-features.patch
+	patches.suse/s390-ap-make-tapq-gr2-response-a-struct.patch
+	patches.suse/s390-ap-filter-ap-card-functions-new-queue-functions-attribute.patch
+	patches.suse/s390-ap-provide-F-bit-parameter-for-ap_rapq-and-ap_zapq.patch
+	patches.suse/s390-ap-new-low-level-inline-functions-ap_bapq-and-ap_aapq.patch
+	patches.suse/s390-ap-introduce-low-frequency-polling-possibility.patch
+	patches.suse/s390-ap-implement-SE-AP-bind-unbind-and-associate.patch
+	patches.suse/s390-ap-add-ap-status-asynch-error-support.patch
 	########################################################
 	# end of sorted patches
 	########################################################
diff --git a/source-timestamp b/source-timestamp
index d487195..138ae05 100644
--- a/source-timestamp
+++ b/source-timestamp
@@ -1,3 +1,3 @@
-2023-06-05 07:58:35 +0000
-GIT Revision: f583ba475430f56b79aabec05c7c036099baec27
+2023-06-12 05:01:32 +0000
+GIT Revision: b5f9ff562b088767ac46cc215eaecdd209a0b42a
 GIT Branch: stable