Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2021.0861
Security update for the Linux Kernel
10 March 2021
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: kernel
Publisher: SUSE
Operating System: SUSE
Impact/Access: Modify Arbitrary Files -- Existing Account
Denial of Service -- Existing Account
Increased Privileges -- Existing Account
Reduced Security -- Existing Account
Resolution: Patch/Upgrade
CVE Names: CVE-2021-26932 CVE-2021-26931 CVE-2021-26930
CVE-2021-3348 CVE-2020-29374 CVE-2020-29368
CVE-2020-28374 CVE-2020-12373 CVE-2020-12364
CVE-2020-12363 CVE-2020-12362
Reference: ESB-2021.0837
ESB-2021.0717
ESB-2021.0586
ESB-2021.0529
Original Bulletin:
https://www.suse.com/support/update/announcement/2021/suse-su-20210737-1
https://www.suse.com/support/update/announcement/2021/suse-su-20210742-1
https://www.suse.com/support/update/announcement/2021/suse-su-20210736-1
https://www.suse.com/support/update/announcement/2021/suse-su-20210744-1
https://www.suse.com/support/update/announcement/2021/suse-su-20210741-1
https://www.suse.com/support/update/announcement/2021/suse-su-20210739-1
https://www.suse.com/support/update/announcement/2021/suse-su-20210738-1
https://www.suse.com/support/update/announcement/2021/suse-su-20210735-1
https://www.suse.com/support/update/announcement/2021/suse-su-20210740-1
https://www.suse.com/support/update/announcement/2021/suse-su-20210743-1
Comment: This bulletin contains ten (10) SUSE security advisories.
- --------------------------BEGIN INCLUDED TEXT--------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0737-1
Rating: important
References: #1065600 #1163617 #1170442 #1176855 #1179082 #1179428
#1179660 #1180058 #1180262 #1180964 #1181671 #1181747
#1181753 #1181843 #1181854 #1182047 #1182130 #1182140
#1182175
Cross-References: CVE-2020-29368 CVE-2020-29374 CVE-2021-26930 CVE-2021-26931
CVE-2021-26932
Affected Products:
SUSE Manager Server 4.0
SUSE Manager Retail Branch Server 4.0
SUSE Manager Proxy 4.0
SUSE Linux Enterprise Server for SAP 15-SP1
SUSE Linux Enterprise Server 15-SP1-LTSS
SUSE Linux Enterprise Server 15-SP1-BCL
SUSE Linux Enterprise Module for Live Patching 15-SP1
SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS
SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS
SUSE Linux Enterprise High Availability 15-SP1
SUSE Enterprise Storage 6
SUSE CaaS Platform 4.0
______________________________________________________________________________
An update that solves 5 vulnerabilities and has 14 fixes is now available.
Description:
The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security
and bugfixes.
The following security bugs were fixed:
o CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping
(XSA-365 bsc#1181843).
o CVE-2021-26931: Fixed an issue where Linux kernel was treating grant
mapping errors as bugs (XSA-362 bsc#1181753).
o CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping
(XSA-361 bsc#1181747). by remote attackers to read or write files via
directory traversal in an XCOPY request (bsc#178372).
o CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write
implementation which could have granted unintended write access because of
a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
o btrfs: Cleanup try_flush_qgroup (bsc#1182047).
o btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: fix data bytes_may_use underflow with fallocate due to failed quota
reserve (bsc#1182130)
o btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata
(bsc#1182047).
o btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
o Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
(git-fixes).
o ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
o kernel-binary.spec: Add back initrd and image symlink ghosts to filelist
(bsc#1182140). Fixes: 76a9256314c3 ("rpm/kernel-{source,binary}.spec: do
not include ghost symlinks (boo#1179082).")
o libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#
1170442).
o net: bcmgenet: add support for ethtool rxnfc flows (git-fixes).
o net: bcmgenet: code movement (git-fixes).
o net: bcmgenet: fix mask check in bcmgenet_validate_flow() (git-fixes).
o net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
o net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
o net: bcmgenet: set Rx mode before starting netif (git-fixes).
o net: bcmgenet: use __be16 for htons(ETH_P_IP) (git-fixes).
o net: bcmgenet: Use correct I/O accessors (git-fixes).
o net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
o net/mlx4_en: Handle TX error CQE (bsc#1181854).
o net: moxa: Fix a potential double 'free_irq()' (git-fixes).
o net: sun: fix missing release regions in cas_init_one() (git-fixes).
o nvme-multipath: Early exit if no path is available (bsc#1180964).
o rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#
1180058)
o scsi: target: fix unmap_zeroes_data boolean initialisation (bsc#1163617).
o usb: dwc2: Abort transaction after errors with unknown reason (bsc#
1180262).
o usb: dwc2: Do not update data length if it is 0 on inbound transfers (bsc#
1180262).
o usb: dwc2: Make "trimming xfer length" a debug message (bsc#1180262).
o vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
o xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE Manager Server 4.0:
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-737=1
o SUSE Manager Retail Branch Server 4.0:
zypper in -t patch
SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-737=1
o SUSE Manager Proxy 4.0:
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-737=1
o SUSE Linux Enterprise Server for SAP 15-SP1:
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2021-737=1
o SUSE Linux Enterprise Server 15-SP1-LTSS:
zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-737=1
o SUSE Linux Enterprise Server 15-SP1-BCL:
zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2021-737=1
o SUSE Linux Enterprise Module for Live Patching 15-SP1:
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2021-737=1
o SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS:
zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-737=1
o SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS:
zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-737=1
o SUSE Linux Enterprise High Availability 15-SP1:
zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2021-737=1
o SUSE Enterprise Storage 6:
zypper in -t patch SUSE-Storage-6-2021-737=1
o SUSE CaaS Platform 4.0:
To install this update, use the SUSE CaaS Platform 'skuba' tool. I will
inform you if it detects new updates and let you then trigger updating of
the complete cluster in a controlled way.
Package List:
o SUSE Manager Server 4.0 (ppc64le s390x x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
reiserfs-kmp-default-4.12.14-197.86.1
reiserfs-kmp-default-debuginfo-4.12.14-197.86.1
o SUSE Manager Server 4.0 (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE Manager Server 4.0 (s390x):
kernel-default-man-4.12.14-197.86.1
kernel-zfcpdump-debuginfo-4.12.14-197.86.1
kernel-zfcpdump-debugsource-4.12.14-197.86.1
o SUSE Manager Retail Branch Server 4.0 (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE Manager Retail Branch Server 4.0 (x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
reiserfs-kmp-default-4.12.14-197.86.1
reiserfs-kmp-default-debuginfo-4.12.14-197.86.1
o SUSE Manager Proxy 4.0 (x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
reiserfs-kmp-default-4.12.14-197.86.1
reiserfs-kmp-default-debuginfo-4.12.14-197.86.1
o SUSE Manager Proxy 4.0 (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
reiserfs-kmp-default-4.12.14-197.86.1
reiserfs-kmp-default-debuginfo-4.12.14-197.86.1
o SUSE Linux Enterprise Server for SAP 15-SP1 (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
reiserfs-kmp-default-4.12.14-197.86.1
reiserfs-kmp-default-debuginfo-4.12.14-197.86.1
o SUSE Linux Enterprise Server 15-SP1-LTSS (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE Linux Enterprise Server 15-SP1-LTSS (s390x):
kernel-default-man-4.12.14-197.86.1
kernel-zfcpdump-debuginfo-4.12.14-197.86.1
kernel-zfcpdump-debugsource-4.12.14-197.86.1
o SUSE Linux Enterprise Server 15-SP1-BCL (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE Linux Enterprise Server 15-SP1-BCL (x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
reiserfs-kmp-default-4.12.14-197.86.1
reiserfs-kmp-default-debuginfo-4.12.14-197.86.1
o SUSE Linux Enterprise Module for Live Patching 15-SP1 (ppc64le x86_64):
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-livepatch-4.12.14-197.86.1
kernel-default-livepatch-devel-4.12.14-197.86.1
kernel-livepatch-4_12_14-197_86-default-1-3.3.1
o SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64
x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
o SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64
x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
o SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE Linux Enterprise High Availability 15-SP1 (aarch64 ppc64le s390x
x86_64):
cluster-md-kmp-default-4.12.14-197.86.1
cluster-md-kmp-default-debuginfo-4.12.14-197.86.1
dlm-kmp-default-4.12.14-197.86.1
dlm-kmp-default-debuginfo-4.12.14-197.86.1
gfs2-kmp-default-4.12.14-197.86.1
gfs2-kmp-default-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
ocfs2-kmp-default-4.12.14-197.86.1
ocfs2-kmp-default-debuginfo-4.12.14-197.86.1
o SUSE Enterprise Storage 6 (aarch64 x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
reiserfs-kmp-default-4.12.14-197.86.1
reiserfs-kmp-default-debuginfo-4.12.14-197.86.1
o SUSE Enterprise Storage 6 (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE CaaS Platform 4.0 (noarch):
kernel-devel-4.12.14-197.86.1
kernel-docs-4.12.14-197.86.1
kernel-macros-4.12.14-197.86.1
kernel-source-4.12.14-197.86.1
o SUSE CaaS Platform 4.0 (x86_64):
kernel-default-4.12.14-197.86.1
kernel-default-base-4.12.14-197.86.1
kernel-default-base-debuginfo-4.12.14-197.86.1
kernel-default-debuginfo-4.12.14-197.86.1
kernel-default-debugsource-4.12.14-197.86.1
kernel-default-devel-4.12.14-197.86.1
kernel-default-devel-debuginfo-4.12.14-197.86.1
kernel-obs-build-4.12.14-197.86.1
kernel-obs-build-debugsource-4.12.14-197.86.1
kernel-syms-4.12.14-197.86.1
reiserfs-kmp-default-4.12.14-197.86.1
reiserfs-kmp-default-debuginfo-4.12.14-197.86.1
References:
o https://www.suse.com/security/cve/CVE-2020-29368.html
o https://www.suse.com/security/cve/CVE-2020-29374.html
o https://www.suse.com/security/cve/CVE-2021-26930.html
o https://www.suse.com/security/cve/CVE-2021-26931.html
o https://www.suse.com/security/cve/CVE-2021-26932.html
o https://bugzilla.suse.com/1065600
o https://bugzilla.suse.com/1163617
o https://bugzilla.suse.com/1170442
o https://bugzilla.suse.com/1176855
o https://bugzilla.suse.com/1179082
o https://bugzilla.suse.com/1179428
o https://bugzilla.suse.com/1179660
o https://bugzilla.suse.com/1180058
o https://bugzilla.suse.com/1180262
o https://bugzilla.suse.com/1180964
o https://bugzilla.suse.com/1181671
o https://bugzilla.suse.com/1181747
o https://bugzilla.suse.com/1181753
o https://bugzilla.suse.com/1181843
o https://bugzilla.suse.com/1181854
o https://bugzilla.suse.com/1182047
o https://bugzilla.suse.com/1182130
o https://bugzilla.suse.com/1182140
o https://bugzilla.suse.com/1182175
- --------------------------------------------------------------------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0742-1
Rating: important
References: #1065600 #1065729 #1078720 #1081134 #1084610 #1114648
#1163617 #1163930 #1169514 #1170442 #1176855 #1177440
#1178049 #1179082 #1179142 #1179612 #1179709 #1180058
#1181346 #1181504 #1181574 #1181671 #1181809 #1181854
#1181896 #1181931 #1181960 #1181985 #1181987 #1181996
#1181998 #1182038 #1182047 #1182118 #1182130 #1182140
#1182171 #1182173 #1182175 #1182182 #1182184 #1182195
#1182242 #1182243 #1182248 #1182269 #1182302 #1182307
#1182310 #1182438 #1182447 #1182448 #1182449 #1182460
#1182461 #1182462 #1182463 #1182464 #1182465 #1182466
#1182560 #1182561 #1182571 #1182590 #1182610 #1182612
#1182650 #1182652
Cross-References: CVE-2021-3348
Affected Products:
SUSE Linux Enterprise Workstation Extension 12-SP5
SUSE Linux Enterprise Software Development Kit 12-SP5
SUSE Linux Enterprise Server 12-SP5
SUSE Linux Enterprise Live Patching 12-SP5
SUSE Linux Enterprise High Availability 12-SP5
______________________________________________________________________________
An update that solves one vulnerability and has 67 fixes is now available.
Description:
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security
and bugfixes.
The following security bug was fixed:
o CVE-2021-3348: Fixed a use-after-free read in nbd_queue_rq (bsc#1181504).
The following non-security bugs were fixed:
o ACPI: configfs: add missing check after configfs_register_default_group()
(git-fixes).
o ACPI: property: Fix fwnode string properties matching (git-fixes).
o ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
o ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).
o arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)
o ASoC: cs42l56: fix up error handling in probe (git-fixes).
o ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).
o block: fix use-after-free in disk_part_iter_next (bsc#1182610).
o Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the
probe function (git-fixes).
o Bluetooth: drop HCI device reference before return (git-fixes).
o Bluetooth: Fix initializing response id after clearing struct (git-fixes).
o Bluetooth: Put HCI device if inquiry procedure interrupts (git-fixes).
o bonding: Fix reference count leak in bond_sysfs_slave_add (git-fixes).
o bonding: wait for sysfs kobject destruction before freeing struct slave
(git-fixes).
o BTRFS: Cleanup try_flush_qgroup (bsc#1182047).
o BTRFS: correctly calculate item size used when item key collision happens
(bsc#1181996).
o BTRFS: correctly validate compression type (bsc#1182269).
o BTRFS: delete the ordered isize update code (bsc#1181998).
o BTRFS: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o BTRFS: do not set path->leave_spinning for truncate (bsc#1181998).
o BTRFS: factor out extent dropping code from hole punch handler (bsc#
1182038).
o BTRFS: fix cloning range with a hole when using the NO_HOLES feature (bsc#
1182038).
o BTRFS: fix data bytes_may_use underflow with fallocate due to failed quota
reserve (bsc#1182130)
o BTRFS: fix ENOSPC errors, leading to transaction aborts, when cloning
extents (bsc#1182038).
o BTRFS: fix hole extent items with a zero size after range cloning (bsc#
1182038).
o BTRFS: fix lost i_size update after cloning inline extent (bsc#1181998).
o BTRFS: fix mount failure caused by race with umount (bsc#1182248).
o BTRFS: Fix race between extent freeing/allocation when using bitmaps (bsc#
1181574).
o BTRFS: fix unexpected cow in run_delalloc_nocow (bsc#1181987).
o BTRFS: fix unexpected failure of nocow buffered writes after snapshotting
when low on space (bsc#1181987).
o BTRFS: Free correct amount of space in btrfs_delayed_inode_reserve_metadata
(bsc#1182047).
o BTRFS: incremental send, fix file corruption when no-holes feature is
enabled (bsc#1182184).
o BTRFS: Introduce extent_io_tree::owner to distinguish different io_trees
(bsc#1181998).
o BTRFS: introduce per-inode file extent tree (bsc#1181998).
o BTRFS: prepare for extensions in compression options (bsc#1182269).
o BTRFS: prop: fix vanished compression property after failed set (bsc#
1182269).
o BTRFS: prop: fix zstd compression parameter validation (bsc#1182269).
o BTRFS: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o BTRFS: replace all uses of btrfs_ordered_update_i_size (bsc#1181998).
o BTRFS: send, allow clone operations within the same file (bsc#1182173)
o BTRFS: send, do not issue unnecessary truncate operations (bsc#1182173)
o BTRFS: send, fix emission of invalid clone operations within the same file
(bsc#1182173)
o BTRFS: send, fix incorrect file layout after hole punching beyond eof (bsc#
1182173).
o BTRFS: send: fix invalid clone operations when cloning from the same file
and root (bsc#1182173)
o BTRFS: send, fix missing truncate for inode with prealloc extent past eof
(bsc#1182173).
o BTRFS: send, orphanize first all conflicting inodes when processing
references (bsc#1182243 bsc#1182242).
o BTRFS: send, recompute reference path after orphanization of a directory
(bsc#1182243).
o BTRFS: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o BTRFS: transaction: Avoid deadlock due to bad initialization timing of
fs_info::journal_info (bsc#1181931).
o BTRFS: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
o BTRFS: Use bd_dev to generate index when dev_state_hashtable add items (bsc
#1181931).
o BTRFS: use btrfs_ordered_update_i_size in clone_finish_inode_update (bsc#
1181998).
o BTRFS: use the file extent tree infrastructure (bsc#1181998).
o cifs: report error instead of invalid when revalidating a dentry fails (bsc
#1177440).
o dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049).
o Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
(git-fixes).
o Exclude Symbols.list again. Removing the exclude builds vanilla/linux-next
builds. Fixes: 55877625c800 ("kernel-binary.spec.in:
Package the obj_install_dir as explicit filelist.")
o ext4: do not remount read-only with errors=continue on reboot (bsc#
1182464).
o ext4: fix a memory leak of ext4_free_data (bsc#1182447).
o ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1182449).
o ext4: fix deadlock with fs freezing and EA inodes (bsc#1182463).
o ext4: fix superblock checksum failure when setting password salt (bsc#
1182465).
o fgraph: Initialize tracing_graph_pause at task creation (git-fixes).
o firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
o Fix unsynchronized access to sev members through svm_register_enc_region
(bsc#1114648).
o fs: fix lazytime expiration handling in __writeback_single_inode() (bsc#
1182466).
o fs: move I_DIRTY_INODE to fs.h (bsc#1182612).
o HID: core: detect and skip invalid inputs to snto32() (git-fixes).
o HID: wacom: Ignore attempts to overwrite the touch_max value from HID
(git-fixes).
o hwrng: timeriomem - Fix cooldown period calculation (git-fixes).
o ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#
190997).
o ibmvnic: device remove has higher precedence over reset (bsc#1065729).
o ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
o ibmvnic: fix login buffer memory leak (bsc#1081134 ltc#164631).
o ibmvnic: serialize access to work queue on remove (bsc#1065729).
o ibmvnic: Set to CLOSED state even on error (bsc#1084610 ltc#165122
git-fixes).
o Input: elo - fix an error code in elo_connect() (git-fixes).
o Input: joydev - prevent potential read overflow in ioctl (git-fixes).
o iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
o kABI: Fix kABI for 12856e7acde4 PCI/IOV: Mark VFs as not implementing
PCI_COMMAND_MEMORY (bsc#1179612).
o kernel-binary.spec: Add back initrd and image symlink ghosts to filelist
(bsc#1182140). Fixes: 76a9256314c3 ("rpm/kernel-{source,binary}.spec: do
not include ghost symlinks (boo#1179082).")
o kernfs: deal with kernfs_fill_super() failures (bsc#1181809).
o KVM: apic: Flush TLB after APIC mode/address change if VPIDs are in use
(bsc#1182302).
o KVM: Fix kABI for set_virtual_apic_mode (bsc#1182310).
o KVM: Fix kABI for tlb_flush (bsc#1182195).
o kvm-vmx-Basic-APIC-virtualization-controls-have-thre.patch: (bsc#1182310).
o KVM: VMX: check for existence of secondary exec controls before accessing
(bsc#1182438).
o KVM: VMX: hide flexpriority from guest when disabled at the module level
(bsc#1182448).
o kvm-vmx-Introduce-lapic_mode-enumeration.patch: (bsc#1182307).
o KVM: x86: emulate RDPID (bsc#1182182).
o KVM: x86: emulating RDPID failure shall return #UD rather than
o KVM: X86: introduce invalidate_gpa argument to tlb flush (bsc#1182195).
o libfs: fix error cast of negative value in simple_attr_write() (bsc#
1179709).
o libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#
1170442).
o mac80211: fix potential overflow when multiplying to u32 integers
(git-fixes).
o media: cx25821: Fix a bug when reallocating some dma memory (git-fixes).
o media: media/pci: Fix memleak in empress_init (git-fixes).
o media: pwc: Use correct device for DMA (git-fixes).
o media: pxa_camera: declare variable when DEBUG is defined (git-fixes).
o media: qm1d1c0042: fix error return code in qm1d1c0042_init() (git-fixes).
o media: tm6000: Fix memleak in tm6000_start_stream (git-fixes).
o media: vsp1: Fix an error handling path in the probe function (git-fixes).
o mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
(git-fixes).
o misc: eeprom_93xx46: Add module alias to avoid breaking support for non
device tree users (git-fixes).
o misc: eeprom_93xx46: Fix module alias to enable module autoprobe
(git-fixes).
o mmc: usdhi6rol0: Fix a resource leak in the error handling path of the
probe (git-fixes).
o mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support
is disabled (bsc#1181896 ltc#191273).
o mm: thp: kABI: move the added flag to the end of enum (bsc#1181896 ltc#
191273).
o nbd: Fix memory leak in nbd_add_socket (bsc#1181504).
o net: bcmgenet: add support for ethtool rxnfc flows (git-fixes).
o net: bcmgenet: code movement (git-fixes).
o net: bcmgenet: fix mask check in bcmgenet_validate_flow() (git-fixes).
o net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
o net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
o net: bcmgenet: set Rx mode before starting netif (git-fixes).
o net: bcmgenet: use __be16 for htons(ETH_P_IP) (git-fixes).
o net: bcmgenet: Use correct I/O accessors (git-fixes).
o net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
o net/mlx4_en: Handle TX error CQE (bsc#1181854).
o net: moxa: Fix a potential double 'free_irq()' (git-fixes).
o net: sun: fix missing release regions in cas_init_one() (git-fixes).
o nvme-multipath: Early exit if no path is available (git-fixes).
o objtool: Do not fail on missing symbol table (bsc#1169514).
o PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1179612).
o powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning (bsc#
1182571 ltc#191345).
o powerpc: Fix alignment bug within the init sections (bsc#1065729).
o powerpc/perf: Exclude kernel samples while counting events in user space
(bsc#1065729).
o powerpc/perf/hv-24x7: Dont create sysfs event files for dummy events (bsc#
1182118 ltc#190624).
o powerpc/pseries/dlpar: handle ibm, configure-connector delay status (bsc#
1181985 ltc#188074).
o powerpc/pseries/eeh: Make pseries_pcibios_bus_add_device() static (bsc#
1078720, git-fixes).
o powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc
#1182171 ltc#190900).
o powerpc/pseries/ras: Make init_ras_hotplug_IRQ() static (bsc#1065729.
git-fixes).
o power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (git-fixes).
o ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
(bsc#1163930).
o ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
o quota: Fix error codes in v2_read_file_info() (bsc#1182652).
o quota: Fix memory leak when handling corrupted quota file (bsc#1182650).
o quota: Sanity-check quota file headers on load (bsc#1182461).
o regulator: axp20x: Fix reference cout leak (git-fixes).
o reiserfs: add check for an invalid ih_entry_count (bsc#1182462).
o reset: hisilicon: correct vendor prefix (git-fixes).
o rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#
1180058)
o s390/pci: adaptation of iommu to multifunction (bsc#1179612).
o s390/pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY (bsc#
1179612).
o scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (bsc#
1179142).
o scsi: target: Fix truncated PR-in ReadKeys response (bsc#1182590).
o scsi: target: fix unmap_zeroes_data boolean initialisation (bsc#1163617).
o staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules
(git-fixes).
o tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file
(git-fixes).
o tpm_tis: Clean up locality release (git-fixes).
o tpm_tis: Fix check_locality for correct locality acquisition (git-fixes).
o tracing: Check length before giving out the filter buffer (git-fixes).
o tracing: Do not count ftrace events in top level enable output (git-fixes).
o USB: cdc-acm: blacklist another IR Droid device (git-fixes).
o USB: dwc2: Abort transaction after errors with unknown reason (git-fixes).
o USB: dwc2: Make "trimming xfer length" a debug message (git-fixes).
o USB: musb: Fix runtime PM race in mUSB_queue_resume_work (git-fixes).
o USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
(git-fixes).
o USB: serial: cp210x: add pid/vid for WSDA-200-USB (git-fixes).
o USB: serial: mos7720: fix error code in mos7720_write() (git-fixes).
o USB: serial: mos7720: improve OOM-handling in read_mos_reg() (git-fixes).
o USB: serial: mos7840: fix error code in mos7840_write() (git-fixes).
o USB: serial: option: Adding support for Cinterion MV31 (git-fixes).
o USB: serial: option: add LongSung M5710 module support (git-fixes).
o USB: uas: Add PNY USB Portable SSD to unusual_uas (git-fixes).
o USB: usblp: fix DMA to stack (git-fixes).
o vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn (bsc#
1179612).
o vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
o writeback: Drop I_DIRTY_TIME_EXPIRE (bsc#1182460).
o x86/apic: Add extra serialization for non-serializing MSRs (bsc#1114648).
o x86/efistub: Disable paging at mixed mode entry (bsc#1114648).
o x86/entry/64/compat: Fix "x86/entry/64/compat: Preserve r8-r11 in int
$0x80" (bsc#1114648).
o x86/entry/64/compat: Preserve r8-r11 in int $0x80 (bsc#1114648).
o x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (bsc#
1114648).
o x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1114648).
o xen-blkfront: allow discard-* nodes to be optional (bsc#1181346).
o xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
o xfs: reduce quota reservation when doing a dax unwritten extent conversion
(git-fixes bsc#1182561).
o xhci: fix bounce buffer usage for non-sg list case (git-fixes).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE Linux Enterprise Workstation Extension 12-SP5:
zypper in -t patch SUSE-SLE-WE-12-SP5-2021-742=1
o SUSE Linux Enterprise Software Development Kit 12-SP5:
zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-742=1
o SUSE Linux Enterprise Server 12-SP5:
zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-742=1
o SUSE Linux Enterprise Live Patching 12-SP5:
zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2021-742=1
o SUSE Linux Enterprise High Availability 12-SP5:
zypper in -t patch SUSE-SLE-HA-12-SP5-2021-742=1
Package List:
o SUSE Linux Enterprise Workstation Extension 12-SP5 (x86_64):
kernel-default-debuginfo-4.12.14-122.63.1
kernel-default-debugsource-4.12.14-122.63.1
kernel-default-extra-4.12.14-122.63.1
kernel-default-extra-debuginfo-4.12.14-122.63.1
o SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le
s390x x86_64):
kernel-obs-build-4.12.14-122.63.1
kernel-obs-build-debugsource-4.12.14-122.63.1
o SUSE Linux Enterprise Software Development Kit 12-SP5 (noarch):
kernel-docs-4.12.14-122.63.1
o SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64):
kernel-default-4.12.14-122.63.1
kernel-default-base-4.12.14-122.63.1
kernel-default-base-debuginfo-4.12.14-122.63.1
kernel-default-debuginfo-4.12.14-122.63.1
kernel-default-debugsource-4.12.14-122.63.1
kernel-default-devel-4.12.14-122.63.1
kernel-syms-4.12.14-122.63.1
o SUSE Linux Enterprise Server 12-SP5 (noarch):
kernel-devel-4.12.14-122.63.1
kernel-macros-4.12.14-122.63.1
kernel-source-4.12.14-122.63.1
o SUSE Linux Enterprise Server 12-SP5 (x86_64):
kernel-default-devel-debuginfo-4.12.14-122.63.1
o SUSE Linux Enterprise Server 12-SP5 (s390x):
kernel-default-man-4.12.14-122.63.1
o SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64):
kernel-default-debuginfo-4.12.14-122.63.1
kernel-default-debugsource-4.12.14-122.63.1
kernel-default-kgraft-4.12.14-122.63.1
kernel-default-kgraft-devel-4.12.14-122.63.1
kgraft-patch-4_12_14-122_63-default-1-8.3.1
o SUSE Linux Enterprise High Availability 12-SP5 (ppc64le s390x x86_64):
cluster-md-kmp-default-4.12.14-122.63.1
cluster-md-kmp-default-debuginfo-4.12.14-122.63.1
dlm-kmp-default-4.12.14-122.63.1
dlm-kmp-default-debuginfo-4.12.14-122.63.1
gfs2-kmp-default-4.12.14-122.63.1
gfs2-kmp-default-debuginfo-4.12.14-122.63.1
kernel-default-debuginfo-4.12.14-122.63.1
kernel-default-debugsource-4.12.14-122.63.1
ocfs2-kmp-default-4.12.14-122.63.1
ocfs2-kmp-default-debuginfo-4.12.14-122.63.1
References:
o https://www.suse.com/security/cve/CVE-2021-3348.html
o https://bugzilla.suse.com/1065600
o https://bugzilla.suse.com/1065729
o https://bugzilla.suse.com/1078720
o https://bugzilla.suse.com/1081134
o https://bugzilla.suse.com/1084610
o https://bugzilla.suse.com/1114648
o https://bugzilla.suse.com/1163617
o https://bugzilla.suse.com/1163930
o https://bugzilla.suse.com/1169514
o https://bugzilla.suse.com/1170442
o https://bugzilla.suse.com/1176855
o https://bugzilla.suse.com/1177440
o https://bugzilla.suse.com/1178049
o https://bugzilla.suse.com/1179082
o https://bugzilla.suse.com/1179142
o https://bugzilla.suse.com/1179612
o https://bugzilla.suse.com/1179709
o https://bugzilla.suse.com/1180058
o https://bugzilla.suse.com/1181346
o https://bugzilla.suse.com/1181504
o https://bugzilla.suse.com/1181574
o https://bugzilla.suse.com/1181671
o https://bugzilla.suse.com/1181809
o https://bugzilla.suse.com/1181854
o https://bugzilla.suse.com/1181896
o https://bugzilla.suse.com/1181931
o https://bugzilla.suse.com/1181960
o https://bugzilla.suse.com/1181985
o https://bugzilla.suse.com/1181987
o https://bugzilla.suse.com/1181996
o https://bugzilla.suse.com/1181998
o https://bugzilla.suse.com/1182038
o https://bugzilla.suse.com/1182047
o https://bugzilla.suse.com/1182118
o https://bugzilla.suse.com/1182130
o https://bugzilla.suse.com/1182140
o https://bugzilla.suse.com/1182171
o https://bugzilla.suse.com/1182173
o https://bugzilla.suse.com/1182175
o https://bugzilla.suse.com/1182182
o https://bugzilla.suse.com/1182184
o https://bugzilla.suse.com/1182195
o https://bugzilla.suse.com/1182242
o https://bugzilla.suse.com/1182243
o https://bugzilla.suse.com/1182248
o https://bugzilla.suse.com/1182269
o https://bugzilla.suse.com/1182302
o https://bugzilla.suse.com/1182307
o https://bugzilla.suse.com/1182310
o https://bugzilla.suse.com/1182438
o https://bugzilla.suse.com/1182447
o https://bugzilla.suse.com/1182448
o https://bugzilla.suse.com/1182449
o https://bugzilla.suse.com/1182460
o https://bugzilla.suse.com/1182461
o https://bugzilla.suse.com/1182462
o https://bugzilla.suse.com/1182463
o https://bugzilla.suse.com/1182464
o https://bugzilla.suse.com/1182465
o https://bugzilla.suse.com/1182466
o https://bugzilla.suse.com/1182560
o https://bugzilla.suse.com/1182561
o https://bugzilla.suse.com/1182571
o https://bugzilla.suse.com/1182590
o https://bugzilla.suse.com/1182610
o https://bugzilla.suse.com/1182612
o https://bugzilla.suse.com/1182650
o https://bugzilla.suse.com/1182652
- --------------------------------------------------------------------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0736-1
Rating: important
References: #1065600 #1163592 #1176831 #1178401 #1178762 #1179014
#1179015 #1179045 #1179082 #1179428 #1179660 #1180058
#1180906 #1181441 #1181747 #1181753 #1181843 #1182140
#1182175
Cross-References: CVE-2020-29368 CVE-2020-29374 CVE-2021-26930 CVE-2021-26931
CVE-2021-26932
Affected Products:
SUSE OpenStack Cloud Crowbar 9
SUSE OpenStack Cloud 9
SUSE Linux Enterprise Server for SAP 12-SP4
SUSE Linux Enterprise Server 12-SP4-LTSS
SUSE Linux Enterprise Live Patching 12-SP4
SUSE Linux Enterprise High Availability 12-SP4
______________________________________________________________________________
An update that solves 5 vulnerabilities and has 14 fixes is now available.
Description:
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security
and bugfixes.
The following security bugs were fixed:
o CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping
(XSA-365 bsc#1181843).
o CVE-2021-26931: Fixed an issue where Linux kernel was treating grant
mapping errors as bugs (XSA-362 bsc#1181753).
o CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping
(XSA-361 bsc#1181747). by remote attackers to read or write files via
directory traversal in an XCOPY request (bsc#178372).
o CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write
implementation which could have granted unintended write access because of
a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
o cifs: check all path components in resolved dfs target (bsc#1180906).
o cifs: fix check of tcon dfs in smb1 (bsc#1180906).
o cifs: fix nodfs mount option (bsc#1180906).
o cifs: introduce helper for finding referral server (bsc#1180906).
o kernel-{binary,source}.spec.in: do not create loop symlinks (bsc#1179082)
o kernel-binary.spec: Add back initrd and image symlink ghosts to filelist
(bsc#1182140). Fixes: 76a9256314c3 ("rpm/kernel-{source,binary}.spec: do
not include ghost symlinks (boo#1179082).")
o kernel-source.spec: Fix build with rpm 4.16 (boo#1179015). RPM_BUILD_ROOT
is cleared before %%install. Do the unpack into RPM_BUILD_ROOT in %%install
o rpm/kernel-binary.spec.in: avoid using barewords (bsc#1179014)
o rpm/kernel-binary.spec.in: avoid using more barewords (bsc#1179014)
%split_extra still contained two.
o rpm/kernel-binary.spec.in: Fix compressed module handling for in-tree KMP
(jsc#SLE-10886)
o rpm/kernel-binary.spec.in: use grep -E instead of egrep (bsc#1179045) egrep
is only a deprecated bash wrapper for "grep -E". So use the latter instead.
o rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)
o rpm/kernel-obs-build.spec.in: Add -q option to modprobe calls (bsc#1178401)
o rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#
1179082).
o rpm/mkspec: do not build kernel-obs-build on x86_32 We want to use 64bit
kernel due to various bugs (bsc#1178762 to name one). There is:
ExportFilter: ^kernel-obs-build.*\.x86_64.rpm$ . i586 in Factory's prjconf
now. No other actively maintained distro (i.e. merging packaging branch)
builds a x86_32 kernel, hence pushing to packaging directly.
o rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#
1180058)
o scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
o scsi: fc: add FPIN ELS definition (bsc#1181441).
o scsi/fc: kABI fixes for new ELS_FPIN definition (bsc#1181441)
o scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs
(bsc#1181441).
o scsi: Fix trivial spelling (bsc#1181441).
o scsi: qla2xxx: Add IOCB resource tracking (bsc#1181441).
o scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1181441).
o scsi: qla2xxx: Address a set of sparse warnings (bsc#1181441).
o scsi: qla2xxx: Add rport fields in debugfs (bsc#1181441).
o scsi: qla2xxx: Add SLER and PI control support (bsc#1181441).
o scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#
1181441).
o scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set
anytime (bsc#1181441).
o scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (bsc#1181441).
o scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (bsc#1181441).
o scsi: qla2xxx: Change post del message from debug level to log level (bsc#
1181441).
o scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into
lower case (bsc#1181441).
o scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof()
expressions (bsc#1181441).
o scsi: qla2xxx: Check if FW supports MQ before enabling (bsc#1181441).
o scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (bsc#
1181441).
o scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1181441).
o scsi: qla2xxx: Do not check for fw_started while posting NVMe command (bsc#
1181441).
o scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1181441).
o scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#
1181441).
o scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (bsc#1181441).
o scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1181441).
o scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1181441).
o scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#
1181441).
o scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1181441).
o scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (bsc#
1181441).
o scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1181441).
o scsi: qla2xxx: Fix endianness annotations in header files (bsc#1181441).
o scsi: qla2xxx: Fix endianness annotations in source files (bsc#1181441).
o scsi: qla2xxx: Fix failure message in qlt_disable_vha() (bsc#1181441).
o scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines
(bsc#1181441).
o scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#
1181441).
o scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#
1181441).
o scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#
1181441).
o scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#
1181441).
o scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1181441).
o scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#
1181441).
o scsi: qla2xxx: Fix issue with adapter's stopping state (bsc#1181441).
o scsi: qla2xxx: Fix login timeout (bsc#1181441).
o scsi: qla2xxx: Fix memory size truncation (bsc#1181441).
o scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1181441).
o scsi: qla2xxx: Fix MPI reset needed message (bsc#1181441).
o scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1181441).
o scsi: qla2xxx: Fix null pointer access during disconnect from subsystem
(bsc#1181441).
o scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#
1181441).
o scsi: qla2xxx: Fix regression on sparc64 (bsc#1181441).
o scsi: qla2xxx: Fix reset of MPI firmware (bsc#1181441).
o scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1181441).
o scsi: qla2xxx: Fix spelling of a variable name (bsc#1181441).
o scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1181441).
o scsi: qla2xxx: Fix the code that reads from mailbox registers (bsc#
1181441).
o scsi: qla2xxx: Fix the return value (bsc#1181441).
o scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (bsc#
1181441).
o scsi: qla2xxx: Fix warning after FC target reset (bsc#1181441).
o scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1181441).
o scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (bsc#
1181441).
o scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (bsc#
1181441).
o scsi: qla2xxx: Flush all sessions on zone disable (bsc#1181441).
o scsi: qla2xxx: Flush I/O on zone disable (bsc#1181441).
o scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (bsc#
1181441).
o scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1181441).
o scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry
(bsc#1181441).
o scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to
FCP_PRIO_CFG_SIZE (bsc#1181441).
o scsi: qla2xxx: Indicate correct supported speeds for Mezz card (bsc#
1181441).
o scsi: qla2xxx: Initialize 'n' before using it (bsc#1181441).
o scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1181441).
o scsi: qla2xxx: Introduce a function for computing the debug message prefix
(bsc#1181441).
o scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1181441).
o scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1181441).
o scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle()
(bsc#1181441).
o scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1181441).
o scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (bsc#
1181441).
o scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of
request_t.handle (bsc#1181441).
o scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (bsc#1181441).
o scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (bsc#
1181441).
o scsi: qla2xxx: Make qlafx00_process_aen() return void (bsc#1181441).
o scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1181441).
o scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#
1181441).
o scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1181441).
o scsi: qla2xxx: Performance tweak (bsc#1181441).
o scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1181441).
o scsi: qla2xxx: Reduce noisy debug message (bsc#1181441).
o scsi: qla2xxx: Remove an unused function (bsc#1181441).
o scsi: qla2xxx: Remove a superfluous cast (bsc#1181441).
o scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1181441).
o scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (bsc#
1181441).
o scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (bsc#
1181441).
o scsi: qla2xxx: Remove pci-dma-compat wrapper API (bsc#1181441).
o scsi: qla2xxx: Remove redundant variable initialization (bsc#1181441).
o scsi: qla2xxx: Remove return value from qla_nvme_ls() (bsc#1181441).
o scsi: qla2xxx: Remove superfluous memset() (bsc#1181441).
o scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and
fcp_hdr_le (bsc#1181441).
o scsi: qla2xxx: Remove trailing semicolon in macro definition (bsc#1181441).
o scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1181441).
o scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1181441).
o scsi: qla2xxx: SAN congestion management implementation (bsc#1181441).
o scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1181441).
o scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle()
(bsc#1181441).
o scsi: qla2xxx: Simplify the functions for dumping firmware (bsc#1181441).
o scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (bsc#1181441).
o scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1181441).
o scsi: qla2xxx: Tear down session if FW say it is down (bsc#1181441).
o scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1181441).
o scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1181441).
o scsi: qla2xxx: Update version to 10.02.00.104-k (bsc#1181441).
o scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (bsc#1181441).
o scsi: qla2xxx: Use constant when it is known (bsc#1181441).
o scsi: qla2xxx: Use make_handle() instead of open-coding it (bsc#1181441).
o scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (bsc#
1181441).
o scsi: qla2xxx: Use register names instead of register offsets (bsc#
1181441).
o scsi: qla2xxx: Use true, false for ha->fw_dumped (bsc#1181441).
o scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1181441).
o scsi: qla2xxx: Warn if done() or free() are called on an already freed srb
(bsc#1181441).
o scsi: scsi_transport_fc: Add FPIN fc event codes (bsc#1181441).
o scsi: scsi_transport_fc: refactor event posting routines (bsc#1181441).
o scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1181441).
o x86/hyperv: Fix kexec panic/hang issues (bsc#1176831).
o xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE OpenStack Cloud Crowbar 9:
zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2021-736=1
o SUSE OpenStack Cloud 9:
zypper in -t patch SUSE-OpenStack-Cloud-9-2021-736=1
o SUSE Linux Enterprise Server for SAP 12-SP4:
zypper in -t patch SUSE-SLE-SAP-12-SP4-2021-736=1
o SUSE Linux Enterprise Server 12-SP4-LTSS:
zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2021-736=1
o SUSE Linux Enterprise Live Patching 12-SP4:
zypper in -t patch SUSE-SLE-Live-Patching-12-SP4-2021-736=1
o SUSE Linux Enterprise High Availability 12-SP4:
zypper in -t patch SUSE-SLE-HA-12-SP4-2021-736=1
Package List:
o SUSE OpenStack Cloud Crowbar 9 (noarch):
kernel-devel-4.12.14-95.71.1
kernel-macros-4.12.14-95.71.1
kernel-source-4.12.14-95.71.1
o SUSE OpenStack Cloud Crowbar 9 (x86_64):
kernel-default-4.12.14-95.71.1
kernel-default-base-4.12.14-95.71.1
kernel-default-base-debuginfo-4.12.14-95.71.1
kernel-default-debuginfo-4.12.14-95.71.1
kernel-default-debugsource-4.12.14-95.71.1
kernel-default-devel-4.12.14-95.71.1
kernel-default-devel-debuginfo-4.12.14-95.71.1
kernel-syms-4.12.14-95.71.1
o SUSE OpenStack Cloud 9 (noarch):
kernel-devel-4.12.14-95.71.1
kernel-macros-4.12.14-95.71.1
kernel-source-4.12.14-95.71.1
o SUSE OpenStack Cloud 9 (x86_64):
kernel-default-4.12.14-95.71.1
kernel-default-base-4.12.14-95.71.1
kernel-default-base-debuginfo-4.12.14-95.71.1
kernel-default-debuginfo-4.12.14-95.71.1
kernel-default-debugsource-4.12.14-95.71.1
kernel-default-devel-4.12.14-95.71.1
kernel-default-devel-debuginfo-4.12.14-95.71.1
kernel-syms-4.12.14-95.71.1
o SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64):
kernel-default-4.12.14-95.71.1
kernel-default-base-4.12.14-95.71.1
kernel-default-base-debuginfo-4.12.14-95.71.1
kernel-default-debuginfo-4.12.14-95.71.1
kernel-default-debugsource-4.12.14-95.71.1
kernel-default-devel-4.12.14-95.71.1
kernel-syms-4.12.14-95.71.1
o SUSE Linux Enterprise Server for SAP 12-SP4 (x86_64):
kernel-default-devel-debuginfo-4.12.14-95.71.1
o SUSE Linux Enterprise Server for SAP 12-SP4 (noarch):
kernel-devel-4.12.14-95.71.1
kernel-macros-4.12.14-95.71.1
kernel-source-4.12.14-95.71.1
o SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64):
kernel-default-4.12.14-95.71.1
kernel-default-base-4.12.14-95.71.1
kernel-default-base-debuginfo-4.12.14-95.71.1
kernel-default-debuginfo-4.12.14-95.71.1
kernel-default-debugsource-4.12.14-95.71.1
kernel-default-devel-4.12.14-95.71.1
kernel-syms-4.12.14-95.71.1
o SUSE Linux Enterprise Server 12-SP4-LTSS (noarch):
kernel-devel-4.12.14-95.71.1
kernel-macros-4.12.14-95.71.1
kernel-source-4.12.14-95.71.1
o SUSE Linux Enterprise Server 12-SP4-LTSS (x86_64):
kernel-default-devel-debuginfo-4.12.14-95.71.1
o SUSE Linux Enterprise Server 12-SP4-LTSS (s390x):
kernel-default-man-4.12.14-95.71.1
o SUSE Linux Enterprise Live Patching 12-SP4 (ppc64le s390x x86_64):
kernel-default-kgraft-4.12.14-95.71.1
kernel-default-kgraft-devel-4.12.14-95.71.1
kgraft-patch-4_12_14-95_71-default-1-6.3.1
o SUSE Linux Enterprise High Availability 12-SP4 (ppc64le s390x x86_64):
cluster-md-kmp-default-4.12.14-95.71.1
cluster-md-kmp-default-debuginfo-4.12.14-95.71.1
dlm-kmp-default-4.12.14-95.71.1
dlm-kmp-default-debuginfo-4.12.14-95.71.1
gfs2-kmp-default-4.12.14-95.71.1
gfs2-kmp-default-debuginfo-4.12.14-95.71.1
kernel-default-debuginfo-4.12.14-95.71.1
kernel-default-debugsource-4.12.14-95.71.1
ocfs2-kmp-default-4.12.14-95.71.1
ocfs2-kmp-default-debuginfo-4.12.14-95.71.1
References:
o https://www.suse.com/security/cve/CVE-2020-29368.html
o https://www.suse.com/security/cve/CVE-2020-29374.html
o https://www.suse.com/security/cve/CVE-2021-26930.html
o https://www.suse.com/security/cve/CVE-2021-26931.html
o https://www.suse.com/security/cve/CVE-2021-26932.html
o https://bugzilla.suse.com/1065600
o https://bugzilla.suse.com/1163592
o https://bugzilla.suse.com/1176831
o https://bugzilla.suse.com/1178401
o https://bugzilla.suse.com/1178762
o https://bugzilla.suse.com/1179014
o https://bugzilla.suse.com/1179015
o https://bugzilla.suse.com/1179045
o https://bugzilla.suse.com/1179082
o https://bugzilla.suse.com/1179428
o https://bugzilla.suse.com/1179660
o https://bugzilla.suse.com/1180058
o https://bugzilla.suse.com/1180906
o https://bugzilla.suse.com/1181441
o https://bugzilla.suse.com/1181747
o https://bugzilla.suse.com/1181753
o https://bugzilla.suse.com/1181843
o https://bugzilla.suse.com/1182140
o https://bugzilla.suse.com/1182175
- --------------------------------------------------------------------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0744-1
Rating: important
References: #1178372 #1181747 #1181753 #1181843 #1182175
Cross-References: CVE-2020-28374 CVE-2021-26930 CVE-2021-26931 CVE-2021-26932
Affected Products:
SUSE OpenStack Cloud 7
SUSE Linux Enterprise Server for SAP 12-SP2
SUSE Linux Enterprise Server 12-SP2-LTSS
SUSE Linux Enterprise Server 12-SP2-BCL
SUSE Linux Enterprise High Availability 12-SP2
______________________________________________________________________________
An update that solves four vulnerabilities and has one errata is now available.
Description:
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security
and bugfixes.
The following security bugs were fixed:
o CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping
(XSA-365 bsc#1181843).
o CVE-2021-26931: Fixed an issue where Linux kernel was treating grant
mapping errors as bugs (XSA-362 bsc#1181753).
o CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping
(XSA-361 bsc#1181747).
o CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI
target code which could have been used by remote attackers to read or write
files via directory traversal in an XCOPY request (bsc#178372).
The following non-security bug was fixed:
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE OpenStack Cloud 7:
zypper in -t patch SUSE-OpenStack-Cloud-7-2021-744=1
o SUSE Linux Enterprise Server for SAP 12-SP2:
zypper in -t patch SUSE-SLE-SAP-12-SP2-2021-744=1
o SUSE Linux Enterprise Server 12-SP2-LTSS:
zypper in -t patch SUSE-SLE-SERVER-12-SP2-2021-744=1
o SUSE Linux Enterprise Server 12-SP2-BCL:
zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2021-744=1
o SUSE Linux Enterprise High Availability 12-SP2:
zypper in -t patch SUSE-SLE-HA-12-SP2-2021-744=1
Package List:
o SUSE OpenStack Cloud 7 (s390x x86_64):
kernel-default-4.4.121-92.152.2
kernel-default-base-4.4.121-92.152.2
kernel-default-base-debuginfo-4.4.121-92.152.2
kernel-default-debuginfo-4.4.121-92.152.2
kernel-default-debugsource-4.4.121-92.152.2
kernel-default-devel-4.4.121-92.152.2
kernel-syms-4.4.121-92.152.2
o SUSE OpenStack Cloud 7 (x86_64):
kgraft-patch-4_4_121-92_152-default-1-3.3.2
o SUSE OpenStack Cloud 7 (noarch):
kernel-devel-4.4.121-92.152.2
kernel-macros-4.4.121-92.152.2
kernel-source-4.4.121-92.152.2
o SUSE OpenStack Cloud 7 (s390x):
kernel-default-man-4.4.121-92.152.2
o SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64):
kernel-default-4.4.121-92.152.2
kernel-default-base-4.4.121-92.152.2
kernel-default-base-debuginfo-4.4.121-92.152.2
kernel-default-debuginfo-4.4.121-92.152.2
kernel-default-debugsource-4.4.121-92.152.2
kernel-default-devel-4.4.121-92.152.2
kernel-syms-4.4.121-92.152.2
kgraft-patch-4_4_121-92_152-default-1-3.3.2
o SUSE Linux Enterprise Server for SAP 12-SP2 (noarch):
kernel-devel-4.4.121-92.152.2
kernel-macros-4.4.121-92.152.2
kernel-source-4.4.121-92.152.2
o SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64):
kernel-default-4.4.121-92.152.2
kernel-default-base-4.4.121-92.152.2
kernel-default-base-debuginfo-4.4.121-92.152.2
kernel-default-debuginfo-4.4.121-92.152.2
kernel-default-debugsource-4.4.121-92.152.2
kernel-default-devel-4.4.121-92.152.2
kernel-syms-4.4.121-92.152.2
o SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le x86_64):
kgraft-patch-4_4_121-92_152-default-1-3.3.2
o SUSE Linux Enterprise Server 12-SP2-LTSS (noarch):
kernel-devel-4.4.121-92.152.2
kernel-macros-4.4.121-92.152.2
kernel-source-4.4.121-92.152.2
o SUSE Linux Enterprise Server 12-SP2-LTSS (s390x):
kernel-default-man-4.4.121-92.152.2
o SUSE Linux Enterprise Server 12-SP2-BCL (noarch):
kernel-devel-4.4.121-92.152.2
kernel-macros-4.4.121-92.152.2
kernel-source-4.4.121-92.152.2
o SUSE Linux Enterprise Server 12-SP2-BCL (x86_64):
kernel-default-4.4.121-92.152.2
kernel-default-base-4.4.121-92.152.2
kernel-default-base-debuginfo-4.4.121-92.152.2
kernel-default-debuginfo-4.4.121-92.152.2
kernel-default-debugsource-4.4.121-92.152.2
kernel-default-devel-4.4.121-92.152.2
kernel-syms-4.4.121-92.152.2
o SUSE Linux Enterprise High Availability 12-SP2 (ppc64le s390x x86_64):
cluster-md-kmp-default-4.4.121-92.152.2
cluster-md-kmp-default-debuginfo-4.4.121-92.152.2
cluster-network-kmp-default-4.4.121-92.152.2
cluster-network-kmp-default-debuginfo-4.4.121-92.152.2
dlm-kmp-default-4.4.121-92.152.2
dlm-kmp-default-debuginfo-4.4.121-92.152.2
gfs2-kmp-default-4.4.121-92.152.2
gfs2-kmp-default-debuginfo-4.4.121-92.152.2
kernel-default-debuginfo-4.4.121-92.152.2
kernel-default-debugsource-4.4.121-92.152.2
ocfs2-kmp-default-4.4.121-92.152.2
ocfs2-kmp-default-debuginfo-4.4.121-92.152.2
References:
o https://www.suse.com/security/cve/CVE-2020-28374.html
o https://www.suse.com/security/cve/CVE-2021-26930.html
o https://www.suse.com/security/cve/CVE-2021-26931.html
o https://www.suse.com/security/cve/CVE-2021-26932.html
o https://bugzilla.suse.com/1178372
o https://bugzilla.suse.com/1181747
o https://bugzilla.suse.com/1181753
o https://bugzilla.suse.com/1181843
o https://bugzilla.suse.com/1182175
- --------------------------------------------------------------------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0741-1
Rating: important
References: #1065600 #1065729 #1078720 #1081134 #1084610 #1132477
#1151927 #1152472 #1152489 #1154353 #1155518 #1156395
#1163776 #1169514 #1170442 #1176248 #1176855 #1177109
#1177326 #1177440 #1177529 #1178142 #1178995 #1179082
#1179137 #1179243 #1179428 #1179660 #1179929 #1180058
#1180846 #1180964 #1180989 #1181133 #1181259 #1181544
#1181574 #1181637 #1181655 #1181671 #1181674 #1181710
#1181720 #1181735 #1181736 #1181738 #1181747 #1181753
#1181818 #1181843 #1181854 #1181896 #1181958 #1181960
#1181985 #1182047 #1182110 #1182118 #1182128 #1182140
#1182171 #1182175 #1182259 #1182265 #1182266 #1182267
#1182268 #1182271 #1182272 #1182273 #1182275 #1182276
#1182278 #1182283 #1182341 #1182374 #1182380 #1182381
#1182406 #1182430 #1182439 #1182441 #1182442 #1182443
#1182444 #1182445 #1182446 #1182447 #1182449 #1182454
#1182455 #1182456 #1182457 #1182458 #1182459 #1182460
#1182461 #1182462 #1182463 #1182464 #1182465 #1182466
#1182485 #1182489 #1182490 #1182507 #1182547 #1182558
#1182560 #1182561 #1182571 #1182599 #1182602 #1182626
#1182650 #1182672 #1182676 #1182683 #1182684 #1182686
#1182770 #1182798 #1182800 #1182801 #1182854 #1182856
Cross-References: CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-12373
CVE-2020-29368 CVE-2020-29374 CVE-2021-26930 CVE-2021-26931
CVE-2021-26932
Affected Products:
SUSE MicroOS 5.0
SUSE Linux Enterprise Workstation Extension 15-SP2
SUSE Linux Enterprise Module for Live Patching 15-SP2
SUSE Linux Enterprise Module for Legacy Software 15-SP2
SUSE Linux Enterprise Module for Development Tools 15-SP2
SUSE Linux Enterprise Module for Basesystem 15-SP2
SUSE Linux Enterprise High Availability 15-SP2
______________________________________________________________________________
An update that solves 9 vulnerabilities and has 117 fixes is now available.
Description:
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security
and bugfixes.
The following security bugs were fixed:
o CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping
(XSA-365 bsc#1181843).
o CVE-2021-26931: Fixed an issue where Linux kernel was treating grant
mapping errors as bugs (XSA-362 bsc#1181753).
o CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping
(XSA-361 bsc#1181747). by remote attackers to read or write files via
directory traversal in an XCOPY request (bsc#178372).
o CVE-2020-12362: Fixed an integer overflow in the firmware which may have
allowed a privileged user to potentially enable an escalation of privilege
via local access (bsc#1181720).
o CVE-2020-12363: Fixed an improper input validation which may have allowed a
privileged user to potentially enable a denial of service via local access
(bsc#1181735).
o CVE-2020-12364: Fixed a null pointer reference which may have allowed a
privileged user to potentially enable a denial of service via local access
(bsc#1181736 ).
o CVE-2020-12373: Fixed an expired pointer dereference which may have allowed
a privileged user to potentially enable a denial of service via local
access (bsc#1181738).
o CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write
implementation which could have granted unintended write access because of
a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
o ACPI: configfs: add missing check after configfs_register_default_group()
(git-fixes).
o ACPI: property: Fix fwnode string properties matching (git-fixes).
o ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
o ACPI: property: Satisfy kernel doc validator (part 2) (git-fixes).
o ALSA: hda: Add another CometLake-H PCI ID (git-fixes).
o ALSA: hda/hdmi: Drop bogus check at closing a stream (git-fixes).
o ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).
o ALSA: pcm: Assure sync with the pending stop operation at suspend
(git-fixes).
o ALSA: pcm: Call sync_stop at disconnection (git-fixes).
o ALSA: pcm: Do not call sync_stop if it hasn't been stopped (git-fixes).
o ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 (git-fixes).
o ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all()
(git-fixes).
o ALSA: usb-audio: Do not avoid stopping the stream at disconnection
(git-fixes).
o ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).
o ALSA: usb-audio: Handle invalid running state at releasing EP (git-fixes).
o ALSA: usb-audio: More strict state change in EP (git-fixes).
o amba: Fix resource leak for drivers without .remove (git-fixes).
o arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)
o ASoC: cpcap: fix microphone timeslot mask (git-fixes).
o ASoC: cs42l56: fix up error handling in probe (git-fixes).
o ASoC: simple-card-utils: Fix device module clock (git-fixes).
o ASoC: SOF: debug: Fix a potential issue on string buffer termination
(git-fixes).
o ata: ahci_brcm: Add back regulators management (git-fixes).
o ata: sata_nv: Fix retrieving of active qcs (git-fixes).
o ath10k: Fix error handling in case of CE pipe init failure (git-fixes).
o ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).
o bcache: fix overflow in offset_to_stripe() (git-fixes).
o blk-mq: call commit_rqs while list empty but error happen (bsc#1182442).
o blk-mq: insert request not through ->queue_rq into sw/scheduler queue (bsc#
1182443).
o blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue (bsc#
1182444).
o block: fix inflight statistics of part0 (bsc#1182445).
o block: respect queue limit of max discard segment (bsc#1182441).
o block: virtio_blk: fix handling single range discard request (bsc#1182439).
o Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the
probe function (git-fixes).
o Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv (git-fixes).
o Bluetooth: drop HCI device reference before return (git-fixes).
o Bluetooth: Fix initializing response id after clearing struct (git-fixes).
o Bluetooth: hci_uart: Fix a race for write_work scheduling (git-fixes).
o Bluetooth: Put HCI device if inquiry procedure interrupts (git-fixes).
o bnxt_en: Fix accumulation of bp->net_stats_prev (git-fixes).
o bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
o bnxt_en: fix error return code in bnxt_init_one() (git-fixes).
o bnxt_en: Improve stats context resource accounting with RDMA driver loaded
(git-fixes).
o bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
o bnxt_en: Release PCI regions when DMA mask setup fails during probe
(git-fixes).
o bonding: Fix reference count leak in bond_sysfs_slave_add (git-fixes).
o bonding: set dev->needed_headroom in bond_setup_by_slave() (git-fixes).
o bonding: wait for sysfs kobject destruction before freeing struct slave
(git-fixes).
o bpf, cgroup: Fix optlen WARN_ON_ONCE toctou (bsc#1155518).
o bpf, cgroup: Fix problematic bounds check (bsc#1155518).
o btrfs: add assertion for empty list of transactions at late stage of umount
(bsc#1182626).
o btrfs: Cleanup try_flush_qgroup (bsc#1182047).
o btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: Fix race between extent freeing/allocation when using bitmaps (bsc#
1181574).
o btrfs: fix race between RO remount and the cleaner task (bsc#1182626).
o btrfs: fix transaction leak and crash after cleaning up orphans on RO mount
(bsc#1182626).
o btrfs: fix transaction leak and crash after RO remount caused by qgroup
rescan (bsc#1182626).
o btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata
(bsc#1182047).
o btrfs: lift read-write mount setup from mount and remount (bsc#1182626).
o btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: run delayed iputs when remounting RO to avoid leaking them (bsc#
1182626).
o btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
o caif: no need to check return value of debugfs_create functions
(git-fixes).
o ceph: fix flush_snap logic after putting caps (bsc#1182854).
o cgroup: Fix memory leak when parsing multiple source parameters (bsc#
1182683).
o cgroup: fix psi monitor for root cgroup (bsc#1182686).
o cgroup-v1: add disabled controller check in cgroup1_parse_param() (bsc#
1182684).
o chelsio/chtls: correct function return and return type (git-fixes).
o chelsio/chtls: correct netdevice for vlan interface (git-fixes).
o chelsio/chtls: fix a double free in chtls_setkey() (git-fixes).
o chelsio/chtls: fix always leaking ctrl_skb (git-fixes).
o chelsio/chtls: fix deadlock issue (git-fixes).
o chelsio/chtls: fix memory leaks caused by a race (git-fixes).
o chelsio/chtls: fix memory leaks in CPL handlers (git-fixes).
o chelsio/chtls: fix panic during unload reload chtls (git-fixes).
o chelsio/chtls: fix socket lock (git-fixes).
o chelsio/chtls: fix tls record info to user (git-fixes).
o Cherry-pick ibmvnic patches from SP3 (jsc#SLE-17268).
o chtls: Added a check to avoid NULL pointer dereference (git-fixes).
o chtls: Fix chtls resources release sequence (git-fixes).
o chtls: Fix hardware tid leak (git-fixes).
o chtls: Fix panic when route to peer not configured (git-fixes).
o chtls: Remove invalid set_tcb call (git-fixes).
o chtls: Replace skb_dequeue with skb_peek (git-fixes).
o cifs: check all path components in resolved dfs target (bsc#1181710).
o cifs: fix nodfs mount option (bsc#1181710).
o cifs: introduce helper for finding referral server (bsc#1181710).
o cifs: report error instead of invalid when revalidating a dentry fails (bsc
#1177440).
o cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
o cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code
(git-fixes).
o clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL
(git-fixes).
o clk: meson: clk-pll: make "ret" a signed integer (git-fixes).
o clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate()
(git-fixes).
o clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs (git-fixes).
o clk: sunxi-ng: h6: Fix CEC clock (git-fixes).
o clk: sunxi-ng: h6: Fix clock divider range on some clocks (git-fixes).
o clk: sunxi-ng: mp: fix parent rate change flag check (git-fixes).
o clocksource/drivers/ixp4xx: Select TIMER_OF when needed (git-fixes).
o cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove() (git-fixes).
o cpufreq: brcmstb-avs-cpufreq: Free resources in error path (git-fixes).
o cpuset: fix race between hotplug work and later CPU offline (bsc#1182676).
o crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()
(git-fixes).
o crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error)
(git-fixes).
o cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
o cxgb4: fix all-mask IP address comparison (git-fixes).
o cxgb4: fix checks for max queues to allocate (git-fixes).
o cxgb4: fix endian conversions for L4 ports in filters (git-fixes).
o cxgb4: fix set but unused variable when DCB is disabled (git-fixes).
o cxgb4: fix SGE queue dump destination buffer context (git-fixes).
o cxgb4: fix the panic caused by non smac rewrite (git-fixes).
o cxgb4: move DCB version extern to header file (git-fixes).
o cxgb4: move handling L2T ARP failures to caller (git-fixes).
o cxgb4: move PTP lock and unlock to caller in Tx path (git-fixes).
o cxgb4: parse TC-U32 key values and masks natively (git-fixes).
o cxgb4: remove cast when saving IPv4 partial checksum (git-fixes).
o cxgb4: set up filter action after rewrites (git-fixes).
o cxgb4: use correct type for all-mask IP address comparison (git-fixes).
o cxgb4: use unaligned conversion for fetching timestamp (git-fixes).
o dmaengine: fsldma: Fix a resource leak in an error handling path of the
probe function (git-fixes).
o dmaengine: fsldma: Fix a resource leak in the remove function (git-fixes).
o dmaengine: hsu: disable spurious interrupt (git-fixes).
o dmaengine: owl-dma: Fix a resource leak in the remove function (git-fixes).
o dm crypt: avoid truncating the logical block size (git-fixes).
o dm: fix bio splitting and its bio completion order for regular IO
(git-fixes).
o dm thin: fix use-after-free in metadata_pre_commit_callback (bsc#1177529).
o dm thin metadata: Avoid returning cmd->bm wild pointer on error (bsc#
1177529).
o dm thin metadata: fix lockdep complaint (bsc#1177529).
o dm thin metadata: Fix use-after-free in dm_bm_set_read_only (bsc#1177529).
o dm: use noio when sending kobject event (bsc#1177529).
o docs: filesystems: vfs: correct flag name (bsc#1182856).
o dpaa2-eth: fix return codes used in ndo_setup_tc (git-fixes).
o drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
(git-fixes).
o drivers: net: davinci_mdio: fix potential NULL dereference in
davinci_mdio_probe() (git-fixes).
o drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[]
(git-fixes).
o drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs
(git-fixes).
o drm/amd/display: Change function decide_dp_link_settings to avoid infinite
looping (git-fixes).
o drm/amd/display: Decrement refcount of dc_sink before reassignment
(git-fixes).
o drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction
(git-fixes).
o drm/amd/display: Fix dc_sink kref count in emulated_link_detect
(git-fixes).
o drm/amd/display: Fix HDMI deep color output for DCE 6-11 (git-fixes).
o drm/amd/display: Free atomic state after drm_atomic_commit (git-fixes).
o drm/amd/display: Revert "Fix EDID parsing after resume from suspend"
(git-fixes).
o drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition
(git-fixes).
o drm/fb-helper: Add missed unlocks in setcmap_legacy() (git-fixes).
o drm/gma500: Fix error return code in psb_driver_load() (git-fixes).
o drm/meson: Unbind all connectors on module removal (bsc#1152472)
o drm/sun4i: dw-hdmi: always set clock rate (bsc#1152472)
o drm/sun4i: dw-hdmi: Fix max. frequency for H6 (bsc#1152472)
o drm/sun4i: Fix H6 HDMI PHY configuration (bsc#1152472)
o drm/sun4i: tcon: set sync polarity for tcon1 channel (bsc#1152472)
o drm/vc4: hvs: Fix buffer overflow with the dlist handling (bsc#1152489)
o Drop HID logitech patch that caused a regression (bsc#1182259)
o exec: Always set cap_ambient in cap_bprm_set_creds (git-fixes).
o exfat: Avoid allocating upcase table using kcalloc() (git-fixes).
o ext4: do not remount read-only with errors=continue on reboot (bsc#
1182464).
o ext4: fix a memory leak of ext4_free_data (bsc#1182447).
o ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1182449).
o ext4: fix deadlock with fs freezing and EA inodes (bsc#1182463).
o ext4: fix superblock checksum failure when setting password salt (bsc#
1182465).
o ext4: prevent creating duplicate encrypted filenames (bsc#1182446).
o fgraph: Initialize tracing_graph_pause at task creation (git-fixes).
o firmware_loader: align .builtin_fw to 8 (git-fixes).
o fscrypt: add fscrypt_is_nokey_name() (bsc#1182446).
o fscrypt: rename DCACHE_ENCRYPTED_NAME to DCACHE_NOKEY_NAME (bsc#1182446).
o fs: fix lazytime expiration handling in __writeback_single_inode() (bsc#
1182466).
o gma500: clean up error handling in init (git-fixes).
o gpio: pcf857x: Fix missing first interrupt (git-fixes).
o HID: core: detect and skip invalid inputs to snto32() (git-fixes).
o HID: make arrays usage and value to be the same (git-fixes).
o HID: wacom: Ignore attempts to overwrite the touch_max value from HID
(git-fixes).
o hwrng: timeriomem - Fix cooldown period calculation (git-fixes).
o i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (git-fixes).
o i2c: iproc: handle only slave interrupts which are enabled (git-fixes).
o i2c: mediatek: Move suspend and resume handling to NOIRQ phase (git-fixes).
o i2c: stm32f7: fix configuration of the digital filter (git-fixes).
o i3c: master: dw: Drop redundant disec call (git-fixes).
o i40e: acquire VSI pointer only after VF is initialized (jsc#SLE-8025).
o i40e: avoid premature Rx buffer reuse (git-fixes).
o i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (git-fixes).
o i40e: Fix MAC address setting for a VF via Host/VM (git-fixes).
o i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
o i40e: Revert "i40e: do not report link up for a VF who hasn't enabled
queues" (jsc#SLE-8025).
o iavf: fix double-release of rtnl_lock (git-fixes).
o iavf: fix error return code in iavf_init_get_resources() (git-fixes).
o iavf: fix speed reporting over virtchnl (git-fixes).
o iavf: Fix updating statistics (git-fixes).
o ibmvnic: add memory barrier to protect long term buffer (bsc#1182485 ltc#
191591).
o ibmvnic: change IBMVNIC_MAX_IND_DESCS to 16 (bsc#1182485 ltc#191591).
o ibmvnic: Clean up TX code and TX buffer data structure (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#
190997).
o ibmvnic: compare adapter->init_done_rc with more readable ibmvnic_rc_codes
(jsc#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Correctly re-enable interrupts in NAPI polling routine (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: create send_control_ip_offload (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: create send_query_ip_offload (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: device remove has higher precedence over reset (bsc#1065729).
o ibmvnic: Do not replenish RX buffers after every polling loop (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Ensure that CRQ entry read are correctly ordered (bsc#1182485 ltc#
191591).
o ibmvnic: Ensure that device queue memory is cache-line aligned (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Ensure that SCRQ entry reads are correctly ordered (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
o ibmvnic: fix login buffer memory leak (bsc#1081134 ltc#164631).
o ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: fix rx buffer tracking and index management in replenish_rx_pool
partial success (bsc#1179929 ltc#189960).
o ibmvnic: Fix TX completion error handling (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: Fix use-after-free of VNIC login response buffer (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: handle inconsistent login with reset (jsc#SLE-17043 bsc#1179243
ltc#189290).
o ibmvnic: Harden device Command Response Queue handshake (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: improve ibmvnic_init and ibmvnic_reset_init (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: Introduce batched RX buffer descriptor transmission (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: Introduce indirect subordinate Command Response Queue buffer (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Introduce xmit_more support using batched subCRQ hcalls (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: merge ibmvnic_reset_init and ibmvnic_init (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: no reset timeout for 5 seconds after reset (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: reduce wait for completion time (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: remove never executed if statement (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: Remove send_subcrq function (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: rename ibmvnic_send_req_caps to send_request_cap (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: rename send_cap_queries to send_query_cap (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: rename send_map_query to send_query_map (jsc#SLE-17043 bsc#1179243
ltc#189290).
o ibmvnic: send_login should check for crq errors (jsc#SLE-17043 bsc#1179243
ltc#189290).
o ibmvnic: serialize access to work queue on remove (bsc#1065729).
o ibmvnic: Set to CLOSED state even on error (bsc#1084610 ltc#165122
git-fixes).
o ibmvnic: skip send_request_unmap for timeout reset (bsc#1182485 ltc#
191591).
o ibmvnic: skip tx timeout reset while in resetting (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: stop free_all_rwi on failed reset (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: store RX and TX subCRQ handle array in ibmvnic_adapter struct (jsc
#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: track pending login (jsc#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: update MAINTAINERS (jsc#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Use netdev_alloc_skb instead of alloc_skb to replenish RX buffers
(jsc#SLE-17043 bsc#1179243 ltc#189290).
o ice: Do not allow more channels than LAN MSI-X available (jsc#SLE-7926).
o ice: Fix MSI-X vector fallback logic (jsc#SLE-7926).
o igc: check return value of ret_val in igc_config_fc_after_link_up
(git-fixes).
o igc: fix link speed advertising (git-fixes).
o igc: Fix returning wrong statistics (git-fixes).
o igc: Report speed and duplex as unknown when device is runtime suspended
(git-fixes).
o igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr
(git-fixes).
o include/linux/memremap.h: remove stale comments (git-fixes).
o Input: elo - fix an error code in elo_connect() (git-fixes).
o Input: i8042 - unbreak Pegatron C15B (git-fixes).
o Input: joydev - prevent potential read overflow in ioctl (git-fixes).
o Input: sur40 - fix an error code in sur40_probe() (git-fixes).
o Input: xpad - sync supported devices with fork on GitHub (git-fixes).
o iwlwifi: mvm: do not send RFH_QUEUE_CONFIG_CMD with no queues (git-fixes).
o iwlwifi: mvm: guard against device removal in reprobe (git-fixes).
o iwlwifi: mvm: invalidate IDs of internal stations at mvm start (git-fixes).
o iwlwifi: mvm: skip power command when unbinding vif during CSA (git-fixes).
o iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() (git-fixes).
o iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap (git-fixes).
o iwlwifi: pcie: fix context info memory leak (git-fixes).
o iwlwifi: pcie: reschedule in long-running memory reads (git-fixes).
o iwlwifi: pcie: use jiffies for memory read spin time limit (git-fixes).
o ixgbe: avoid premature Rx buffer reuse (git-fixes).
o ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (git-fixes).
o kABI: Fix kABI after AMD SEV PCID fixes (bsc#1178995).
o kABI: Fix kABI after modifying struct __call_single_data (bsc#1180846).
o kABI: Fix kABI for extended APIC-ID support (bsc#1181259, jsc#ECO-3191).
o kABI: repair, after "nVMX: Emulate MTF when performinginstruction
emulation" kvm_x86_ops is part of kABI as it's used by LTTng. But it's only
read and never allocated in there, so growing it (without altering existing
members' offsets) is fine.
o kernel-binary.spec: Add back initrd and image symlink ghosts to filelist
(bsc#1182140). Fixes: 76a9256314c3 ("rpm/kernel-{source,binary}.spec: do
not include ghost symlinks (boo#1179082).")
o kernel/smp: add boot parameter for controlling CSD lock debugging (bsc#
1180846).
o kernel/smp: add more data to CSD lock debugging (bsc#1180846).
o kernel/smp: prepare more CSD lock debugging (bsc#1180846).
o kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
o KVM: arm64: Assume write fault on S1PTW permission fault on instruction
fetch (bsc#1181818).
o KVM: arm64: Remove S1PTW check from kvm_vcpu_dabt_iswrite() (bsc#1181818).
o KVM: nVMX: do not clear mtf_pending when nested events are blocked (bsc#
1182489).
o KVM: nVMX: Emulate MTF when performing instruction emulation (bsc#1182380).
o KVM: nVMX: Handle pending #DB when injecting INIT VM-exit. Pulling in as a
dependency of: "KVM: nVMX: Emulate MTF when performing instruction
emulation" (bsc#1182380).
o KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (bsc#1178995).
o KVM: tracing: Fix unmatched kvm_entry and kvm_exit events (bsc#1182770).
o KVM: VMX: Condition ENCLS-exiting enabling on CPU support for SGX1 (bsc#
1182798).
o KVM: x86: Allocate new rmap and large page tracking when moving memslot
(bsc#1182800).
o KVM: x86: allow KVM_STATE_NESTED_MTF_PENDING in kvm_state flags (bsc#
1182490).
o KVM: x86: clear stale x86_emulate_ctxt->intercept value (bsc#1182381).
o KVM: x86: do not notify userspace IOAPIC on edge-triggered interrupt EOI
(bsc#1182374).
o KVM: x86: Gracefully handle __vmalloc() failure during VM allocation (bsc#
1182801).
o KVM: x86: Introduce cr3_lm_rsvd_bits in kvm_vcpu_arch (bsc#1178995).
o KVM: x86: remove stale comment from struct x86_emulate_ctxt (bsc#1182406).
o libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#
1170442).
o lib/vsprintf: no_hash_pointers prints all addresses as unhashed (bsc#
1182599).
o linux/clk.h: use correct kernel-doc notation for 2 functions (git-fixes).
o mac80211: 160MHz with extended NSS BW in CSA (git-fixes).
o mac80211: fix fast-rx encryption check (git-fixes).
o mac80211: fix potential overflow when multiplying to u32 integers
(git-fixes).
o mac80211: pause TX while changing interface type (git-fixes).
o macros.kernel-source: Use spec_install_pre for certificate installation
(boo#1182672). Since rpm 4.16 files installed during build phase are lost.
o MAINTAINERS: remove John Allen from ibmvnic (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o matroxfb: avoid -Warray-bounds warning (bsc#1152472)
o media: aspeed: fix error return code in aspeed_video_setup_video()
(git-fixes).
o media: camss: missing error code in msm_video_register() (git-fixes).
o media: cx25821: Fix a bug when reallocating some dma memory (git-fixes).
o media: em28xx: Fix use-after-free in em28xx_alloc_urbs (git-fixes).
o media: i2c: ov5670: Fix PIXEL_RATE minimum value (git-fixes).
o media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt()
(git-fixes).
o media: lmedm04: Fix misuse of comma (git-fixes).
o media: media/pci: Fix memleak in empress_init (git-fixes).
o media: mt9v111: Remove unneeded device-managed puts (git-fixes).
o media: pwc: Use correct device for DMA (bsc#1181133).
o media: pxa_camera: declare variable when DEBUG is defined (git-fixes).
o media: qm1d1c0042: fix error return code in qm1d1c0042_init() (git-fixes).
o media: software_node: Fix refcounts in software_node_get_next_child()
(git-fixes).
o media: tm6000: Fix memleak in tm6000_start_stream (git-fixes).
o media: vsp1: Fix an error handling path in the probe function (git-fixes).
o mei: hbm: call mei_set_devstate() on hbm stop response (git-fixes).
o memory: ti-aemif: Drop child node when jumping out loop (git-fixes).
o mfd: bd9571mwv: Use devm_mfd_add_devices() (git-fixes).
o mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
(git-fixes).
o misc: eeprom_93xx46: Add module alias to avoid breaking support for non
device tree users (git-fixes).
o misc: eeprom_93xx46: Fix module alias to enable module autoprobe
(git-fixes).
o mlxsw: core: Add validation of transceiver temperature thresholds
(git-fixes).
o mlxsw: core: Fix memory leak on module removal (git-fixes).
o mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
o mlxsw: core: Free EMAD transactions using kfree_rcu() (git-fixes).
o mlxsw: core: Increase critical threshold for ASIC thermal zone (git-fixes).
o mlxsw: core: Increase scope of RCU read-side critical section (git-fixes).
o mlxsw: core: Use variable timeout for EMAD retries (git-fixes).
o mlxsw: spectrum_acl: Fix mlxsw_sp_acl_tcam_group_add()'s error path
(git-fixes).
o mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case
reload fails (git-fixes).
o mmc: core: Limit retries when analyse of SDIO tuples fails (git-fixes).
o mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to
128-bytes (git-fixes).
o mmc: sdhci-sprd: Fix some resource leaks in the remove function
(git-fixes).
o mmc: usdhi6rol0: Fix a resource leak in the error handling path of the
probe (git-fixes).
o mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support
is disabled (bsc#1181896 ltc#191273).
o mm: proc: Invalidate TLB after clearing soft-dirty page state (bsc#1163776
ltc#183929 git-fixes).
o mm: thp: kABI: move the added flag to the end of enum (bsc#1181896 ltc#
191273).
o mt76: dma: fix a possible memory leak in mt76_add_fragment() (git-fixes).
o net: ag71xx: add missed clk_disable_unprepare in error path of probe
(git-fixes).
o net: axienet: Fix error return code in axienet_probe() (git-fixes).
o net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
o net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
o net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
o net: bcmgenet: set Rx mode before starting netif (git-fixes).
o net: bcmgenet: use hardware padding of runt frames (git-fixes).
o net: broadcom CNIC: requires MMU (git-fixes).
o net: caif: Fix debugfs on 64-bit platforms (git-fixes).
o net/cxgb4: Check the return from t4_query_params properly (git-fixes).
o net: cxgb4: fix return error value in t4_prep_fw (git-fixes).
o net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
o net: dsa: lantiq_gswip: fix and improve the unsupported interface error
(git-fixes).
o net: dsa: mt7530: Change the LINK bit to reflect the link status
(git-fixes).
o net: dsa: mt7530: set CPU port to fallback mode (git-fixes).
o net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
o net: ethernet: ave: Fix error returns in ave_init (git-fixes).
o net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it
anymore in mlx4_en_xmit() (git-fixes).
o net: ethernet: ti: ale: fix allmulti for nu type ale (git-fixes).
o net: ethernet: ti: ale: fix seeing unreg mcast packets with promisc and
allmulti disabled (git-fixes).
o net: ethernet: ti: ale: modify vlan/mdb api for switchdev (git-fixes).
o net: ethernet: ti: cpsw: allow untagged traffic on host port (git-fixes).
o net: ethernet: ti: fix some return value check of cpsw_ale_create()
(git-fixes).
o net: gemini: Fix missing clk_disable_unprepare() in error path of
gemini_ethernet_port_probe() (git-fixes).
o net: gro: do not keep too many GRO packets in napi->rx_list (bsc#1154353).
o net: hns3: add a check for queue_id in hclge_reset_vf_queue() (git-fixes).
o net: hns3: add a missing uninit debugfs when unload driver (git-fixes).
o net: hns3: add reset check for VF updating port based VLAN (git-fixes).
o net: hns3: clear port base VLAN when unload PF (git-fixes).
o net: hns3: fix aRFS FD rules leftover after add a user FD rule (git-fixes).
o net: hns3: fix a TX timeout issue (git-fixes).
o net: hns3: fix desc filling bug when skb is expanded or lineared
(git-fixes).
o net: hns3: fix for mishandle of asserting VF reset fail (git-fixes).
o net: hns3: fix for VLAN config when reset failed (git-fixes).
o net: hns3: fix RSS config lost after VF reset (git-fixes).
o net: hns3: fix set and get link ksettings issue (git-fixes).
o net: hns3: fix "tc qdisc del" failed issue (git-fixes).
o net: hns3: fix the number of queues actually used by ARQ (git-fixes).
o net: hns3: fix use-after-free when doing self test (git-fixes).
o net: hns3: fix VF VLAN table entries inconsistent issue (git-fixes).
o net: hns: fix return value check in __lb_other_process() (git-fixes).
o net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
o net: macb: fix call to pm_runtime in the suspend/resume functions
(git-fixes).
o net: macb: fix wakeup test in runtime suspend/resume routines (git-fixes).
o net: macb: mark device wake capable when "magic-packet" property present
(git-fixes).
o net/mlx4_core: fix a memory leak bug (git-fixes).
o net/mlx4_core: Fix init_hca fields offset (git-fixes).
o net/mlx4_en: Avoid scheduling restart task if it is already running (bsc#
1181854).
o net/mlx4_en: Handle TX error CQE (bsc#1181854).
o net/mlx5: Add handling of port type in rule deletion (git-fixes).
o net/mlx5: Annotate mutex destroy for root ns (git-fixes).
o net/mlx5: Clear LAG notifier pointer after unregister (git-fixes).
o net/mlx5: Disable QoS when min_rates on all VFs are zero (git-fixes).
o net/mlx5: Do not call timecounter cyc2time directly from 1PPS flow
(git-fixes).
o net/mlx5: Do not maintain a case of del_sw_func being null (git-fixes).
o net/mlx5e: Correctly handle changing the number of queues when the
interface is down (git-fixes).
o net/mlx5e: Do not trigger IRQ multiple times on XSK wakeup to avoid WQ
overruns (git-fixes).
o net/mlx5e: en_accel, Add missing net/geneve.h include (git-fixes).
o net/mlx5e: Encapsulate updating netdev queues into a function (git-fixes).
o net/mlx5e: E-switch, Fix rate calculation for overflow (jsc#SLE-8464).
o net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq
(git-fixes).
o net/mlx5e: Fix configuration of XPS cpumasks and netdev queues in corner
cases (git-fixes).
o net/mlx5e: Fix endianness handling in pedit mask (git-fixes).
o net/mlx5e: Fix error path of device attach (git-fixes).
o net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
o net/mlx5e: Fix two double free cases (git-fixes).
o net/mlx5e: Fix VLAN cleanup flow (git-fixes).
o net/mlx5e: Fix VLAN create flow (git-fixes).
o net/mlx5e: Get the latest values from counters in switchdev mode
(git-fixes).
o net/mlx5e: IPoIB, Drop multicast packets that this interface sent
(git-fixes).
o net/mlx5e: kTLS, Fix wrong value in record tracker enum (git-fixes).
o net/mlx5e: Reduce tc unsupported key print level (git-fixes).
o net/mlx5e: Rename hw_modify to preactivate (git-fixes).
o net/mlx5e: Set of completion request bit should not clear other adjacent
bits (git-fixes).
o net/mlx5: E-switch, Destroy TSAR after reload interface (git-fixes).
o net/mlx5: E-Switch, Hold mutex when querying drop counter in legacy mode
(git-fixes).
o net/mlx5: E-Switch, Use vport metadata matching by default (git-fixes).
o net/mlx5: E-Switch, Use vport metadata matching only when mandatory
(git-fixes).
o net/mlx5e: Use preactivate hook to set the indirection table (git-fixes).
o net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
o net/mlx5: Fix a bug of using ptp channel index as pin index (git-fixes).
o net/mlx5: Fix deletion of duplicate rules (git-fixes).
o net/mlx5: Fix failing fw tracer allocation on s390 (git-fixes).
o net/mlx5: Fix memory leak on flow table creation error flow (git-fixes).
o net/mlx5: Fix request_irqs error flow (git-fixes).
o net/mlx5: Fix wrong address reclaim when command interface is down
(git-fixes).
o net/mlx5: Query PPS pin operational status before registering it
(git-fixes).
o net/mlx5: Verify Hardware supports requested ptp function on a given pin
(git-fixes).
o net: moxa: Fix a potential double 'free_irq()' (git-fixes).
o net: mscc: ocelot: ANA_AUTOAGE_AGE_PERIOD holds a value in seconds, not ms
(git-fixes).
o net: mscc: ocelot: fix address ageing time (again) (git-fixes).
o net: mscc: ocelot: properly account for VLAN header length when setting MRU
(git-fixes).
o net: mvpp2: Add TCAM entry to drop flow control pause frames (git-fixes).
o net: mvpp2: disable force link UP during port init procedure (git-fixes).
o net: mvpp2: Fix error return code in mvpp2_open() (git-fixes).
o net: mvpp2: Fix GoP port 3 Networking Complex Control configurations
(git-fixes).
o net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
o net: mvpp2: fix pkt coalescing int-threshold configuration (git-fixes).
o net: mvpp2: prs: fix PPPoE with ipv6 packet parse (git-fixes).
o net: mvpp2: Remove Pause and Asym_Pause support (git-fixes).
o net: mvpp2: TCAM entry enable should be written after SRAM data
(git-fixes).
o net: netsec: Correct dma sync for XDP_TX frames (git-fixes).
o net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
o net: octeon: mgmt: Repair filling of RX ring (git-fixes).
o net: phy: at803x: use operating parameters from PHY-specific status
(git-fixes).
o net: phy: extract link partner advertisement reading (git-fixes).
o net: phy: extract pause mode (git-fixes).
o net: phy: marvell10g: fix null pointer dereference (git-fixes).
o net: phy: marvell10g: fix temperature sensor on 2110 (git-fixes).
o net: phy: read MII_CTRL1000 in genphy_read_status only if needed
(git-fixes).
o net: qca_spi: fix receive buffer size check (git-fixes).
o net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
o net: qede: fix PTP initialization on recovery (git-fixes).
o net: qede: fix use-after-free on recovery and AER handling (git-fixes).
o net: qede: stop adding events on an already destroyed workqueue
(git-fixes).
o net: qed: fix async event callbacks unregistering (git-fixes).
o net: qed: fix excessive QM ILT lines consumption (git-fixes).
o net: qed: fix "maybe uninitialized" warning (git-fixes).
o net: qed: fix NVMe login fails over VFs (git-fixes).
o net: qed: RDMA personality shouldn't fail VF load (git-fixes).
o net: re-solve some conflicts after net -> net-next merge (bsc#1176855 ltc#
187293).
o net: rmnet: do not allow to add multiple bridge interfaces (git-fixes).
o net: rmnet: do not allow to change mux id if mux id is duplicated
(git-fixes).
o net: rmnet: fix bridge mode bugs (git-fixes).
o net: rmnet: fix lower interface leak (git-fixes).
o net: rmnet: fix NULL pointer dereference in rmnet_changelink() (git-fixes).
o net: rmnet: fix NULL pointer dereference in rmnet_newlink() (git-fixes).
o net: rmnet: fix packet forwarding in rmnet bridge mode (git-fixes).
o net: rmnet: fix suspicious RCU usage (git-fixes).
o net: rmnet: print error message when command fails (git-fixes).
o net: rmnet: remove rcu_read_lock in rmnet_force_unassociate_device()
(git-fixes).
o net: rmnet: use upper/lower device infrastructure (git-fixes).
o net, sctp, filter: remap copy_from_user failure error (bsc#1181637).
o net: smc91x: Fix possible memory leak in smc_drv_probe() (git-fixes).
o net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
o net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
o net: stmmac: Always arm TX Timer at end of transmission start (git-fixes).
o net: stmmac: Do not accept invalid MTU values (git-fixes).
o net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
o net: stmmac: Enable 16KB buffer size (git-fixes).
o net: stmmac: fix disabling flexible PPS output (git-fixes).
o net: stmmac: fix length of PTP clock's name string (git-fixes).
o net: stmmac: Fix the TX IOC in xmit path (git-fixes).
o net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
o net: stmmac: selftests: Flow Control test can also run with ASYM Pause
(git-fixes).
o net: stmmac: selftests: Needs to check the number of Multicast regs
(git-fixes).
o net: stmmac: xgmac: Clear previous RX buffer size (git-fixes).
o net: sun: fix missing release regions in cas_init_one() (git-fixes).
o net: team: fix memory leak in __team_options_register (git-fixes).
o net: thunderx: initialize VF's mailbox mutex before first usage
(git-fixes).
o net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family
(git-fixes).
o net: usb: qmi_wwan: Adding support for Cinterion MV31 (git-fixes).
o nvme-hwmon: rework to avoid devm allocation (bsc#1177326).
o nvme-multipath: Early exit if no path is available (bsc#1180964).
o nvme: re-read ANA log on NS CHANGED AEN (bsc#1179137).
o nvmet-tcp: Fix NULL dereference when a connect data comes in h2cdata pdu
(bsc#1182547).
o objtool: Do not fail on missing symbol table (bsc#1169514).
o perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (bsc#1180989).
o perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (bsc#
1180989).
o perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (bsc#1180989).
o perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (bsc#
1180989).
o perf/x86/intel/uncore: Generic support for the PCI sub driver (bsc#
1180989).
o perf/x86/intel/uncore: Store the logical die id instead of the physical die
id (bsc#1180989).
o perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info
(bsc#1180989).
o phy: cpcap-usb: Fix warning for missing regulator_disable (git-fixes).
o phy: rockchip-emmc: emmc_phy_init() always return 0 (git-fixes).
o platform/x86: hp-wmi: Disable tablet-mode reporting by default (git-fixes).
o platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron 7352
(git-fixes).
o platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix touchscreen on
Estar Beauty HD tablet (git-fixes).
o powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning (bsc#
1182571 ltc#191345).
o powerpc/boot: Delete unneeded .globl _zimage_start (bsc#1156395).
o powerpc: Fix alignment bug within the init sections (bsc#1065729).
o powerpc/fpu: Drop cvt_fd() and cvt_df() (bsc#1156395).
o powerpc/hvcall: add token and codes for H_VASI_SIGNAL (bsc#1181674 ltc#
189159).
o powerpc: kABI: add back suspend_disable_cpu in machdep_calls (bsc#1181674
ltc#189159).
o powerpc/machdep: remove suspend_disable_cpu() (bsc#1181674 ltc#189159).
o powerpc/mm/pkeys: Make pkey access check work on execute_only_key (bsc#
1181544 ltc#191080 git-fixes).
o powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477 ltc#175530).
o powerpc/numa: make vphn_enabled, prrn_enabled flags const (bsc#1181674 ltc#
189159).
o powerpc/numa: remove ability to enable topology updates (bsc#1181674 ltc#
189159).
o powerpc/numa: remove arch_update_cpu_topology (bsc#1181674 ltc#189159).
o powerpc/numa: Remove late request for home node associativity (bsc#1181674
ltc#189159).
o powerpc/numa: remove prrn_is_enabled() (bsc#1181674 ltc#189159).
o powerpc/numa: remove start/stop_topology_update() (bsc#1181674 ltc#189159).
o powerpc/numa: remove timed_topology_update() (bsc#1181674 ltc#189159).
o powerpc/numa: remove unreachable topology timer code (bsc#1181674 ltc#
189159).
o powerpc/numa: remove unreachable topology update code (bsc#1181674 ltc#
189159).
o powerpc/numa: remove unreachable topology workqueue code (bsc#1181674 ltc#
189159).
o powerpc/numa: remove vphn_enabled and prrn_enabled internal flags (bsc#
1181674 ltc#189159).
o powerpc/numa: stub out numa_update_cpu_topology() (bsc#1181674 ltc#189159).
o powerpc/perf: Exclude kernel samples while counting events in user space
(bsc#1065729).
o powerpc/perf/hv-24x7: Dont create sysfs event files for dummy events (bsc#
1182118 ltc#190624).
o powerpc/pkeys: Avoid using lockless page table walk (bsc#1181544 ltc#
191080).
o powerpc/pkeys: Check vma before returning key fault error to the user (bsc#
1181544 ltc#191080).
o powerpc/powernv/memtrace: Do not leak kernel memory to user space (bsc#
1156395).
o powerpc/powernv/memtrace: Fix crashing the kernel when enabling
concurrently (bsc#1156395).
o powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (bsc#
1156395).
o powerpc/prom: Fix "ibm,arch-vec-5-platform-support" scan (bsc#1182602 ltc#
190924).
o powerpc/pseries/dlpar: handle ibm, configure-connector delay status (bsc#
1181985 ltc#188074).
o powerpc/pseries: Do not enforce MSI affinity with kdump (bsc#1181655 ltc#
190855).
o powerpc/pseries/eeh: Make pseries_pcibios_bus_add_device() static (bsc#
1078720, git-fixes).
o powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc
#1182171 ltc#190900).
o powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops
(bsc#1181674 ltc#189159).
o powerpc/pseries/hibernation: pass stream id via function arguments (bsc#
1181674 ltc#189159).
o powerpc/pseries/hibernation: perform post-suspend fixups later (bsc#1181674
ltc#189159).
o powerpc/pseries/hibernation: remove prepare_late() callback (bsc#1181674
ltc#189159).
o powerpc/pseries/hibernation: remove pseries_suspend_cpu() (bsc#1181674 ltc#
189159).
o powerpc/pseries/hibernation: switch to rtas_ibm_suspend_me() (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: add missing break to default case (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: Add pr_debug() for device tree changes (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: do not error on absence of ibm, update-nodes (bsc
#1181674 ltc#189159).
o powerpc/pseries/mobility: error message improvements (bsc#1181674 ltc#
189159).
o powerpc/pseries/mobility: extract VASI session polling logic (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: refactor node lookup during DT update (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: retry partition suspend after error (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: Set pr_fmt() (bsc#1181674 ltc#189159).
o powerpc/pseries/mobility: signal suspend cancellation to platform (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: use rtas_activate_firmware() on resume (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: use stop_machine for join/suspend (bsc#1181674
ltc#189159).
o powerpc/pseries/ras: Make init_ras_hotplug_IRQ() static (bsc#1065729.
git-fixes).
o powerpc/pseries: remove dlpar_cpu_readd() (bsc#1181674 ltc#189159).
o powerpc/pseries: remove memory "re-add" implementation (bsc#1181674 ltc#
189159).
o powerpc/pseries: remove obsolete memory hotplug DT notifier code (bsc#
1181674 ltc#189159).
o powerpc/pseries: remove prrn special case from DT update path (bsc#1181674
ltc#189159).
o powerpc/rtas: add rtas_activate_firmware() (bsc#1181674 ltc#189159).
o powerpc/rtas: add rtas_ibm_suspend_me() (bsc#1181674 ltc#189159).
o powerpc/rtas: complete ibm,suspend-me status codes (bsc#1181674 ltc#
189159).
o powerpc/rtas: dispatch partition migration requests to pseries (bsc#1181674
ltc#189159).
o powerpc/rtasd: simplify handle_rtas_event(), emit message on events (bsc#
1181674 ltc#189159).
o powerpc/rtas: prevent suspend-related sys_rtas use on LE (bsc#1181674 ltc#
189159).
o powerpc/rtas: remove rtas_ibm_suspend_me_unsafe() (bsc#1181674 ltc#189159).
o powerpc/rtas: remove rtas_suspend_cpu() (bsc#1181674 ltc#189159).
o powerpc/rtas: remove unused rtas_suspend_last_cpu() (bsc#1181674 ltc#
189159).
o powerpc/rtas: remove unused rtas_suspend_me_data (bsc#1181674 ltc#189159).
o powerpc/rtas: rtas_ibm_suspend_me -> rtas_ibm_suspend_me_unsafe (bsc#
1181674 ltc#189159).
o power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (git-fixes).
o pseries/drmem: do not cache node id in drmem_lmb struct (bsc#1132477 ltc#
175530).
o pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc
#175530).
o qed: fix error return code in qed_iwarp_ll2_start() (git-fixes).
o qed: Fix race condition between scheduling and destroying the slowpath
workqueue (git-fixes).
o qed: Populate nvm-file attributes while reading nvm config partition
(git-fixes).
o qed: select CONFIG_CRC32 (git-fixes).
o qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
o quota: Fix memory leak when handling corrupted quota file (bsc#1182650).
o quota: Sanity-check quota file headers on load (bsc#1182461).
o r8169: fix resuming from suspend on RTL8105e if machine runs on battery
(git-fixes).
o r8169: fix WoL on shutdown if CONFIG_DEBUG_SHIRQ is set (git-fixes).
o rcu/nocb: Perform deferred wake up before last idle's (git-fixes)
o rcu/nocb: Trigger self-IPI on late deferred wake up before (git-fixes)
o rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers (git-fixes)
o RDMA/efa: Add EFA 0xefa1 PCI ID (bsc#1176248).
o RDMA/efa: Count admin commands errors (bsc#1176248).
o RDMA/efa: Count mmap failures (bsc#1176248).
o RDMA/efa: Do not delay freeing of DMA pages (bsc#1176248).
o RDMA/efa: Drop double zeroing for sg_init_table() (bsc#1176248).
o RDMA/efa: Expose maximum TX doorbell batch (bsc#1176248).
o RDMA/efa: Expose minimum SQ size (bsc#1176248).
o RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#
1176248).
o RDMA/efa: Properly document the interrupt mask register (bsc#1176248).
o RDMA/efa: Remove redundant udata check from alloc ucontext response (bsc#
1176248).
o RDMA/efa: Report create CQ error counter (bsc#1176248).
o RDMA/efa: Report host information to the device (bsc#1176248).
o RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#
1176248).
o RDMA/efa: Use in-kernel offsetofend() to check field availability (bsc#
1176248).
o RDMA/efa: User/kernel compatibility handshake mechanism (bsc#1176248).
o RDMA/efa: Use the correct current and new states in modify QP (git-fixes).
o regulator: axp20x: Fix reference cout leak (git-fixes).
o regulator: core: Avoid debugfs: Directory ... already present! error
(git-fixes).
o regulator: core: avoid regulator_resolve_supply() race condition
(git-fixes).
o regulator: Fix lockdep warning resolving supplies (git-fixes).
o regulator: s5m8767: Drop regulators OF node reference (git-fixes).
o regulator: s5m8767: Fix reference count leak (git-fixes).
o reiserfs: add check for an invalid ih_entry_count (bsc#1182462).
o reset: hisilicon: correct vendor prefix (git-fixes).
o Revert "ibmvnic: remove never executed if statement" (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o Revert "net: bcmgenet: remove unused function in bcmgenet.c" (git-fixes).
o Revert "platform/x86: ideapad-laptop: Switch touchpad attribute to be RO"
(git-fixes).
o Revert "RDMA/mlx5: Fix devlink deadlock on net namespace deletion" (jsc#
SLE-8464).
o rpm/kernel-subpackage-build: Workaround broken bot (https://github.com/
openSUSE/openSUSE-release-tools/issues/2439)
o rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#
1180058)
o rtc: s5m: select REGMAP_I2C (git-fixes).
o rxrpc: Fix memory leak in rxrpc_lookup_local (bsc#1154353 bnc#1151927
5.3.9).
o s390/vfio-ap: clean up vfio_ap resources when KVM pointer invalidated
(git-fixes).
o s390/vfio-ap: No need to disable IRQ after queue reset (git-fixes).
o sched: Reenable interrupts in do_sched_yield() (git-fixes)
o scsi: lpfc: Fix EEH encountering oops with NVMe traffic (bsc#1181958).
o sh_eth: check sh_eth_cpu_data::cexcr when dumping registers (git-fixes).
o sh_eth: check sh_eth_cpu_data::no_tx_cntrs when dumping registers
(git-fixes).
o sh_eth: check sh_eth_cpu_data::no_xdfar when dumping registers (git-fixes).
o smp: Add source and destination CPUs to __call_single_data (bsc#1180846).
o smsc95xx: avoid memory leak in smsc95xx_bind (git-fixes).
o smsc95xx: check return value of smsc95xx_reset (git-fixes).
o soc: aspeed: snoop: Add clock control logic (git-fixes).
o spi: atmel: Put allocated master before return (git-fixes).
o spi: pxa2xx: Fix the controller numbering for Wildcat Point (git-fixes).
o spi: spi-synquacer: fix set_cs handling (git-fixes).
o spi: stm32: properly handle 0 byte transfer (git-fixes).
o squashfs: add more sanity checks in id lookup (git-fixes bsc#1182266).
o squashfs: add more sanity checks in inode lookup (git-fixes bsc#1182267).
o squashfs: add more sanity checks in xattr id lookup (git-fixes bsc#
1182268).
o staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules
(git-fixes).
o target: disallow emulate_legacy_capacity with RBD object-map (bsc#1177109).
o team: set dev->needed_headroom in team_setup_by_port() (git-fixes).
o tpm: Remove tpm_dev_wq_lock (git-fixes).
o tpm_tis: Clean up locality release (git-fixes).
o tpm_tis: Fix check_locality for correct locality acquisition (git-fixes).
o tracing: Check length before giving out the filter buffer (git-fixes).
o tracing: Do not count ftrace events in top level enable output (git-fixes).
o tracing/kprobe: Fix to support kretprobe events on unloaded modules
(git-fixes).
o tracing/kprobes: Do the notrace functions check without kprobes on ftrace
(git-fixes).
o tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS
(git-fixes).
o ubifs: Fix error return code in ubifs_init_authentication() (bsc#1182459).
o ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans() (bsc#1182454).
o ubifs: prevent creating duplicate encrypted filenames (bsc#1182457).
o ubifs: ubifs_add_orphan: Fix a memory leak bug (bsc#1182456).
o ubifs: ubifs_jnl_write_inode: Fix a memory leak bug (bsc#1182455).
o ubifs: wbuf: Do not leak kernel memory to flash (bsc#1182458).
o Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#
1180846).
o Update config files: Set ledtrig-default-on as builtin (bsc#1182128)
o USB: dwc2: Abort transaction after errors with unknown reason (git-fixes).
o USB: dwc2: Fix endpoint direction check in ep_from_windex (git-fixes).
o USB: dwc2: Make "trimming xfer length" a debug message (git-fixes).
o USB: dwc3: fix clock issue during resume in OTG mode (git-fixes).
o USB: gadget: legacy: fix an error code in eth_bind() (git-fixes).
o USB: gadget: u_audio: Free requests only after callback (git-fixes).
o USB: mUSB: Fix runtime PM race in musb_queue_resume_work (git-fixes).
o USB: quirks: add quirk to start video capture on ELMO L-12F document camera
reliable (git-fixes).
o USB: quirks: sort quirk entries (git-fixes).
o USB: renesas_usbhs: Clear pipe running flag in USBhs_pkt_pop() (git-fixes).
o USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
(git-fixes).
o USB: serial: cp210x: add pid/vid for WSDA-200-USB (git-fixes).
o USB: serial: mos7720: fix error code in mos7720_write() (git-fixes).
o USB: serial: mos7720: improve OOM-handling in read_mos_reg() (git-fixes).
o USB: serial: mos7840: fix error code in mos7840_write() (git-fixes).
o USB: serial: option: Adding support for Cinterion MV31 (git-fixes).
o USB: usblp: do not call usb_set_interface if there's a single alt
(git-fixes).
o veth: Adjust hard_start offset on redirect XDP frames (git-fixes).
o vfs: Convert squashfs to use the new mount API (git-fixes bsc#1182265).
o virtio_net: Fix error code in probe() (git-fixes).
o virtio_net: Fix recursive call to cpus_read_lock() (git-fixes).
o virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer
(git-fixes).
o virt: vbox: Do not use wait_event_interruptible when called from kernel
context (git-fixes).
o vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
o vxlan: fix memleak of fdb (git-fixes).
o wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
(git-fixes).
o writeback: Drop I_DIRTY_TIME_EXPIRE (bsc#1182460).
o x86/alternatives: Sync bp_patching update for avoiding NULL pointer
exception (bsc#1152489).
o x86/apic: Add extra serialization for non-serializing MSRs (bsc#1152489).
o x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#
1181259, jsc#ECO-3191).
o x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181259, jsc#
ECO-3191).
o x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259, jsc#ECO-3191).
o x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259 jsc#ECO-3191).
o x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181259, jsc#
ECO-3191).
o xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
o xfs: ensure inobt record walks always make forward progress (git-fixes bsc#
1182272).
o xfs: fix an ABBA deadlock in xfs_rename (git-fixes bsc#1182558).
o xfs: fix parent pointer scrubber bailing out on unallocated inodes
(git-fixes bsc#1182276).
o xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks
(git-fixes bsc#1182430).
o xfs: fix the minrecs logic when dealing with inode root child blocks
(git-fixes bsc#1182273).
o xfs: ratelimit xfs_discard_page messages (bsc#1182283).
o xfs: reduce quota reservation when doing a dax unwritten extent conversion
(git-fixes bsc#1182561).
o xfs: return corresponding errcode if xfs_initialize_perag() fail (git-fixes
bsc#1182275).
o xfs: scrub should mark a directory corrupt if any entries cannot be iget'd
(git-fixes bsc#1182278).
o xfs: strengthen rmap record flags checking (git-fixes bsc#1182271).
o xhci: fix bounce buffer usage for non-sg list case (git-fixes).
The kernel-default-base packaging was changed:
o Added squashfs for kiwi installiso support (bsc#1182341)
o Added fuse (bsc#1182507)
o Added modules which got lost when migrating away from supported.conf (bsc#
1182110):
* am53c974 had a typo * cls_bpf, iscsi_ibft, libahci, libata, openvswitch,
sch_ingress
o Also added vport-* modules for Open vSwitch
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE MicroOS 5.0:
zypper in -t patch SUSE-SUSE-MicroOS-5.0-2021-741=1
o SUSE Linux Enterprise Workstation Extension 15-SP2:
zypper in -t patch SUSE-SLE-Product-WE-15-SP2-2021-741=1
o SUSE Linux Enterprise Module for Live Patching 15-SP2:
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2021-741=1
o SUSE Linux Enterprise Module for Legacy Software 15-SP2:
zypper in -t patch SUSE-SLE-Module-Legacy-15-SP2-2021-741=1
o SUSE Linux Enterprise Module for Development Tools 15-SP2:
zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP2-2021-741=1
o SUSE Linux Enterprise Module for Basesystem 15-SP2:
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2021-741=1
o SUSE Linux Enterprise High Availability 15-SP2:
zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2021-741=1
Package List:
o SUSE MicroOS 5.0 (aarch64 x86_64):
kernel-default-5.3.18-24.52.1
kernel-default-base-5.3.18-24.52.1.9.24.1
kernel-default-debuginfo-5.3.18-24.52.1
kernel-default-debugsource-5.3.18-24.52.1
o SUSE Linux Enterprise Workstation Extension 15-SP2 (x86_64):
kernel-default-debuginfo-5.3.18-24.52.1
kernel-default-debugsource-5.3.18-24.52.1
kernel-default-extra-5.3.18-24.52.1
kernel-default-extra-debuginfo-5.3.18-24.52.1
kernel-preempt-extra-5.3.18-24.52.1
kernel-preempt-extra-debuginfo-5.3.18-24.52.1
o SUSE Linux Enterprise Module for Live Patching 15-SP2 (ppc64le s390x
x86_64):
kernel-default-debuginfo-5.3.18-24.52.1
kernel-default-debugsource-5.3.18-24.52.1
kernel-default-livepatch-5.3.18-24.52.1
kernel-default-livepatch-devel-5.3.18-24.52.1
kernel-livepatch-5_3_18-24_52-default-1-5.3.1
kernel-livepatch-5_3_18-24_52-default-debuginfo-1-5.3.1
kernel-livepatch-SLE15-SP2_Update_11-debugsource-1-5.3.1
o SUSE Linux Enterprise Module for Legacy Software 15-SP2 (aarch64 ppc64le
s390x x86_64):
kernel-default-debuginfo-5.3.18-24.52.1
kernel-default-debugsource-5.3.18-24.52.1
reiserfs-kmp-default-5.3.18-24.52.1
reiserfs-kmp-default-debuginfo-5.3.18-24.52.1
o SUSE Linux Enterprise Module for Development Tools 15-SP2 (aarch64 ppc64le
s390x x86_64):
kernel-obs-build-5.3.18-24.52.1
kernel-obs-build-debugsource-5.3.18-24.52.1
kernel-syms-5.3.18-24.52.1
o SUSE Linux Enterprise Module for Development Tools 15-SP2 (aarch64 x86_64):
kernel-preempt-debuginfo-5.3.18-24.52.1
kernel-preempt-debugsource-5.3.18-24.52.1
kernel-preempt-devel-5.3.18-24.52.1
kernel-preempt-devel-debuginfo-5.3.18-24.52.1
o SUSE Linux Enterprise Module for Development Tools 15-SP2 (noarch):
kernel-docs-5.3.18-24.52.1
kernel-source-5.3.18-24.52.1
o SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x
x86_64):
kernel-default-5.3.18-24.52.1
kernel-default-base-5.3.18-24.52.1.9.24.1
kernel-default-debuginfo-5.3.18-24.52.1
kernel-default-debugsource-5.3.18-24.52.1
kernel-default-devel-5.3.18-24.52.1
kernel-default-devel-debuginfo-5.3.18-24.52.1
o SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 x86_64):
kernel-preempt-5.3.18-24.52.1
kernel-preempt-debuginfo-5.3.18-24.52.1
kernel-preempt-debugsource-5.3.18-24.52.1
o SUSE Linux Enterprise Module for Basesystem 15-SP2 (noarch):
kernel-devel-5.3.18-24.52.1
kernel-macros-5.3.18-24.52.1
o SUSE Linux Enterprise High Availability 15-SP2 (aarch64 ppc64le s390x
x86_64):
cluster-md-kmp-default-5.3.18-24.52.1
cluster-md-kmp-default-debuginfo-5.3.18-24.52.1
dlm-kmp-default-5.3.18-24.52.1
dlm-kmp-default-debuginfo-5.3.18-24.52.1
gfs2-kmp-default-5.3.18-24.52.1
gfs2-kmp-default-debuginfo-5.3.18-24.52.1
kernel-default-debuginfo-5.3.18-24.52.1
kernel-default-debugsource-5.3.18-24.52.1
ocfs2-kmp-default-5.3.18-24.52.1
ocfs2-kmp-default-debuginfo-5.3.18-24.52.1
References:
o https://www.suse.com/security/cve/CVE-2020-12362.html
o https://www.suse.com/security/cve/CVE-2020-12363.html
o https://www.suse.com/security/cve/CVE-2020-12364.html
o https://www.suse.com/security/cve/CVE-2020-12373.html
o https://www.suse.com/security/cve/CVE-2020-29368.html
o https://www.suse.com/security/cve/CVE-2020-29374.html
o https://www.suse.com/security/cve/CVE-2021-26930.html
o https://www.suse.com/security/cve/CVE-2021-26931.html
o https://www.suse.com/security/cve/CVE-2021-26932.html
o https://bugzilla.suse.com/1065600
o https://bugzilla.suse.com/1065729
o https://bugzilla.suse.com/1078720
o https://bugzilla.suse.com/1081134
o https://bugzilla.suse.com/1084610
o https://bugzilla.suse.com/1132477
o https://bugzilla.suse.com/1151927
o https://bugzilla.suse.com/1152472
o https://bugzilla.suse.com/1152489
o https://bugzilla.suse.com/1154353
o https://bugzilla.suse.com/1155518
o https://bugzilla.suse.com/1156395
o https://bugzilla.suse.com/1163776
o https://bugzilla.suse.com/1169514
o https://bugzilla.suse.com/1170442
o https://bugzilla.suse.com/1176248
o https://bugzilla.suse.com/1176855
o https://bugzilla.suse.com/1177109
o https://bugzilla.suse.com/1177326
o https://bugzilla.suse.com/1177440
o https://bugzilla.suse.com/1177529
o https://bugzilla.suse.com/1178142
o https://bugzilla.suse.com/1178995
o https://bugzilla.suse.com/1179082
o https://bugzilla.suse.com/1179137
o https://bugzilla.suse.com/1179243
o https://bugzilla.suse.com/1179428
o https://bugzilla.suse.com/1179660
o https://bugzilla.suse.com/1179929
o https://bugzilla.suse.com/1180058
o https://bugzilla.suse.com/1180846
o https://bugzilla.suse.com/1180964
o https://bugzilla.suse.com/1180989
o https://bugzilla.suse.com/1181133
o https://bugzilla.suse.com/1181259
o https://bugzilla.suse.com/1181544
o https://bugzilla.suse.com/1181574
o https://bugzilla.suse.com/1181637
o https://bugzilla.suse.com/1181655
o https://bugzilla.suse.com/1181671
o https://bugzilla.suse.com/1181674
o https://bugzilla.suse.com/1181710
o https://bugzilla.suse.com/1181720
o https://bugzilla.suse.com/1181735
o https://bugzilla.suse.com/1181736
o https://bugzilla.suse.com/1181738
o https://bugzilla.suse.com/1181747
o https://bugzilla.suse.com/1181753
o https://bugzilla.suse.com/1181818
o https://bugzilla.suse.com/1181843
o https://bugzilla.suse.com/1181854
o https://bugzilla.suse.com/1181896
o https://bugzilla.suse.com/1181958
o https://bugzilla.suse.com/1181960
o https://bugzilla.suse.com/1181985
o https://bugzilla.suse.com/1182047
o https://bugzilla.suse.com/1182110
o https://bugzilla.suse.com/1182118
o https://bugzilla.suse.com/1182128
o https://bugzilla.suse.com/1182140
o https://bugzilla.suse.com/1182171
o https://bugzilla.suse.com/1182175
o https://bugzilla.suse.com/1182259
o https://bugzilla.suse.com/1182265
o https://bugzilla.suse.com/1182266
o https://bugzilla.suse.com/1182267
o https://bugzilla.suse.com/1182268
o https://bugzilla.suse.com/1182271
o https://bugzilla.suse.com/1182272
o https://bugzilla.suse.com/1182273
o https://bugzilla.suse.com/1182275
o https://bugzilla.suse.com/1182276
o https://bugzilla.suse.com/1182278
o https://bugzilla.suse.com/1182283
o https://bugzilla.suse.com/1182341
o https://bugzilla.suse.com/1182374
o https://bugzilla.suse.com/1182380
o https://bugzilla.suse.com/1182381
o https://bugzilla.suse.com/1182406
o https://bugzilla.suse.com/1182430
o https://bugzilla.suse.com/1182439
o https://bugzilla.suse.com/1182441
o https://bugzilla.suse.com/1182442
o https://bugzilla.suse.com/1182443
o https://bugzilla.suse.com/1182444
o https://bugzilla.suse.com/1182445
o https://bugzilla.suse.com/1182446
o https://bugzilla.suse.com/1182447
o https://bugzilla.suse.com/1182449
o https://bugzilla.suse.com/1182454
o https://bugzilla.suse.com/1182455
o https://bugzilla.suse.com/1182456
o https://bugzilla.suse.com/1182457
o https://bugzilla.suse.com/1182458
o https://bugzilla.suse.com/1182459
o https://bugzilla.suse.com/1182460
o https://bugzilla.suse.com/1182461
o https://bugzilla.suse.com/1182462
o https://bugzilla.suse.com/1182463
o https://bugzilla.suse.com/1182464
o https://bugzilla.suse.com/1182465
o https://bugzilla.suse.com/1182466
o https://bugzilla.suse.com/1182485
o https://bugzilla.suse.com/1182489
o https://bugzilla.suse.com/1182490
o https://bugzilla.suse.com/1182507
o https://bugzilla.suse.com/1182547
o https://bugzilla.suse.com/1182558
o https://bugzilla.suse.com/1182560
o https://bugzilla.suse.com/1182561
o https://bugzilla.suse.com/1182571
o https://bugzilla.suse.com/1182599
o https://bugzilla.suse.com/1182602
o https://bugzilla.suse.com/1182626
o https://bugzilla.suse.com/1182650
o https://bugzilla.suse.com/1182672
o https://bugzilla.suse.com/1182676
o https://bugzilla.suse.com/1182683
o https://bugzilla.suse.com/1182684
o https://bugzilla.suse.com/1182686
o https://bugzilla.suse.com/1182770
o https://bugzilla.suse.com/1182798
o https://bugzilla.suse.com/1182800
o https://bugzilla.suse.com/1182801
o https://bugzilla.suse.com/1182854
o https://bugzilla.suse.com/1182856
- --------------------------------------------------------------------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0739-1
Rating: important
References: #1065600 #1065729 #1078720 #1081134 #1084610 #1114648
#1163617 #1163930 #1169514 #1170442 #1176855 #1177440
#1178049 #1179082 #1179142 #1179612 #1179709 #1180058
#1181346 #1181504 #1181574 #1181671 #1181809 #1181854
#1181896 #1181931 #1181960 #1181985 #1181987 #1181996
#1181998 #1182038 #1182047 #1182118 #1182130 #1182140
#1182171 #1182173 #1182175 #1182182 #1182184 #1182195
#1182242 #1182243 #1182248 #1182269 #1182302 #1182307
#1182310 #1182438 #1182447 #1182448 #1182449 #1182460
#1182461 #1182462 #1182463 #1182464 #1182465 #1182466
#1182560 #1182561 #1182571 #1182590 #1182610 #1182612
#1182650 #1182652
Cross-References: CVE-2021-3348
Affected Products:
SUSE Linux Enterprise Server 12-SP5
______________________________________________________________________________
An update that solves one vulnerability and has 67 fixes is now available.
Description:
The SUSE Linux Enterprise 12 SP5 kernel Azure was updated to receive various
security and bugfixes.
The following security bugs was fixed:
o CVE-2021-3348: Fixed a use-after-free read in nbd_queue_rq (bsc#1181504).
The following non-security bugs were fixed:
o ACPI: configfs: add missing check after configfs_register_default_group()
(git-fixes).
o ACPI: property: Fix fwnode string properties matching (git-fixes).
o ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
o ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).
o arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)
o ASoC: cs42l56: fix up error handling in probe (git-fixes).
o ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).
o block: fix use-after-free in disk_part_iter_next (bsc#1182610).
o Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the
probe function (git-fixes).
o Bluetooth: drop HCI device reference before return (git-fixes).
o Bluetooth: Fix initializing response id after clearing struct (git-fixes).
o Bluetooth: Put HCI device if inquiry procedure interrupts (git-fixes).
o bonding: Fix reference count leak in bond_sysfs_slave_add (git-fixes).
o bonding: wait for sysfs kobject destruction before freeing struct slave
(git-fixes).
o btrfs: Cleanup try_flush_qgroup (bsc#1182047).
o btrfs: correctly calculate item size used when item key collision happens
(bsc#1181996).
o btrfs: correctly validate compression type (bsc#1182269).
o btrfs: delete the ordered isize update code (bsc#1181998).
o btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: do not set path->leave_spinning for truncate (bsc#1181998).
o btrfs: factor out extent dropping code from hole punch handler (bsc#
1182038).
o btrfs: fix cloning range with a hole when using the NO_HOLES feature (bsc#
1182038).
o btrfs: fix data bytes_may_use underflow with fallocate due to failed quota
reserve (bsc#1182130)
o btrfs: fix ENOSPC errors, leading to transaction aborts, when cloning
extents (bsc#1182038).
o btrfs: fix hole extent items with a zero size after range cloning (bsc#
1182038).
o btrfs: fix lost i_size update after cloning inline extent (bsc#1181998).
o btrfs: fix mount failure caused by race with umount (bsc#1182248).
o btrfs: Fix race between extent freeing/allocation when using bitmaps (bsc#
1181574).
o btrfs: fix unexpected cow in run_delalloc_nocow (bsc#1181987).
o btrfs: fix unexpected failure of nocow buffered writes after snapshotting
when low on space (bsc#1181987).
o btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata
(bsc#1182047).
o btrfs: incremental send, fix file corruption when no-holes feature is
enabled (bsc#1182184).
o btrfs: Introduce extent_io_tree::owner to distinguish different io_trees
(bsc#1181998).
o btrfs: introduce per-inode file extent tree (bsc#1181998).
o btrfs: prepare for extensions in compression options (bsc#1182269).
o btrfs: prop: fix vanished compression property after failed set (bsc#
1182269).
o btrfs: prop: fix zstd compression parameter validation (bsc#1182269).
o btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: replace all uses of btrfs_ordered_update_i_size (bsc#1181998).
o btrfs: send, allow clone operations within the same file (bsc#1182173)
o btrfs: send, do not issue unnecessary truncate operations (bsc#1182173)
o btrfs: send, fix emission of invalid clone operations within the same file
(bsc#1182173)
o btrfs: send, fix incorrect file layout after hole punching beyond eof (bsc#
1182173).
o btrfs: send: fix invalid clone operations when cloning from the same file
and root (bsc#1182173)
o btrfs: send, fix missing truncate for inode with prealloc extent past eof
(bsc#1182173).
o btrfs: send, orphanize first all conflicting inodes when processing
references (bsc#1182243 bsc#1182242).
o btrfs: send, recompute reference path after orphanization of a directory
(bsc#1182243).
o btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: transaction: Avoid deadlock due to bad initialization timing of
fs_info::journal_info (bsc#1181931).
o btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
o btrfs: Use bd_dev to generate index when dev_state_hashtable add items (bsc
#1181931).
o btrfs: use btrfs_ordered_update_i_size in clone_finish_inode_update (bsc#
1181998).
o btrfs: use the file extent tree infrastructure (bsc#1181998).
o cifs: report error instead of invalid when revalidating a dentry fails (bsc
#1177440).
o dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049).
o ext4: do not remount read-only with errors=continue on reboot (bsc#
1182464).
o ext4: fix a memory leak of ext4_free_data (bsc#1182447).
o ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1182449).
o ext4: fix deadlock with fs freezing and EA inodes (bsc#1182463).
o ext4: fix superblock checksum failure when setting password salt (bsc#
1182465).
o fgraph: Initialize tracing_graph_pause at task creation (git-fixes).
o firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
o Fix unsynchronized access to sev members through svm_register_enc_region
(bsc#1114648).
o fs: fix lazytime expiration handling in __writeback_single_inode() (bsc#
1182466).
o fs: move I_DIRTY_INODE to fs.h (bsc#1182612).
o HID: core: detect and skip invalid inputs to snto32() (git-fixes).
o HID: wacom: Ignore attempts to overwrite the touch_max value from HID
(git-fixes).
o hwrng: timeriomem - Fix cooldown period calculation (git-fixes).
o ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#
190997).
o ibmvnic: device remove has higher precedence over reset (bsc#1065729).
o ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
o ibmvnic: fix login buffer memory leak (bsc#1081134 ltc#164631).
o ibmvnic: serialize access to work queue on remove (bsc#1065729).
o ibmvnic: Set to CLOSED state even on error (bsc#1084610 ltc#165122
git-fixes).
o Input: elo - fix an error code in elo_connect() (git-fixes).
o Input: joydev - prevent potential read overflow in ioctl (git-fixes).
o iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
o kABI: Fix kABI for 12856e7acde4 PCI/IOV: Mark VFs as not implementing
PCI_COMMAND_MEMORY (bsc#1179612).
o kernel-binary.spec: Add back initrd and image symlink ghosts to filelist
(bsc#1182140). Fixes: 76a9256314c3 ("rpm/kernel-{source,binary}.spec: do
not include ghost symlinks (boo#1179082).")
o kernfs: deal with kernfs_fill_super() failures (bsc#1181809).
o KVM: apic: Flush TLB after APIC mode/address change if VPIDs are in use
(bsc#1182302).
o KVM: Fix kABI for set_virtual_apic_mode (bsc#1182310).
o KVM: Fix kABI for tlb_flush (bsc#1182195).
o KVM-vmx-Basic-APIC-virtualization-controls-have-thre.patch: (bsc#1182310).
o KVM: VMX: check for existence of secondary exec controls before accessing
(bsc#1182438).
o KVM: VMX: hide flexpriority from guest when disabled at the module level
(bsc#1182448).
o KVM-vmx-Introduce-lapic_mode-enumeration.patch: (bsc#1182307).
o KVM: x86: emulate RDPID (bsc#1182182).
o KVM: x86: emulating RDPID failure shall return #UD rather than
o KVM: X86: introduce invalidate_gpa argument to tlb flush (bsc#1182195).
o libfs: fix error cast of negative value in simple_attr_write() (bsc#
1179709).
o libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#
1170442).
o mac80211: fix potential overflow when multiplying to u32 integers
(git-fixes).
o media: cx25821: Fix a bug when reallocating some dma memory (git-fixes).
o media: media/pci: Fix memleak in empress_init (git-fixes).
o media: pwc: Use correct device for DMA (git-fixes).
o media: pxa_camera: declare variable when DEBUG is defined (git-fixes).
o media: qm1d1c0042: fix error return code in qm1d1c0042_init() (git-fixes).
o media: tm6000: Fix memleak in tm6000_start_stream (git-fixes).
o media: vsp1: Fix an error handling path in the probe function (git-fixes).
o mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
(git-fixes).
o misc: eeprom_93xx46: Add module alias to avoid breaking support for non
device tree users (git-fixes).
o misc: eeprom_93xx46: Fix module alias to enable module autoprobe
(git-fixes).
o mmc: usdhi6rol0: Fix a resource leak in the error handling path of the
probe (git-fixes).
o mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support
is disabled (bsc#1181896 ltc#191273).
o mm: thp: kABI: move the added flag to the end of enum (bsc#1181896 ltc#
191273).
o nbd: Fix memory leak in nbd_add_socket (bsc#1181504).
o net: bcmgenet: add support for ethtool rxnfc flows (git-fixes).
o net: bcmgenet: code movement (git-fixes).
o net: bcmgenet: fix mask check in bcmgenet_validate_flow() (git-fixes).
o net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
o net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
o net: bcmgenet: set Rx mode before starting netif (git-fixes).
o net: bcmgenet: use __be16 for htons(ETH_P_IP) (git-fixes).
o net: bcmgenet: Use correct I/O accessors (git-fixes).
o net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
o net/mlx4_en: Handle TX error CQE (bsc#1181854).
o net: moxa: Fix a potential double 'free_irq()' (git-fixes).
o net: sun: fix missing release regions in cas_init_one() (git-fixes).
o nvme-multipath: Early exit if no path is available (git-fixes).
o objtool: Do not fail on missing symbol table (bsc#1169514).
o PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1179612).
o powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning (bsc#
1182571 ltc#191345).
o powerpc: Fix alignment bug within the init sections (bsc#1065729).
o powerpc/perf: Exclude kernel samples while counting events in user space
(bsc#1065729).
o powerpc/perf/hv-24x7: Dont create sysfs event files for dummy events (bsc#
1182118 ltc#190624).
o powerpc/pseries/dlpar: handle ibm, configure-connector delay status (bsc#
1181985 ltc#188074).
o powerpc/pseries/eeh: Make pseries_pcibios_bus_add_device() static (bsc#
1078720, git-fixes).
o powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc
#1182171 ltc#190900).
o powerpc/pseries/ras: Make init_ras_hotplug_IRQ() static (bsc#1065729.
git-fixes).
o power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (git-fixes).
o ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
(bsc#1163930).
o ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
o quota: Fix error codes in v2_read_file_info() (bsc#1182652).
o quota: Fix memory leak when handling corrupted quota file (bsc#1182650).
o quota: Sanity-check quota file headers on load (bsc#1182461).
o regulator: axp20x: Fix reference cout leak (git-fixes).
o reiserfs: add check for an invalid ih_entry_count (bsc#1182462).
o rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#
1180058)
o s390/pci: adaptation of iommu to multifunction (bsc#1179612).
o s390/pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY (bsc#
1179612).
o scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (bsc#
1179142).
o scsi: target: Fix truncated PR-in ReadKeys response (bsc#1182590).
o scsi: target: fix unmap_zeroes_data boolean initialisation (bsc#1163617).
o staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules
(git-fixes).
o tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file
(git-fixes).
o tpm_tis: Clean up locality release (git-fixes).
o tpm_tis: Fix check_locality for correct locality acquisition (git-fixes).
o tracing: Check length before giving out the filter buffer (git-fixes).
o tracing: Do not count ftrace events in top level enable output (git-fixes).
o USB: cdc-acm: blacklist another IR Droid device (git-fixes).
o USB: dwc2: Abort transaction after errors with unknown reason (git-fixes).
o USB: dwc2: Make "trimming xfer length" a debug message (git-fixes).
o USB: musb: Fix runtime PM race in musb_queue_resume_work (git-fixes).
o USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
(git-fixes).
o USB: serial: cp210x: add pid/vid for WSDA-200-USB (git-fixes).
o USB: serial: mos7720: fix error code in mos7720_write() (git-fixes).
o USB: serial: mos7720: improve OOM-handling in read_mos_reg() (git-fixes).
o USB: serial: mos7840: fix error code in mos7840_write() (git-fixes).
o USB: serial: option: Adding support for Cinterion MV31 (git-fixes).
o USB: serial: option: add LongSung M5710 module support (git-fixes).
o USB: uas: Add PNY USB Portable SSD to unusual_uas (git-fixes).
o USB: usblp: fix DMA to stack (git-fixes).
o vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn (bsc#
1179612).
o vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
o writeback: Drop I_DIRTY_TIME_EXPIRE (bsc#1182460).
o x86/apic: Add extra serialization for non-serializing MSRs (bsc#1114648).
o x86/efistub: Disable paging at mixed mode entry (bsc#1114648).
o x86/entry/64/compat: Fix "x86/entry/64/compat: Preserve r8-r11 in int
$0x80" (bsc#1114648).
o x86/entry/64/compat: Preserve r8-r11 in int $0x80 (bsc#1114648).
o x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (bsc#
1114648).
o x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1114648).
o xen-blkfront: allow discard-* nodes to be optional (bsc#1181346).
o xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
o xfs: reduce quota reservation when doing a dax unwritten extent conversion
(git-fixes bsc#1182561).
o xhci: fix bounce buffer usage for non-sg list case (git-fixes).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE Linux Enterprise Server 12-SP5:
zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-739=1
Package List:
o SUSE Linux Enterprise Server 12-SP5 (noarch):
kernel-devel-azure-4.12.14-16.47.1
kernel-source-azure-4.12.14-16.47.1
o SUSE Linux Enterprise Server 12-SP5 (x86_64):
kernel-azure-4.12.14-16.47.1
kernel-azure-base-4.12.14-16.47.1
kernel-azure-base-debuginfo-4.12.14-16.47.1
kernel-azure-debuginfo-4.12.14-16.47.1
kernel-azure-debugsource-4.12.14-16.47.1
kernel-azure-devel-4.12.14-16.47.1
kernel-syms-azure-4.12.14-16.47.1
References:
o https://www.suse.com/security/cve/CVE-2021-3348.html
o https://bugzilla.suse.com/1065600
o https://bugzilla.suse.com/1065729
o https://bugzilla.suse.com/1078720
o https://bugzilla.suse.com/1081134
o https://bugzilla.suse.com/1084610
o https://bugzilla.suse.com/1114648
o https://bugzilla.suse.com/1163617
o https://bugzilla.suse.com/1163930
o https://bugzilla.suse.com/1169514
o https://bugzilla.suse.com/1170442
o https://bugzilla.suse.com/1176855
o https://bugzilla.suse.com/1177440
o https://bugzilla.suse.com/1178049
o https://bugzilla.suse.com/1179082
o https://bugzilla.suse.com/1179142
o https://bugzilla.suse.com/1179612
o https://bugzilla.suse.com/1179709
o https://bugzilla.suse.com/1180058
o https://bugzilla.suse.com/1181346
o https://bugzilla.suse.com/1181504
o https://bugzilla.suse.com/1181574
o https://bugzilla.suse.com/1181671
o https://bugzilla.suse.com/1181809
o https://bugzilla.suse.com/1181854
o https://bugzilla.suse.com/1181896
o https://bugzilla.suse.com/1181931
o https://bugzilla.suse.com/1181960
o https://bugzilla.suse.com/1181985
o https://bugzilla.suse.com/1181987
o https://bugzilla.suse.com/1181996
o https://bugzilla.suse.com/1181998
o https://bugzilla.suse.com/1182038
o https://bugzilla.suse.com/1182047
o https://bugzilla.suse.com/1182118
o https://bugzilla.suse.com/1182130
o https://bugzilla.suse.com/1182140
o https://bugzilla.suse.com/1182171
o https://bugzilla.suse.com/1182173
o https://bugzilla.suse.com/1182175
o https://bugzilla.suse.com/1182182
o https://bugzilla.suse.com/1182184
o https://bugzilla.suse.com/1182195
o https://bugzilla.suse.com/1182242
o https://bugzilla.suse.com/1182243
o https://bugzilla.suse.com/1182248
o https://bugzilla.suse.com/1182269
o https://bugzilla.suse.com/1182302
o https://bugzilla.suse.com/1182307
o https://bugzilla.suse.com/1182310
o https://bugzilla.suse.com/1182438
o https://bugzilla.suse.com/1182447
o https://bugzilla.suse.com/1182448
o https://bugzilla.suse.com/1182449
o https://bugzilla.suse.com/1182460
o https://bugzilla.suse.com/1182461
o https://bugzilla.suse.com/1182462
o https://bugzilla.suse.com/1182463
o https://bugzilla.suse.com/1182464
o https://bugzilla.suse.com/1182465
o https://bugzilla.suse.com/1182466
o https://bugzilla.suse.com/1182560
o https://bugzilla.suse.com/1182561
o https://bugzilla.suse.com/1182571
o https://bugzilla.suse.com/1182590
o https://bugzilla.suse.com/1182610
o https://bugzilla.suse.com/1182612
o https://bugzilla.suse.com/1182650
o https://bugzilla.suse.com/1182652
- --------------------------------------------------------------------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0738-1
Rating: important
References: #1065600 #1065729 #1078720 #1081134 #1084610 #1132477
#1151927 #1152472 #1152489 #1154353 #1155518 #1156395
#1163776 #1169514 #1170442 #1176248 #1176855 #1177109
#1177326 #1177440 #1177529 #1178142 #1178995 #1179082
#1179137 #1179243 #1179428 #1179660 #1179929 #1180058
#1180846 #1180964 #1180989 #1181133 #1181259 #1181544
#1181574 #1181637 #1181655 #1181671 #1181674 #1181710
#1181720 #1181735 #1181736 #1181738 #1181747 #1181753
#1181818 #1181843 #1181854 #1181896 #1181958 #1181960
#1181985 #1182047 #1182118 #1182128 #1182140 #1182171
#1182175 #1182259 #1182265 #1182266 #1182267 #1182268
#1182271 #1182272 #1182273 #1182275 #1182276 #1182278
#1182283 #1182374 #1182380 #1182381 #1182406 #1182430
#1182439 #1182441 #1182442 #1182443 #1182444 #1182445
#1182446 #1182447 #1182449 #1182454 #1182455 #1182456
#1182457 #1182458 #1182459 #1182460 #1182461 #1182462
#1182463 #1182464 #1182465 #1182466 #1182485 #1182489
#1182490 #1182547 #1182558 #1182560 #1182561 #1182571
#1182599 #1182602 #1182626 #1182650 #1182672 #1182676
#1182683 #1182684 #1182686 #1182770 #1182798 #1182800
#1182801 #1182854 #1182856
Cross-References: CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-12373
CVE-2020-29368 CVE-2020-29374 CVE-2021-26930 CVE-2021-26931
CVE-2021-26932
Affected Products:
SUSE Linux Enterprise Module for Public Cloud 15-SP2
______________________________________________________________________________
An update that solves 9 vulnerabilities and has 114 fixes is now available.
Description:
The SUSE Linux Enterprise 15 SP2 kernel Azure was updated to receive various
security and bugfixes.
The following security bugs were fixed:
o CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping
(XSA-365 bsc#1181843).
o CVE-2021-26931: Fixed an issue where Linux kernel was treating grant
mapping errors as bugs (XSA-362 bsc#1181753).
o CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping
(XSA-361 bsc#1181747). by remote attackers to read or write files via
directory traversal in an XCOPY request (bsc#178372).
o CVE-2020-12362: Fixed an integer overflow in the firmware which may have
allowed a privileged user to potentially enable an escalation of privilege
via local access (bsc#1181720).
o CVE-2020-12363: Fixed an improper input validation which may have allowed a
privileged user to potentially enable a denial of service via local access
(bsc#1181735).
o CVE-2020-12364: Fixed a null pointer reference which may have allowed a
privileged user to potentially enable a denial of service via local access
(bsc#1181736 ).
o CVE-2020-12373: Fixed an expired pointer dereference which may have allowed
a privileged user to potentially enable a denial of service via local
access (bsc#1181738).
o CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write
implementation which could have granted unintended write access because of
a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
o ACPICA: Fix exception code class checks (git-fixes).
o ACPI: configfs: add missing check after configfs_register_default_group()
(git-fixes).
o ACPI: property: Fix fwnode string properties matching (git-fixes).
o ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
o ACPI: property: Satisfy kernel doc validator (part 2) (git-fixes).
o ALSA: hda: Add another CometLake-H PCI ID (git-fixes).
o ALSA: hda/hdmi: Drop bogus check at closing a stream (git-fixes).
o ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).
o ALSA: pcm: Assure sync with the pending stop operation at suspend
(git-fixes).
o ALSA: pcm: Call sync_stop at disconnection (git-fixes).
o ALSA: pcm: Do not call sync_stop if it hasn't been stopped (git-fixes).
o ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 (git-fixes).
o ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all()
(git-fixes).
o ALSA: usb-audio: Do not avoid stopping the stream at disconnection
(git-fixes).
o ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).
o ALSA: usb-audio: Handle invalid running state at releasing EP (git-fixes).
o ALSA: usb-audio: More strict state change in EP (git-fixes).
o amba: Fix resource leak for drivers without .remove (git-fixes).
o arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)
o ASoC: cpcap: fix microphone timeslot mask (git-fixes).
o ASoC: cs42l56: fix up error handling in probe (git-fixes).
o ASoC: simple-card-utils: Fix device module clock (git-fixes).
o ASoC: SOF: debug: Fix a potential issue on string buffer termination
(git-fixes).
o ata: ahci_brcm: Add back regulators management (git-fixes).
o ata: sata_nv: Fix retrieving of active qcs (git-fixes).
o ath10k: Fix error handling in case of CE pipe init failure (git-fixes).
o ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).
o bcache: fix overflow in offset_to_stripe() (git-fixes).
o blk-mq: call commit_rqs while list empty but error happen (bsc#1182442).
o blk-mq: insert request not through ->queue_rq into sw/scheduler queue (bsc#
1182443).
o blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue (bsc#
1182444).
o block: fix inflight statistics of part0 (bsc#1182445).
o block: respect queue limit of max discard segment (bsc#1182441).
o block: virtio_blk: fix handling single range discard request (bsc#1182439).
o Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the
probe function (git-fixes).
o Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv (git-fixes).
o Bluetooth: drop HCI device reference before return (git-fixes).
o Bluetooth: Fix initializing response id after clearing struct (git-fixes).
o Bluetooth: hci_uart: Fix a race for write_work scheduling (git-fixes).
o Bluetooth: Put HCI device if inquiry procedure interrupts (git-fixes).
o bnxt_en: Fix accumulation of bp->net_stats_prev (git-fixes).
o bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
o bnxt_en: fix error return code in bnxt_init_one() (git-fixes).
o bnxt_en: Improve stats context resource accounting with RDMA driver loaded
(git-fixes).
o bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
o bnxt_en: Release PCI regions when DMA mask setup fails during probe
(git-fixes).
o bonding: Fix reference count leak in bond_sysfs_slave_add (git-fixes).
o bonding: set dev->needed_headroom in bond_setup_by_slave() (git-fixes).
o bonding: wait for sysfs kobject destruction before freeing struct slave
(git-fixes).
o bpf, cgroup: Fix optlen WARN_ON_ONCE toctou (bsc#1155518).
o bpf, cgroup: Fix problematic bounds check (bsc#1155518).
o btrfs: add assertion for empty list of transactions at late stage of umount
(bsc#1182626).
o btrfs: Cleanup try_flush_qgroup (bsc#1182047).
o btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: Fix race between extent freeing/allocation when using bitmaps (bsc#
1181574).
o btrfs: fix race between RO remount and the cleaner task (bsc#1182626).
o btrfs: fix transaction leak and crash after cleaning up orphans on RO mount
(bsc#1182626).
o btrfs: fix transaction leak and crash after RO remount caused by qgroup
rescan (bsc#1182626).
o btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata
(bsc#1182047).
o btrfs: lift read-write mount setup from mount and remount (bsc#1182626).
o btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: run delayed iputs when remounting RO to avoid leaking them (bsc#
1182626).
o btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
o caif: no need to check return value of debugfs_create functions
(git-fixes).
o ceph: fix flush_snap logic after putting caps (bsc#1182854).
o cgroup: Fix memory leak when parsing multiple source parameters (bsc#
1182683).
o cgroup: fix psi monitor for root cgroup (bsc#1182686).
o cgroup-v1: add disabled controller check in cgroup1_parse_param() (bsc#
1182684).
o chelsio/chtls: correct function return and return type (git-fixes).
o chelsio/chtls: correct netdevice for vlan interface (git-fixes).
o chelsio/chtls: fix a double free in chtls_setkey() (git-fixes).
o chelsio/chtls: fix always leaking ctrl_skb (git-fixes).
o chelsio/chtls: fix deadlock issue (git-fixes).
o chelsio/chtls: fix memory leaks caused by a race (git-fixes).
o chelsio/chtls: fix memory leaks in CPL handlers (git-fixes).
o chelsio/chtls: fix panic during unload reload chtls (git-fixes).
o chelsio/chtls: fix socket lock (git-fixes).
o chelsio/chtls: fix tls record info to user (git-fixes).
o Cherry-pick ibmvnic patches from SP3 (jsc#SLE-17268).
o chtls: Added a check to avoid NULL pointer dereference (git-fixes).
o chtls: Fix chtls resources release sequence (git-fixes).
o chtls: Fix hardware tid leak (git-fixes).
o chtls: Fix panic when route to peer not configured (git-fixes).
o chtls: Remove invalid set_tcb call (git-fixes).
o chtls: Replace skb_dequeue with skb_peek (git-fixes).
o cifs: check all path components in resolved dfs target (bsc#1181710).
o cifs: fix nodfs mount option (bsc#1181710).
o cifs: introduce helper for finding referral server (bsc#1181710).
o cifs: report error instead of invalid when revalidating a dentry fails (bsc
#1177440).
o cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
o cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code
(git-fixes).
o clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL
(git-fixes).
o clk: meson: clk-pll: make "ret" a signed integer (git-fixes).
o clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate()
(git-fixes).
o clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs (git-fixes).
o clk: sunxi-ng: h6: Fix CEC clock (git-fixes).
o clk: sunxi-ng: h6: Fix clock divider range on some clocks (git-fixes).
o clk: sunxi-ng: mp: fix parent rate change flag check (git-fixes).
o clocksource/drivers/ixp4xx: Select TIMER_OF when needed (git-fixes).
o cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove() (git-fixes).
o cpufreq: brcmstb-avs-cpufreq: Free resources in error path (git-fixes).
o cpuset: fix race between hotplug work and later CPU offline (bsc#1182676).
o crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()
(git-fixes).
o crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error)
(git-fixes).
o cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
o cxgb4: fix all-mask IP address comparison (git-fixes).
o cxgb4: fix checks for max queues to allocate (git-fixes).
o cxgb4: fix endian conversions for L4 ports in filters (git-fixes).
o cxgb4: fix set but unused variable when DCB is disabled (git-fixes).
o cxgb4: fix SGE queue dump destination buffer context (git-fixes).
o cxgb4: fix the panic caused by non smac rewrite (git-fixes).
o cxgb4: move DCB version extern to header file (git-fixes).
o cxgb4: move handling L2T ARP failures to caller (git-fixes).
o cxgb4: move PTP lock and unlock to caller in Tx path (git-fixes).
o cxgb4: parse TC-U32 key values and masks natively (git-fixes).
o cxgb4: remove cast when saving IPv4 partial checksum (git-fixes).
o cxgb4: set up filter action after rewrites (git-fixes).
o cxgb4: use correct type for all-mask IP address comparison (git-fixes).
o cxgb4: use unaligned conversion for fetching timestamp (git-fixes).
o dmaengine: fsldma: Fix a resource leak in an error handling path of the
probe function (git-fixes).
o dmaengine: fsldma: Fix a resource leak in the remove function (git-fixes).
o dmaengine: hsu: disable spurious interrupt (git-fixes).
o dmaengine: owl-dma: Fix a resource leak in the remove function (git-fixes).
o dm crypt: avoid truncating the logical block size (git-fixes).
o dm: fix bio splitting and its bio completion order for regular IO
(git-fixes).
o dm thin: fix use-after-free in metadata_pre_commit_callback (bsc#1177529).
o dm thin metadata: Avoid returning cmd->bm wild pointer on error (bsc#
1177529).
o dm thin metadata: fix lockdep complaint (bsc#1177529).
o dm thin metadata: Fix use-after-free in dm_bm_set_read_only (bsc#1177529).
o dm: use noio when sending kobject event (bsc#1177529).
o docs: filesystems: vfs: correct flag name (bsc#1182856).
o dpaa2-eth: fix return codes used in ndo_setup_tc (git-fixes).
o Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
(git-fixes).
o drivers: net: davinci_mdio: fix potential NULL dereference in
davinci_mdio_probe() (git-fixes).
o drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[]
(git-fixes).
o drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs
(git-fixes).
o drm/amd/display: Change function decide_dp_link_settings to avoid infinite
looping (git-fixes).
o drm/amd/display: Decrement refcount of dc_sink before reassignment
(git-fixes).
o drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction
(git-fixes).
o drm/amd/display: Fix dc_sink kref count in emulated_link_detect
(git-fixes).
o drm/amd/display: Fix HDMI deep color output for DCE 6-11 (git-fixes).
o drm/amd/display: Free atomic state after drm_atomic_commit (git-fixes).
o drm/amd/display: Revert "Fix EDID parsing after resume from suspend"
(git-fixes).
o drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition
(git-fixes).
o drm/fb-helper: Add missed unlocks in setcmap_legacy() (git-fixes).
o drm/gma500: Fix error return code in psb_driver_load() (git-fixes).
o drm/meson: Unbind all connectors on module removal (bsc#1152472)
o drm/sun4i: dw-hdmi: always set clock rate (bsc#1152472)
o drm/sun4i: dw-hdmi: Fix max. frequency for H6 (bsc#1152472)
o drm/sun4i: Fix H6 HDMI PHY configuration (bsc#1152472)
o drm/sun4i: tcon: set sync polarity for tcon1 channel (bsc#1152472)
o drm/vc4: hvs: Fix buffer overflow with the dlist handling (bsc#1152489)
o Drop HID logitech patch that caused a regression (bsc#1182259)
o exec: Always set cap_ambient in cap_bprm_set_creds (git-fixes).
o exfat: Avoid allocating upcase table using kcalloc() (git-fixes).
o ext4: do not remount read-only with errors=continue on reboot (bsc#
1182464).
o ext4: fix a memory leak of ext4_free_data (bsc#1182447).
o ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1182449).
o ext4: fix deadlock with fs freezing and EA inodes (bsc#1182463).
o ext4: fix superblock checksum failure when setting password salt (bsc#
1182465).
o ext4: prevent creating duplicate encrypted filenames (bsc#1182446).
o fgraph: Initialize tracing_graph_pause at task creation (git-fixes).
o firmware_loader: align .builtin_fw to 8 (git-fixes).
o fscrypt: add fscrypt_is_nokey_name() (bsc#1182446).
o fscrypt: rename DCACHE_ENCRYPTED_NAME to DCACHE_NOKEY_NAME (bsc#1182446).
o fs: fix lazytime expiration handling in __writeback_single_inode() (bsc#
1182466).
o gma500: clean up error handling in init (git-fixes).
o gpio: pcf857x: Fix missing first interrupt (git-fixes).
o HID: core: detect and skip invalid inputs to snto32() (git-fixes).
o HID: make arrays usage and value to be the same (git-fixes).
o HID: wacom: Ignore attempts to overwrite the touch_max value from HID
(git-fixes).
o hwrng: timeriomem - Fix cooldown period calculation (git-fixes).
o i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (git-fixes).
o i2c: iproc: handle only slave interrupts which are enabled (git-fixes).
o i2c: mediatek: Move suspend and resume handling to NOIRQ phase (git-fixes).
o i2c: stm32f7: fix configuration of the digital filter (git-fixes).
o i3c: master: dw: Drop redundant disec call (git-fixes).
o i40e: acquire VSI pointer only after VF is initialized (jsc#SLE-8025).
o i40e: avoid premature Rx buffer reuse (git-fixes).
o i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (git-fixes).
o i40e: Fix MAC address setting for a VF via Host/VM (git-fixes).
o i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
o i40e: Revert "i40e: do not report link up for a VF who hasn't enabled
queues" (jsc#SLE-8025).
o iavf: fix double-release of rtnl_lock (git-fixes).
o iavf: fix error return code in iavf_init_get_resources() (git-fixes).
o iavf: fix speed reporting over virtchnl (git-fixes).
o iavf: Fix updating statistics (git-fixes).
o ibmvnic: add memory barrier to protect long term buffer (bsc#1182485 ltc#
191591).
o ibmvnic: change IBMVNIC_MAX_IND_DESCS to 16 (bsc#1182485 ltc#191591).
o ibmvnic: Clean up TX code and TX buffer data structure (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#
190997).
o ibmvnic: compare adapter->init_done_rc with more readable ibmvnic_rc_codes
(jsc#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Correctly re-enable interrupts in NAPI polling routine (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: create send_control_ip_offload (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: create send_query_ip_offload (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: device remove has higher precedence over reset (bsc#1065729).
o ibmvnic: Do not replenish RX buffers after every polling loop (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Ensure that CRQ entry read are correctly ordered (bsc#1182485 ltc#
191591).
o ibmvnic: Ensure that device queue memory is cache-line aligned (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Ensure that SCRQ entry reads are correctly ordered (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
o ibmvnic: fix login buffer memory leak (bsc#1081134 ltc#164631).
o ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: Fix possibly uninitialized old_num_tx_queues variable warning (jsc
#SLE-17268).
o ibmvnic: fix rx buffer tracking and index management in replenish_rx_pool
partial success (bsc#1179929 ltc#189960).
o ibmvnic: Fix TX completion error handling (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: Fix use-after-free of VNIC login response buffer (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: handle inconsistent login with reset (jsc#SLE-17043 bsc#1179243
ltc#189290).
o ibmvnic: Harden device Command Response Queue handshake (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: improve ibmvnic_init and ibmvnic_reset_init (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: Introduce batched RX buffer descriptor transmission (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: Introduce indirect subordinate Command Response Queue buffer (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Introduce xmit_more support using batched subCRQ hcalls (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: merge ibmvnic_reset_init and ibmvnic_init (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: no reset timeout for 5 seconds after reset (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: reduce wait for completion time (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: remove never executed if statement (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: Remove send_subcrq function (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: rename ibmvnic_send_req_caps to send_request_cap (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: rename send_cap_queries to send_query_cap (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: rename send_map_query to send_query_map (jsc#SLE-17043 bsc#1179243
ltc#189290).
o ibmvnic: send_login should check for crq errors (jsc#SLE-17043 bsc#1179243
ltc#189290).
o ibmvnic: serialize access to work queue on remove (bsc#1065729).
o ibmvnic: Set to CLOSED state even on error (bsc#1084610 ltc#165122
git-fixes).
o ibmvnic: skip send_request_unmap for timeout reset (bsc#1182485 ltc#
191591).
o ibmvnic: skip tx timeout reset while in resetting (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: stop free_all_rwi on failed reset (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: store RX and TX subCRQ handle array in ibmvnic_adapter struct (jsc
#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: track pending login (jsc#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: update MAINTAINERS (jsc#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Use netdev_alloc_skb instead of alloc_skb to replenish RX buffers
(jsc#SLE-17043 bsc#1179243 ltc#189290).
o ice: Do not allow more channels than LAN MSI-X available (jsc#SLE-7926).
o ice: Fix MSI-X vector fallback logic (jsc#SLE-7926).
o igc: check return value of ret_val in igc_config_fc_after_link_up
(git-fixes).
o igc: fix link speed advertising (git-fixes).
o igc: Fix returning wrong statistics (git-fixes).
o igc: Report speed and duplex as unknown when device is runtime suspended
(git-fixes).
o igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr
(git-fixes).
o include/linux/memremap.h: remove stale comments (git-fixes).
o Input: elo - fix an error code in elo_connect() (git-fixes).
o Input: i8042 - unbreak Pegatron C15B (git-fixes).
o Input: joydev - prevent potential read overflow in ioctl (git-fixes).
o Input: sur40 - fix an error code in sur40_probe() (git-fixes).
o Input: xpad - sync supported devices with fork on GitHub (git-fixes).
o iwlwifi: mvm: do not send RFH_QUEUE_CONFIG_CMD with no queues (git-fixes).
o iwlwifi: mvm: guard against device removal in reprobe (git-fixes).
o iwlwifi: mvm: invalidate IDs of internal stations at mvm start (git-fixes).
o iwlwifi: mvm: skip power command when unbinding vif during CSA (git-fixes).
o iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() (git-fixes).
o iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap (git-fixes).
o iwlwifi: pcie: fix context info memory leak (git-fixes).
o iwlwifi: pcie: reschedule in long-running memory reads (git-fixes).
o iwlwifi: pcie: use jiffies for memory read spin time limit (git-fixes).
o ixgbe: avoid premature Rx buffer reuse (git-fixes).
o ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (git-fixes).
o kABI: Fix kABI after AMD SEV PCID fixes (bsc#1178995).
o kABI: Fix kABI after modifying struct __call_single_data (bsc#1180846).
o kABI: Fix kABI for extended APIC-ID support (bsc#1181259, jsc#ECO-3191).
o kABI: repair, after "nVMX: Emulate MTF when performinginstruction
emulation" kvm_x86_ops is part of kABI as it's used by LTTng. But it's only
read and never allocated in there, so growing it (without altering existing
members' offsets) is fine.
o kernel-binary.spec: Add back initrd and image symlink ghosts to filelist
(bsc#1182140). Fixes: 76a9256314c3 ("rpm/kernel-{source,binary}.spec: do
not include ghost symlinks (boo#1179082).")
o kernel/smp: add boot parameter for controlling CSD lock debugging (bsc#
1180846).
o kernel/smp: add more data to CSD lock debugging (bsc#1180846).
o kernel/smp: prepare more CSD lock debugging (bsc#1180846).
o kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
o KVM: arm64: Assume write fault on S1PTW permission fault on instruction
fetch (bsc#1181818).
o KVM: arm64: Remove S1PTW check from kvm_vcpu_dabt_iswrite() (bsc#1181818).
o KVM: nVMX: do not clear mtf_pending when nested events are blocked (bsc#
1182489).
o KVM: nVMX: Emulate MTF when performing instruction emulation (bsc#1182380).
o KVM: nVMX: Handle pending #DB when injecting INIT VM-exit. Pulling in as a
dependency of: "KVM: nVMX: Emulate MTF when performing instruction
emulation" (bsc#1182380).
o KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (bsc#1178995).
o KVM: tracing: Fix unmatched kvm_entry and kvm_exit events (bsc#1182770).
o KVM: VMX: Condition ENCLS-exiting enabling on CPU support for SGX1 (bsc#
1182798).
o KVM: x86: Allocate new rmap and large page tracking when moving memslot
(bsc#1182800).
o KVM: x86: allow KVM_STATE_NESTED_MTF_PENDING in kvm_state flags (bsc#
1182490).
o KVM: x86: clear stale x86_emulate_ctxt->intercept value (bsc#1182381).
o KVM: x86: do not notify userspace IOAPIC on edge-triggered interrupt EOI
(bsc#1182374).
o KVM: x86: Gracefully handle __vmalloc() failure during VM allocation (bsc#
1182801).
o KVM: x86: Introduce cr3_lm_rsvd_bits in kvm_vcpu_arch (bsc#1178995).
o KVM: x86: remove stale comment from struct x86_emulate_ctxt (bsc#1182406).
o libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#
1170442).
o lib/vsprintf: no_hash_pointers prints all addresses as unhashed (bsc#
1182599).
o linux/clk.h: use correct kernel-doc notation for 2 functions (git-fixes).
o mac80211: 160MHz with extended NSS BW in CSA (git-fixes).
o mac80211: fix fast-rx encryption check (git-fixes).
o mac80211: fix potential overflow when multiplying to u32 integers
(git-fixes).
o mac80211: pause TX while changing interface type (git-fixes).
o macros.kernel-source: Use spec_install_pre for certificate installation
(boo#1182672). Since rpm 4.16 files installed during build phase are lost.
o MAINTAINERS: remove John Allen from ibmvnic (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o matroxfb: avoid -Warray-bounds warning (bsc#1152472)
o media: aspeed: fix error return code in aspeed_video_setup_video()
(git-fixes).
o media: camss: missing error code in msm_video_register() (git-fixes).
o media: cx25821: Fix a bug when reallocating some dma memory (git-fixes).
o media: em28xx: Fix use-after-free in em28xx_alloc_urbs (git-fixes).
o media: i2c: ov5670: Fix PIXEL_RATE minimum value (git-fixes).
o media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt()
(git-fixes).
o media: lmedm04: Fix misuse of comma (git-fixes).
o media: media/pci: Fix memleak in empress_init (git-fixes).
o media: mt9v111: Remove unneeded device-managed puts (git-fixes).
o media: pwc: Use correct device for DMA (bsc#1181133).
o media: pxa_camera: declare variable when DEBUG is defined (git-fixes).
o media: qm1d1c0042: fix error return code in qm1d1c0042_init() (git-fixes).
o media: software_node: Fix refcounts in software_node_get_next_child()
(git-fixes).
o media: tm6000: Fix memleak in tm6000_start_stream (git-fixes).
o media: vsp1: Fix an error handling path in the probe function (git-fixes).
o mei: hbm: call mei_set_devstate() on hbm stop response (git-fixes).
o memory: ti-aemif: Drop child node when jumping out loop (git-fixes).
o mfd: bd9571mwv: Use devm_mfd_add_devices() (git-fixes).
o mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
(git-fixes).
o misc: eeprom_93xx46: Add module alias to avoid breaking support for non
device tree users (git-fixes).
o misc: eeprom_93xx46: Fix module alias to enable module autoprobe
(git-fixes).
o mlxsw: core: Add validation of transceiver temperature thresholds
(git-fixes).
o mlxsw: core: Fix memory leak on module removal (git-fixes).
o mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
o mlxsw: core: Free EMAD transactions using kfree_rcu() (git-fixes).
o mlxsw: core: Increase critical threshold for ASIC thermal zone (git-fixes).
o mlxsw: core: Increase scope of RCU read-side critical section (git-fixes).
o mlxsw: core: Use variable timeout for EMAD retries (git-fixes).
o mlxsw: spectrum_acl: Fix mlxsw_sp_acl_tcam_group_add()'s error path
(git-fixes).
o mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case
reload fails (git-fixes).
o mmc: core: Limit retries when analyse of SDIO tuples fails (git-fixes).
o mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to
128-bytes (git-fixes).
o mmc: sdhci-sprd: Fix some resource leaks in the remove function
(git-fixes).
o mmc: usdhi6rol0: Fix a resource leak in the error handling path of the
probe (git-fixes).
o mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support
is disabled (bsc#1181896 ltc#191273).
o mm: proc: Invalidate TLB after clearing soft-dirty page state (bsc#1163776
ltc#183929 git-fixes).
o mm: thp: kABI: move the added flag to the end of enum (bsc#1181896 ltc#
191273).
o mt76: dma: fix a possible memory leak in mt76_add_fragment() (git-fixes).
o net: ag71xx: add missed clk_disable_unprepare in error path of probe
(git-fixes).
o net: axienet: Fix error return code in axienet_probe() (git-fixes).
o net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
o net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
o net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
o net: bcmgenet: set Rx mode before starting netif (git-fixes).
o net: bcmgenet: use hardware padding of runt frames (git-fixes).
o net: broadcom CNIC: requires MMU (git-fixes).
o net: caif: Fix debugfs on 64-bit platforms (git-fixes).
o net/cxgb4: Check the return from t4_query_params properly (git-fixes).
o net: cxgb4: fix return error value in t4_prep_fw (git-fixes).
o net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
o net: dsa: lantiq_gswip: fix and improve the unsupported interface error
(git-fixes).
o net: dsa: mt7530: Change the LINK bit to reflect the link status
(git-fixes).
o net: dsa: mt7530: set CPU port to fallback mode (git-fixes).
o net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
o net: ethernet: ave: Fix error returns in ave_init (git-fixes).
o net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it
anymore in mlx4_en_xmit() (git-fixes).
o net: ethernet: ti: ale: fix allmulti for nu type ale (git-fixes).
o net: ethernet: ti: ale: fix seeing unreg mcast packets with promisc and
allmulti disabled (git-fixes).
o net: ethernet: ti: ale: modify vlan/mdb api for switchdev (git-fixes).
o net: ethernet: ti: cpsw: allow untagged traffic on host port (git-fixes).
o net: ethernet: ti: fix some return value check of cpsw_ale_create()
(git-fixes).
o net: gemini: Fix missing clk_disable_unprepare() in error path of
gemini_ethernet_port_probe() (git-fixes).
o net: gro: do not keep too many GRO packets in napi->rx_list (bsc#1154353).
o net: hns3: add a check for queue_id in hclge_reset_vf_queue() (git-fixes).
o net: hns3: add a missing uninit debugfs when unload driver (git-fixes).
o net: hns3: add reset check for VF updating port based VLAN (git-fixes).
o net: hns3: clear port base VLAN when unload PF (git-fixes).
o net: hns3: fix aRFS FD rules leftover after add a user FD rule (git-fixes).
o net: hns3: fix a TX timeout issue (git-fixes).
o net: hns3: fix desc filling bug when skb is expanded or lineared
(git-fixes).
o net: hns3: fix for mishandle of asserting VF reset fail (git-fixes).
o net: hns3: fix for VLAN config when reset failed (git-fixes).
o net: hns3: fix RSS config lost after VF reset (git-fixes).
o net: hns3: fix set and get link ksettings issue (git-fixes).
o net: hns3: fix "tc qdisc del" failed issue (git-fixes).
o net: hns3: fix the number of queues actually used by ARQ (git-fixes).
o net: hns3: fix use-after-free when doing self test (git-fixes).
o net: hns3: fix VF VLAN table entries inconsistent issue (git-fixes).
o net: hns: fix return value check in __lb_other_process() (git-fixes).
o net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
o net: macb: fix call to pm_runtime in the suspend/resume functions
(git-fixes).
o net: macb: fix wakeup test in runtime suspend/resume routines (git-fixes).
o net: macb: mark device wake capable when "magic-packet" property present
(git-fixes).
o net/mlx4_core: fix a memory leak bug (git-fixes).
o net/mlx4_core: Fix init_hca fields offset (git-fixes).
o net/mlx4_en: Avoid scheduling restart task if it is already running (bsc#
1181854).
o net/mlx4_en: Handle TX error CQE (bsc#1181854).
o net/mlx5: Add handling of port type in rule deletion (git-fixes).
o net/mlx5: Annotate mutex destroy for root ns (git-fixes).
o net/mlx5: Clear LAG notifier pointer after unregister (git-fixes).
o net/mlx5: Disable QoS when min_rates on all VFs are zero (git-fixes).
o net/mlx5: Do not call timecounter cyc2time directly from 1PPS flow
(git-fixes).
o net/mlx5: Do not maintain a case of del_sw_func being null (git-fixes).
o net/mlx5e: Correctly handle changing the number of queues when the
interface is down (git-fixes).
o net/mlx5e: Do not trigger IRQ multiple times on XSK wakeup to avoid WQ
overruns (git-fixes).
o net/mlx5e: en_accel, Add missing net/geneve.h include (git-fixes).
o net/mlx5e: Encapsulate updating netdev queues into a function (git-fixes).
o net/mlx5e: E-switch, Fix rate calculation for overflow (jsc#SLE-8464).
o net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq
(git-fixes).
o net/mlx5e: Fix configuration of XPS cpumasks and netdev queues in corner
cases (git-fixes).
o net/mlx5e: Fix endianness handling in pedit mask (git-fixes).
o net/mlx5e: Fix error path of device attach (git-fixes).
o net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
o net/mlx5e: Fix two double free cases (git-fixes).
o net/mlx5e: Fix VLAN cleanup flow (git-fixes).
o net/mlx5e: Fix VLAN create flow (git-fixes).
o net/mlx5e: Get the latest values from counters in switchdev mode
(git-fixes).
o net/mlx5e: IPoIB, Drop multicast packets that this interface sent
(git-fixes).
o net/mlx5e: kTLS, Fix wrong value in record tracker enum (git-fixes).
o net/mlx5e: Reduce tc unsupported key print level (git-fixes).
o net/mlx5e: Rename hw_modify to preactivate (git-fixes).
o net/mlx5e: Set of completion request bit should not clear other adjacent
bits (git-fixes).
o net/mlx5: E-switch, Destroy TSAR after reload interface (git-fixes).
o net/mlx5: E-Switch, Hold mutex when querying drop counter in legacy mode
(git-fixes).
o net/mlx5: E-Switch, Use vport metadata matching by default (git-fixes).
o net/mlx5: E-Switch, Use vport metadata matching only when mandatory
(git-fixes).
o net/mlx5e: Use preactivate hook to set the indirection table (git-fixes).
o net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
o net/mlx5: Fix a bug of using ptp channel index as pin index (git-fixes).
o net/mlx5: Fix deletion of duplicate rules (git-fixes).
o net/mlx5: Fix failing fw tracer allocation on s390 (git-fixes).
o net/mlx5: Fix memory leak on flow table creation error flow (git-fixes).
o net/mlx5: Fix request_irqs error flow (git-fixes).
o net/mlx5: Fix wrong address reclaim when command interface is down
(git-fixes).
o net/mlx5: Query PPS pin operational status before registering it
(git-fixes).
o net/mlx5: Verify Hardware supports requested ptp function on a given pin
(git-fixes).
o net: moxa: Fix a potential double 'free_irq()' (git-fixes).
o net: mscc: ocelot: ANA_AUTOAGE_AGE_PERIOD holds a value in seconds, not ms
(git-fixes).
o net: mscc: ocelot: fix address ageing time (again) (git-fixes).
o net: mscc: ocelot: properly account for VLAN header length when setting MRU
(git-fixes).
o net: mvpp2: Add TCAM entry to drop flow control pause frames (git-fixes).
o net: mvpp2: disable force link UP during port init procedure (git-fixes).
o net: mvpp2: Fix error return code in mvpp2_open() (git-fixes).
o net: mvpp2: Fix GoP port 3 Networking Complex Control configurations
(git-fixes).
o net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
o net: mvpp2: fix pkt coalescing int-threshold configuration (git-fixes).
o net: mvpp2: prs: fix PPPoE with ipv6 packet parse (git-fixes).
o net: mvpp2: Remove Pause and Asym_Pause support (git-fixes).
o net: mvpp2: TCAM entry enable should be written after SRAM data
(git-fixes).
o net: netsec: Correct dma sync for XDP_TX frames (git-fixes).
o net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
o net: octeon: mgmt: Repair filling of RX ring (git-fixes).
o net: phy: at803x: use operating parameters from PHY-specific status
(git-fixes).
o net: phy: extract link partner advertisement reading (git-fixes).
o net: phy: extract pause mode (git-fixes).
o net: phy: marvell10g: fix null pointer dereference (git-fixes).
o net: phy: marvell10g: fix temperature sensor on 2110 (git-fixes).
o net: phy: read MII_CTRL1000 in genphy_read_status only if needed
(git-fixes).
o net: qca_spi: fix receive buffer size check (git-fixes).
o net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
o net: qede: fix PTP initialization on recovery (git-fixes).
o net: qede: fix use-after-free on recovery and AER handling (git-fixes).
o net: qede: stop adding events on an already destroyed workqueue
(git-fixes).
o net: qed: fix async event callbacks unregistering (git-fixes).
o net: qed: fix excessive QM ILT lines consumption (git-fixes).
o net: qed: fix "maybe uninitialized" warning (git-fixes).
o net: qed: fix NVMe login fails over VFs (git-fixes).
o net: qed: RDMA personality shouldn't fail VF load (git-fixes).
o net: re-solve some conflicts after net -> net-next merge (bsc#1176855 ltc#
187293).
o net: rmnet: do not allow to add multiple bridge interfaces (git-fixes).
o net: rmnet: do not allow to change mux id if mux id is duplicated
(git-fixes).
o net: rmnet: fix bridge mode bugs (git-fixes).
o net: rmnet: fix lower interface leak (git-fixes).
o net: rmnet: fix NULL pointer dereference in rmnet_changelink() (git-fixes).
o net: rmnet: fix NULL pointer dereference in rmnet_newlink() (git-fixes).
o net: rmnet: fix packet forwarding in rmnet bridge mode (git-fixes).
o net: rmnet: fix suspicious RCU usage (git-fixes).
o net: rmnet: print error message when command fails (git-fixes).
o net: rmnet: remove rcu_read_lock in rmnet_force_unassociate_device()
(git-fixes).
o net: rmnet: use upper/lower device infrastructure (git-fixes).
o net, sctp, filter: remap copy_from_user failure error (bsc#1181637).
o net: smc91x: Fix possible memory leak in smc_drv_probe() (git-fixes).
o net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
o net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
o net: stmmac: Always arm TX Timer at end of transmission start (git-fixes).
o net: stmmac: Do not accept invalid MTU values (git-fixes).
o net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
o net: stmmac: Enable 16KB buffer size (git-fixes).
o net: stmmac: fix disabling flexible PPS output (git-fixes).
o net: stmmac: fix length of PTP clock's name string (git-fixes).
o net: stmmac: Fix the TX IOC in xmit path (git-fixes).
o net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
o net: stmmac: selftests: Flow Control test can also run with ASYM Pause
(git-fixes).
o net: stmmac: selftests: Needs to check the number of Multicast regs
(git-fixes).
o net: stmmac: xgmac: Clear previous RX buffer size (git-fixes).
o net: sun: fix missing release regions in cas_init_one() (git-fixes).
o net: team: fix memory leak in __team_options_register (git-fixes).
o net: thunderx: initialize VF's mailbox mutex before first usage
(git-fixes).
o net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family
(git-fixes).
o net: usb: qmi_wwan: Adding support for Cinterion MV31 (git-fixes).
o nvme-hwmon: rework to avoid devm allocation (bsc#1177326).
o nvme-multipath: Early exit if no path is available (bsc#1180964).
o nvme: re-read ANA log on NS CHANGED AEN (bsc#1179137).
o nvmet-tcp: Fix NULL dereference when a connect data comes in h2cdata pdu
(bsc#1182547).
o objtool: Do not fail on missing symbol table (bsc#1169514).
o perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (bsc#1180989).
o perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (bsc#
1180989).
o perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (bsc#1180989).
o perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (bsc#
1180989).
o perf/x86/intel/uncore: Generic support for the PCI sub driver (bsc#
1180989).
o perf/x86/intel/uncore: Store the logical die id instead of the physical die
id (bsc#1180989).
o perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info
(bsc#1180989).
o phy: cpcap-usb: Fix warning for missing regulator_disable (git-fixes).
o phy: rockchip-emmc: emmc_phy_init() always return 0 (git-fixes).
o platform/x86: hp-wmi: Disable tablet-mode reporting by default (git-fixes).
o platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron 7352
(git-fixes).
o platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix touchscreen on
Estar Beauty HD tablet (git-fixes).
o powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning (bsc#
1182571 ltc#191345).
o powerpc/boot: Delete unneeded .globl _zimage_start (bsc#1156395).
o powerpc: Fix alignment bug within the init sections (bsc#1065729).
o powerpc/fpu: Drop cvt_fd() and cvt_df() (bsc#1156395).
o powerpc/hvcall: add token and codes for H_VASI_SIGNAL (bsc#1181674 ltc#
189159).
o powerpc: kABI: add back suspend_disable_cpu in machdep_calls (bsc#1181674
ltc#189159).
o powerpc/machdep: remove suspend_disable_cpu() (bsc#1181674 ltc#189159).
o powerpc/mm/pkeys: Make pkey access check work on execute_only_key (bsc#
1181544 ltc#191080 git-fixes).
o powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477 ltc#175530).
o powerpc/numa: make vphn_enabled, prrn_enabled flags const (bsc#1181674 ltc#
189159).
o powerpc/numa: remove ability to enable topology updates (bsc#1181674 ltc#
189159).
o powerpc/numa: remove arch_update_cpu_topology (bsc#1181674 ltc#189159).
o powerpc/numa: Remove late request for home node associativity (bsc#1181674
ltc#189159).
o powerpc/numa: remove prrn_is_enabled() (bsc#1181674 ltc#189159).
o powerpc/numa: remove start/stop_topology_update() (bsc#1181674 ltc#189159).
o powerpc/numa: remove timed_topology_update() (bsc#1181674 ltc#189159).
o powerpc/numa: remove unreachable topology timer code (bsc#1181674 ltc#
189159).
o powerpc/numa: remove unreachable topology update code (bsc#1181674 ltc#
189159).
o powerpc/numa: remove unreachable topology workqueue code (bsc#1181674 ltc#
189159).
o powerpc/numa: remove vphn_enabled and prrn_enabled internal flags (bsc#
1181674 ltc#189159).
o powerpc/numa: stub out numa_update_cpu_topology() (bsc#1181674 ltc#189159).
o powerpc/perf: Exclude kernel samples while counting events in user space
(bsc#1065729).
o powerpc/perf/hv-24x7: Dont create sysfs event files for dummy events (bsc#
1182118 ltc#190624).
o powerpc/pkeys: Avoid using lockless page table walk (bsc#1181544 ltc#
191080).
o powerpc/pkeys: Check vma before returning key fault error to the user (bsc#
1181544 ltc#191080).
o powerpc/powernv/memtrace: Do not leak kernel memory to user space (bsc#
1156395).
o powerpc/powernv/memtrace: Fix crashing the kernel when enabling
concurrently (bsc#1156395).
o powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (bsc#
1156395).
o powerpc/prom: Fix "ibm,arch-vec-5-platform-support" scan (bsc#1182602 ltc#
190924).
o powerpc/pseries/dlpar: handle ibm, configure-connector delay status (bsc#
1181985 ltc#188074).
o powerpc/pseries: Do not enforce MSI affinity with kdump (bsc#1181655 ltc#
190855).
o powerpc/pseries/eeh: Make pseries_pcibios_bus_add_device() static (bsc#
1078720, git-fixes).
o powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc
#1182171 ltc#190900).
o powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops
(bsc#1181674 ltc#189159).
o powerpc/pseries/hibernation: pass stream id via function arguments (bsc#
1181674 ltc#189159).
o powerpc/pseries/hibernation: perform post-suspend fixups later (bsc#1181674
ltc#189159).
o powerpc/pseries/hibernation: remove prepare_late() callback (bsc#1181674
ltc#189159).
o powerpc/pseries/hibernation: remove pseries_suspend_cpu() (bsc#1181674 ltc#
189159).
o powerpc/pseries/hibernation: switch to rtas_ibm_suspend_me() (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: add missing break to default case (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: Add pr_debug() for device tree changes (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: do not error on absence of ibm, update-nodes (bsc
#1181674 ltc#189159).
o powerpc/pseries/mobility: error message improvements (bsc#1181674 ltc#
189159).
o powerpc/pseries/mobility: extract VASI session polling logic (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: refactor node lookup during DT update (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: retry partition suspend after error (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: Set pr_fmt() (bsc#1181674 ltc#189159).
o powerpc/pseries/mobility: signal suspend cancellation to platform (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: use rtas_activate_firmware() on resume (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: use stop_machine for join/suspend (bsc#1181674
ltc#189159).
o powerpc/pseries/ras: Make init_ras_hotplug_IRQ() static (bsc#1065729.
git-fixes).
o powerpc/pseries: remove dlpar_cpu_readd() (bsc#1181674 ltc#189159).
o powerpc/pseries: remove memory "re-add" implementation (bsc#1181674 ltc#
189159).
o powerpc/pseries: remove obsolete memory hotplug DT notifier code (bsc#
1181674 ltc#189159).
o powerpc/pseries: remove prrn special case from DT update path (bsc#1181674
ltc#189159).
o powerpc/rtas: add rtas_activate_firmware() (bsc#1181674 ltc#189159).
o powerpc/rtas: add rtas_ibm_suspend_me() (bsc#1181674 ltc#189159).
o powerpc/rtas: complete ibm,suspend-me status codes (bsc#1181674 ltc#
189159).
o powerpc/rtas: dispatch partition migration requests to pseries (bsc#1181674
ltc#189159).
o powerpc/rtasd: simplify handle_rtas_event(), emit message on events (bsc#
1181674 ltc#189159).
o powerpc/rtas: prevent suspend-related sys_rtas use on LE (bsc#1181674 ltc#
189159).
o powerpc/rtas: remove rtas_ibm_suspend_me_unsafe() (bsc#1181674 ltc#189159).
o powerpc/rtas: remove rtas_suspend_cpu() (bsc#1181674 ltc#189159).
o powerpc/rtas: remove unused rtas_suspend_last_cpu() (bsc#1181674 ltc#
189159).
o powerpc/rtas: remove unused rtas_suspend_me_data (bsc#1181674 ltc#189159).
o powerpc/rtas: rtas_ibm_suspend_me -> rtas_ibm_suspend_me_unsafe (bsc#
1181674 ltc#189159).
o power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (git-fixes).
o pseries/drmem: do not cache node id in drmem_lmb struct (bsc#1132477 ltc#
175530).
o pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc
#175530).
o qed: fix error return code in qed_iwarp_ll2_start() (git-fixes).
o qed: Fix race condition between scheduling and destroying the slowpath
workqueue (git-fixes).
o qed: Populate nvm-file attributes while reading nvm config partition
(git-fixes).
o qed: select CONFIG_CRC32 (git-fixes).
o qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
o quota: Fix memory leak when handling corrupted quota file (bsc#1182650).
o quota: Sanity-check quota file headers on load (bsc#1182461).
o r8169: fix resuming from suspend on RTL8105e if machine runs on battery
(git-fixes).
o r8169: fix WoL on shutdown if CONFIG_DEBUG_SHIRQ is set (git-fixes).
o rcu/nocb: Perform deferred wake up before last idle's (git-fixes)
o rcu/nocb: Trigger self-IPI on late deferred wake up before (git-fixes)
o rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers (git-fixes)
o RDMA/efa: Add EFA 0xefa1 PCI ID (bsc#1176248).
o RDMA/efa: Count admin commands errors (bsc#1176248).
o RDMA/efa: Count mmap failures (bsc#1176248).
o RDMA/efa: Do not delay freeing of DMA pages (bsc#1176248).
o RDMA/efa: Drop double zeroing for sg_init_table() (bsc#1176248).
o RDMA/efa: Expose maximum TX doorbell batch (bsc#1176248).
o RDMA/efa: Expose minimum SQ size (bsc#1176248).
o RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#
1176248).
o RDMA/efa: Properly document the interrupt mask register (bsc#1176248).
o RDMA/efa: Remove redundant udata check from alloc ucontext response (bsc#
1176248).
o RDMA/efa: Report create CQ error counter (bsc#1176248).
o RDMA/efa: Report host information to the device (bsc#1176248).
o RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#
1176248).
o RDMA/efa: Use in-kernel offsetofend() to check field availability (bsc#
1176248).
o RDMA/efa: User/kernel compatibility handshake mechanism (bsc#1176248).
o RDMA/efa: Use the correct current and new states in modify QP (git-fixes).
o regulator: axp20x: Fix reference cout leak (git-fixes).
o regulator: core: Avoid debugfs: Directory ... already present! error
(git-fixes).
o regulator: core: avoid regulator_resolve_supply() race condition
(git-fixes).
o regulator: Fix lockdep warning resolving supplies (git-fixes).
o regulator: s5m8767: Drop regulators OF node reference (git-fixes).
o regulator: s5m8767: Fix reference count leak (git-fixes).
o reiserfs: add check for an invalid ih_entry_count (bsc#1182462).
o Remove debug patch for boot failure (bsc#1182602 ltc#190924).
o reset: hisilicon: correct vendor prefix (git-fixes).
o Revert "ibmvnic: remove never executed if statement" (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o Revert "net: bcmgenet: remove unused function in bcmgenet.c" (git-fixes).
o Revert "platform/x86: ideapad-laptop: Switch touchpad attribute to be RO"
(git-fixes).
o Revert "RDMA/mlx5: Fix devlink deadlock on net namespace deletion" (jsc#
SLE-8464).
o rpm/kernel-subpackage-build: Workaround broken bot (https://github.com/
openSUSE/openSUSE-release-tools/issues/2439)
o rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#
1180058)
o rtc: s5m: select REGMAP_I2C (git-fixes).
o rxrpc: Fix memory leak in rxrpc_lookup_local (bsc#1154353 bnc#1151927
5.3.9).
o s390/vfio-ap: clean up vfio_ap resources when KVM pointer invalidated
(git-fixes).
o s390/vfio-ap: No need to disable IRQ after queue reset (git-fixes).
o sched: Reenable interrupts in do_sched_yield() (git-fixes)
o scsi: lpfc: Fix EEH encountering oops with NVMe traffic (bsc#1181958).
o sh_eth: check sh_eth_cpu_data::cexcr when dumping registers (git-fixes).
o sh_eth: check sh_eth_cpu_data::no_tx_cntrs when dumping registers
(git-fixes).
o sh_eth: check sh_eth_cpu_data::no_xdfar when dumping registers (git-fixes).
o smp: Add source and destination CPUs to __call_single_data (bsc#1180846).
o smsc95xx: avoid memory leak in smsc95xx_bind (git-fixes).
o smsc95xx: check return value of smsc95xx_reset (git-fixes).
o soc: aspeed: snoop: Add clock control logic (git-fixes).
o spi: atmel: Put allocated master before return (git-fixes).
o spi: pxa2xx: Fix the controller numbering for Wildcat Point (git-fixes).
o spi: spi-synquacer: fix set_cs handling (git-fixes).
o spi: stm32: properly handle 0 byte transfer (git-fixes).
o squashfs: add more sanity checks in id lookup (git-fixes bsc#1182266).
o squashfs: add more sanity checks in inode lookup (git-fixes bsc#1182267).
o squashfs: add more sanity checks in xattr id lookup (git-fixes bsc#
1182268).
o staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules
(git-fixes).
o target: disallow emulate_legacy_capacity with RBD object-map (bsc#1177109).
o team: set dev->needed_headroom in team_setup_by_port() (git-fixes).
o tpm: Remove tpm_dev_wq_lock (git-fixes).
o tpm_tis: Clean up locality release (git-fixes).
o tpm_tis: Fix check_locality for correct locality acquisition (git-fixes).
o tracing: Check length before giving out the filter buffer (git-fixes).
o tracing: Do not count ftrace events in top level enable output (git-fixes).
o tracing/kprobe: Fix to support kretprobe events on unloaded modules
(git-fixes).
o tracing/kprobes: Do the notrace functions check without kprobes on ftrace
(git-fixes).
o tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS
(git-fixes).
o ubifs: Fix error return code in ubifs_init_authentication() (bsc#1182459).
o ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans() (bsc#1182454).
o ubifs: prevent creating duplicate encrypted filenames (bsc#1182457).
o ubifs: ubifs_add_orphan: Fix a memory leak bug (bsc#1182456).
o ubifs: ubifs_jnl_write_inode: Fix a memory leak bug (bsc#1182455).
o ubifs: wbuf: Do not leak kernel memory to flash (bsc#1182458).
o Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#
1180846).
o Update config files: Set ledtrig-default-on as builtin (bsc#1182128)
o USB: dwc2: Abort transaction after errors with unknown reason (git-fixes).
o USB: dwc2: Fix endpoint direction check in ep_from_windex (git-fixes).
o USB: dwc2: Make "trimming xfer length" a debug message (git-fixes).
o USB: dwc3: fix clock issue during resume in OTG mode (git-fixes).
o USB: gadget: legacy: fix an error code in eth_bind() (git-fixes).
o USB: gadget: u_audio: Free requests only after callback (git-fixes).
o USB: musb: Fix runtime PM race in musb_queue_resume_work (git-fixes).
o USB: quirks: add quirk to start video capture on ELMO L-12F document camera
reliable (git-fixes).
o USB: quirks: sort quirk entries (git-fixes).
o USB: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() (git-fixes).
o USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
(git-fixes).
o USB: serial: cp210x: add pid/vid for WSDA-200-USB (git-fixes).
o USB: serial: mos7720: fix error code in mos7720_write() (git-fixes).
o USB: serial: mos7720: improve OOM-handling in read_mos_reg() (git-fixes).
o USB: serial: mos7840: fix error code in mos7840_write() (git-fixes).
o USB: serial: option: Adding support for Cinterion MV31 (git-fixes).
o USB: usblp: do not call usb_set_interface if there's a single alt
(git-fixes).
o veth: Adjust hard_start offset on redirect XDP frames (git-fixes).
o vfs: Convert squashfs to use the new mount API (git-fixes bsc#1182265).
o virtio_net: Fix error code in probe() (git-fixes).
o virtio_net: Fix recursive call to cpus_read_lock() (git-fixes).
o virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer
(git-fixes).
o virt: vbox: Do not use wait_event_interruptible when called from kernel
context (git-fixes).
o vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
o vxlan: fix memleak of fdb (git-fixes).
o wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
(git-fixes).
o writeback: Drop I_DIRTY_TIME_EXPIRE (bsc#1182460).
o x86/alternatives: Sync bp_patching update for avoiding NULL pointer
exception (bsc#1152489).
o x86/apic: Add extra serialization for non-serializing MSRs (bsc#1152489).
o x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#
1181259, jsc#ECO-3191).
o x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181259, jsc#
ECO-3191).
o x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259, jsc#ECO-3191).
o x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259 jsc#ECO-3191).
o x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181259, jsc#
ECO-3191).
o xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
o xfs: ensure inobt record walks always make forward progress (git-fixes bsc#
1182272).
o xfs: fix an ABBA deadlock in xfs_rename (git-fixes bsc#1182558).
o xfs: fix parent pointer scrubber bailing out on unallocated inodes
(git-fixes bsc#1182276).
o xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks
(git-fixes bsc#1182430).
o xfs: fix the minrecs logic when dealing with inode root child blocks
(git-fixes bsc#1182273).
o xfs: ratelimit xfs_discard_page messages (bsc#1182283).
o xfs: reduce quota reservation when doing a dax unwritten extent conversion
(git-fixes bsc#1182561).
o xfs: return corresponding errcode if xfs_initialize_perag() fail (git-fixes
bsc#1182275).
o xfs: scrub should mark a directory corrupt if any entries cannot be iget'd
(git-fixes bsc#1182278).
o xfs: strengthen rmap record flags checking (git-fixes bsc#1182271).
o xhci: fix bounce buffer usage for non-sg list case (git-fixes).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE Linux Enterprise Module for Public Cloud 15-SP2:
zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2021-738=1
Package List:
o SUSE Linux Enterprise Module for Public Cloud 15-SP2 (x86_64):
kernel-azure-5.3.18-18.38.1
kernel-azure-debuginfo-5.3.18-18.38.1
kernel-azure-debugsource-5.3.18-18.38.1
kernel-azure-devel-5.3.18-18.38.1
kernel-azure-devel-debuginfo-5.3.18-18.38.1
kernel-syms-azure-5.3.18-18.38.1
o SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch):
kernel-devel-azure-5.3.18-18.38.1
kernel-source-azure-5.3.18-18.38.1
References:
o https://www.suse.com/security/cve/CVE-2020-12362.html
o https://www.suse.com/security/cve/CVE-2020-12363.html
o https://www.suse.com/security/cve/CVE-2020-12364.html
o https://www.suse.com/security/cve/CVE-2020-12373.html
o https://www.suse.com/security/cve/CVE-2020-29368.html
o https://www.suse.com/security/cve/CVE-2020-29374.html
o https://www.suse.com/security/cve/CVE-2021-26930.html
o https://www.suse.com/security/cve/CVE-2021-26931.html
o https://www.suse.com/security/cve/CVE-2021-26932.html
o https://bugzilla.suse.com/1065600
o https://bugzilla.suse.com/1065729
o https://bugzilla.suse.com/1078720
o https://bugzilla.suse.com/1081134
o https://bugzilla.suse.com/1084610
o https://bugzilla.suse.com/1132477
o https://bugzilla.suse.com/1151927
o https://bugzilla.suse.com/1152472
o https://bugzilla.suse.com/1152489
o https://bugzilla.suse.com/1154353
o https://bugzilla.suse.com/1155518
o https://bugzilla.suse.com/1156395
o https://bugzilla.suse.com/1163776
o https://bugzilla.suse.com/1169514
o https://bugzilla.suse.com/1170442
o https://bugzilla.suse.com/1176248
o https://bugzilla.suse.com/1176855
o https://bugzilla.suse.com/1177109
o https://bugzilla.suse.com/1177326
o https://bugzilla.suse.com/1177440
o https://bugzilla.suse.com/1177529
o https://bugzilla.suse.com/1178142
o https://bugzilla.suse.com/1178995
o https://bugzilla.suse.com/1179082
o https://bugzilla.suse.com/1179137
o https://bugzilla.suse.com/1179243
o https://bugzilla.suse.com/1179428
o https://bugzilla.suse.com/1179660
o https://bugzilla.suse.com/1179929
o https://bugzilla.suse.com/1180058
o https://bugzilla.suse.com/1180846
o https://bugzilla.suse.com/1180964
o https://bugzilla.suse.com/1180989
o https://bugzilla.suse.com/1181133
o https://bugzilla.suse.com/1181259
o https://bugzilla.suse.com/1181544
o https://bugzilla.suse.com/1181574
o https://bugzilla.suse.com/1181637
o https://bugzilla.suse.com/1181655
o https://bugzilla.suse.com/1181671
o https://bugzilla.suse.com/1181674
o https://bugzilla.suse.com/1181710
o https://bugzilla.suse.com/1181720
o https://bugzilla.suse.com/1181735
o https://bugzilla.suse.com/1181736
o https://bugzilla.suse.com/1181738
o https://bugzilla.suse.com/1181747
o https://bugzilla.suse.com/1181753
o https://bugzilla.suse.com/1181818
o https://bugzilla.suse.com/1181843
o https://bugzilla.suse.com/1181854
o https://bugzilla.suse.com/1181896
o https://bugzilla.suse.com/1181958
o https://bugzilla.suse.com/1181960
o https://bugzilla.suse.com/1181985
o https://bugzilla.suse.com/1182047
o https://bugzilla.suse.com/1182118
o https://bugzilla.suse.com/1182128
o https://bugzilla.suse.com/1182140
o https://bugzilla.suse.com/1182171
o https://bugzilla.suse.com/1182175
o https://bugzilla.suse.com/1182259
o https://bugzilla.suse.com/1182265
o https://bugzilla.suse.com/1182266
o https://bugzilla.suse.com/1182267
o https://bugzilla.suse.com/1182268
o https://bugzilla.suse.com/1182271
o https://bugzilla.suse.com/1182272
o https://bugzilla.suse.com/1182273
o https://bugzilla.suse.com/1182275
o https://bugzilla.suse.com/1182276
o https://bugzilla.suse.com/1182278
o https://bugzilla.suse.com/1182283
o https://bugzilla.suse.com/1182374
o https://bugzilla.suse.com/1182380
o https://bugzilla.suse.com/1182381
o https://bugzilla.suse.com/1182406
o https://bugzilla.suse.com/1182430
o https://bugzilla.suse.com/1182439
o https://bugzilla.suse.com/1182441
o https://bugzilla.suse.com/1182442
o https://bugzilla.suse.com/1182443
o https://bugzilla.suse.com/1182444
o https://bugzilla.suse.com/1182445
o https://bugzilla.suse.com/1182446
o https://bugzilla.suse.com/1182447
o https://bugzilla.suse.com/1182449
o https://bugzilla.suse.com/1182454
o https://bugzilla.suse.com/1182455
o https://bugzilla.suse.com/1182456
o https://bugzilla.suse.com/1182457
o https://bugzilla.suse.com/1182458
o https://bugzilla.suse.com/1182459
o https://bugzilla.suse.com/1182460
o https://bugzilla.suse.com/1182461
o https://bugzilla.suse.com/1182462
o https://bugzilla.suse.com/1182463
o https://bugzilla.suse.com/1182464
o https://bugzilla.suse.com/1182465
o https://bugzilla.suse.com/1182466
o https://bugzilla.suse.com/1182485
o https://bugzilla.suse.com/1182489
o https://bugzilla.suse.com/1182490
o https://bugzilla.suse.com/1182547
o https://bugzilla.suse.com/1182558
o https://bugzilla.suse.com/1182560
o https://bugzilla.suse.com/1182561
o https://bugzilla.suse.com/1182571
o https://bugzilla.suse.com/1182599
o https://bugzilla.suse.com/1182602
o https://bugzilla.suse.com/1182626
o https://bugzilla.suse.com/1182650
o https://bugzilla.suse.com/1182672
o https://bugzilla.suse.com/1182676
o https://bugzilla.suse.com/1182683
o https://bugzilla.suse.com/1182684
o https://bugzilla.suse.com/1182686
o https://bugzilla.suse.com/1182770
o https://bugzilla.suse.com/1182798
o https://bugzilla.suse.com/1182800
o https://bugzilla.suse.com/1182801
o https://bugzilla.suse.com/1182854
o https://bugzilla.suse.com/1182856
- --------------------------------------------------------------------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0735-1
Rating: important
References: #1065600 #1065729 #1078720 #1081134 #1084610 #1132477
#1151927 #1152472 #1152489 #1154353 #1155518 #1156395
#1163776 #1169514 #1170442 #1176248 #1176855 #1177109
#1177326 #1177440 #1177529 #1178142 #1179082 #1179137
#1179243 #1179428 #1179660 #1179929 #1180058 #1180846
#1180989 #1181133 #1181259 #1181574 #1181637 #1181655
#1181671 #1181674 #1181710 #1181720 #1181735 #1181736
#1181738 #1181747 #1181753 #1181818 #1181843 #1181854
#1181896 #1181958 #1181960 #1181985 #1182047 #1182118
#1182128 #1182140 #1182171 #1182175 #1182259 #1182265
#1182266 #1182267 #1182268 #1182271 #1182272 #1182273
#1182275 #1182276 #1182278 #1182283 #1182374 #1182380
#1182381 #1182406 #1182430 #1182439 #1182441 #1182442
#1182443 #1182444 #1182445 #1182446 #1182447 #1182449
#1182454 #1182455 #1182456 #1182457 #1182458 #1182459
#1182460 #1182461 #1182462 #1182463 #1182464 #1182465
#1182466 #1182485 #1182489 #1182490 #1182547 #1182558
#1182560 #1182561 #1182571 #1182599 #1182602 #1182626
#1182650 #1182672 #1182676 #1182683 #1182684 #1182686
#1182770 #1182798 #1182800 #1182801 #1182854 #1182856
#1183022
Cross-References: CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-12373
CVE-2020-29368 CVE-2020-29374 CVE-2021-26930 CVE-2021-26931
CVE-2021-26932
Affected Products:
SUSE Linux Enterprise Module for Realtime 15-SP2
______________________________________________________________________________
An update that solves 9 vulnerabilities and has 112 fixes is now available.
Description:
The SUSE Linux Enterprise 15 SP2 kernel RT was updated to receive various
security and bugfixes.
The following security bugs were fixed:
o CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping
(XSA-365 bsc#1181843).
o CVE-2021-26931: Fixed an issue where Linux kernel was treating grant
mapping errors as bugs (XSA-362 bsc#1181753).
o CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping
(XSA-361 bsc#1181747). by remote attackers to read or write files via
directory traversal in an XCOPY request (bsc#178372).
o CVE-2020-12362: Fixed an integer overflow in the firmware which may have
allowed a privileged user to potentially enable an escalation of privilege
via local access (bsc#1181720).
o CVE-2020-12363: Fixed an improper input validation which may have allowed a
privileged user to potentially enable a denial of service via local access
(bsc#1181735).
o CVE-2020-12364: Fixed a null pointer reference which may have allowed a
privileged user to potentially enable a denial of service via local access
(bsc#1181736 ).
o CVE-2020-12373: Fixed an expired pointer dereference which may have allowed
a privileged user to potentially enable a denial of service via local
access (bsc#1181738).
o CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write
implementation which could have granted unintended write access because of
a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
o ACPICA: Fix exception code class checks (git-fixes).
o ACPI: configfs: add missing check after configfs_register_default_group()
(git-fixes).
o ACPI: property: Fix fwnode string properties matching (git-fixes).
o ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
o ACPI: property: Satisfy kernel doc validator (part 2) (git-fixes).
o ALSA: hda: Add another CometLake-H PCI ID (git-fixes).
o ALSA: hda/hdmi: Drop bogus check at closing a stream (git-fixes).
o ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).
o ALSA: pcm: Assure sync with the pending stop operation at suspend
(git-fixes).
o ALSA: pcm: Call sync_stop at disconnection (git-fixes).
o ALSA: pcm: Do not call sync_stop if it hasn't been stopped (git-fixes).
o ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 (git-fixes).
o ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all()
(git-fixes).
o ALSA: usb-audio: Do not avoid stopping the stream at disconnection
(git-fixes).
o ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).
o ALSA: usb-audio: Handle invalid running state at releasing EP (git-fixes).
o ALSA: usb-audio: More strict state change in EP (git-fixes).
o amba: Fix resource leak for drivers without .remove (git-fixes).
o arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)
o ASoC: cpcap: fix microphone timeslot mask (git-fixes).
o ASoC: cs42l56: fix up error handling in probe (git-fixes).
o ASoC: simple-card-utils: Fix device module clock (git-fixes).
o ASoC: SOF: debug: Fix a potential issue on string buffer termination
(git-fixes).
o ata: ahci_brcm: Add back regulators management (git-fixes).
o ata: sata_nv: Fix retrieving of active qcs (git-fixes).
o ath10k: Fix error handling in case of CE pipe init failure (git-fixes).
o ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).
o bcache: fix overflow in offset_to_stripe() (git-fixes).
o blk-mq: call commit_rqs while list empty but error happen (bsc#1182442).
o blk-mq: insert request not through ->queue_rq into sw/scheduler queue (bsc#
1182443).
o blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue (bsc#
1182444).
o block: fix inflight statistics of part0 (bsc#1182445).
o block: respect queue limit of max discard segment (bsc#1182441).
o block: virtio_blk: fix handling single range discard request (bsc#1182439).
o Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the
probe function (git-fixes).
o Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv (git-fixes).
o Bluetooth: drop HCI device reference before return (git-fixes).
o Bluetooth: Fix initializing response id after clearing struct (git-fixes).
o Bluetooth: hci_uart: Fix a race for write_work scheduling (git-fixes).
o Bluetooth: Put HCI device if inquiry procedure interrupts (git-fixes).
o bnxt_en: Fix accumulation of bp->net_stats_prev (git-fixes).
o bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
o bnxt_en: fix error return code in bnxt_init_one() (git-fixes).
o bnxt_en: Improve stats context resource accounting with RDMA driver loaded
(git-fixes).
o bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
o bnxt_en: Release PCI regions when DMA mask setup fails during probe
(git-fixes).
o bonding: Fix reference count leak in bond_sysfs_slave_add (git-fixes).
o bonding: set dev->needed_headroom in bond_setup_by_slave() (git-fixes).
o bonding: wait for sysfs kobject destruction before freeing struct slave
(git-fixes).
o bpf, cgroup: Fix optlen WARN_ON_ONCE toctou (bsc#1155518).
o bpf, cgroup: Fix problematic bounds check (bsc#1155518).
o btrfs: add assertion for empty list of transactions at late stage of umount
(bsc#1182626).
o btrfs: Cleanup try_flush_qgroup (bsc#1182047).
o btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: Fix race between extent freeing/allocation when using bitmaps (bsc#
1181574).
o btrfs: fix race between RO remount and the cleaner task (bsc#1182626).
o btrfs: fix transaction leak and crash after cleaning up orphans on RO mount
(bsc#1182626).
o btrfs: fix transaction leak and crash after RO remount caused by qgroup
rescan (bsc#1182626).
o btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata
(bsc#1182047).
o btrfs: lift read-write mount setup from mount and remount (bsc#1182626).
o btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: run delayed iputs when remounting RO to avoid leaking them (bsc#
1182626).
o btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#
1182047).
o btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
o caif: no need to check return value of debugfs_create functions
(git-fixes).
o ceph: fix flush_snap logic after putting caps (bsc#1182854).
o cgroup: Fix memory leak when parsing multiple source parameters (bsc#
1182683).
o cgroup: fix psi monitor for root cgroup (bsc#1182686).
o cgroup-v1: add disabled controller check in cgroup1_parse_param() (bsc#
1182684).
o chelsio/chtls: correct function return and return type (git-fixes).
o chelsio/chtls: correct netdevice for vlan interface (git-fixes).
o chelsio/chtls: fix a double free in chtls_setkey() (git-fixes).
o chelsio/chtls: fix always leaking ctrl_skb (git-fixes).
o chelsio/chtls: fix deadlock issue (git-fixes).
o chelsio/chtls: fix memory leaks caused by a race (git-fixes).
o chelsio/chtls: fix memory leaks in CPL handlers (git-fixes).
o chelsio/chtls: fix panic during unload reload chtls (git-fixes).
o chelsio/chtls: fix socket lock (git-fixes).
o chelsio/chtls: fix tls record info to user (git-fixes).
o Cherry-pick ibmvnic patches from SP3 (jsc#SLE-17268).
o chtls: Added a check to avoid NULL pointer dereference (git-fixes).
o chtls: Fix chtls resources release sequence (git-fixes).
o chtls: Fix hardware tid leak (git-fixes).
o chtls: Fix panic when route to peer not configured (git-fixes).
o chtls: Remove invalid set_tcb call (git-fixes).
o chtls: Replace skb_dequeue with skb_peek (git-fixes).
o cifs: check all path components in resolved dfs target (bsc#1181710).
o cifs: fix nodfs mount option (bsc#1181710).
o cifs: introduce helper for finding referral server (bsc#1181710).
o cifs: report error instead of invalid when revalidating a dentry fails (bsc
#1177440).
o cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
o cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code
(git-fixes).
o clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL
(git-fixes).
o clk: meson: clk-pll: make "ret" a signed integer (git-fixes).
o clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate()
(git-fixes).
o clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs (git-fixes).
o clk: sunxi-ng: h6: Fix CEC clock (git-fixes).
o clk: sunxi-ng: h6: Fix clock divider range on some clocks (git-fixes).
o clk: sunxi-ng: mp: fix parent rate change flag check (git-fixes).
o clocksource/drivers/ixp4xx: Select TIMER_OF when needed (git-fixes).
o cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove() (git-fixes).
o cpufreq: brcmstb-avs-cpufreq: Free resources in error path (git-fixes).
o cpuset: fix race between hotplug work and later CPU offline (bsc#1182676).
o crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()
(git-fixes).
o crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error)
(git-fixes).
o cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
o cxgb4: fix all-mask IP address comparison (git-fixes).
o cxgb4: fix checks for max queues to allocate (git-fixes).
o cxgb4: fix endian conversions for L4 ports in filters (git-fixes).
o cxgb4: fix set but unused variable when DCB is disabled (git-fixes).
o cxgb4: fix SGE queue dump destination buffer context (git-fixes).
o cxgb4: fix the panic caused by non smac rewrite (git-fixes).
o cxgb4: move DCB version extern to header file (git-fixes).
o cxgb4: move handling L2T ARP failures to caller (git-fixes).
o cxgb4: move PTP lock and unlock to caller in Tx path (git-fixes).
o cxgb4: parse TC-U32 key values and masks natively (git-fixes).
o cxgb4: remove cast when saving IPv4 partial checksum (git-fixes).
o cxgb4: set up filter action after rewrites (git-fixes).
o cxgb4: use correct type for all-mask IP address comparison (git-fixes).
o cxgb4: use unaligned conversion for fetching timestamp (git-fixes).
o dmaengine: fsldma: Fix a resource leak in an error handling path of the
probe function (git-fixes).
o dmaengine: fsldma: Fix a resource leak in the remove function (git-fixes).
o dmaengine: hsu: disable spurious interrupt (git-fixes).
o dmaengine: owl-dma: Fix a resource leak in the remove function (git-fixes).
o dm crypt: avoid truncating the logical block size (git-fixes).
o dm: fix bio splitting and its bio completion order for regular IO
(git-fixes).
o dm thin: fix use-after-free in metadata_pre_commit_callback (bsc#1177529).
o dm thin metadata: Avoid returning cmd->bm wild pointer on error (bsc#
1177529).
o dm thin metadata: fix lockdep complaint (bsc#1177529).
o dm thin metadata: Fix use-after-free in dm_bm_set_read_only (bsc#1177529).
o dm: use noio when sending kobject event (bsc#1177529).
o docs: filesystems: vfs: correct flag name (bsc#1182856).
o dpaa2-eth: fix return codes used in ndo_setup_tc (git-fixes).
o drivers: net: davinci_mdio: fix potential NULL dereference in
davinci_mdio_probe() (git-fixes).
o drm/amd/display: Change function decide_dp_link_settings to avoid infinite
looping (git-fixes).
o drm/amd/display: Decrement refcount of dc_sink before reassignment
(git-fixes).
o drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction
(git-fixes).
o drm/amd/display: Fix dc_sink kref count in emulated_link_detect
(git-fixes).
o drm/amd/display: Fix HDMI deep color output for DCE 6-11 (git-fixes).
o drm/amd/display: Free atomic state after drm_atomic_commit (git-fixes).
o drm/amd/display: Revert "Fix EDID parsing after resume from suspend"
(git-fixes).
o drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition
(git-fixes).
o drm/fb-helper: Add missed unlocks in setcmap_legacy() (git-fixes).
o drm/gma500: Fix error return code in psb_driver_load() (git-fixes).
o drm/meson: Unbind all connectors on module removal (bsc#1152472)
o drm/sun4i: dw-hdmi: always set clock rate (bsc#1152472)
o drm/sun4i: dw-hdmi: Fix max. frequency for H6 (bsc#1152472)
o drm/sun4i: Fix H6 HDMI PHY configuration (bsc#1152472)
o drm/sun4i: tcon: set sync polarity for tcon1 channel (bsc#1152472)
o drm/vc4: hvs: Fix buffer overflow with the dlist handling (bsc#1152489)
o Drop HID logitech patch that caused a regression (bsc#1182259)
o ext4: do not remount read-only with errors=continue on reboot (bsc#
1182464).
o ext4: fix a memory leak of ext4_free_data (bsc#1182447).
o ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1182449).
o ext4: fix deadlock with fs freezing and EA inodes (bsc#1182463).
o ext4: fix superblock checksum failure when setting password salt (bsc#
1182465).
o ext4: prevent creating duplicate encrypted filenames (bsc#1182446).
o fgraph: Initialize tracing_graph_pause at task creation (git-fixes).
o firmware_loader: align .builtin_fw to 8 (git-fixes).
o fscrypt: add fscrypt_is_nokey_name() (bsc#1182446).
o fscrypt: rename DCACHE_ENCRYPTED_NAME to DCACHE_NOKEY_NAME (bsc#1182446).
o fs: fix lazytime expiration handling in __writeback_single_inode() (bsc#
1182466).
o gma500: clean up error handling in init (git-fixes).
o gpio: pcf857x: Fix missing first interrupt (git-fixes).
o HID: core: detect and skip invalid inputs to snto32() (git-fixes).
o HID: make arrays usage and value to be the same (git-fixes).
o HID: wacom: Ignore attempts to overwrite the touch_max value from HID
(git-fixes).
o hwrng: timeriomem - Fix cooldown period calculation (git-fixes).
o i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (git-fixes).
o i2c: iproc: handle only slave interrupts which are enabled (git-fixes).
o i2c: mediatek: Move suspend and resume handling to NOIRQ phase (git-fixes).
o i2c: stm32f7: fix configuration of the digital filter (git-fixes).
o i3c: master: dw: Drop redundant disec call (git-fixes).
o i40e: acquire VSI pointer only after VF is initialized (jsc#SLE-8025).
o i40e: avoid premature Rx buffer reuse (git-fixes).
o i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (git-fixes).
o i40e: Fix MAC address setting for a VF via Host/VM (git-fixes).
o i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
o i40e: Revert "i40e: do not report link up for a VF who hasn't enabled
queues" (jsc#SLE-8025).
o iavf: fix double-release of rtnl_lock (git-fixes).
o iavf: fix error return code in iavf_init_get_resources() (git-fixes).
o iavf: fix speed reporting over virtchnl (git-fixes).
o iavf: Fix updating statistics (git-fixes).
o ibmvnic: add memory barrier to protect long term buffer (bsc#1182485 ltc#
191591).
o ibmvnic: change IBMVNIC_MAX_IND_DESCS to 16 (bsc#1182485 ltc#191591).
o ibmvnic: Clean up TX code and TX buffer data structure (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#
190997).
o ibmvnic: compare adapter->init_done_rc with more readable ibmvnic_rc_codes
(jsc#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Correctly re-enable interrupts in NAPI polling routine (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: create send_control_ip_offload (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: create send_query_ip_offload (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: device remove has higher precedence over reset (bsc#1065729).
o ibmvnic: Do not replenish RX buffers after every polling loop (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Ensure that CRQ entry read are correctly ordered (bsc#1182485 ltc#
191591).
o ibmvnic: Ensure that device queue memory is cache-line aligned (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Ensure that SCRQ entry reads are correctly ordered (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
o ibmvnic: fix login buffer memory leak (bsc#1081134 ltc#164631).
o ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: fix rx buffer tracking and index management in replenish_rx_pool
partial success (bsc#1179929 ltc#189960).
o ibmvnic: Fix TX completion error handling (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: Fix use-after-free of VNIC login response buffer (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: handle inconsistent login with reset (jsc#SLE-17043 bsc#1179243
ltc#189290).
o ibmvnic: Harden device Command Response Queue handshake (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: improve ibmvnic_init and ibmvnic_reset_init (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: Introduce batched RX buffer descriptor transmission (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: Introduce indirect subordinate Command Response Queue buffer (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Introduce xmit_more support using batched subCRQ hcalls (jsc#
SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: merge ibmvnic_reset_init and ibmvnic_init (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: no reset timeout for 5 seconds after reset (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: reduce wait for completion time (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: remove never executed if statement (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: Remove send_subcrq function (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: rename ibmvnic_send_req_caps to send_request_cap (jsc#SLE-17043
bsc#1179243 ltc#189290).
o ibmvnic: rename send_cap_queries to send_query_cap (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: rename send_map_query to send_query_map (jsc#SLE-17043 bsc#1179243
ltc#189290).
o ibmvnic: send_login should check for crq errors (jsc#SLE-17043 bsc#1179243
ltc#189290).
o ibmvnic: serialize access to work queue on remove (bsc#1065729).
o ibmvnic: Set to CLOSED state even on error (bsc#1084610 ltc#165122
git-fixes).
o ibmvnic: skip send_request_unmap for timeout reset (bsc#1182485 ltc#
191591).
o ibmvnic: skip tx timeout reset while in resetting (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o ibmvnic: stop free_all_rwi on failed reset (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o ibmvnic: store RX and TX subCRQ handle array in ibmvnic_adapter struct (jsc
#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: track pending login (jsc#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: update MAINTAINERS (jsc#SLE-17043 bsc#1179243 ltc#189290).
o ibmvnic: Use netdev_alloc_skb instead of alloc_skb to replenish RX buffers
(jsc#SLE-17043 bsc#1179243 ltc#189290).
o ice: Do not allow more channels than LAN MSI-X available (jsc#SLE-7926).
o ice: Fix MSI-X vector fallback logic (jsc#SLE-7926).
o igc: check return value of ret_val in igc_config_fc_after_link_up
(git-fixes).
o igc: fix link speed advertising (git-fixes).
o igc: Fix returning wrong statistics (git-fixes).
o igc: Report speed and duplex as unknown when device is runtime suspended
(git-fixes).
o igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr
(git-fixes).
o include/linux/memremap.h: remove stale comments (git-fixes).
o Input: elo - fix an error code in elo_connect() (git-fixes).
o Input: i8042 - unbreak Pegatron C15B (git-fixes).
o Input: joydev - prevent potential read overflow in ioctl (git-fixes).
o Input: sur40 - fix an error code in sur40_probe() (git-fixes).
o Input: xpad - sync supported devices with fork on GitHub (git-fixes).
o iwlwifi: mvm: do not send RFH_QUEUE_CONFIG_CMD with no queues (git-fixes).
o iwlwifi: mvm: guard against device removal in reprobe (git-fixes).
o iwlwifi: mvm: invalidate IDs of internal stations at mvm start (git-fixes).
o iwlwifi: mvm: skip power command when unbinding vif during CSA (git-fixes).
o iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() (git-fixes).
o iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap (git-fixes).
o iwlwifi: pcie: fix context info memory leak (git-fixes).
o ixgbe: avoid premature Rx buffer reuse (git-fixes).
o ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (git-fixes).
o kABI: Fix kABI after modifying struct __call_single_data (bsc#1180846).
o kABI: Fix kABI for extended APIC-ID support (bsc#1181259, jsc#ECO-3191).
o kernel-binary.spec: Add back initrd and image symlink ghosts to filelist
(bsc#1182140). Fixes: 76a9256314c3 ("rpm/kernel-{source,binary}.spec: do
not include ghost symlinks (boo#1179082).")
o kernel/smp: add boot parameter for controlling CSD lock debugging (bsc#
1180846).
o kernel/smp: add more data to CSD lock debugging (bsc#1180846).
o kernel/smp: prepare more CSD lock debugging (bsc#1180846).
o kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
o KVM: arm64: Assume write fault on S1PTW permission fault on instruction
fetch (bsc#1181818).
o KVM: arm64: Remove S1PTW check from kvm_vcpu_dabt_iswrite() (bsc#1181818).
o KVM: nVMX: do not clear mtf_pending when nested events are blocked (bsc#
1182489).
o KVM: nVMX: Emulate MTF when performing instruction emulation (bsc#1182380).
o KVM: nVMX: Handle pending #DB when injecting INIT VM-exit. Pulling in as a
dependency of: "KVM: nVMX: Emulate MTF when performing instruction
emulation" (bsc#1182380).
o KVM: tracing: Fix unmatched kvm_entry and kvm_exit events (bsc#1182770).
o KVM: VMX: Condition ENCLS-exiting enabling on CPU support for SGX1 (bsc#
1182798).
o KVM: x86: Allocate new rmap and large page tracking when moving memslot
(bsc#1182800).
o KVM: x86: allow KVM_STATE_NESTED_MTF_PENDING in kvm_state flags (bsc#
1182490).
o KVM: x86: clear stale x86_emulate_ctxt->intercept value (bsc#1182381).
o KVM: x86: do not notify userspace IOAPIC on edge-triggered interrupt EOI
(bsc#1182374).
o KVM: x86: Gracefully handle __vmalloc() failure during VM allocation (bsc#
1182801).
o KVM: x86: remove stale comment from struct x86_emulate_ctxt (bsc#1182406).
o libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#
1170442).
o lib/vsprintf: no_hash_pointers prints all addresses as unhashed (bsc#
1182599).
o linux/clk.h: use correct kernel-doc notation for 2 functions (git-fixes).
o mac80211: 160MHz with extended NSS BW in CSA (git-fixes).
o mac80211: fix fast-rx encryption check (git-fixes).
o mac80211: fix potential overflow when multiplying to u32 integers
(git-fixes).
o macros.kernel-source: Use spec_install_pre for certificate installation
(boo#1182672). Since rpm 4.16 files installed during build phase are lost.
o MAINTAINERS: remove John Allen from ibmvnic (jsc#SLE-17043 bsc#1179243 ltc#
189290).
o matroxfb: avoid -Warray-bounds warning (bsc#1152472)
o media: aspeed: fix error return code in aspeed_video_setup_video()
(git-fixes).
o media: camss: missing error code in msm_video_register() (git-fixes).
o media: cx25821: Fix a bug when reallocating some dma memory (git-fixes).
o media: em28xx: Fix use-after-free in em28xx_alloc_urbs (git-fixes).
o media: i2c: ov5670: Fix PIXEL_RATE minimum value (git-fixes).
o media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt()
(git-fixes).
o media: lmedm04: Fix misuse of comma (git-fixes).
o media: media/pci: Fix memleak in empress_init (git-fixes).
o media: mt9v111: Remove unneeded device-managed puts (git-fixes).
o media: pwc: Use correct device for DMA (bsc#1181133).
o media: pxa_camera: declare variable when DEBUG is defined (git-fixes).
o media: qm1d1c0042: fix error return code in qm1d1c0042_init() (git-fixes).
o media: software_node: Fix refcounts in software_node_get_next_child()
(git-fixes).
o media: tm6000: Fix memleak in tm6000_start_stream (git-fixes).
o media: vsp1: Fix an error handling path in the probe function (git-fixes).
o mei: hbm: call mei_set_devstate() on hbm stop response (git-fixes).
o memory: ti-aemif: Drop child node when jumping out loop (git-fixes).
o mfd: bd9571mwv: Use devm_mfd_add_devices() (git-fixes).
o mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
(git-fixes).
o misc: eeprom_93xx46: Add module alias to avoid breaking support for non
device tree users (git-fixes).
o misc: eeprom_93xx46: Fix module alias to enable module autoprobe
(git-fixes).
o mlxsw: core: Add validation of transceiver temperature thresholds
(git-fixes).
o mlxsw: core: Fix memory leak on module removal (git-fixes).
o mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
o mlxsw: core: Free EMAD transactions using kfree_rcu() (git-fixes).
o mlxsw: core: Increase critical threshold for ASIC thermal zone (git-fixes).
o mlxsw: core: Increase scope of RCU read-side critical section (git-fixes).
o mlxsw: core: Use variable timeout for EMAD retries (git-fixes).
o mlxsw: spectrum_acl: Fix mlxsw_sp_acl_tcam_group_add()'s error path
(git-fixes).
o mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case
reload fails (git-fixes).
o mmc: core: Limit retries when analyse of SDIO tuples fails (git-fixes).
o mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to
128-bytes (git-fixes).
o mmc: sdhci-sprd: Fix some resource leaks in the remove function
(git-fixes).
o mmc: usdhi6rol0: Fix a resource leak in the error handling path of the
probe (git-fixes).
o mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support
is disabled (bsc#1181896 ltc#191273).
o mm: proc: Invalidate TLB after clearing soft-dirty page state (bsc#1163776
ltc#183929 git-fixes).
o mm: thp: kABI: move the added flag to the end of enum (bsc#1181896 ltc#
191273).
o net: ag71xx: add missed clk_disable_unprepare in error path of probe
(git-fixes).
o net: axienet: Fix error return code in axienet_probe() (git-fixes).
o net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
o net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
o net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
o net: bcmgenet: set Rx mode before starting netif (git-fixes).
o net: bcmgenet: use hardware padding of runt frames (git-fixes).
o net: broadcom CNIC: requires MMU (git-fixes).
o net: caif: Fix debugfs on 64-bit platforms (git-fixes).
o net/cxgb4: Check the return from t4_query_params properly (git-fixes).
o net: cxgb4: fix return error value in t4_prep_fw (git-fixes).
o net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
o net: dsa: lantiq_gswip: fix and improve the unsupported interface error
(git-fixes).
o net: dsa: mt7530: Change the LINK bit to reflect the link status
(git-fixes).
o net: dsa: mt7530: set CPU port to fallback mode (git-fixes).
o net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
o net: ethernet: ave: Fix error returns in ave_init (git-fixes).
o net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it
anymore in mlx4_en_xmit() (git-fixes).
o net: ethernet: ti: ale: fix allmulti for nu type ale (git-fixes).
o net: ethernet: ti: ale: fix seeing unreg mcast packets with promisc and
allmulti disabled (git-fixes).
o net: ethernet: ti: ale: modify vlan/mdb api for switchdev (git-fixes).
o net: ethernet: ti: cpsw: allow untagged traffic on host port (git-fixes).
o net: ethernet: ti: fix some return value check of cpsw_ale_create()
(git-fixes).
o net: gemini: Fix missing clk_disable_unprepare() in error path of
gemini_ethernet_port_probe() (git-fixes).
o net: gro: do not keep too many GRO packets in napi->rx_list (bsc#1154353).
o net: hns3: add a check for queue_id in hclge_reset_vf_queue() (git-fixes).
o net: hns3: add a missing uninit debugfs when unload driver (git-fixes).
o net: hns3: add reset check for VF updating port based VLAN (git-fixes).
o net: hns3: clear port base VLAN when unload PF (git-fixes).
o net: hns3: fix aRFS FD rules leftover after add a user FD rule (git-fixes).
o net: hns3: fix a TX timeout issue (git-fixes).
o net: hns3: fix desc filling bug when skb is expanded or lineared
(git-fixes).
o net: hns3: fix for mishandle of asserting VF reset fail (git-fixes).
o net: hns3: fix for VLAN config when reset failed (git-fixes).
o net: hns3: fix RSS config lost after VF reset (git-fixes).
o net: hns3: fix set and get link ksettings issue (git-fixes).
o net: hns3: fix "tc qdisc del" failed issue (git-fixes).
o net: hns3: fix the number of queues actually used by ARQ (git-fixes).
o net: hns3: fix use-after-free when doing self test (git-fixes).
o net: hns3: fix VF VLAN table entries inconsistent issue (git-fixes).
o net: hns: fix return value check in __lb_other_process() (git-fixes).
o net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
o net: macb: fix call to pm_runtime in the suspend/resume functions
(git-fixes).
o net: macb: fix wakeup test in runtime suspend/resume routines (git-fixes).
o net: macb: mark device wake capable when "magic-packet" property present
(git-fixes).
o net/mlx4_core: fix a memory leak bug (git-fixes).
o net/mlx4_core: Fix init_hca fields offset (git-fixes).
o net/mlx4_en: Avoid scheduling restart task if it is already running (bsc#
1181854).
o net/mlx4_en: Handle TX error CQE (bsc#1181854).
o net/mlx5: Add handling of port type in rule deletion (git-fixes).
o net/mlx5: Annotate mutex destroy for root ns (git-fixes).
o net/mlx5: Clear LAG notifier pointer after unregister (git-fixes).
o net/mlx5: Disable QoS when min_rates on all VFs are zero (git-fixes).
o net/mlx5: Do not call timecounter cyc2time directly from 1PPS flow
(git-fixes).
o net/mlx5: Do not maintain a case of del_sw_func being null (git-fixes).
o net/mlx5e: Correctly handle changing the number of queues when the
interface is down (git-fixes).
o net/mlx5e: Do not trigger IRQ multiple times on XSK wakeup to avoid WQ
overruns (git-fixes).
o net/mlx5e: en_accel, Add missing net/geneve.h include (git-fixes).
o net/mlx5e: Encapsulate updating netdev queues into a function (git-fixes).
o net/mlx5e: E-switch, Fix rate calculation for overflow (jsc#SLE-8464).
o net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq
(git-fixes).
o net/mlx5e: Fix configuration of XPS cpumasks and netdev queues in corner
cases (git-fixes).
o net/mlx5e: Fix endianness handling in pedit mask (git-fixes).
o net/mlx5e: Fix error path of device attach (git-fixes).
o net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
o net/mlx5e: Fix two double free cases (git-fixes).
o net/mlx5e: Fix VLAN cleanup flow (git-fixes).
o net/mlx5e: Fix VLAN create flow (git-fixes).
o net/mlx5e: Get the latest values from counters in switchdev mode
(git-fixes).
o net/mlx5e: IPoIB, Drop multicast packets that this interface sent
(git-fixes).
o net/mlx5e: kTLS, Fix wrong value in record tracker enum (git-fixes).
o net/mlx5e: Reduce tc unsupported key print level (git-fixes).
o net/mlx5e: Rename hw_modify to preactivate (git-fixes).
o net/mlx5e: Set of completion request bit should not clear other adjacent
bits (git-fixes).
o net/mlx5: E-switch, Destroy TSAR after reload interface (git-fixes).
o net/mlx5: E-Switch, Hold mutex when querying drop counter in legacy mode
(git-fixes).
o net/mlx5: E-Switch, Use vport metadata matching by default (git-fixes).
o net/mlx5: E-Switch, Use vport metadata matching only when mandatory
(git-fixes).
o net/mlx5e: Use preactivate hook to set the indirection table (git-fixes).
o net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
o net/mlx5: Fix a bug of using ptp channel index as pin index (git-fixes).
o net/mlx5: Fix deletion of duplicate rules (git-fixes).
o net/mlx5: Fix failing fw tracer allocation on s390 (git-fixes).
o net/mlx5: Fix memory leak on flow table creation error flow (git-fixes).
o net/mlx5: Fix request_irqs error flow (git-fixes).
o net/mlx5: Fix wrong address reclaim when command interface is down
(git-fixes).
o net/mlx5: Query PPS pin operational status before registering it
(git-fixes).
o net/mlx5: Verify Hardware supports requested ptp function on a given pin
(git-fixes).
o net: moxa: Fix a potential double 'free_irq()' (git-fixes).
o net: mscc: ocelot: ANA_AUTOAGE_AGE_PERIOD holds a value in seconds, not ms
(git-fixes).
o net: mscc: ocelot: fix address ageing time (again) (git-fixes).
o net: mscc: ocelot: properly account for VLAN header length when setting MRU
(git-fixes).
o net: mvpp2: Add TCAM entry to drop flow control pause frames (git-fixes).
o net: mvpp2: disable force link UP during port init procedure (git-fixes).
o net: mvpp2: Fix error return code in mvpp2_open() (git-fixes).
o net: mvpp2: Fix GoP port 3 Networking Complex Control configurations
(git-fixes).
o net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
o net: mvpp2: fix pkt coalescing int-threshold configuration (git-fixes).
o net: mvpp2: prs: fix PPPoE with ipv6 packet parse (git-fixes).
o net: mvpp2: Remove Pause and Asym_Pause support (git-fixes).
o net: mvpp2: TCAM entry enable should be written after SRAM data
(git-fixes).
o net: netsec: Correct dma sync for XDP_TX frames (git-fixes).
o net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
o net: octeon: mgmt: Repair filling of RX ring (git-fixes).
o net: phy: at803x: use operating parameters from PHY-specific status
(git-fixes).
o net: phy: extract link partner advertisement reading (git-fixes).
o net: phy: extract pause mode (git-fixes).
o net: phy: marvell10g: fix null pointer dereference (git-fixes).
o net: phy: marvell10g: fix temperature sensor on 2110 (git-fixes).
o net: phy: read MII_CTRL1000 in genphy_read_status only if needed
(git-fixes).
o net: qca_spi: fix receive buffer size check (git-fixes).
o net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
o net: qede: fix PTP initialization on recovery (git-fixes).
o net: qede: fix use-after-free on recovery and AER handling (git-fixes).
o net: qede: stop adding events on an already destroyed workqueue
(git-fixes).
o net: qed: fix async event callbacks unregistering (git-fixes).
o net: qed: fix excessive QM ILT lines consumption (git-fixes).
o net: qed: fix "maybe uninitialized" warning (git-fixes).
o net: qed: fix NVMe login fails over VFs (git-fixes).
o net: qed: RDMA personality shouldn't fail VF load (git-fixes).
o net: re-solve some conflicts after net -> net-next merge (bsc#1176855 ltc#
187293).
o net: rmnet: do not allow to add multiple bridge interfaces (git-fixes).
o net: rmnet: do not allow to change mux id if mux id is duplicated
(git-fixes).
o net: rmnet: fix bridge mode bugs (git-fixes).
o net: rmnet: fix lower interface leak (git-fixes).
o net: rmnet: fix NULL pointer dereference in rmnet_changelink() (git-fixes).
o net: rmnet: fix NULL pointer dereference in rmnet_newlink() (git-fixes).
o net: rmnet: fix packet forwarding in rmnet bridge mode (git-fixes).
o net: rmnet: fix suspicious RCU usage (git-fixes).
o net: rmnet: print error message when command fails (git-fixes).
o net: rmnet: remove rcu_read_lock in rmnet_force_unassociate_device()
(git-fixes).
o net: rmnet: use upper/lower device infrastructure (git-fixes).
o net, sctp, filter: remap copy_from_user failure error (bsc#1181637).
o net: smc91x: Fix possible memory leak in smc_drv_probe() (git-fixes).
o net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
o net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
o net: stmmac: Always arm TX Timer at end of transmission start (git-fixes).
o net: stmmac: Do not accept invalid MTU values (git-fixes).
o net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
o net: stmmac: Enable 16KB buffer size (git-fixes).
o net: stmmac: fix disabling flexible PPS output (git-fixes).
o net: stmmac: fix length of PTP clock's name string (git-fixes).
o net: stmmac: Fix the TX IOC in xmit path (git-fixes).
o net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
o net: stmmac: selftests: Flow Control test can also run with ASYM Pause
(git-fixes).
o net: stmmac: selftests: Needs to check the number of Multicast regs
(git-fixes).
o net: stmmac: xgmac: Clear previous RX buffer size (git-fixes).
o net: sun: fix missing release regions in cas_init_one() (git-fixes).
o net: team: fix memory leak in __team_options_register (git-fixes).
o net: thunderx: initialize VF's mailbox mutex before first usage
(git-fixes).
o net: usb: qmi_wwan: Adding support for Cinterion MV31 (git-fixes).
o nvme-hwmon: rework to avoid devm allocation (bsc#1177326).
o nvme: re-read ANA log on NS CHANGED AEN (bsc#1179137).
o nvmet-tcp: Fix NULL dereference when a connect data comes in h2cdata pdu
(bsc#1182547).
o objtool: Do not fail on missing symbol table (bsc#1169514).
o perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (bsc#1180989).
o perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (bsc#
1180989).
o perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (bsc#1180989).
o perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (bsc#
1180989).
o perf/x86/intel/uncore: Generic support for the PCI sub driver (bsc#
1180989).
o perf/x86/intel/uncore: Store the logical die id instead of the physical die
id (bsc#1180989).
o perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info
(bsc#1180989).
o phy: cpcap-usb: Fix warning for missing regulator_disable (git-fixes).
o phy: rockchip-emmc: emmc_phy_init() always return 0 (git-fixes).
o platform/x86: hp-wmi: Disable tablet-mode reporting by default (git-fixes).
o platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron 7352
(git-fixes).
o platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix touchscreen on
Estar Beauty HD tablet (git-fixes).
o powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning (bsc#
1182571 ltc#191345).
o powerpc/boot: Delete unneeded .globl _zimage_start (bsc#1156395).
o powerpc: Fix alignment bug within the init sections (bsc#1065729).
o powerpc/fpu: Drop cvt_fd() and cvt_df() (bsc#1156395).
o powerpc/hvcall: add token and codes for H_VASI_SIGNAL (bsc#1181674 ltc#
189159).
o powerpc: kABI: add back suspend_disable_cpu in machdep_calls (bsc#1181674
ltc#189159).
o powerpc/machdep: remove suspend_disable_cpu() (bsc#1181674 ltc#189159).
o powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477 ltc#175530).
o powerpc/numa: make vphn_enabled, prrn_enabled flags const (bsc#1181674 ltc#
189159).
o powerpc/numa: remove ability to enable topology updates (bsc#1181674 ltc#
189159).
o powerpc/numa: remove arch_update_cpu_topology (bsc#1181674 ltc#189159).
o powerpc/numa: Remove late request for home node associativity (bsc#1181674
ltc#189159).
o powerpc/numa: remove prrn_is_enabled() (bsc#1181674 ltc#189159).
o powerpc/numa: remove start/stop_topology_update() (bsc#1181674 ltc#189159).
o powerpc/numa: remove timed_topology_update() (bsc#1181674 ltc#189159).
o powerpc/numa: remove unreachable topology timer code (bsc#1181674 ltc#
189159).
o powerpc/numa: remove unreachable topology update code (bsc#1181674 ltc#
189159).
o powerpc/numa: remove unreachable topology workqueue code (bsc#1181674 ltc#
189159).
o powerpc/numa: remove vphn_enabled and prrn_enabled internal flags (bsc#
1181674 ltc#189159).
o powerpc/numa: stub out numa_update_cpu_topology() (bsc#1181674 ltc#189159).
o powerpc/perf: Exclude kernel samples while counting events in user space
(bsc#1065729).
o powerpc/perf/hv-24x7: Dont create sysfs event files for dummy events (bsc#
1182118 ltc#190624).
o powerpc/powernv/memtrace: Do not leak kernel memory to user space (bsc#
1156395).
o powerpc/powernv/memtrace: Fix crashing the kernel when enabling
concurrently (bsc#1156395).
o powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (bsc#
1156395).
o powerpc/prom: Fix "ibm,arch-vec-5-platform-support" scan (bsc#1182602 ltc#
190924).
o powerpc/pseries/dlpar: handle ibm, configure-connector delay status (bsc#
1181985 ltc#188074).
o powerpc/pseries: Do not enforce MSI affinity with kdump (bsc#1181655 ltc#
190855).
o powerpc/pseries/eeh: Make pseries_pcibios_bus_add_device() static (bsc#
1078720, git-fixes).
o powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc
#1182171 ltc#190900).
o powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops
(bsc#1181674 ltc#189159).
o powerpc/pseries/hibernation: pass stream id via function arguments (bsc#
1181674 ltc#189159).
o powerpc/pseries/hibernation: perform post-suspend fixups later (bsc#1181674
ltc#189159).
o powerpc/pseries/hibernation: remove prepare_late() callback (bsc#1181674
ltc#189159).
o powerpc/pseries/hibernation: remove pseries_suspend_cpu() (bsc#1181674 ltc#
189159).
o powerpc/pseries/hibernation: switch to rtas_ibm_suspend_me() (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: add missing break to default case (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: Add pr_debug() for device tree changes (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: do not error on absence of ibm, update-nodes (bsc
#1181674 ltc#189159).
o powerpc/pseries/mobility: error message improvements (bsc#1181674 ltc#
189159).
o powerpc/pseries/mobility: extract VASI session polling logic (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: refactor node lookup during DT update (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: retry partition suspend after error (bsc#1181674
ltc#189159).
o powerpc/pseries/mobility: Set pr_fmt() (bsc#1181674 ltc#189159).
o powerpc/pseries/mobility: signal suspend cancellation to platform (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: use rtas_activate_firmware() on resume (bsc#
1181674 ltc#189159).
o powerpc/pseries/mobility: use stop_machine for join/suspend (bsc#1181674
ltc#189159).
o powerpc/pseries/ras: Make init_ras_hotplug_IRQ() static (bsc#1065729.
git-fixes).
o powerpc/pseries: remove dlpar_cpu_readd() (bsc#1181674 ltc#189159).
o powerpc/pseries: remove memory "re-add" implementation (bsc#1181674 ltc#
189159).
o powerpc/pseries: remove obsolete memory hotplug DT notifier code (bsc#
1181674 ltc#189159).
o powerpc/pseries: remove prrn special case from DT update path (bsc#1181674
ltc#189159).
o powerpc/rtas: add rtas_activate_firmware() (bsc#1181674 ltc#189159).
o powerpc/rtas: add rtas_ibm_suspend_me() (bsc#1181674 ltc#189159).
o powerpc/rtas: complete ibm,suspend-me status codes (bsc#1181674 ltc#
189159).
o powerpc/rtas: dispatch partition migration requests to pseries (bsc#1181674
ltc#189159).
o powerpc/rtasd: simplify handle_rtas_event(), emit message on events (bsc#
1181674 ltc#189159).
o powerpc/rtas: prevent suspend-related sys_rtas use on LE (bsc#1181674 ltc#
189159).
o powerpc/rtas: remove rtas_ibm_suspend_me_unsafe() (bsc#1181674 ltc#189159).
o powerpc/rtas: remove rtas_suspend_cpu() (bsc#1181674 ltc#189159).
o powerpc/rtas: remove unused rtas_suspend_last_cpu() (bsc#1181674 ltc#
189159).
o powerpc/rtas: remove unused rtas_suspend_me_data (bsc#1181674 ltc#189159).
o powerpc/rtas: rtas_ibm_suspend_me -> rtas_ibm_suspend_me_unsafe (bsc#
1181674 ltc#189159).
o power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (git-fixes).
o pseries/drmem: do not cache node id in drmem_lmb struct (bsc#1132477 ltc#
175530).
o pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc
#175530).
o qed: fix error return code in qed_iwarp_ll2_start() (git-fixes).
o qed: Fix race condition between scheduling and destroying the slowpath
workqueue (git-fixes).
o qed: Populate nvm-file attributes while reading nvm config partition
(git-fixes).
o qed: select CONFIG_CRC32 (git-fixes).
o qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
o quota: Fix memory leak when handling corrupted quota file (bsc#1182650).
o quota: Sanity-check quota file headers on load (bsc#1182461).
o r8169: fix resuming from suspend on RTL8105e if machine runs on battery
(git-fixes).
o rcu/nocb: Perform deferred wake up before last idle's (git-fixes)
o rcu/nocb: Trigger self-IPI on late deferred wake up before (git-fixes)
o rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers (git-fixes)
o RDMA/efa: Add EFA 0xefa1 PCI ID (bsc#1176248).
o RDMA/efa: Count admin commands errors (bsc#1176248).
o RDMA/efa: Count mmap failures (bsc#1176248).
o RDMA/efa: Do not delay freeing of DMA pages (bsc#1176248).
o RDMA/efa: Drop double zeroing for sg_init_table() (bsc#1176248).
o RDMA/efa: Expose maximum TX doorbell batch (bsc#1176248).
o RDMA/efa: Expose minimum SQ size (bsc#1176248).
o RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#
1176248).
o RDMA/efa: Properly document the interrupt mask register (bsc#1176248).
o RDMA/efa: Remove redundant udata check from alloc ucontext response (bsc#
1176248).
o RDMA/efa: Report create CQ error counter (bsc#1176248).
o RDMA/efa: Report host information to the device (bsc#1176248).
o RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#
1176248).
o RDMA/efa: Use in-kernel offsetofend() to check field availability (bsc#
1176248).
o RDMA/efa: User/kernel compatibility handshake mechanism (bsc#1176248).
o RDMA/efa: Use the correct current and new states in modify QP (git-fixes).
o regulator: axp20x: Fix reference cout leak (git-fixes).
o regulator: core: Avoid debugfs: Directory ... already present! error
(git-fixes).
o regulator: core: avoid regulator_resolve_supply() race condition
(git-fixes).
o regulator: Fix lockdep warning resolving supplies (git-fixes).
o regulator: s5m8767: Drop regulators OF node reference (git-fixes).
o regulator: s5m8767: Fix reference count leak (git-fixes).
o reiserfs: add check for an invalid ih_entry_count (bsc#1182462).
o Remove debug patch for boot failure (bsc#1182602 ltc#190924).
o reset: hisilicon: correct vendor prefix (git-fixes).
o Revert "ibmvnic: remove never executed if statement" (jsc#SLE-17043 bsc#
1179243 ltc#189290).
o Revert "net: bcmgenet: remove unused function in bcmgenet.c" (git-fixes).
o Revert "platform/x86: ideapad-laptop: Switch touchpad attribute to be RO"
(git-fixes).
o Revert "RDMA/mlx5: Fix devlink deadlock on net namespace deletion" (jsc#
SLE-8464).
o rpm/kernel-subpackage-build: Workaround broken bot (https://github.com/
openSUSE/openSUSE-release-tools/issues/2439)
o rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#
1180058)
o rtc: s5m: select REGMAP_I2C (git-fixes).
o rxrpc: Fix memory leak in rxrpc_lookup_local (bsc#1154353 bnc#1151927
5.3.9).
o sched: Reenable interrupts in do_sched_yield() (git-fixes)
o scsi: lpfc: Fix EEH encountering oops with NVMe traffic (bsc#1181958).
o sh_eth: check sh_eth_cpu_data::cexcr when dumping registers (git-fixes).
o sh_eth: check sh_eth_cpu_data::no_tx_cntrs when dumping registers
(git-fixes).
o sh_eth: check sh_eth_cpu_data::no_xdfar when dumping registers (git-fixes).
o smp: Add source and destination CPUs to __call_single_data (bsc#1180846).
o smsc95xx: avoid memory leak in smsc95xx_bind (git-fixes).
o smsc95xx: check return value of smsc95xx_reset (git-fixes).
o soc: aspeed: snoop: Add clock control logic (git-fixes).
o spi: atmel: Put allocated master before return (git-fixes).
o spi: pxa2xx: Fix the controller numbering for Wildcat Point (git-fixes).
o spi: spi-synquacer: fix set_cs handling (git-fixes).
o spi: stm32: properly handle 0 byte transfer (git-fixes).
o squashfs: add more sanity checks in id lookup (git-fixes bsc#1182266).
o squashfs: add more sanity checks in inode lookup (git-fixes bsc#1182267).
o squashfs: add more sanity checks in xattr id lookup (git-fixes bsc#
1182268).
o staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules
(git-fixes).
o target: disallow emulate_legacy_capacity with RBD object-map (bsc#1177109).
o team: set dev->needed_headroom in team_setup_by_port() (git-fixes).
o tpm: Remove tpm_dev_wq_lock (git-fixes).
o tpm_tis: Clean up locality release (git-fixes).
o tpm_tis: Fix check_locality for correct locality acquisition (git-fixes).
o tracing: Check length before giving out the filter buffer (git-fixes).
o tracing: Do not count ftrace events in top level enable output (git-fixes).
o tracing/kprobe: Fix to support kretprobe events on unloaded modules
(git-fixes).
o tracing/kprobes: Do the notrace functions check without kprobes on ftrace
(git-fixes).
o tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS
(git-fixes).
o ubifs: Fix error return code in ubifs_init_authentication() (bsc#1182459).
o ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans() (bsc#1182454).
o ubifs: prevent creating duplicate encrypted filenames (bsc#1182457).
o ubifs: ubifs_add_orphan: Fix a memory leak bug (bsc#1182456).
o ubifs: ubifs_jnl_write_inode: Fix a memory leak bug (bsc#1182455).
o ubifs: wbuf: Do not leak kernel memory to flash (bsc#1182458).
o Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#
1180846).
o Update config files: Set ledtrig-default-on as builtin (bsc#1182128)
o USB: dwc2: Abort transaction after errors with unknown reason (git-fixes).
o USB: dwc2: Fix endpoint direction check in ep_from_windex (git-fixes).
o USB: dwc2: Make "trimming xfer length" a debug message (git-fixes).
o USB: dwc3: fix clock issue during resume in OTG mode (git-fixes).
o USB: gadget: legacy: fix an error code in eth_bind() (git-fixes).
o USB: gadget: u_audio: Free requests only after callback (git-fixes).
o USB: mUSB: Fix runtime PM race in musb_queue_resume_work (git-fixes).
o USB: quirks: add quirk to start video capture on ELMO L-12F document camera
reliable (git-fixes).
o USB: quirks: sort quirk entries (git-fixes).
o USB: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() (git-fixes).
o USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
(git-fixes).
o USB: serial: cp210x: add pid/vid for WSDA-200-USB (git-fixes).
o USB: serial: mos7720: fix error code in mos7720_write() (git-fixes).
o USB: serial: mos7720: improve OOM-handling in read_mos_reg() (git-fixes).
o USB: serial: mos7840: fix error code in mos7840_write() (git-fixes).
o USB: serial: option: Adding support for Cinterion MV31 (git-fixes).
o USB: usblp: do not call usb_set_interface if there's a single alt
(git-fixes).
o veth: Adjust hard_start offset on redirect XDP frames (git-fixes).
o vfs: Convert squashfs to use the new mount API (git-fixes bsc#1182265).
o virtio_net: Fix error code in probe() (git-fixes).
o virtio_net: Fix recursive call to cpus_read_lock() (git-fixes).
o virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer
(git-fixes).
o virt: vbox: Do not use wait_event_interruptible when called from kernel
context (git-fixes).
o vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
o vxlan: fix memleak of fdb (git-fixes).
o writeback: Drop I_DIRTY_TIME_EXPIRE (bsc#1182460).
o x86/alternatives: Sync bp_patching update for avoiding NULL pointer
exception (bsc#1152489).
o x86/apic: Add extra serialization for non-serializing MSRs (bsc#1152489).
o x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#
1181259, jsc#ECO-3191).
o x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181259, jsc#
ECO-3191).
o x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259, jsc#ECO-3191).
o x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259 jsc#ECO-3191).
o x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181259, jsc#
ECO-3191).
o xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
o xfs: ensure inobt record walks always make forward progress (git-fixes bsc#
1182272).
o xfs: fix an ABBA deadlock in xfs_rename (git-fixes bsc#1182558).
o xfs: fix parent pointer scrubber bailing out on unallocated inodes
(git-fixes bsc#1182276).
o xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks
(git-fixes bsc#1182430).
o xfs: fix the minrecs logic when dealing with inode root child blocks
(git-fixes bsc#1182273).
o xfs: ratelimit xfs_discard_page messages (bsc#1182283).
o xfs: reduce quota reservation when doing a dax unwritten extent conversion
(git-fixes bsc#1182561).
o xfs: return corresponding errcode if xfs_initialize_perag() fail (git-fixes
bsc#1182275).
o xfs: scrub should mark a directory corrupt if any entries cannot be iget'd
(git-fixes bsc#1182278).
o xfs: strengthen rmap record flags checking (git-fixes bsc#1182271).
o xhci: fix bounce buffer usage for non-sg list case (git-fixes).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE Linux Enterprise Module for Realtime 15-SP2:
zypper in -t patch SUSE-SLE-Module-RT-15-SP2-2021-735=1
Package List:
o SUSE Linux Enterprise Module for Realtime 15-SP2 (noarch):
kernel-devel-rt-5.3.18-28.1
kernel-source-rt-5.3.18-28.1
o SUSE Linux Enterprise Module for Realtime 15-SP2 (x86_64):
cluster-md-kmp-rt-5.3.18-28.1
cluster-md-kmp-rt-debuginfo-5.3.18-28.1
dlm-kmp-rt-5.3.18-28.1
dlm-kmp-rt-debuginfo-5.3.18-28.1
gfs2-kmp-rt-5.3.18-28.1
gfs2-kmp-rt-debuginfo-5.3.18-28.1
kernel-rt-5.3.18-28.1
kernel-rt-debuginfo-5.3.18-28.1
kernel-rt-debugsource-5.3.18-28.1
kernel-rt-devel-5.3.18-28.1
kernel-rt-devel-debuginfo-5.3.18-28.1
kernel-rt_debug-debuginfo-5.3.18-28.1
kernel-rt_debug-debugsource-5.3.18-28.1
kernel-rt_debug-devel-5.3.18-28.1
kernel-rt_debug-devel-debuginfo-5.3.18-28.1
kernel-syms-rt-5.3.18-28.1
ocfs2-kmp-rt-5.3.18-28.1
ocfs2-kmp-rt-debuginfo-5.3.18-28.1
References:
o https://www.suse.com/security/cve/CVE-2020-12362.html
o https://www.suse.com/security/cve/CVE-2020-12363.html
o https://www.suse.com/security/cve/CVE-2020-12364.html
o https://www.suse.com/security/cve/CVE-2020-12373.html
o https://www.suse.com/security/cve/CVE-2020-29368.html
o https://www.suse.com/security/cve/CVE-2020-29374.html
o https://www.suse.com/security/cve/CVE-2021-26930.html
o https://www.suse.com/security/cve/CVE-2021-26931.html
o https://www.suse.com/security/cve/CVE-2021-26932.html
o https://bugzilla.suse.com/1065600
o https://bugzilla.suse.com/1065729
o https://bugzilla.suse.com/1078720
o https://bugzilla.suse.com/1081134
o https://bugzilla.suse.com/1084610
o https://bugzilla.suse.com/1132477
o https://bugzilla.suse.com/1151927
o https://bugzilla.suse.com/1152472
o https://bugzilla.suse.com/1152489
o https://bugzilla.suse.com/1154353
o https://bugzilla.suse.com/1155518
o https://bugzilla.suse.com/1156395
o https://bugzilla.suse.com/1163776
o https://bugzilla.suse.com/1169514
o https://bugzilla.suse.com/1170442
o https://bugzilla.suse.com/1176248
o https://bugzilla.suse.com/1176855
o https://bugzilla.suse.com/1177109
o https://bugzilla.suse.com/1177326
o https://bugzilla.suse.com/1177440
o https://bugzilla.suse.com/1177529
o https://bugzilla.suse.com/1178142
o https://bugzilla.suse.com/1179082
o https://bugzilla.suse.com/1179137
o https://bugzilla.suse.com/1179243
o https://bugzilla.suse.com/1179428
o https://bugzilla.suse.com/1179660
o https://bugzilla.suse.com/1179929
o https://bugzilla.suse.com/1180058
o https://bugzilla.suse.com/1180846
o https://bugzilla.suse.com/1180989
o https://bugzilla.suse.com/1181133
o https://bugzilla.suse.com/1181259
o https://bugzilla.suse.com/1181574
o https://bugzilla.suse.com/1181637
o https://bugzilla.suse.com/1181655
o https://bugzilla.suse.com/1181671
o https://bugzilla.suse.com/1181674
o https://bugzilla.suse.com/1181710
o https://bugzilla.suse.com/1181720
o https://bugzilla.suse.com/1181735
o https://bugzilla.suse.com/1181736
o https://bugzilla.suse.com/1181738
o https://bugzilla.suse.com/1181747
o https://bugzilla.suse.com/1181753
o https://bugzilla.suse.com/1181818
o https://bugzilla.suse.com/1181843
o https://bugzilla.suse.com/1181854
o https://bugzilla.suse.com/1181896
o https://bugzilla.suse.com/1181958
o https://bugzilla.suse.com/1181960
o https://bugzilla.suse.com/1181985
o https://bugzilla.suse.com/1182047
o https://bugzilla.suse.com/1182118
o https://bugzilla.suse.com/1182128
o https://bugzilla.suse.com/1182140
o https://bugzilla.suse.com/1182171
o https://bugzilla.suse.com/1182175
o https://bugzilla.suse.com/1182259
o https://bugzilla.suse.com/1182265
o https://bugzilla.suse.com/1182266
o https://bugzilla.suse.com/1182267
o https://bugzilla.suse.com/1182268
o https://bugzilla.suse.com/1182271
o https://bugzilla.suse.com/1182272
o https://bugzilla.suse.com/1182273
o https://bugzilla.suse.com/1182275
o https://bugzilla.suse.com/1182276
o https://bugzilla.suse.com/1182278
o https://bugzilla.suse.com/1182283
o https://bugzilla.suse.com/1182374
o https://bugzilla.suse.com/1182380
o https://bugzilla.suse.com/1182381
o https://bugzilla.suse.com/1182406
o https://bugzilla.suse.com/1182430
o https://bugzilla.suse.com/1182439
o https://bugzilla.suse.com/1182441
o https://bugzilla.suse.com/1182442
o https://bugzilla.suse.com/1182443
o https://bugzilla.suse.com/1182444
o https://bugzilla.suse.com/1182445
o https://bugzilla.suse.com/1182446
o https://bugzilla.suse.com/1182447
o https://bugzilla.suse.com/1182449
o https://bugzilla.suse.com/1182454
o https://bugzilla.suse.com/1182455
o https://bugzilla.suse.com/1182456
o https://bugzilla.suse.com/1182457
o https://bugzilla.suse.com/1182458
o https://bugzilla.suse.com/1182459
o https://bugzilla.suse.com/1182460
o https://bugzilla.suse.com/1182461
o https://bugzilla.suse.com/1182462
o https://bugzilla.suse.com/1182463
o https://bugzilla.suse.com/1182464
o https://bugzilla.suse.com/1182465
o https://bugzilla.suse.com/1182466
o https://bugzilla.suse.com/1182485
o https://bugzilla.suse.com/1182489
o https://bugzilla.suse.com/1182490
o https://bugzilla.suse.com/1182547
o https://bugzilla.suse.com/1182558
o https://bugzilla.suse.com/1182560
o https://bugzilla.suse.com/1182561
o https://bugzilla.suse.com/1182571
o https://bugzilla.suse.com/1182599
o https://bugzilla.suse.com/1182602
o https://bugzilla.suse.com/1182626
o https://bugzilla.suse.com/1182650
o https://bugzilla.suse.com/1182672
o https://bugzilla.suse.com/1182676
o https://bugzilla.suse.com/1182683
o https://bugzilla.suse.com/1182684
o https://bugzilla.suse.com/1182686
o https://bugzilla.suse.com/1182770
o https://bugzilla.suse.com/1182798
o https://bugzilla.suse.com/1182800
o https://bugzilla.suse.com/1182801
o https://bugzilla.suse.com/1182854
o https://bugzilla.suse.com/1182856
o https://bugzilla.suse.com/1183022
- --------------------------------------------------------------------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0740-1
Rating: important
References: #1065600 #1163592 #1178401 #1178762 #1179014 #1179015
#1179045 #1179082 #1179428 #1179660 #1180058 #1181747
#1181753 #1181843 #1182140 #1182175
Cross-References: CVE-2020-29368 CVE-2020-29374 CVE-2021-26930 CVE-2021-26931
CVE-2021-26932
Affected Products:
SUSE Linux Enterprise Server for SAP 15
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise High Performance Computing 15-LTSS
SUSE Linux Enterprise High Performance Computing 15-ESPOS
SUSE Linux Enterprise High Availability 15
______________________________________________________________________________
An update that solves 5 vulnerabilities and has 11 fixes is now available.
Description:
The SUSE Linux Enterprise 15 kernel was updated to receive various security and
bugfixes.
The following security bugs were fixed:
o CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping
(XSA-365 bsc#1181843).
o CVE-2021-26931: Fixed an issue where Linux kernel was treating grant
mapping errors as bugs (XSA-362 bsc#1181753).
o CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping
(XSA-361 bsc#1181747). by remote attackers to read or write files via
directory traversal in an XCOPY request (bsc#178372).
o CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write
implementation which could have granted unintended write access because of
a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).
The following non-security bugs were fixed:
o kernel-{binary,source}.spec.in: do not create loop symlinks (bsc#1179082)
o kernel-source.spec: Fix build with rpm 4.16 (boo#1179015).
o rpm/kernel-binary.spec.in: avoid using barewords (bsc#1179014)
o rpm/kernel-binary.spec.in: avoid using more barewords (bsc#1179014)
%split_extra still contained two.
o rpm/kernel-binary.spec.in: Fix compressed module handling for in-tree KMP
(jsc#SLE-10886) The in-tree KMP that is built with SLE kernels have a
different scriptlet that is embedded in kernel-binary.spec.in rather than
*.sh files.
o rpm/kernel-binary.spec.in: use grep -E instead of egrep (bsc#1179045) egrep
is only a deprecated bash wrapper for "grep -E". So use the latter instead.
o rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)
o rpm/kernel-obs-build.spec.in: Add -q option to modprobe calls (bsc#1178401)
o rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#
1179082).
o rpm/mkspec: do not build kernel-obs-build on x86_32 We want to use 64bit
kernel due to various bugs (bsc#1178762 to name one).
o rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#
1180058)
o xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE Linux Enterprise Server for SAP 15:
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2021-740=1
o SUSE Linux Enterprise Server 15-LTSS:
zypper in -t patch SUSE-SLE-Product-SLES-15-2021-740=1
o SUSE Linux Enterprise Module for Live Patching 15:
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-2021-740=1
o SUSE Linux Enterprise High Performance Computing 15-LTSS:
zypper in -t patch SUSE-SLE-Product-HPC-15-2021-740=1
o SUSE Linux Enterprise High Performance Computing 15-ESPOS:
zypper in -t patch SUSE-SLE-Product-HPC-15-2021-740=1
o SUSE Linux Enterprise High Availability 15:
zypper in -t patch SUSE-SLE-Product-HA-15-2021-740=1
Package List:
o SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64):
kernel-default-4.12.14-150.69.1
kernel-default-base-4.12.14-150.69.1
kernel-default-debuginfo-4.12.14-150.69.1
kernel-default-debugsource-4.12.14-150.69.1
kernel-default-devel-4.12.14-150.69.1
kernel-default-devel-debuginfo-4.12.14-150.69.1
kernel-obs-build-4.12.14-150.69.1
kernel-obs-build-debugsource-4.12.14-150.69.1
kernel-syms-4.12.14-150.69.1
kernel-vanilla-base-4.12.14-150.69.1
kernel-vanilla-base-debuginfo-4.12.14-150.69.1
kernel-vanilla-debuginfo-4.12.14-150.69.1
kernel-vanilla-debugsource-4.12.14-150.69.1
reiserfs-kmp-default-4.12.14-150.69.1
reiserfs-kmp-default-debuginfo-4.12.14-150.69.1
o SUSE Linux Enterprise Server for SAP 15 (noarch):
kernel-devel-4.12.14-150.69.1
kernel-docs-4.12.14-150.69.1
kernel-macros-4.12.14-150.69.1
kernel-source-4.12.14-150.69.1
o SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x):
kernel-default-4.12.14-150.69.1
kernel-default-base-4.12.14-150.69.1
kernel-default-debuginfo-4.12.14-150.69.1
kernel-default-debugsource-4.12.14-150.69.1
kernel-default-devel-4.12.14-150.69.1
kernel-default-devel-debuginfo-4.12.14-150.69.1
kernel-obs-build-4.12.14-150.69.1
kernel-obs-build-debugsource-4.12.14-150.69.1
kernel-syms-4.12.14-150.69.1
kernel-vanilla-base-4.12.14-150.69.1
kernel-vanilla-base-debuginfo-4.12.14-150.69.1
kernel-vanilla-debuginfo-4.12.14-150.69.1
kernel-vanilla-debugsource-4.12.14-150.69.1
reiserfs-kmp-default-4.12.14-150.69.1
reiserfs-kmp-default-debuginfo-4.12.14-150.69.1
o SUSE Linux Enterprise Server 15-LTSS (noarch):
kernel-devel-4.12.14-150.69.1
kernel-docs-4.12.14-150.69.1
kernel-macros-4.12.14-150.69.1
kernel-source-4.12.14-150.69.1
o SUSE Linux Enterprise Server 15-LTSS (s390x):
kernel-default-man-4.12.14-150.69.1
kernel-zfcpdump-debuginfo-4.12.14-150.69.1
kernel-zfcpdump-debugsource-4.12.14-150.69.1
o SUSE Linux Enterprise Module for Live Patching 15 (ppc64le x86_64):
kernel-default-debuginfo-4.12.14-150.69.1
kernel-default-debugsource-4.12.14-150.69.1
kernel-default-livepatch-4.12.14-150.69.1
kernel-livepatch-4_12_14-150_69-default-1-1.3.1
kernel-livepatch-4_12_14-150_69-default-debuginfo-1-1.3.1
o SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64):
kernel-default-4.12.14-150.69.1
kernel-default-base-4.12.14-150.69.1
kernel-default-debuginfo-4.12.14-150.69.1
kernel-default-debugsource-4.12.14-150.69.1
kernel-default-devel-4.12.14-150.69.1
kernel-default-devel-debuginfo-4.12.14-150.69.1
kernel-obs-build-4.12.14-150.69.1
kernel-obs-build-debugsource-4.12.14-150.69.1
kernel-syms-4.12.14-150.69.1
kernel-vanilla-base-4.12.14-150.69.1
kernel-vanilla-base-debuginfo-4.12.14-150.69.1
kernel-vanilla-debuginfo-4.12.14-150.69.1
kernel-vanilla-debugsource-4.12.14-150.69.1
o SUSE Linux Enterprise High Performance Computing 15-LTSS (noarch):
kernel-devel-4.12.14-150.69.1
kernel-docs-4.12.14-150.69.1
kernel-macros-4.12.14-150.69.1
kernel-source-4.12.14-150.69.1
o SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64):
kernel-default-4.12.14-150.69.1
kernel-default-base-4.12.14-150.69.1
kernel-default-debuginfo-4.12.14-150.69.1
kernel-default-debugsource-4.12.14-150.69.1
kernel-default-devel-4.12.14-150.69.1
kernel-default-devel-debuginfo-4.12.14-150.69.1
kernel-obs-build-4.12.14-150.69.1
kernel-obs-build-debugsource-4.12.14-150.69.1
kernel-syms-4.12.14-150.69.1
kernel-vanilla-base-4.12.14-150.69.1
kernel-vanilla-base-debuginfo-4.12.14-150.69.1
kernel-vanilla-debuginfo-4.12.14-150.69.1
kernel-vanilla-debugsource-4.12.14-150.69.1
o SUSE Linux Enterprise High Performance Computing 15-ESPOS (noarch):
kernel-devel-4.12.14-150.69.1
kernel-docs-4.12.14-150.69.1
kernel-macros-4.12.14-150.69.1
kernel-source-4.12.14-150.69.1
o SUSE Linux Enterprise High Availability 15 (aarch64 ppc64le s390x x86_64):
cluster-md-kmp-default-4.12.14-150.69.1
cluster-md-kmp-default-debuginfo-4.12.14-150.69.1
dlm-kmp-default-4.12.14-150.69.1
dlm-kmp-default-debuginfo-4.12.14-150.69.1
gfs2-kmp-default-4.12.14-150.69.1
gfs2-kmp-default-debuginfo-4.12.14-150.69.1
kernel-default-debuginfo-4.12.14-150.69.1
kernel-default-debugsource-4.12.14-150.69.1
ocfs2-kmp-default-4.12.14-150.69.1
ocfs2-kmp-default-debuginfo-4.12.14-150.69.1
References:
o https://www.suse.com/security/cve/CVE-2020-29368.html
o https://www.suse.com/security/cve/CVE-2020-29374.html
o https://www.suse.com/security/cve/CVE-2021-26930.html
o https://www.suse.com/security/cve/CVE-2021-26931.html
o https://www.suse.com/security/cve/CVE-2021-26932.html
o https://bugzilla.suse.com/1065600
o https://bugzilla.suse.com/1163592
o https://bugzilla.suse.com/1178401
o https://bugzilla.suse.com/1178762
o https://bugzilla.suse.com/1179014
o https://bugzilla.suse.com/1179015
o https://bugzilla.suse.com/1179045
o https://bugzilla.suse.com/1179082
o https://bugzilla.suse.com/1179428
o https://bugzilla.suse.com/1179660
o https://bugzilla.suse.com/1180058
o https://bugzilla.suse.com/1181747
o https://bugzilla.suse.com/1181753
o https://bugzilla.suse.com/1181843
o https://bugzilla.suse.com/1182140
o https://bugzilla.suse.com/1182175
- --------------------------------------------------------------------------------
SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: SUSE-SU-2021:0743-1
Rating: important
References: #1177440 #1178372 #1181747 #1181753 #1181843 #1182175
Cross-References: CVE-2020-28374 CVE-2021-26930 CVE-2021-26931 CVE-2021-26932
Affected Products:
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud 8
SUSE Linux Enterprise Server for SAP 12-SP3
SUSE Linux Enterprise Server 12-SP3-LTSS
SUSE Linux Enterprise Server 12-SP3-BCL
SUSE Linux Enterprise High Availability 12-SP3
HPE Helion Openstack 8
______________________________________________________________________________
An update that solves four vulnerabilities and has two fixes is now available.
Description:
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security
and bugfixes.
The following security bugs were fixed:
o CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping
(XSA-365 bsc#1181843).
o CVE-2021-26931: Fixed an issue where Linux kernel was treating grant
mapping errors as bugs (XSA-362 bsc#1181753).
o CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping
(XSA-361 bsc#1181747).
o CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI
target code which could have been used by remote attackers to read or write
files via directory traversal in an XCOPY request (bsc#178372).
The following non-security bugs were fixed:
o cifs: report error instead of invalid when revalidating a dentry fails (bsc
#1177440).
o xen/netback: fix spurious event detection for common event case (bsc#
1182175).
Special Instructions and Notes:
Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
o SUSE OpenStack Cloud Crowbar 8:
zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2021-743=1
o SUSE OpenStack Cloud 8:
zypper in -t patch SUSE-OpenStack-Cloud-8-2021-743=1
o SUSE Linux Enterprise Server for SAP 12-SP3:
zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-743=1
o SUSE Linux Enterprise Server 12-SP3-LTSS:
zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-743=1
o SUSE Linux Enterprise Server 12-SP3-BCL:
zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2021-743=1
o SUSE Linux Enterprise High Availability 12-SP3:
zypper in -t patch SUSE-SLE-HA-12-SP3-2021-743=1
o HPE Helion Openstack 8:
zypper in -t patch HPE-Helion-OpenStack-8-2021-743=1
Package List:
o SUSE OpenStack Cloud Crowbar 8 (noarch):
kernel-devel-4.4.180-94.141.2
kernel-macros-4.4.180-94.141.2
kernel-source-4.4.180-94.141.2
o SUSE OpenStack Cloud Crowbar 8 (x86_64):
kernel-default-4.4.180-94.141.2
kernel-default-base-4.4.180-94.141.2
kernel-default-base-debuginfo-4.4.180-94.141.2
kernel-default-debuginfo-4.4.180-94.141.2
kernel-default-debugsource-4.4.180-94.141.2
kernel-default-devel-4.4.180-94.141.2
kernel-default-kgraft-4.4.180-94.141.2
kernel-syms-4.4.180-94.141.2
kgraft-patch-4_4_180-94_141-default-1-4.3.2
kgraft-patch-4_4_180-94_141-default-debuginfo-1-4.3.2
o SUSE OpenStack Cloud 8 (noarch):
kernel-devel-4.4.180-94.141.2
kernel-macros-4.4.180-94.141.2
kernel-source-4.4.180-94.141.2
o SUSE OpenStack Cloud 8 (x86_64):
kernel-default-4.4.180-94.141.2
kernel-default-base-4.4.180-94.141.2
kernel-default-base-debuginfo-4.4.180-94.141.2
kernel-default-debuginfo-4.4.180-94.141.2
kernel-default-debugsource-4.4.180-94.141.2
kernel-default-devel-4.4.180-94.141.2
kernel-default-kgraft-4.4.180-94.141.2
kernel-syms-4.4.180-94.141.2
kgraft-patch-4_4_180-94_141-default-1-4.3.2
kgraft-patch-4_4_180-94_141-default-debuginfo-1-4.3.2
o SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64):
kernel-default-4.4.180-94.141.2
kernel-default-base-4.4.180-94.141.2
kernel-default-base-debuginfo-4.4.180-94.141.2
kernel-default-debuginfo-4.4.180-94.141.2
kernel-default-debugsource-4.4.180-94.141.2
kernel-default-devel-4.4.180-94.141.2
kernel-default-kgraft-4.4.180-94.141.2
kernel-syms-4.4.180-94.141.2
kgraft-patch-4_4_180-94_141-default-1-4.3.2
kgraft-patch-4_4_180-94_141-default-debuginfo-1-4.3.2
o SUSE Linux Enterprise Server for SAP 12-SP3 (noarch):
kernel-devel-4.4.180-94.141.2
kernel-macros-4.4.180-94.141.2
kernel-source-4.4.180-94.141.2
o SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64):
kernel-default-4.4.180-94.141.2
kernel-default-base-4.4.180-94.141.2
kernel-default-base-debuginfo-4.4.180-94.141.2
kernel-default-debuginfo-4.4.180-94.141.2
kernel-default-debugsource-4.4.180-94.141.2
kernel-default-devel-4.4.180-94.141.2
kernel-syms-4.4.180-94.141.2
o SUSE Linux Enterprise Server 12-SP3-LTSS (ppc64le x86_64):
kernel-default-kgraft-4.4.180-94.141.2
kgraft-patch-4_4_180-94_141-default-1-4.3.2
kgraft-patch-4_4_180-94_141-default-debuginfo-1-4.3.2
o SUSE Linux Enterprise Server 12-SP3-LTSS (noarch):
kernel-devel-4.4.180-94.141.2
kernel-macros-4.4.180-94.141.2
kernel-source-4.4.180-94.141.2
o SUSE Linux Enterprise Server 12-SP3-LTSS (s390x):
kernel-default-man-4.4.180-94.141.2
o SUSE Linux Enterprise Server 12-SP3-BCL (x86_64):
kernel-default-4.4.180-94.141.2
kernel-default-base-4.4.180-94.141.2
kernel-default-base-debuginfo-4.4.180-94.141.2
kernel-default-debuginfo-4.4.180-94.141.2
kernel-default-debugsource-4.4.180-94.141.2
kernel-default-devel-4.4.180-94.141.2
kernel-syms-4.4.180-94.141.2
o SUSE Linux Enterprise Server 12-SP3-BCL (noarch):
kernel-devel-4.4.180-94.141.2
kernel-macros-4.4.180-94.141.2
kernel-source-4.4.180-94.141.2
o SUSE Linux Enterprise High Availability 12-SP3 (ppc64le s390x x86_64):
cluster-md-kmp-default-4.4.180-94.141.2
cluster-md-kmp-default-debuginfo-4.4.180-94.141.2
dlm-kmp-default-4.4.180-94.141.2
dlm-kmp-default-debuginfo-4.4.180-94.141.2
gfs2-kmp-default-4.4.180-94.141.2
gfs2-kmp-default-debuginfo-4.4.180-94.141.2
kernel-default-debuginfo-4.4.180-94.141.2
kernel-default-debugsource-4.4.180-94.141.2
ocfs2-kmp-default-4.4.180-94.141.2
ocfs2-kmp-default-debuginfo-4.4.180-94.141.2
o HPE Helion Openstack 8 (noarch):
kernel-devel-4.4.180-94.141.2
kernel-macros-4.4.180-94.141.2
kernel-source-4.4.180-94.141.2
o HPE Helion Openstack 8 (x86_64):
kernel-default-4.4.180-94.141.2
kernel-default-base-4.4.180-94.141.2
kernel-default-base-debuginfo-4.4.180-94.141.2
kernel-default-debuginfo-4.4.180-94.141.2
kernel-default-debugsource-4.4.180-94.141.2
kernel-default-devel-4.4.180-94.141.2
kernel-default-kgraft-4.4.180-94.141.2
kernel-syms-4.4.180-94.141.2
kgraft-patch-4_4_180-94_141-default-1-4.3.2
kgraft-patch-4_4_180-94_141-default-debuginfo-1-4.3.2
References:
o https://www.suse.com/security/cve/CVE-2020-28374.html
o https://www.suse.com/security/cve/CVE-2021-26930.html
o https://www.suse.com/security/cve/CVE-2021-26931.html
o https://www.suse.com/security/cve/CVE-2021-26932.html
o https://bugzilla.suse.com/1177440
o https://bugzilla.suse.com/1178372
o https://bugzilla.suse.com/1181747
o https://bugzilla.suse.com/1181753
o https://bugzilla.suse.com/1181843
o https://bugzilla.suse.com/1182175
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQIVAwUBYEhSG+NLKJtyKPYoAQi0ng//Q2gT5CxwKqlVp4t83WFZo0SVEVxSmatA
qI1TzzQiAbwGVIZF0LtiWU6g4iOnPfr0JduRWwIZMdidIVsP3mINVzD5Mqcc9mau
QEkOZ8B9mcWqxXUo/RBQ0A9Kz4/W0qzKdCsAKR30Cb4okEkzzhhtGZaReioscYEm
t7ZPdwlpk5vQ4A2FnPHnFNQyEUtahjwd4kuEaoFGkJcP/hCQNOcl44wcpmQV1fYu
FSG2CDast4ZDXsGuONBObvgjFu55sgAb0HPiD/ZkvDKveifFGRg03Q5mbz3i0pTz
UN42OYHB0Y/wj3TOrmvDjiAJLM7Z6WtmEtRYujME0KxeGqI55Vbuapkmmib6Jvc9
kwKIZIv0pnSUTK3bYfk4WAo9GPu+hcgytYRfyDOmu8qgOjiFW3z2gOCfvR0LtsOb
miMa9BeRebBWF7BAAtoJb59ZixmCYQdYyp77HFIQFLB6FaLQYm2EBGqDm3/xkIgz
yOABrkq4jEmB6dvneRgNWDtVX/YTIaPZb42NelpdJKhD0SkY+KIguEwgnjdmbo9I
jEccyREbZ2aWcsKFNiUDcC6jNaIM5VAuvwKEW/1zTijW/DymRparnqbms4Sni0LJ
NG6NAdni5tNszr8iDwJyK4KEw44785vPgEGmNgoR7qJuDuk5uyup2f3doPxtM0Gx
+5KY438Ubpc=
=CxgB
-----END PGP SIGNATURE-----