Operating System:

[SUSE]

Published:

16 April 2021

Protect yourself against future threats.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2021.1299
                   Security update for the Linux Kernel
                               16 April 2021

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           Linux kernel
Publisher:         SUSE
Operating System:  SUSE
Impact/Access:     Execute Arbitrary Code/Commands -- Existing Account      
                   Increased Privileges            -- Existing Account      
                   Overwrite Arbitrary Files       -- Existing Account      
                   Create Arbitrary Files          -- Existing Account      
                   Denial of Service               -- Remote/Unauthenticated
                   Access Confidential Data        -- Existing Account      
                   Reduced Security                -- Existing Account      
Resolution:        Patch/Upgrade
CVE Names:         CVE-2021-30002 CVE-2021-29647 CVE-2021-29265
                   CVE-2021-29264 CVE-2021-29154 CVE-2021-28972
                   CVE-2021-28971 CVE-2021-28964 CVE-2021-28950
                   CVE-2021-28688 CVE-2021-28660 CVE-2021-28375
                   CVE-2021-28038 CVE-2021-27365 CVE-2021-27364
                   CVE-2021-27363 CVE-2021-26932 CVE-2021-26931
                   CVE-2021-26930 CVE-2021-20219 CVE-2021-3483
                   CVE-2021-3444 CVE-2021-3428 CVE-2020-36312
                   CVE-2020-36311 CVE-2020-36310 CVE-2020-35519
                   CVE-2020-29374 CVE-2020-29368 CVE-2020-27815
                   CVE-2020-27171 CVE-2020-27170 CVE-2020-25673
                   CVE-2020-25672 CVE-2020-25671 CVE-2020-25670
                   CVE-2020-0433 CVE-2019-19769 CVE-2019-18814

Reference:         ESB-2021.1251
                   ESB-2021.1231
                   ESB-2021.1228
                   ESB-2021.1212
                   ESB-2021.1184

Original Bulletin: 
   https://www.suse.com/support/update/announcement/2021/suse-su-20211211-1
   https://www.suse.com/support/update/announcement/2021/suse-su-20211210-1

Comment: This bulletin contains two (2) SUSE security advisories.

- --------------------------BEGIN INCLUDED TEXT--------------------

SUSE Security Update: Security update for the Linux Kernel

______________________________________________________________________________

Announcement ID:   SUSE-SU-2021:1211-1
Rating:            important
References:        #1047233 #1065729 #1113295 #1152472 #1152489 #1153274
                   #1154353 #1155518 #1156256 #1156395 #1159280 #1160634
                   #1167773 #1168777 #1169514 #1169709 #1171295 #1173485
                   #1177326 #1178163 #1178181 #1178330 #1179454 #1180197
                   #1180980 #1181383 #1181507 #1181674 #1181862 #1182011
                   #1182077 #1182485 #1182552 #1182574 #1182591 #1182595
                   #1182712 #1182713 #1182715 #1182716 #1182717 #1182770
                   #1182989 #1183015 #1183018 #1183022 #1183023 #1183048
                   #1183252 #1183277 #1183278 #1183279 #1183280 #1183281
                   #1183282 #1183283 #1183284 #1183285 #1183286 #1183287
                   #1183288 #1183366 #1183369 #1183386 #1183405 #1183412
                   #1183416 #1183427 #1183428 #1183445 #1183447 #1183501
                   #1183509 #1183530 #1183534 #1183540 #1183593 #1183596
                   #1183598 #1183637 #1183646 #1183662 #1183686 #1183692
                   #1183696 #1183750 #1183757 #1183775 #1183843 #1183859
                   #1183871 #1184074 #1184120 #1184167 #1184168 #1184170
                   #1184176 #1184192 #1184193 #1184194 #1184196 #1184198
                   #1184211 #1184217 #1184218 #1184219 #1184220 #1184224
                   #1184388 #1184391 #1184393 #1184509 #1184511 #1184512
                   #1184514 #1184583 #1184647
Cross-References:  CVE-2019-18814 CVE-2019-19769 CVE-2020-25670 CVE-2020-25671
                   CVE-2020-25672 CVE-2020-25673 CVE-2020-27170 CVE-2020-27171
                   CVE-2020-27815 CVE-2020-35519 CVE-2020-36310 CVE-2020-36311
                   CVE-2020-36312 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365
                   CVE-2021-28038 CVE-2021-28375 CVE-2021-28660 CVE-2021-28688
                   CVE-2021-28950 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972
                   CVE-2021-29154 CVE-2021-29264 CVE-2021-29265 CVE-2021-29647
                   CVE-2021-30002 CVE-2021-3428 CVE-2021-3444 CVE-2021-3483
Affected Products:
                   SUSE Linux Enterprise Module for Realtime 15-SP2
______________________________________________________________________________

An update that solves 32 vulnerabilities and has 85 fixes is now available.

Description:

The SUSE Linux Enterprise 15 SP2 kernel RT was updated to receive various
security and bugfixes.
The following security bugs were fixed:

  o CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly
    handle mod32 destination register truncation when the source register was
    known to be 0 leading to out of bounds read (bsc#1184170).
  o CVE-2021-3428: Fixed an integer overflow in ext4_es_cache_extent (bsc#
    1173485).
  o CVE-2021-29647: Fixed an issue in qrtr_recvmsg which could have allowed
    attackers to obtain sensitive information from kernel memory because of a
    partially uninitialized data structure (bsc#1184192 ).
  o CVE-2021-29265: Fixed an issue in usbip_sockfd_store which could have
    allowed attackers to cause a denial of service due to race conditions
    during an update of the local and shared status (bsc#1184167).
  o CVE-2021-29264: Fixed an issue in the Freescale Gianfar Ethernet driver
    which could have allowed attackers to cause a system crash due to a
    calculation of negative fragment size (bsc#1184168).
  o CVE-2021-28972: Fixed a user-tolerable buffer overflow when writing a new
    device name to the driver from userspace, allowing userspace to write data
    to the kernel stack frame directly (bsc#1184198).
  o CVE-2021-28971: Fixed an issue in intel_pmu_drain_pebs_nhm which could have
    caused a system crash because the PEBS status in a PEBS record was
    mishandled (bsc#1184196 ).
  o CVE-2021-28964: Fixed a race condition in get_old_root which could have
    allowed attackers to cause a denial of service (bsc#1184193).
  o CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc#1183646).
  o CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#
    1183593 ).
  o CVE-2021-28375: Fixed an issue in fastrpc_internal_invoke which did not
    prevent user applications from sending kernel RPC messages (bsc#1183596).
  o CVE-2021-28038: Fixed an issue with the netback driver which was lacking
    necessary treatment of errors such as failed memory allocations (bsc#
    1183022).
  o CVE-2021-27365: Fixed an issue where an unprivileged user can send a
    Netlink message that is associated with iSCSI, and has a length up to the
    maximum length of a Netlink message (bsc#1182715).
  o CVE-2021-27364: Fixed an issue where an attacker could craft Netlink
    messages (bsc#1182717).
  o CVE-2021-27363: Fixed a kernel pointer leak which could have been used to
    determine the address of the iscsi_transport structure (bsc#1182716).
  o CVE-2020-35519: Fixed an out-of-bounds memory access was found in x25_bind
    (bsc#1183696).
  o CVE-2020-27815: Fixed an issue in JFS filesystem where could have allowed
    an attacker to execute code (bsc#1179454).
  o CVE-2020-27171: Fixed an off-by-one error affecting out-of-bounds
    speculation on pointer arithmetic, leading to side-channel attacks that
    defeat Spectre mitigations and obtain sensitive information from kernel
    memory (bsc#1183775).
  o CVE-2020-27170: Fixed potential side-channel attacks that defeat Spectre
    mitigations and obtain sensitive information from kernel memory (bsc#
    1183686).
  o CVE-2019-19769: Fixed a use-after-free in the perf_trace_lock_acquire
    function (bsc#1159280 ).
  o CVE-2019-18814: Fixed a use-after-free when aa_label_parse() fails in
    aa_audit_rule_init() (bsc#1156256).
  o CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673: Fixed
    multiple bugs in NFC subsytem (bsc#1178181).
  o CVE-2020-36311: Fixed a denial of service (soft lockup) by triggering
    destruction of a large SEV VM (bsc#1184511).
  o CVE-2021-29154: Fixed incorrect computation of branch displacements,
    allowing arbitrary code execution (bsc#1184391).
  o CVE-2021-30002: Fixed a memory leak for large arguments in video_usercopy
    (bsc#1184120).
  o CVE-2021-3483: Fixed a use-after-free in nosy.c (bsc#1184393).
  o CVE-2020-36310: Fixed infinite loop for certain nested page faults (bsc#
    1184512).
  o CVE-2020-36312: Fixed a memory leak upon a kmalloc failure (bsc#1184509 ).
  o CVE-2021-28950: Fixed an issue in fs/fuse/fuse_i.h due to a retry loop
    continually was finding the same bad inode (bsc#1184194).


The following non-security bugs were fixed:

  o 0007-block-add-docs-for-gendisk-request_queue-refcount-he.patch: (bsc#
    1171295, git fixes (block drivers)).
  o 0008-block-revert-back-to-synchronous-request_queue-remov.patch: (bsc#
    1171295, git fixes (block drivers)).
  o 0009-blktrace-fix-debugfs-use-after-free.patch: (bsc#1171295, git fixes
    (block drivers)).
  o ACPI: bus: Constify is_acpi_node() and friends (part 2) (git-fixes).
  o ACPICA: Always create namespace nodes using acpi_ns_create_node()
    (git-fixes).
  o ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
  o ACPICA: Fix race in generic_serial_bus (I2C) and GPIO op_region parameter
    handling (git-fixes).
  o ACPI: scan: Rearrange memory allocation in acpi_device_add() (git-fixes).
  o ACPI: video: Add DMI quirk for GIGABYTE GB-BXBT-2807 (git-fixes).
  o ACPI: video: Add missing callback back for Sony VPCEH3U1E (git-fixes).
  o ALSA: aloop: Fix initialization of controls (git-fixes).
  o ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (git-fixes).
  o ALSA: hda: Avoid spurious unsol event handling during S3/S4 (git-fixes).
  o ALSA: hda: Drop the BATCH workaround for AMD controllers (git-fixes).
  o ALSA: hda: generic: Fix the micmute led init state (git-fixes).
  o ALSA: hda/hdmi: Cancel pending works before suspend (git-fixes).
  o ALSA: hda/realtek: Add quirk for Clevo NH55RZQ (git-fixes).
  o ALSA: hda/realtek: Add quirk for Intel NUC 10 (git-fixes).
  o ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board
    (git-fixes).
  o ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air
    (git-fixes).
  o ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro (git-fixes).
  o ALSA: hda/realtek: Enable headset mic of Acer SWIFT with ALC256
    (git-fixes).
  o ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO
    (git-fixes).
  o ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 (git-fixes).
  o ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk (bsc#1182552).
  o ALSA: usb-audio: Allow modifying parameters with succeeding hw_params calls
    (bsc#1182552).
  o ALSA: usb-audio: Apply sample rate quirk to Logitech Connect (git-fixes).
  o ALSA: usb-audio: Apply the control quirk to Plantronics headsets (bsc#
    1182552).
  o ALSA: usb-audio: Disable USB autosuspend properly in
    setup_disable_autosuspend() (bsc#1182552).
  o ALSA: usb-audio: Do not abort even if the clock rate differs (bsc#1182552).
  o ALSA: usb-audio: Drop bogus dB range in too low level (bsc#1182552).
  o ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar
    (bsc#1182552).
  o ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe (bsc#1182552).
  o ALSA: usb-audio: Fix "RANGE setting not yet supported" errors (git-fixes).
  o ALSA: usb-audio: fix use after free in usb_audio_disconnect (bsc#1182552).
  o ALSA: usb-audio: Skip the clock selector inquiry for single connections
    (git-fixes).
  o ALSA: usb: Use DIV_ROUND_UP() instead of open-coding it (git-fixes).
  o amd/amdgpu: Disable VCN DPG mode for Picasso (git-fixes).
  o apparmor: check/put label on apparmor_sk_clone_security() (git-fixes).
  o appletalk: Fix skb allocation size in loopback case (git-fixes).
  o arm64: make STACKPROTECTOR_PER_TASK configurable (bsc#1181862).
  o ASoC: ak4458: Add MODULE_DEVICE_TABLE (git-fixes).
  o ASoC: ak5558: Add MODULE_DEVICE_TABLE (git-fixes).
  o ASoC: cs42l42: Always wait at least 3ms after reset (git-fixes).
  o ASoC: cs42l42: Do not enable/disable regulator at Bias Level (git-fixes).
  o ASoC: cs42l42: Fix Bitclock polarity inversion (git-fixes).
  o ASoC: cs42l42: Fix channel width support (git-fixes).
  o ASoC: cs42l42: Fix mixer volume control (git-fixes).
  o ASoC: cygnus: fix for_each_child.cocci warnings (git-fixes).
  o ASoC: es8316: Simplify adc_pga_gain_tlv table (git-fixes).
  o ASoC: fsl_esai: Fix TDM slot setup for I2S mode (git-fixes).
  o ASoC: fsl_ssi: Fix TDM slot setup for I2S mode (git-fixes).
  o ASoC: Intel: Add DMI quirk table to soc_intel_is_byt_cr() (git-fixes).
  o ASoC: intel: atom: Remove 44100 sample-rate from the media and deep-buffer
    DAI descriptions (git-fixes).
  o ASoC: intel: atom: Stop advertising non working S24LE support (git-fixes).
  o ASoC: Intel: bytcr_rt5640: Add quirk for ARCHOS Cesium 140 (git-fixes).
  o ASoC: Intel: bytcr_rt5640: Add quirk for the Acer One S1002 tablet
    (git-fixes).
  o ASoC: Intel: bytcr_rt5640: Add quirk for the Estar Beauty HD MID 7316R
    tablet (git-fixes).
  o ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15 tablet
    (git-fixes).
  o ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 10-p0XX OVCD current
    threshold (git-fixes).
  o ASoC: Intel: bytcr_rt5651: Add quirk for the Jumper EZpad 7 tablet
    (git-fixes).
  o ASoC: max98373: Added 30ms turn on/off time delay (git-fixes).
  o ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10
    (git-fixes).
  o ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10
    (git-fixes).
  o ASoC: rt5670: Add emulated 'DAC1 Playback Switch' control (git-fixes).
  o ASoC: rt5670: Remove ADC vol-ctrl mute bits poking from Sto1 ADC mixer
    settings (git-fixes).
  o ASoC: rt5670: Remove 'HP Playback Switch' control (git-fixes).
  o ASoC: rt5670: Remove 'OUT Channel Switch' control (git-fixes).
  o ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe
    (git-fixes).
  o ASoC: simple-card-utils: Do not handle device clock (git-fixes).
  o ASoC: sunxi: sun4i-codec: fill ASoC card owner (git-fixes).
  o ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips
    (git-fixes).
  o ath10k: fix wmi mgmt tx queue full due to race condition (git-fixes).
  o ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr()
    (git-fixes).
  o ath9k: fix transmitting to stations in dynamic SMPS mode (git-fixes).
  o atl1c: fix error return code in atl1c_probe() (git-fixes).
  o atl1e: fix error return code in atl1e_probe() (git-fixes).
  o batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
    (git-fixes).
  o binfmt_misc: fix possible deadlock in bm_register_write (git-fixes).
  o binfmt_misc: fix possible deadlock in bm_register_write (git-fixes).
  o blktrace-annotate-required-lock-on-do_blk_trace_setu.patch: (bsc#1171295).
  o blktrace-Avoid-sparse-warnings-when-assigning-q-blk_.patch: (bsc#1171295).
  o blktrace-break-out-of-blktrace-setup-on-concurrent-c.patch: (bsc#1171295).
  o block-clarify-context-for-refcount-increment-helpers.patch: (bsc#1171295).
  o block: rsxx: fix error return code of rsxx_pci_probe() (git-fixes).
  o Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
    (git-fixes).
  o Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl
    (git-fixes).
  o bnxt_en: reliably allocate IRQ table on reset to avoid crash (jsc#SLE-8371
    bsc#1153274).
  o bpf: Add sanity check for upper ptr_limit (bsc#1183686 bsc#1183775).
  o bpf: Avoid warning when re-casting __bpf_call_base into
    __bpf_call_base_args (bsc#1155518).
  o bpf: Declare __bpf_free_used_maps() unconditionally (bsc#1155518).
  o bpf: Do not do bpf_cgroup_storage_set() for kuprobe/tp programs (bsc#
    1155518).
  o bpf: Fix 32 bit src register truncation on div/mod (bsc#1184170).
  o bpf_lru_list: Read double-checked variable once without lock (bsc#1155518).
  o bpf: Remove MTU check in __bpf_skb_max_len (bsc#1155518).
  o bpf: Simplify alu_limit masking for pointer arithmetic (bsc#1183686 bsc#
    1183775).
  o bpf,x64: Pad NOPs to make images converge more easily (bsc#1178163).
  o brcmfmac: Add DMI nvram filename quirk for Predia Basic tablet (git-fixes).
  o brcmfmac: Add DMI nvram filename quirk for Voyo winpad A15 tablet
    (git-fixes).
  o brcmfmac: clear EAP/association status bits on linkdown events (git-fixes).
  o btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root (bsc#
    1184217).
  o btrfs: always pin deleted leaves when there are active tree mod log users
    (bsc#1184224).
  o btrfs: fix exhaustion of the system chunk array due to concurrent
    allocations (bsc#1183386).
  o btrfs: fix extent buffer leak on failure to copy root (bsc#1184218).
  o btrfs: fix race when cloning extent buffer during rewind of an old root
    (bsc#1184193).
  o btrfs: fix stale data exposure after cloning a hole with NO_HOLES enabled
    (bsc#1184220).
  o btrfs: fix subvolume/snapshot deletion not triggered on mount (bsc#
    1184219).
  o bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD (git-fixes).
  o bus: ti-sysc: Fix warning on unbind if reset is not deasserted (git-fixes).
  o can: c_can: move runtime PM enable/disable to c_can_platform (git-fixes).
  o can: c_can_pci: c_can_pci_remove(): fix use-after-free (git-fixes).
  o can: flexcan: assert FRZ bit in flexcan_chip_freeze() (git-fixes).
  o can: flexcan: enable RX FIFO after FRZ/HALT valid (git-fixes).
  o can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate
    (git-fixes).
  o can: flexcan: invoke flexcan_chip_freeze() to enter freeze mode
    (git-fixes).
  o can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning
    (git-fixes).
  o can: peak_usb: add forgotten supported devices (git-fixes).
  o can: peak_usb: Revert "can: peak_usb: add forgotten supported devices"
    (git-fixes).
  o can: skb: can_skb_set_owner(): fix ref counting if socket was closed before
    setting skb ownership (git-fixes).
  o cdc-acm: fix BREAK rx code path adding necessary calls (git-fixes).
  o certs: Fix blacklist flag type confusion (git-fixes).
  o cifs: change noisy error message to FYI (bsc#1181507).
  o cifs: check pointer before freeing (bsc#1183534).
  o cifs_debug: use %pd instead of messing with ->d_name (bsc#1181507).
  o cifs: do not send close in compound create+close requests (bsc#1181507).
  o cifs: New optype for session operations (bsc#1181507).
  o cifs: print MIDs in decimal notation (bsc#1181507).
  o cifs: return proper error code in statfs(2) (bsc#1181507).
  o cifs: Tracepoints and logs for tracing credit changes (bsc#1181507).
  o clk: fix invalid usage of list cursor in register (git-fixes).
  o clk: fix invalid usage of list cursor in unregister (git-fixes).
  o clk: socfpga: fix iomem pointer cast on 64-bit (git-fixes).
  o completion: Drop init_completion define (git-fixes).
  o configfs: fix a use-after-free in __configfs_open_file (git-fixes).
  o config: net: freescale: change xgmac-mdio to built-in References: bsc#
    1183015,bsc#1182595
  o crypto: aesni - prevent misaligned buffers on the stack (git-fixes).
  o crypto: arm64/sha - add missing module aliases (git-fixes).
  o crypto: bcm - Rename struct device_private to bcm_device_private
    (git-fixes).
  o crypto: Kconfig - CRYPTO_MANAGER_EXTRA_TESTS requires the manager
    (git-fixes).
  o crypto: tcrypt - avoid signed overflow in byte count (git-fixes).
  o Delete patches.suse/sched-Reenable-interrupts-in-do_sched_yield.patch (bsc#
    1183530)
  o drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
    (git-fixes).
  o drivers: video: fbcon: fix NULL dereference in fbcon_cursor() (git-fixes).
  o drm/amd/display: Guard against NULL pointer deref when get_i2c_info fails
    (git-fixes).
  o drm/amdgpu: Add check to prevent IH overflow (git-fixes).
  o drm/amdgpu: check alignment on CPU page for bo map (git-fixes).
  o drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings()
    (git-fixes).
  o drm/amdgpu: fix parameter error of RREG32_PCIE() in amdgpu_regs_pcie
    (git-fixes).
  o drm/amdkfd: Put ACPI table after using it (bsc#1152489) Backporting notes:
    * context changes
  o drm/amd/powerplay: fix spelling mistake "smu_state_memroy_block" -> (bsc#
    1152489) Backporting notes: * rename amd/pm to amd/powerplay * context
    changes
  o drm/compat: Clear bounce structures (git-fixes).
  o drm/hisilicon: Fix use-after-free (git-fixes).
  o drm/i915: Fix invalid access to ACPI _DSM objects (bsc#1184074).
  o drm/i915: Reject 446-480MHz HDMI clock on GLK (git-fixes).
  o drm/mediatek: Fix aal size config (bsc#1152489)
  o drm: meson_drv add shutdown function (git-fixes).
  o drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (git-fixes).
  o drm/msm/adreno: a5xx_power: Do not apply A540 lm_setup to other GPUs
    (git-fixes).
  o drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) (git-fixes).
  o drm/msm: Fix races managing the OOB state for timestamp vs (bsc#1152489)
  o drm/msm: fix shutdown hook in case GPU components failed to bind
    (git-fixes).
  o drm/msm: Fix use-after-free in msm_gem with carveout (bsc#1152489)
  o drm/msm: Fix WARN_ON() splat in _free_object() (bsc#1152489)
  o drm/msm/gem: Add obj->lock wrappers (bsc#1152489)
  o drm/msm: Ratelimit invalid-fence message (git-fixes).
  o drm/msm: Set drvdata to NULL when msm_drm_init() fails (git-fixes).
  o drm/nouveau: bail out of nouveau_channel_new if channel init fails (bsc#
    1152489)
  o drm/nouveau/kms: handle mDP connectors (git-fixes).
  o drm/panfrost: Do not corrupt the queue mutex on open/close (bsc#1152472)
  o drm/panfrost: Fix job timeout handling (bsc#1152472)
  o drm/panfrost: Remove unused variables in panfrost_job_close() (bsc#1152472)
  o drm/radeon: fix AGP dependency (git-fixes).
  o drm: rcar-du: Fix crash when using LVDS1 clock for CRTC (bsc#1152489)
  o drm/sched: Cancel and flush all outstanding jobs before finish (git-fixes).
  o drm/sun4i: tcon: fix inverted DCLK polarity (bsc#1152489)
  o drm/tegra: sor: Grab runtime PM reference across reset (git-fixes).
  o drm/vc4: hdmi: Restore cec physical address on reconnect (bsc#1152472)
  o efi: use 32-bit alignment for efi_guid_t literals (git-fixes).
  o enetc: Fix reporting of h/w packet counters (git-fixes).
  o epoll: check for events when removing a timed out thread from the wait
    queue (git-fixes).
  o ethernet: alx: fix order of calls on resume (git-fixes).
  o exec: Move would_dump into flush_old_exec (git-fixes).
  o exfat: add missing MODULE_ALIAS_FS() (bsc#1182989).
  o exfat: add the dummy mount options to be backward compatible with staging/
    exfat (bsc#1182989).
  o extcon: Add stubs for extcon_register_notifier_all() functions (git-fixes).
  o extcon: Fix error handling in extcon_dev_register (git-fixes).
  o fbdev: aty: SPARC64 requires FB_ATY_CT (git-fixes).
  o firmware/efi: Fix a use after bug in efi_mem_reserve_persistent
    (git-fixes).
  o flow_dissector: fix byteorder of dissected ICMP ID (bsc#1154353).
  o fsl/fman: check dereferencing null pointer (git-fixes).
  o fsl/fman: fix dereference null return value (git-fixes).
  o fsl/fman: fix eth hash table allocation (git-fixes).
  o fsl/fman: fix unreachable code (git-fixes).
  o fsl/fman: use 32-bit unsigned integer (git-fixes).
  o fuse: fix bad inode (bsc#1184211).
  o fuse: fix live lock in fuse_iget() (bsc#1184211).
  o fuse: verify write return (git-fixes).
  o gcc-plugins: drop support for GCC <= 4.7 (bcs#1181862).
  o gcc-plugins: make it possible to disable CONFIG_GCC_PLUGINS again (bcs#
    1181862).
  o gcc-plugins: simplify GCC plugin-dev capability test (bsc#1181862).
  o gianfar: Account for Tx PTP timestamp in the skb headroom (git-fixes).
  o gianfar: Fix TX timestamping with a stacked DSA driver (git-fixes).
  o gianfar: Handle error code at MAC address change (git-fixes).
  o gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP
    (git-fixes).
  o Goodix Fingerprint device is not a modem (git-fixes).
  o gpiolib: acpi: Add missing IRQF_ONESHOT (git-fixes).
  o gpio: pca953x: Set IRQ type when handle Intel Galileo Gen 2 (git-fixes).
  o gpio: zynq: fix reference leak in zynq_gpio functions (git-fixes).
  o HID: i2c-hid: Add I2C_HID_QUIRK_NO_IRQ_AFTER_RESET for ITE8568 EC on Voyo
    Winpad A15 (git-fixes).
  o HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter
    (git-fixes).
  o HSI: Fix PM usage counter unbalance in ssi_hw_init (git-fixes).
  o hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable
    (git-fixes).
  o i2c: rcar: faster irq code to minimize HW race condition (git-fixes).
  o i2c: rcar: optimize cacheline to minimize HW race condition (git-fixes).
  o i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
  o i40e: Fix sparse error: 'vsi->netdev' could be null (jsc#SLE-8025).
  o iavf: Fix incorrect adapter get in iavf_resume (git-fixes).
  o iavf: use generic power management (git-fixes).
  o ibmvnic: add comments for spinlock_t definitions (bsc#1183871 ltc#192139).
  o ibmvnic: always store valid MAC address (bsc#1182011 ltc#191844).
  o ibmvnic: avoid multiple line dereference (bsc#1183871 ltc#192139).
  o ibmvnic: fix block comments (bsc#1183871 ltc#192139).
  o ibmvnic: fix braces (bsc#1183871 ltc#192139).
  o ibmvnic: fix miscellaneous checks (bsc#1183871 ltc#192139).
  o ibmvnic: Fix possibly uninitialized old_num_tx_queues variable warning (jsc
    #SLE-17268).
  o ibmvnic: merge do_change_param_reset into do_reset (bsc#1183871 ltc#
    192139).
  o ibmvnic: prefer strscpy over strlcpy (bsc#1183871 ltc#192139).
  o ibmvnic: prefer 'unsigned long' over 'unsigned long int' (bsc#1183871 ltc#
    192139).
  o ibmvnic: remove excessive irqsave (bsc#1182485 ltc#191591).
  o ibmvnic: remove unnecessary rmb() inside ibmvnic_poll (bsc#1183871 ltc#
    192139).
  o ibmvnic: remove unused spinlock_t stats_lock definition (bsc#1183871 ltc#
    192139).
  o ibmvnic: rework to ensure SCRQ entry reads are properly ordered (bsc#
    1183871 ltc#192139).
  o ibmvnic: simplify reset_long_term_buff function (bsc#1183023 ltc#191791).
  o ibmvnic: substitute mb() with dma_wmb() for send_*crq* functions (bsc#
    1183023 ltc#191791).
  o ice: fix memory leak if register_netdev_fails (git-fixes).
  o ice: fix memory leak in ice_vsi_setup (git-fixes).
  o ice: Fix state bits on LLDP mode switch (jsc#SLE-7926).
  o ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
  o ice: renegotiate link after FW DCB on (jsc#SLE-8464).
  o ice: report correct max number of TCs (jsc#SLE-7926).
  o ice: update the number of available RSS queues (jsc#SLE-7926).
  o igc: Fix igc_ptp_rx_pktstamp() (bsc#1160634).
  o iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask
    (git-fixes).
  o iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel
    (git-fixes).
  o iio: adis16400: Fix an error code in adis16400_initial_setup() (git-fixes).
  o iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler
    (git-fixes).
  o iio: hid-sensor-humidity: Fix alignment issue of timestamp channel
    (git-fixes).
  o iio: hid-sensor-prox: Fix scale not correct issue (git-fixes).
  o iio: hid-sensor-temperature: Fix issues of timestamp channel (git-fixes).
  o include/linux/sched/mm.h: use rcu_dereference in in_vfork() (git-fixes).
  o Input: applespi - do not wait for responses to commands indefinitely
    (git-fixes).
  o Input: elantech - fix protocol errors for some trackpoints in SMBus mode
    (git-fixes).
  o Input: i8042 - add ASUS Zenbook Flip to noselftest list (git-fixes).
  o Input: raydium_ts_i2c - do not send zero length (git-fixes).
  o Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox
    Series X|S (git-fixes).
  o iommu/amd: Fix sleeping in atomic in increase_address_space() (bsc#
    1183277).
  o iommu/intel: Fix memleak in intel_irq_remapping_alloc (bsc#1183278).
  o iommu/qcom: add missing put_device() call in qcom_iommu_of_xlate() (bsc#
    1183637).
  o iommu/vt-d: Add get_domain_info() helper (bsc#1183279).
  o iommu/vt-d: Avoid panic if iommu init fails in tboot system (bsc#1183280).
  o iommu/vt-d: Correctly check addr alignment in qi_flush_dev_iotlb_pasid()
    (bsc#1183281).
  o iommu/vt-d: Do not use flush-queue when caching-mode is on (bsc#1183282).
  o iommu/vt-d: Fix general protection fault in aux_detach_device() (bsc#
    1183283).
  o iommu/vt-d: Fix ineffective devTLB invalidation for subdevices (bsc#
    1183284).
  o iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (bsc#
    1183285).
  o iommu/vt-d: Move intel_iommu info from struct intel_svm to struct
    intel_svm_dev (bsc#1183286).
  o ionic: linearize tso skb with too many frags (bsc#1167773).
  o kABI: powerpc/pmem: Include pmem prototypes (bsc#1113295 git-fixes).
  o kbuild: add dummy toolchains to enable all cc-option etc. in Kconfig (bcs#
    1181862).
  o kbuild: change *FLAGS_<basetarget>.o to take the path relative to $(obj)
    (bcs#1181862).
  o kbuild: dummy-tools, fix inverted tests for gcc (bcs#1181862).
  o kbuild: dummy-tools, support MPROFILE_KERNEL checks for ppc (bsc#1181862).
  o kbuild: Fail if gold linker is detected (bcs#1181862).
  o kbuild: improve cc-option to clean up all temporary files (bsc#1178330).
  o kbuild: include scripts/Makefile.* only when relevant CONFIG is enabled
    (bcs#1181862).
  o kbuild: simplify GCC_PLUGINS enablement in dummy-tools/gcc (bcs#1181862).
  o kbuild: stop filtering out $(GCC_PLUGINS_CFLAGS) from cc-option base (bcs#
    1181862).
  o kbuild: use -S instead of -E for precise cc-option test in Kconfig (bsc#
    1178330).
  o kconfig: introduce m32-flag and m64-flag (bcs#1181862).
  o KVM: nVMX: Properly handle userspace interrupt window request (bsc#
    1183427).
  o KVM: SVM: Clear the CR4 register on reset (bsc#1183252).
  o KVM: x86: Add helpers to perform CPUID-based guest vendor check (bsc#
    1183445).
  o KVM: x86: Add RIP to the kvm_entry, i.e. VM-Enter, tracepoint Needed as a
    dependency of 0b40723a827 ("kvm: tracing: Fix unmatched kvm_entry and
    kvm_exit events", bsc#1182770).
  o KVM: x86: Allow guests to see MSR_IA32_TSX_CTRL even if tsx=off (bsc#
    1183287).
  o KVM: x86: do not reset microcode version on INIT or RESET (bsc#1183412).
  o KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs (bsc#
    1183447).
  o KVM: x86: list MSR_IA32_UCODE_REV as an emulated MSR (bsc#1183369).
  o KVM: x86: Return -E2BIG when KVM_GET_SUPPORTED_CPUID hits max entries (bsc#
    1183428).
  o KVM: x86: Set so called 'reserved CR3 bits in LM mask' at vCPU reset (bsc#
    1183288).
  o libbpf: Clear map_info before each bpf_obj_get_info_by_fd (bsc#1155518).
  o libbpf: Fix BTF dump of pointer-to-array-of-struct (bsc#1155518).
  o libbpf: Fix INSTALL flag order (bsc#1155518).
  o libbpf: Use SOCK_CLOEXEC when opening the netlink socket (bsc#1155518).
  o lib/syscall: fix syscall registers retrieval on 32-bit platforms
    (git-fixes).
  o locking/mutex: Fix non debug version of mutex_lock_io_nested() (git-fixes).
  o loop-be-paranoid-on-exit-and-prevent-new-additions-r.patch: (bsc#1171295).
  o mac80211: choose first enabled channel for monitor (git-fixes).
  o mac80211: fix double free in ibss_leave (git-fixes).
  o mac80211: fix rate mask reset (git-fixes).
  o mac80211: fix TXQ AC confusion (git-fixes).
  o mdio: fix mdio-thunder.c dependency & build error (git-fixes).
  o media: cros-ec-cec: do not bail on device_init_wakeup failure (git-fixes).
  o media: cx23885: add more quirks for reset DMA on some AMD IOMMU
    (git-fixes).
  o media: mceusb: Fix potential out-of-bounds shift (git-fixes).
  o media: mceusb: sanity check for prescaler value (git-fixes).
  o media: rc: compile rc-cec.c into rc-core (git-fixes).
  o media: usbtv: Fix deadlock on suspend (git-fixes).
  o media: uvcvideo: Allow entities with no pads (git-fixes).
  o media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate (git-fixes).
  o media: v4l: vsp1: Fix bru null pointer access (git-fixes).
  o media: v4l: vsp1: Fix uif null pointer access (git-fixes).
  o media: vicodec: add missing v4l2_ctrl_request_hdl_put() (git-fixes).
  o misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom
    (git-fixes).
  o misc: fastrpc: restrict user apps from sending kernel RPC messages
    (git-fixes).
  o misc/pvpanic: Export module FDT device table (git-fixes).
  o misc: rtsx: init of rts522a add OCP power off when no card is present
    (git-fixes).
  o mISDN: fix crash in fritzpci (git-fixes).
  o mmc: core: Fix partition switch time for eMMC (git-fixes).
  o mmc: cqhci: Fix random crash when remove mmc module/card (git-fixes).
  o mmc: mxs-mmc: Fix a resource leak in an error handling path in
    'mxs_mmc_probe()' (git-fixes).
  o mmc: sdhci-esdhc-imx: fix kernel panic when remove module (git-fixes).
  o mmc: sdhci-of-dwcmshc: set SDHCI_QUIRK2_PRESET_VALUE_BROKEN (git-fixes).
  o mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page (git-fixes).
  o mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking
    page tables prot_numa (bsc#1168777).
  o mount: fix mounting of detached mounts onto targets that reside on shared
    mounts (git-fixes).
  o mt76: dma: do not report truncated frames to mac80211 (git-fixes).
  o mwifiex: pcie: skip cancel_work_sync() on reset failure path (git-fixes).
  o net: arc_emac: Fix memleak in arc_mdio_probe (git-fixes).
  o net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
  o net: b44: fix error return code in b44_init_one() (git-fixes).
  o net: bonding: fix error return code of bond_neigh_init() (bsc#1154353).
  o net: cdc-phonet: fix data-interface release on probe failure (git-fixes).
  o net: core: introduce __netdev_notify_peers (bsc#1183871 ltc#192139).
  o netdevsim: init u64 stats for 32bit hardware (git-fixes).
  o net: dsa: rtl8366: Fix VLAN semantics (git-fixes).
  o net: dsa: rtl8366: Fix VLAN set-up (git-fixes).
  o net: dsa: rtl8366rb: Support all 4096 VLANs (git-fixes).
  o net: enic: Cure the enic api locking trainwreck (git-fixes).
  o net: ethernet: aquantia: Fix wrong return value (git-fixes).
  o net: ethernet: cavium: octeon_mgmt: use phy_start and phy_stop (git-fixes).
  o net: ethernet: ibm: ibmvnic: Fix some kernel-doc misdemeanours (bsc#1183871
    ltc#192139).
  o net: ethernet: ti: cpsw: fix clean up of vlan mc entries for host port
    (git-fixes).
  o net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
  o net: fec: Fix phy_device lookup for phy_reset_after_clk_enable()
    (git-fixes).
  o net: fec: Fix PHY init after phy_reset_after_clk_enable() (git-fixes).
  o net: fec: Fix reference count leak in fec series ops (git-fixes).
  o net: gemini: Fix another missing clk_disable_unprepare() in probe
    (git-fixes).
  o net: gemini: Fix missing free_netdev() in error path of
    gemini_ethernet_port_probe() (git-fixes).
  o net: gianfar: Add of_node_put() before goto statement (git-fixes).
  o net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
    (git-fixes).
  o net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling
    ether_setup (git-fixes).
  o net: hns3: Remove the left over redundant check & assignment (bsc#1154353).
  o net: korina: cast KSEG0 address to pointer in kfree (git-fixes).
  o net: korina: fix kfree of rx/tx descriptor array (git-fixes).
  o net: lantiq: Wait for the GPHY firmware to be ready (git-fixes).
  o net/mlx5: Disable devlink reload for lag devices (jsc#SLE-8464).
  o net/mlx5: Disable devlink reload for multi port slave device (jsc#
    SLE-8464).
  o net/mlx5: Disallow RoCE on lag device (jsc#SLE-8464).
  o net/mlx5: Disallow RoCE on multi port slave device (jsc#SLE-8464).
  o net/mlx5e: E-switch, Fix rate calculation division (jsc#SLE-8464).
  o net/mlx5e: E-switch, Fix rate calculation for overflow (jsc#SLE-8464).
  o net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
  o net: mvneta: fix double free of txq->buf (git-fixes).
  o net: mvneta: make tx buffer array agnostic (git-fixes).
  o net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
  o net: phy: broadcom: Only advertise EEE for supported modes (git-fixes).
  o net: qcom/emac: add missed clk_disable_unprepare in error path of
    emac_clks_phase1_init (git-fixes).
  o net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup
    (git-fixes).
  o net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405)
  o netsec: restore phy power state after controller reset (bsc#1183757).
  o net: spider_net: Fix the size used in a 'dma_free_coherent()' call
    (git-fixes).
  o net: stmmac: Fix incorrect location to set real_num_rx|tx_queues
    (git-fixes).
  o net: stmmac: removed enabling eee in EEE set callback (git-fixes).
  o net: stmmac: use netif_tx_start|stop_all_queues() function (git-fixes).
  o net: stmmac: Use rtnl_lock/unlock on netif_set_real_num_rx_queues() call
    (git-fixes).
  o net: usb: ax88179_178a: fix missing stop entry in driver_info (git-fixes).
  o net: usb: qmi_wwan: allow qmimux add/del with master up (git-fixes).
  o net: usb: qmi_wwan: support ZTE P685M modem (git-fixes).
  o net: wan/lmc: unregister device when no matching device is found
    (git-fixes).
  o nfp: flower: fix pre_tun mask id allocation (bsc#1154353).
  o nvme: allocate the keep alive request using BLK_MQ_REQ_NOWAIT (bsc#
    1182077).
  o nvme-fabrics: fix kato initialization (bsc#1182591).
  o nvme-fabrics: only reserve a single tag (bsc#1182077).
  o nvme-fc: fix racing controller reset and create association (bsc#1183048).
  o nvme-hwmon: Return error code when registration fails (bsc#1177326).
  o nvme: merge nvme_keep_alive into nvme_keep_alive_work (bsc#1182077).
  o nvme: return an error if nvme_set_queue_count() fails (bsc#1180197).
  o nvmet-rdma: Fix list_del corruption on queue establishment failure (bsc#
    1183501).
  o objtool: Fix ".cold" section suffix check for newer versions of GCC (bsc#
    1169514).
  o objtool: Fix error handling for STD/CLD warnings (bsc#1169514).
  o objtool: Fix retpoline detection in asm code (bsc#1169514).
  o ovl: fix dentry leak in ovl_get_redirect (bsc#1184176).
  o ovl: fix out of date comment and unreachable code (bsc#1184176).
  o ovl: fix regression with re-formatted lower squashfs (bsc#1184176).
  o ovl: fix unneeded call to ovl_change_flags() (bsc#1184176).
  o ovl: fix value of i_ino for lower hardlink corner case (bsc#1184176).
  o ovl: initialize error in ovl_copy_xattr (bsc#1184176).
  o ovl: relax WARN_ON() when decoding lower directory file handle (bsc#
    1184176).
  o PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse (git-fixes).
  o PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller
    (git-fixes).
  o PCI: Align checking of syscall user config accessors (git-fixes).
  o PCI: Decline to resize resources if boot config must be preserved
    (git-fixes).
  o PCI: Fix pci_register_io_range() memory leak (git-fixes).
  o PCI: mediatek: Add missing of_node_put() to fix reference leak (git-fixes).
  o PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064 (git-fixes).
  o PCI: xgene-msi: Fix race in installing chained irq handler (git-fixes).
  o pinctrl: rockchip: fix restore error in resume (git-fixes).
  o Platform: OLPC: Fix probe error handling (git-fixes).
  o platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch
    10E SW3-016 (git-fixes).
  o platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag
    (git-fixes).
  o platform/x86: acer-wmi: Add new force_caps module parameter (git-fixes).
  o platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices
    (git-fixes).
  o platform/x86: acer-wmi: Cleanup accelerometer device handling (git-fixes).
  o platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines (git-fixes).
  o platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2
    (git-fixes).
  o platform/x86: intel-vbtn: Stop reporting SW_DOCK events (git-fixes).
  o platform/x86: thinkpad_acpi: Allow the FnLock LED to change state
    (git-fixes).
  o PM: EM: postpone creating the debugfs dir till fs_initcall (git-fixes).
  o PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (bsc#
    1183366).
  o PM: runtime: Fix ordering in pm_runtime_get_suppliers() (git-fixes).
  o PM: runtime: Fix race getting/putting suppliers at probe (git-fixes).
  o post.sh: Return an error when module update fails (bsc#1047233 bsc#
    1184388).
  o powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (bsc#
    1065729).
  o powerpc/book3s64/radix: Remove WARN_ON in destroy_context() (bsc#1183692
    ltc#191963).
  o powerpc/pmem: Include pmem prototypes (bsc#1113295 git-fixes).
  o powerpc/pseries/mobility: handle premature return from H_JOIN (bsc#1181674
    ltc#189159 git-fixes bsc#1183662 ltc#191922).
  o powerpc/pseries/mobility: use struct for shared state (bsc#1181674 ltc#
    189159 git-fixes bsc#1183662 ltc#191922).
  o powerpc/pseries/ras: Remove unused variable 'status' (bsc#1065729).
  o powerpc/sstep: Check instruction validity against ISA version before
    emulation (bsc#1156395).
  o powerpc/sstep: Fix darn emulation (bsc#1156395).
  o powerpc/sstep: Fix incorrect return from analyze_instr() (bsc#1156395).
  o powerpc/sstep: Fix load-store and update emulation (bsc#1156395).
  o printk: fix deadlock when kernel panic (bsc#1183018).
  o proc: fix lookup in /proc/net subdirectories after setns(2) (git-fixes).
  o pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()
    (git-fixes).
  o qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
  o qxl: Fix uninitialised struct field head.surface_id (git-fixes).
  o random: fix the RNDRESEEDCRNG ioctl (git-fixes).
  o RAS/CEC: Correct ce_add_elem()'s returned values (bsc#1152489).
  o RDMA/hns: Disable RQ inline by default (jsc#SLE-8449).
  o RDMA/hns: Fix type of sq_signal_bits (jsc#SLE-8449).
  o RDMA/srp: Fix support for unpopulated and unbalanced NUMA nodes (bsc#
    1169709)
  o regulator: bd9571mwv: Fix AVS and DVFS voltage range (git-fixes).
  o Revert "net: bonding: fix error return code of bond_neigh_init()" (bsc#
    1154353).
  o rpadlpar: fix potential drc_name corruption in store functions (bsc#1183416
    ltc#191079).
  o rpm/check-for-config-changes: add -mrecord-mcount ignore Added by
    3b15cdc15956 (tracing: move function tracer options to Kconfig) upstream.
  o rpm/check-for-config-changes: Also ignore AS_VERSION added in 5.12.
  o rpm/check-for-config-changes: comment on the list To explain what it
    actually is.
  o rpm/check-for-config-changes: declare sed args as an array So that we can
    reuse it in both seds. This also introduces IGNORED_CONFIGS_RE array which
    can be easily extended.
  o rpm/check-for-config-changes: define ignores more strictly * search for
    whole words, so make wildcards explicit * use ' for quoting * prepend
    CONFIG_ dynamically, so it need not be in the list
  o rpm/check-for-config-changes: sort the ignores They are growing so to make
    them searchable by humans.
  o rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#
    1184514) The devel package requires the kernel binary package itself for
    building modules externally.
  o rsi: Fix TX EAPOL packet handling against iwlwifi AP (git-fixes).
  o rsi: Move card interrupt handling to RX thread (git-fixes).
  o rsxx: Return -EFAULT if copy_to_user() fails (git-fixes).
  o s390/cio: return -EFAULT if copy_to_user() fails (git-fixes).
  o s390/cio: return -EFAULT if copy_to_user() fails (git-fixes).
  o s390/crypto: return -EFAULT if copy_to_user() fails (git-fixes).
  o s390/dasd: fix hanging IO request during DASD driver unbind (git-fixes).
  o s390/qeth: fix memory leak after failed TX Buffer allocation (git-fixes).
  o s390/qeth: fix notification for pending buffers during teardown
    (git-fixes).
  o s390/qeth: improve completion of pending TX buffers (git-fixes).
  o s390/qeth: schedule TX NAPI on QAOB completion (git-fixes).
  o s390/vtime: fix increased steal time accounting (bsc#1183859).
  o samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
  o scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647 ltc#191231).
  o scsi: lpfc: Change wording of invalid pci reset log message (bsc#1182574).
  o scsi: lpfc: Correct function header comments related to ndlp reference
    counting (bsc#1182574).
  o scsi: lpfc: Fix ADISC handling that never frees nodes (bsc#1182574).
  o scsi: lpfc: Fix crash caused by switch reboot (bsc#1182574).
  o scsi: lpfc: Fix dropped FLOGI during pt2pt discovery recovery (bsc#
    1182574).
  o scsi: lpfc: Fix FLOGI failure due to accessing a freed node (bsc#1182574).
  o scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
    (bsc#1182574).
  o scsi: lpfc: Fix lpfc_els_retry() possible null pointer dereference (bsc#
    1182574).
  o scsi: lpfc: Fix nodeinfo debugfs output (bsc#1182574).
  o scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() (bsc#
    1182574).
  o scsi: lpfc: Fix PLOGI ACC to be transmit after REG_LOGIN (bsc#1182574).
  o scsi: lpfc: Fix pt2pt connection does not recover after LOGO (bsc#1182574).
  o scsi: lpfc: Fix pt2pt state transition causing rmmod hang (bsc#1182574).
  o scsi: lpfc: Fix reftag generation sizing errors (bsc#1182574).
  o scsi: lpfc: Fix stale node accesses on stale RRQ request (bsc#1182574).
  o scsi: lpfc: Fix status returned in lpfc_els_retry() error exit path (bsc#
    1182574).
  o scsi: lpfc: Fix unnecessary null check in lpfc_release_scsi_buf (bsc#
    1182574).
  o scsi: lpfc: Fix use after free in lpfc_els_free_iocb (bsc#1182574).
  o scsi: lpfc: Fix vport indices in lpfc_find_vport_by_vpid() (bsc#1182574).
  o scsi: lpfc: Reduce LOG_TRACE_EVENT logging for vports (bsc#1182574).
  o scsi: lpfc: Update copyrights for 12.8.0.7 and 12.8.0.8 changes (bsc#
    1182574).
  o scsi: lpfc: Update lpfc version to 12.8.0.8 (bsc#1182574).
  o scsi: target: pscsi: Avoid OOM in pscsi_map_sg() (bsc#1183843).
  o scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (bsc#
    1183843).
  o selftests/bpf: Mask bpf_csum_diff() return value to 16 bits in
    test_verifier (bsc#1155518).
  o selftests/bpf: No need to drop the packet when there is no geneve opt (bsc#
    1155518).
  o selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed (bsc#
    1155518).
  o selinux: fix error initialization in inode_doinit_with_dentry()
    (git-fixes).
  o selinux: Fix error return code in sel_ib_pkey_sid_slow() (git-fixes).
  o selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling
    (git-fixes).
  o smb3: add dynamic trace point to trace when credits obtained (bsc#1181507).
  o smb3: fix crediting for compounding when only one request in flight (bsc#
    1181507).
  o smb3: Fix out-of-bounds bug in SMB2_negotiate() (bsc#1183540).
  o soc/fsl: qbman: fix conflicting alignment attributes (git-fixes).
  o software node: Fix node registration (git-fixes).
  o spi: stm32: make spurious and overrun interrupts visible (git-fixes).
  o squashfs: fix inode lookup sanity checks (bsc#1183750).
  o squashfs: fix xattr id and id lookup sanity checks (bsc#1183750).
  o stop_machine: mark helpers __always_inline (git-fixes).
  o thermal/core: Add NULL pointer check before using cooling device stats
    (git-fixes).
  o udlfb: Fix memory leak in dlfb_usb_probe (git-fixes).
  o Update bug reference for USB-audio fixes (bsc#1182552 bsc#1183598)
  o USB: cdc-acm: downgrade message to debug (git-fixes).
  o USB: cdc-acm: fix double free on probe failure (git-fixes).
  o USB: cdc-acm: fix use-after-free after probe failure (git-fixes).
  o USB: cdc-acm: untangle a circular dependency between callback and softint
    (git-fixes).
  o USB: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board (git-fixes).
  o USB: dwc2: Prevent core suspend when port connection flag is 0 (git-fixes).
  o USB: dwc3: gadget: Fix dep->interval for fullspeed interrupt (git-fixes).
  o USB: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 (git-fixes).
  o USB: dwc3: qcom: Add missing DWC3 OF node refcount decrement (git-fixes).
  o USB: dwc3: qcom: Honor wakeup enabled/disabled state (git-fixes).
  o USB: gadget: configfs: Fix KASAN use-after-free (git-fixes).
  o USB: gadget: f_uac1: stop playback on function disable (git-fixes).
  o USB: gadget: f_uac2: always increase endpoint max_packet_size by one audio
    slot (git-fixes).
  o USB: gadget: udc: amd5536udc_pci fix null-ptr-dereference (git-fixes).
  o USB: gadget: u_ether: Fix a configfs return code (git-fixes).
  o USBip: Fix incorrect double assignment to udc->ud.tcp_rx (git-fixes).
  o USBip: fix stub_dev to check for stream socket (git-fixes).
  o USBip: fix stub_dev usbip_sockfd_store() races leading to gpf (git-fixes).
  o USBip: fix vhci_hcd attach_store() races leading to gpf (git-fixes).
  o USBip: fix vhci_hcd to check for stream socket (git-fixes).
  o USBip: fix vudc to check for stream socket (git-fixes).
  o USBip: fix vudc usbip_sockfd_store races leading to gpf (git-fixes).
  o USBip: tools: fix build error for multiple definition (git-fixes).
  o USBip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() (git-fixes).
  o USB: musb: Fix suspend with devices connected for a64 (git-fixes).
  o USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem
    (git-fixes).
  o USB: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM
    (git-fixes).
  o USB: replace hardcode maximum usb string length by definition (git-fixes).
  o USB: serial: ch341: add new Product ID (git-fixes).
  o USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter
    (git-fixes).
  o USB: serial: cp210x: add some more GE USB IDs (git-fixes).
  o USB: serial: ftdi_sio: fix FTX sub-integer prescaler (git-fixes).
  o USB: serial: io_edgeport: fix memory leak in edge_startup (git-fixes).
  o USB-storage: Add quirk to defeat Kindle's automatic unload (git-fixes).
  o USB: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy-
    (git-fixes).
  o USB: usblp: fix a hang in poll() if disconnected (git-fixes).
  o USB: xhci: do not perform Soft Retry for some xHCI hosts (git-fixes).
  o USB: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing (git-fixes).
  o USB: xhci-mtk: fix broken streams issue on 0.96 xHCI (git-fixes).
  o use __netdev_notify_peers in ibmvnic (bsc#1183871 ltc#192139).
  o video: fbdev: acornfb: remove free_unused_pages() (bsc#1152489)
  o video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
  o VMCI: Use set_page_dirty_lock() when unregistering guest memory
    (git-fixes).
  o vt/consolemap: do font sum unsigned (git-fixes).
  o watchdog: mei_wdt: request stop on unregister (git-fixes).
  o wireguard: device: do not generate ICMP for non-IP packets (git-fixes).
  o wireguard: kconfig: use arm chacha even with no neon (git-fixes).
  o wireguard: selftests: test multiple parallel streams (git-fixes).
  o wlcore: Fix command execute failure 19 for wl12xx (git-fixes).
  o x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (bsc#1152489).
  o x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() (bsc#
    1152489).
  o x86/ioapic: Ignore IRQ2 again (bsc#1152489).
  o x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc
    () (bsc#1152489).
  o xen/events: avoid handling the same event on two cpus at the same time
    (git-fixes).
  o xen/events: do not unmask an event channel when an eoi is pending
    (git-fixes).
  o xen/events: fix setting irq affinity (bsc#1184583).
  o xen/events: reset affinity of 2-level event when tearing it down
    (git-fixes).
  o xen/gnttab: handle p2m update errors on a per-slot basis (bsc#1183022
    XSA-367).
  o xen-netback: respect gnttab_map_refs()'s return value (bsc#1183022
    XSA-367).
  o xfs: group quota should return EDQUOT when prj quota enabled (bsc#1180980).
  o xhci: Fix repeated xhci wake after suspend due to uncleared internal wake
    state (git-fixes).
  o xhci: Improve detection of device initiated wake signal (git-fixes).

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  o SUSE Linux Enterprise Module for Realtime 15-SP2:
    zypper in -t patch SUSE-SLE-Module-RT-15-SP2-2021-1211=1

Package List:

  o SUSE Linux Enterprise Module for Realtime 15-SP2 (x86_64):
       cluster-md-kmp-rt-5.3.18-33.1
       cluster-md-kmp-rt-debuginfo-5.3.18-33.1
       dlm-kmp-rt-5.3.18-33.1
       dlm-kmp-rt-debuginfo-5.3.18-33.1
       gfs2-kmp-rt-5.3.18-33.1
       gfs2-kmp-rt-debuginfo-5.3.18-33.1
       kernel-rt-5.3.18-33.1
       kernel-rt-debuginfo-5.3.18-33.1
       kernel-rt-debugsource-5.3.18-33.1
       kernel-rt-devel-5.3.18-33.1
       kernel-rt-devel-debuginfo-5.3.18-33.1
       kernel-rt_debug-debuginfo-5.3.18-33.1
       kernel-rt_debug-debugsource-5.3.18-33.1
       kernel-rt_debug-devel-5.3.18-33.1
       kernel-rt_debug-devel-debuginfo-5.3.18-33.1
       kernel-syms-rt-5.3.18-33.1
       ocfs2-kmp-rt-5.3.18-33.1
       ocfs2-kmp-rt-debuginfo-5.3.18-33.1
  o SUSE Linux Enterprise Module for Realtime 15-SP2 (noarch):
       kernel-devel-rt-5.3.18-33.1
       kernel-source-rt-5.3.18-33.1


References:

  o https://www.suse.com/security/cve/CVE-2019-18814.html
  o https://www.suse.com/security/cve/CVE-2019-19769.html
  o https://www.suse.com/security/cve/CVE-2020-25670.html
  o https://www.suse.com/security/cve/CVE-2020-25671.html
  o https://www.suse.com/security/cve/CVE-2020-25672.html
  o https://www.suse.com/security/cve/CVE-2020-25673.html
  o https://www.suse.com/security/cve/CVE-2020-27170.html
  o https://www.suse.com/security/cve/CVE-2020-27171.html
  o https://www.suse.com/security/cve/CVE-2020-27815.html
  o https://www.suse.com/security/cve/CVE-2020-35519.html
  o https://www.suse.com/security/cve/CVE-2020-36310.html
  o https://www.suse.com/security/cve/CVE-2020-36311.html
  o https://www.suse.com/security/cve/CVE-2020-36312.html
  o https://www.suse.com/security/cve/CVE-2021-27363.html
  o https://www.suse.com/security/cve/CVE-2021-27364.html
  o https://www.suse.com/security/cve/CVE-2021-27365.html
  o https://www.suse.com/security/cve/CVE-2021-28038.html
  o https://www.suse.com/security/cve/CVE-2021-28375.html
  o https://www.suse.com/security/cve/CVE-2021-28660.html
  o https://www.suse.com/security/cve/CVE-2021-28688.html
  o https://www.suse.com/security/cve/CVE-2021-28950.html
  o https://www.suse.com/security/cve/CVE-2021-28964.html
  o https://www.suse.com/security/cve/CVE-2021-28971.html
  o https://www.suse.com/security/cve/CVE-2021-28972.html
  o https://www.suse.com/security/cve/CVE-2021-29154.html
  o https://www.suse.com/security/cve/CVE-2021-29264.html
  o https://www.suse.com/security/cve/CVE-2021-29265.html
  o https://www.suse.com/security/cve/CVE-2021-29647.html
  o https://www.suse.com/security/cve/CVE-2021-30002.html
  o https://www.suse.com/security/cve/CVE-2021-3428.html
  o https://www.suse.com/security/cve/CVE-2021-3444.html
  o https://www.suse.com/security/cve/CVE-2021-3483.html
  o https://bugzilla.suse.com/1047233
  o https://bugzilla.suse.com/1065729
  o https://bugzilla.suse.com/1113295
  o https://bugzilla.suse.com/1152472
  o https://bugzilla.suse.com/1152489
  o https://bugzilla.suse.com/1153274
  o https://bugzilla.suse.com/1154353
  o https://bugzilla.suse.com/1155518
  o https://bugzilla.suse.com/1156256
  o https://bugzilla.suse.com/1156395
  o https://bugzilla.suse.com/1159280
  o https://bugzilla.suse.com/1160634
  o https://bugzilla.suse.com/1167773
  o https://bugzilla.suse.com/1168777
  o https://bugzilla.suse.com/1169514
  o https://bugzilla.suse.com/1169709
  o https://bugzilla.suse.com/1171295
  o https://bugzilla.suse.com/1173485
  o https://bugzilla.suse.com/1177326
  o https://bugzilla.suse.com/1178163
  o https://bugzilla.suse.com/1178181
  o https://bugzilla.suse.com/1178330
  o https://bugzilla.suse.com/1179454
  o https://bugzilla.suse.com/1180197
  o https://bugzilla.suse.com/1180980
  o https://bugzilla.suse.com/1181383
  o https://bugzilla.suse.com/1181507
  o https://bugzilla.suse.com/1181674
  o https://bugzilla.suse.com/1181862
  o https://bugzilla.suse.com/1182011
  o https://bugzilla.suse.com/1182077
  o https://bugzilla.suse.com/1182485
  o https://bugzilla.suse.com/1182552
  o https://bugzilla.suse.com/1182574
  o https://bugzilla.suse.com/1182591
  o https://bugzilla.suse.com/1182595
  o https://bugzilla.suse.com/1182712
  o https://bugzilla.suse.com/1182713
  o https://bugzilla.suse.com/1182715
  o https://bugzilla.suse.com/1182716
  o https://bugzilla.suse.com/1182717
  o https://bugzilla.suse.com/1182770
  o https://bugzilla.suse.com/1182989
  o https://bugzilla.suse.com/1183015
  o https://bugzilla.suse.com/1183018
  o https://bugzilla.suse.com/1183022
  o https://bugzilla.suse.com/1183023
  o https://bugzilla.suse.com/1183048
  o https://bugzilla.suse.com/1183252
  o https://bugzilla.suse.com/1183277
  o https://bugzilla.suse.com/1183278
  o https://bugzilla.suse.com/1183279
  o https://bugzilla.suse.com/1183280
  o https://bugzilla.suse.com/1183281
  o https://bugzilla.suse.com/1183282
  o https://bugzilla.suse.com/1183283
  o https://bugzilla.suse.com/1183284
  o https://bugzilla.suse.com/1183285
  o https://bugzilla.suse.com/1183286
  o https://bugzilla.suse.com/1183287
  o https://bugzilla.suse.com/1183288
  o https://bugzilla.suse.com/1183366
  o https://bugzilla.suse.com/1183369
  o https://bugzilla.suse.com/1183386
  o https://bugzilla.suse.com/1183405
  o https://bugzilla.suse.com/1183412
  o https://bugzilla.suse.com/1183416
  o https://bugzilla.suse.com/1183427
  o https://bugzilla.suse.com/1183428
  o https://bugzilla.suse.com/1183445
  o https://bugzilla.suse.com/1183447
  o https://bugzilla.suse.com/1183501
  o https://bugzilla.suse.com/1183509
  o https://bugzilla.suse.com/1183530
  o https://bugzilla.suse.com/1183534
  o https://bugzilla.suse.com/1183540
  o https://bugzilla.suse.com/1183593
  o https://bugzilla.suse.com/1183596
  o https://bugzilla.suse.com/1183598
  o https://bugzilla.suse.com/1183637
  o https://bugzilla.suse.com/1183646
  o https://bugzilla.suse.com/1183662
  o https://bugzilla.suse.com/1183686
  o https://bugzilla.suse.com/1183692
  o https://bugzilla.suse.com/1183696
  o https://bugzilla.suse.com/1183750
  o https://bugzilla.suse.com/1183757
  o https://bugzilla.suse.com/1183775
  o https://bugzilla.suse.com/1183843
  o https://bugzilla.suse.com/1183859
  o https://bugzilla.suse.com/1183871
  o https://bugzilla.suse.com/1184074
  o https://bugzilla.suse.com/1184120
  o https://bugzilla.suse.com/1184167
  o https://bugzilla.suse.com/1184168
  o https://bugzilla.suse.com/1184170
  o https://bugzilla.suse.com/1184176
  o https://bugzilla.suse.com/1184192
  o https://bugzilla.suse.com/1184193
  o https://bugzilla.suse.com/1184194
  o https://bugzilla.suse.com/1184196
  o https://bugzilla.suse.com/1184198
  o https://bugzilla.suse.com/1184211
  o https://bugzilla.suse.com/1184217
  o https://bugzilla.suse.com/1184218
  o https://bugzilla.suse.com/1184219
  o https://bugzilla.suse.com/1184220
  o https://bugzilla.suse.com/1184224
  o https://bugzilla.suse.com/1184388
  o https://bugzilla.suse.com/1184391
  o https://bugzilla.suse.com/1184393
  o https://bugzilla.suse.com/1184509
  o https://bugzilla.suse.com/1184511
  o https://bugzilla.suse.com/1184512
  o https://bugzilla.suse.com/1184514
  o https://bugzilla.suse.com/1184583
  o https://bugzilla.suse.com/1184647


- --------------------------------------------------------------------------------



SUSE Security Update: Security update for the Linux Kernel

______________________________________________________________________________

Announcement ID:   SUSE-SU-2021:1210-1
Rating:            important
References:        #1065600 #1065729 #1103990 #1103991 #1103992 #1104270
                   #1104353 #1109837 #1111981 #1112374 #1113295 #1113994
                   #1118657 #1118661 #1119113 #1126390 #1129770 #1132477
                   #1142635 #1152446 #1154048 #1169709 #1172455 #1173485
                   #1175165 #1176720 #1176855 #1178163 #1178181 #1179243
                   #1179428 #1179454 #1179660 #1179755 #1180846 #1181507
                   #1181515 #1181544 #1181655 #1181674 #1181747 #1181753
                   #1181843 #1182011 #1182175 #1182485 #1182574 #1182715
                   #1182716 #1182717 #1183018 #1183022 #1183023 #1183378
                   #1183379 #1183380 #1183381 #1183382 #1183405 #1183416
                   #1183509 #1183593 #1183646 #1183662 #1183686 #1183692
                   #1183696 #1183755 #1183775 #1183861 #1183871 #1184114
                   #1184120 #1184167 #1184168 #1184170 #1184192 #1184193
                   #1184196 #1184198 #1184391 #1184393 #1184397 #1184494
                   #1184511 #1184583
Cross-References:  CVE-2020-0433 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672
                   CVE-2020-25673 CVE-2020-27170 CVE-2020-27171 CVE-2020-27815
                   CVE-2020-29368 CVE-2020-29374 CVE-2020-35519 CVE-2020-36311
                   CVE-2021-20219 CVE-2021-26930 CVE-2021-26931 CVE-2021-26932
                   CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVE-2021-28038
                   CVE-2021-28660 CVE-2021-28688 CVE-2021-28964 CVE-2021-28971
                   CVE-2021-28972 CVE-2021-29154 CVE-2021-29264 CVE-2021-29265
                   CVE-2021-29647 CVE-2021-30002 CVE-2021-3428 CVE-2021-3444
                   CVE-2021-3483
Affected Products:
                   SUSE Linux Enterprise Workstation Extension 12-SP5
                   SUSE Linux Enterprise Software Development Kit 12-SP5
                   SUSE Linux Enterprise Server 12-SP5
                   SUSE Linux Enterprise Live Patching 12-SP5
                   SUSE Linux Enterprise High Availability 12-SP5
______________________________________________________________________________

An update that solves 33 vulnerabilities and has 53 fixes is now available.

Description:

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security
and bugfixes.
The following security bugs were fixed:

  o CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly
    handle mod32 destination register truncation when the source register was
    known to be 0 leading to out of bounds read (bsc#1184170).
  o CVE-2021-3428: Fixed an integer overflow in ext4_es_cache_extent (bsc#
    1173485).
  o CVE-2021-29647: Fixed an issue in qrtr_recvmsg which could have allowed
    attackers to obtain sensitive information from kernel memory because of a
    partially uninitialized data structure (bsc#1184192 ).
  o CVE-2021-29265: Fixed an issue in usbip_sockfd_store which could have
    allowed attackers to cause a denial of service due to race conditions
    during an update of the local and shared status (bsc#1184167).
  o CVE-2021-29264: Fixed an issue in the Freescale Gianfar Ethernet driver
    which could have allowed attackers to cause a system crash due to a
    calculation of negative fragment size (bsc#1184168).
  o CVE-2021-28972: Fixed a user-tolerable buffer overflow when writing a new
    device name to the driver from userspace, allowing userspace to write data
    to the kernel stack frame directly (bsc#1184198).
  o CVE-2021-28971: Fixed an issue in intel_pmu_drain_pebs_nhm which could have
    caused a system crash because the PEBS status in a PEBS record was
    mishandled (bsc#1184196 ).
  o CVE-2021-28964: Fixed a race condition in get_old_root which could have
    allowed attackers to cause a denial of service (bsc#1184193).
  o CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc#1183646).
  o CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#
    1183593 ).
  o CVE-2021-28038: Fixed an issue with the netback driver which was lacking
    necessary treatment of errors such as failed memory allocations (bsc#
    1183022).
  o CVE-2021-27365: Fixed an issue where an unprivileged user can send a
    Netlink message that is associated with iSCSI, and has a length up to the
    maximum length of a Netlink message (bsc#1182715).
  o CVE-2021-27364: Fixed an issue where an attacker could craft Netlink
    messages (bsc#1182717).
  o CVE-2021-27363: Fixed a kernel pointer leak which could have been used to
    determine the address of the iscsi_transport structure (bsc#1182716).
  o CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping
    (XSA-361 bsc#1181747).
  o CVE-2021-26931: Fixed an issue where Linux kernel was treating grant
    mapping errors as bugs (XSA-362 bsc#1181753).
  o CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping
    (XSA-365 bsc#1181843).
  o CVE-2020-35519: Fixed an out-of-bounds memory access was found in x25_bind
    (bsc#1183696).
  o CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write
    implementation which could have granted unintended write access (bsc#
    1179660, bsc#1179428).
  o CVE-2020-27815: Fixed an issue in JFS filesystem where could have allowed
    an attacker to execute code (bsc#1179454).
  o CVE-2020-27171: Fixed an off-by-one error affecting out-of-bounds
    speculation on pointer arithmetic, leading to side-channel attacks that
    defeat Spectre mitigations and obtain sensitive information from kernel
    memory (bsc#1183775).
  o CVE-2020-27170: Fixed potential side-channel attacks that defeat Spectre
    mitigations and obtain sensitive information from kernel memory (bsc#
    1183686).
  o CVE-2020-0433: Fixed a use after free due to improper locking which could
    have led to local escalation of privilege (bsc#1176720).
  o CVE-2021-3483: Fixed a use-after-free in nosy.c (bsc#1184393).
  o CVE-2021-30002: Fixed a memory leak for large arguments in video_usercopy
    (bsc#1184120).
  o CVE-2021-29154: Fixed incorrect computation of branch displacements,
    allowing arbitrary code execution (bsc#1184391).
  o CVE-2021-20219: Fixed a denial of service in n_tty_receive_char_special
    (bsc#1184397).
  o CVE-2020-36311: Fixed a denial of service (soft lockup) by triggering
    destruction of a large SEV VM (bsc#1184511).
  o CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673: Fixed
    multiple bugs in NFC subsytem (bsc#1178181).


The following non-security bugs were fixed:

  o ACPI: scan: Rearrange memory allocation in acpi_device_add() (git-fixes).
  o ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (git-fixes).
  o ALSA: hda: Drop the BATCH workaround for AMD controllers (git-fixes).
  o ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).
  o amba: Fix resource leak for drivers without .remove (git-fixes).
  o bfq: Fix kABI for update internal depth state when queue depth changes (bsc
    #1172455).
  o bfq: update internal depth state when queue depth changes (bsc#1172455).
  o block: rsxx: fix error return code of rsxx_pci_probe() (git-fixes).
  o Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
    (git-fixes).
  o Bluetooth: hci_uart: Cancel init work before unregistering (git-fixes).
  o Bluetooth: hci_uart: Fix a race for write_work scheduling (git-fixes).
  o bpf: Add sanity check for upper ptr_limit (bsc#1183686 bsc#1183775).
  o bpf: Fix 32 bit src register truncation on div/mod (bsc#1184170).
  o bpf: fix subprog verifier bypass by div/mod by 0 exception (bsc#1184170).
  o bpf: fix x64 JIT code generation for jmp to 1st insn (bsc#1178163).
  o bpf_lru_list: Read double-checked variable once without lock (git-fixes).
  o bpf: Simplify alu_limit masking for pointer arithmetic (bsc#1183686 bsc#
    1183775).
  o bpf,x64: Pad NOPs to make images converge more easily (bsc#1178163).
  o bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD (git-fixes).
  o can: c_can: move runtime PM enable/disable to c_can_platform (git-fixes).
  o can: c_can_pci: c_can_pci_remove(): fix use-after-free (git-fixes).
  o can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning
    (git-fixes).
  o can: peak_usb: add forgotten supported devices (git-fixes).
  o can: peak_usb: Revert "can: peak_usb: add forgotten supported devices"
    (git-fixes).
  o can: skb: can_skb_set_owner(): fix ref counting if socket was closed before
    setting skb ownership (git-fixes).
  o cifs: change noisy error message to FYI (bsc#1181507).
  o cifs: check all path components in resolved dfs target (bsc#1179755).
  o cifs_debug: use %pd instead of messing with ->d_name (bsc#1181507).
  o cifs: do not send close in compound create+close requests (bsc#1181507).
  o cifs: fix nodfs mount option (bsc#1179755).
  o cifs: introduce helper for finding referral server (bsc#1179755).
  o cifs: New optype for session operations (bsc#1181507).
  o cifs: print MIDs in decimal notation (bsc#1181507).
  o cifs: return proper error code in statfs(2) (bsc#1181507).
  o cifs: Tracepoints and logs for tracing credit changes (bsc#1181507).
  o cxgb4/chtls/cxgbit: Keeping the max ofld immediate data size same in cxgb4
    and ulds (bsc#1104270).
  o dmaengine: hsu: disable spurious interrupt (git-fixes).
  o drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if (bsc#
    1129770)
  o drm/atomic: Create __drm_atomic_helper_crtc_reset() for subclassing (bsc#
    1142635)
  o drm: bridge: dw-hdmi: Avoid resetting force in the detect function (bsc#
    1129770)
  o drm/compat: Clear bounce structures (bsc#1129770)
  o drm/etnaviv: replace MMU flush marker with flush sequence (bsc#1154048)
  o drm/gma500: Fix error return code in psb_driver_load() (bsc#1129770)
  o drm/mediatek: Add missing put_device() call in mtk_drm_kms_init() (bsc#
    1152446)
  o drm/mediatek: Fix aal size config (bsc#1129770)
  o drm: meson_drv add shutdown function (git-fixes).
  o drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (git-fixes).
  o drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) (bsc#1129770)
  o drm/msm: fix shutdown hook in case GPU components failed to bind
    (git-fixes).
  o drm: mxsfb: check framebuffer pitch (bsc#1129770)
  o drm/omap: fix max fclk divider for omap36xx (bsc#1152446)
  o drm: panel: Fix bpc for OrtusTech COM43H4M85ULC panel (bsc#1129770)
  o drm: panel: Fix bus format for OrtusTech COM43H4M85ULC panel (bsc#1129770)
  o drm/radeon: fix AGP dependency (git-fixes).
  o drm: rcar-du: Put reference to VSP device (bsc#1129770)
  o drm/vc4: crtc: Rework a bit the CRTC state code (bsc#1129770)
  o drm/vc4: hdmi: Avoid sleeping in atomic context (bsc#1129770)
  o ethernet: alx: fix order of calls on resume (git-fixes).
  o fbdev: aty: SPARC64 requires FB_ATY_CT (bsc#1129770)
  o firmware/efi: Fix a use after bug in efi_mem_reserve_persistent
    (git-fixes).
  o fix setting irq affinity (bsc#1184583)
  o futex: Prevent robust futex exit race (git-fixes).
  o gma500: clean up error handling in init (bsc#1129770)
  o gpiolib: acpi: Add missing IRQF_ONESHOT (git-fixes).
  o HID: make arrays usage and value to be the same (git-fixes).
  o i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (git-fixes).
  o i40e: Add zero-initialization of AQ command structures (bsc#1109837 bsc#
    1111981).
  o i40e: Fix add TC filter for IPv6 (bsc#1109837 bsc#1111981 ).
  o i40e: Fix endianness conversions (bsc#1109837 bsc#1111981 ).
  o IB/mlx5: Return appropriate error code instead of ENOMEM (bsc#1103991).
  o ibmvnic: add comments for spinlock_t definitions (bsc#1184114 ltc#192237
    bsc#1183871 ltc#192139).
  o ibmvnic: add memory barrier to protect long term buffer (bsc#1184114 ltc#
    192237 bsc#1182485 ltc#191591).
  o ibmvnic: always store valid MAC address (bsc#1182011 ltc#191844).
  o ibmvnic: avoid multiple line dereference (bsc#1184114 ltc#192237 bsc#
    1183871 ltc#192139).
  o ibmvnic: compare adapter->init_done_rc with more readable ibmvnic_rc_codes
    (bsc#1184114 ltc#192237 bsc#1179243 ltc#189290).
  o ibmvnic: Correctly re-enable interrupts in NAPI polling routine (bsc#
    1184114 ltc#192237 bsc#1179243 ltc#189290).
  o ibmvnic: create send_control_ip_offload (bsc#1184114 ltc#192237 bsc#1179243
    ltc#189290).
  o ibmvnic: create send_query_ip_offload (bsc#1184114 ltc#192237 bsc#1179243
    ltc#189290).
  o ibmvnic: Do not replenish RX buffers after every polling loop (bsc#1184114
    ltc#192237 bsc#1179243 ltc#189290).
  o ibmvnic: Ensure that CRQ entry read are correctly ordered (bsc#1184114 ltc#
    192237 bsc#1182485 ltc#191591).
  o ibmvnic: Ensure that device queue memory is cache-line aligned (bsc#1184114
    ltc#192237 bsc#1179243 ltc#189290).
  o ibmvnic: Ensure that SCRQ entry reads are correctly ordered (bsc#1184114
    ltc#192237 bsc#1179243 ltc#189290).
  o ibmvnic: fix block comments (bsc#1184114 ltc#192237 bsc#1183871 ltc#
    192139).
  o ibmvnic: fix braces (bsc#1184114 ltc#192237 bsc#1183871 ltc#192139).
  o ibmvnic: fix miscellaneous checks (bsc#1184114 ltc#192237 bsc#1183871 ltc#
    192139).
  o ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (bsc#1184114 ltc#
    192237 bsc#1179243 ltc#189290).
  o ibmvnic: Fix possibly uninitialized old_num_tx_queues variable warning (bsc
    #1184114 ltc#192237).
  o ibmvnic: Fix TX completion error handling (bsc#1184114 ltc#192237 bsc#
    1179243 ltc#189290).
  o ibmvnic: Fix use-after-free of VNIC login response buffer (bsc#1184114 ltc#
    192237 bsc#1179243 ltc#189290).
  o ibmvnic: handle inconsistent login with reset (bsc#1184114 ltc#192237 bsc#
    1179243 ltc#189290).
  o ibmvnic: Harden device Command Response Queue handshake (bsc#1184114 ltc#
    192237 bsc#1179243 ltc#189290).
  o ibmvnic: improve ibmvnic_init and ibmvnic_reset_init (bsc#1184114 ltc#
    192237 bsc#1179243 ltc#189290).
  o ibmvnic: merge do_change_param_reset into do_reset (bsc#1184114 ltc#192237
    bsc#1183871 ltc#192139).
  o ibmvnic: merge ibmvnic_reset_init and ibmvnic_init (bsc#1184114 ltc#192237
    bsc#1179243 ltc#189290).
  o ibmvnic: no reset timeout for 5 seconds after reset (bsc#1184114 ltc#192237
    bsc#1179243 ltc#189290).
  o ibmvnic: prefer strscpy over strlcpy (bsc#1184114 ltc#192237 bsc#1183871
    ltc#192139).
  o ibmvnic: prefer 'unsigned long' over 'unsigned long int' (bsc#1184114 ltc#
    192237 bsc#1183871 ltc#192139).
  o ibmvnic: reduce wait for completion time (bsc#1184114 ltc#192237 bsc#
    1179243 ltc#189290).
  o ibmvnic: remove excessive irqsave (bsc#1065729).
  o ibmvnic: remove never executed if statement (bsc#1184114 ltc#192237 bsc#
    1179243 ltc#189290).
  o ibmvnic: remove unnecessary rmb() inside ibmvnic_poll (bsc#1184114 ltc#
    192237 bsc#1183871 ltc#192139).
  o ibmvnic: remove unused spinlock_t stats_lock definition (bsc#1184114 ltc#
    192237 bsc#1183871 ltc#192139).
  o ibmvnic: rename ibmvnic_send_req_caps to send_request_cap (bsc#1184114 ltc#
    192237 bsc#1179243 ltc#189290).
  o ibmvnic: rename send_cap_queries to send_query_cap (bsc#1184114 ltc#192237
    bsc#1179243 ltc#189290).
  o ibmvnic: rename send_map_query to send_query_map (bsc#1184114 ltc#192237
    bsc#1179243 ltc#189290).
  o ibmvnic: rework to ensure SCRQ entry reads are properly ordered (bsc#
    1184114 ltc#192237 bsc#1183871 ltc#192139).
  o ibmvnic: send_login should check for crq errors (bsc#1184114 ltc#192237 bsc
    #1179243 ltc#189290).
  o ibmvnic: simplify reset_long_term_buff function (bsc#1184114 ltc#192237 bsc
    #1183023 ltc#191791).
  o ibmvnic: skip send_request_unmap for timeout reset (bsc#1184114 ltc#192237
    bsc#1182485 ltc#191591).
  o ibmvnic: skip tx timeout reset while in resetting (bsc#1184114 ltc#192237
    bsc#1179243 ltc#189290).
  o ibmvnic: stop free_all_rwi on failed reset (bsc#1184114 ltc#192237 bsc#
    1179243 ltc#189290).
  o ibmvnic: store RX and TX subCRQ handle array in ibmvnic_adapter struct (bsc
    #1184114 ltc#192237 bsc#1179243 ltc#189290).
  o ibmvnic: substitute mb() with dma_wmb() for send_*crq* functions (bsc#
    1184114 ltc#192237 bsc#1183023 ltc#191791).
  o ibmvnic: track pending login (bsc#1184114 ltc#192237 bsc#1179243 ltc#
    189290).
  o ibmvnic: Use netdev_alloc_skb instead of alloc_skb to replenish RX buffers
    (bsc#1184114 ltc#192237 bsc#1179243 ltc#189290).
  o ibmvnic: Use 'skb_frag_address()' instead of hand coding it (bsc#1184114
    ltc#192237).
  o ice: Account for port VLAN in VF max packet size calculation (bsc#1118661).
  o igc: check return value of ret_val in igc_config_fc_after_link_up (bsc#
    1118657).
  o igc: Report speed and duplex as unknown when device is runtime suspended
    (jsc#SLE-4799).
  o igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr
    (bsc#1118657).
  o iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel
    (git-fixes).
  o iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler
    (git-fixes).
  o iio: hid-sensor-humidity: Fix alignment issue of timestamp channel
    (git-fixes).
  o iio: hid-sensor-prox: Fix scale not correct issue (git-fixes).
  o iio: hid-sensor-temperature: Fix issues of timestamp channel (git-fixes).
  o Input: i8042 - add ASUS Zenbook Flip to noselftest list (git-fixes).
  o Input: i8042 - unbreak Pegatron C15B (git-fixes).
  o Input: raydium_ts_i2c - do not send zero length (git-fixes).
  o Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox
    Series X|S (git-fixes).
  o Input: xpad - sync supported devices with fork on GitHub (git-fixes).
  o iommu/amd: Fix sleeping in atomic in increase_address_space() (bsc#
    1183378).
  o iommu/intel: Fix memleak in intel_irq_remapping_alloc (bsc#1183379).
  o iommu/vt-d: Avoid panic if iommu init fails in tboot system (bsc#1183380).
  o iommu/vt-d: Do not use flush-queue when caching-mode is on (bsc#1183381).
  o ixgbe: fail to create xfrm offload of IPsec tunnel mode SA (bsc#1113994).
  o kABI: Fix kABI after modifying struct __call_single_data (bsc#1180846).
  o kabi/severities: Add rtas_online_cpus_mask, rtas_offline_cpus_mask
  o kernel/smp: add boot parameter for controlling CSD lock debugging (bsc#
    1180846).
  o kernel/smp: add more data to CSD lock debugging (bsc#1180846).
  o kernel/smp: prepare more CSD lock debugging (bsc#1180846).
  o kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
  o KVM: x86: Allow guests to see MSR_IA32_TSX_CTRL even if tsx=off (bsc#
    1183382).
  o lib/crc32test: remove extra local_irq_disable/enable (git-fixes).
  o locking/mutex: Fix non debug version of mutex_lock_io_nested() (git-fixes).
  o mac80211: fix double free in ibss_leave (git-fixes).
  o mac80211: fix rate mask reset (git-fixes).
  o media: usbtv: Fix deadlock on suspend (git-fixes).
  o media: uvcvideo: Allow entities with no pads (git-fixes).
  o misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom
    (git-fixes).
  o mmc: core: Fix partition switch time for eMMC (git-fixes).
  o mmc: core: Use DEFINE_DEBUGFS_ATTRIBUTE instead of DEFINE_SIMPLE_ATTRIBUTE.
  o mmc: cqhci: Fix random crash when remove mmc module/card (git-fixes).
  o mmc: sdhci-esdhc-imx: fix kernel panic when remove module (git-fixes).
  o mmc: sdhci-of-arasan: Add missed checks for devm_clk_register()
    (git-fixes).
  o mwifiex: pcie: skip cancel_work_sync() on reset failure path (git-fixes).
  o net: bridge: use switchdev for port flags set through sysfs too (bsc#
    1112374).
  o net: cdc-phonet: fix data-interface release on probe failure (git-fixes).
  o net: core: introduce __netdev_notify_peers (bsc#1184114 ltc#192237 bsc#
    1183871 ltc#192139).
  o net: ethernet: ibm: ibmvnic: Fix some kernel-doc misdemeanours (bsc#1184114
    ltc#192237 bsc#1183871 ltc#192139).
  o net: hns3: add a check for index in hclge_get_rss_key() (bsc#1126390).
  o net: hns3: add a check for queue_id in hclge_reset_vf_queue() (bsc#
    1104353).
  o net: hns3: fix bug when calculating the TCAM table info (bsc#1104353).
  o net: hns3: fix query vlan mask value error for flow director (bsc#1104353).
  o net/mlx5e: Update max_opened_tc also when channels are closed (bsc#
    1103990).
  o net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081
    (bsc#1119113).
  o net: re-solve some conflicts after net -> net-next merge (bsc#1184114 ltc#
    192237 bsc#1176855 ltc#187293).
  o net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405)
  o net: usb: ax88179_178a: fix missing stop entry in driver_info (git-fixes).
  o net: usb: qmi_wwan: allow qmimux add/del with master up (git-fixes).
  o PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller
    (git-fixes).
  o PCI: Align checking of syscall user config accessors (git-fixes).
  o phy: rockchip-emmc: emmc_phy_init() always return 0 (git-fixes).
  o platform/x86: i2c-multi-instantiate: Do not create platform device for
    INT3515 ACPI nodes (git-fixes).
  o powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (bsc#
    1065729).
  o powerpc/book3s64/radix: Remove WARN_ON in destroy_context() (bsc#1183692
    ltc#191963).
  o powerpc: Convert to using %pOFn instead of device_node.name (bsc#1181674
    ltc#189159).
  o powerpc: Fix some spelling mistakes (bsc#1181674 ltc#189159).
  o powerpc/hvcall: add token and codes for H_VASI_SIGNAL (bsc#1181674 ltc#
    189159).
  o powerpc: kABI: add back suspend_disable_cpu in machdep_calls (bsc#1181674
    ltc#189159).
  o powerpc/machdep: remove suspend_disable_cpu() (bsc#1181674 ltc#189159).
  o powerpc/mm/pkeys: Make pkey access check work on execute_only_key (bsc#
    1181544 ltc#191080 git-fixes).
  o powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477 ltc#175530).
  o powerpc/numa: make vphn_enabled, prrn_enabled flags const (bsc#1181674 ltc#
    189159).
  o powerpc/numa: remove ability to enable topology updates (bsc#1181674 ltc#
    189159).
  o powerpc/numa: remove arch_update_cpu_topology (bsc#1181674 ltc#189159).
  o powerpc/numa: Remove late request for home node associativity (bsc#1181674
    ltc#189159).
  o powerpc/numa: remove prrn_is_enabled() (bsc#1181674 ltc#189159).
  o powerpc/numa: remove start/stop_topology_update() (bsc#1181674 ltc#189159).
  o powerpc/numa: remove timed_topology_update() (bsc#1181674 ltc#189159).
  o powerpc/numa: remove unreachable topology timer code (bsc#1181674 ltc#
    189159).
  o powerpc/numa: remove unreachable topology update code (bsc#1181674 ltc#
    189159).
  o powerpc/numa: remove unreachable topology workqueue code (bsc#1181674 ltc#
    189159).
  o powerpc/numa: remove vphn_enabled and prrn_enabled internal flags (bsc#
    1181674 ltc#189159).
  o powerpc/numa: stub out numa_update_cpu_topology() (bsc#1181674 ltc#189159).
  o powerpc/numa: Suppress "VPHN is not supported" messages (bsc#1181674 ltc#
    189159).
  o powerpc/pmem: Include pmem prototypes (bsc#1113295 git-fixes).
  o powerpc/pseries: Add empty update_numa_cpu_lookup_table() for NUMA=n (bsc#
    1181674 ltc#189159).
  o powerpc/pseries: Do not enforce MSI affinity with kdump (bsc#1181655 ltc#
    190855).
  o powerpc/pseries: Generalize hcall_vphn() (bsc#1181674 ltc#189159).
  o powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops
    (bsc#1181674 ltc#189159).
  o powerpc/pseries/hibernation: pass stream id via function arguments (bsc#
    1181674 ltc#189159).
  o powerpc/pseries/hibernation: perform post-suspend fixups later (bsc#1181674
    ltc#189159).
  o powerpc/pseries/hibernation: remove prepare_late() callback (bsc#1181674
    ltc#189159).
  o powerpc/pseries/hibernation: remove pseries_suspend_cpu() (bsc#1181674 ltc#
    189159).
  o powerpc/pseries/hibernation: switch to rtas_ibm_suspend_me() (bsc#1181674
    ltc#189159).
  o powerpc/pseries/mobility: add missing break to default case (bsc#1181674
    ltc#189159).
  o powerpc/pseries/mobility: Add pr_debug() for device tree changes (bsc#
    1181674 ltc#189159).
  o powerpc/pseries/mobility: do not error on absence of ibm, update-nodes (bsc
    #1181674 ltc#189159).
  o powerpc/pseries/mobility: error message improvements (bsc#1181674 ltc#
    189159).
  o powerpc/pseries/mobility: extract VASI session polling logic (bsc#1181674
    ltc#189159).
  o powerpc/pseries/mobility: handle premature return from H_JOIN (bsc#1181674
    ltc#189159 git-fixes bsc#1183662 ltc#191922).
  o powerpc/pseries/mobility: refactor node lookup during DT update (bsc#
    1181674 ltc#189159).
  o powerpc/pseries/mobility: retry partition suspend after error (bsc#1181674
    ltc#189159).
  o powerpc/pseries/mobility: Set pr_fmt() (bsc#1181674 ltc#189159).
  o powerpc/pseries/mobility: signal suspend cancellation to platform (bsc#
    1181674 ltc#189159).
  o powerpc/pseries/mobility: use rtas_activate_firmware() on resume (bsc#
    1181674 ltc#189159).
  o powerpc/pseries/mobility: use stop_machine for join/suspend (bsc#1181674
    ltc#189159).
  o powerpc/pseries/mobility: use struct for shared state (bsc#1181674 ltc#
    189159 git-fixes bsc#1183662 ltc#191922).
  o powerpc/pseries/ras: Remove unused variable 'status' (bsc#1065729).
  o powerpc/pseries: remove dlpar_cpu_readd() (bsc#1181674 ltc#189159).
  o powerpc/pseries: remove memory "re-add" implementation (bsc#1181674 ltc#
    189159).
  o powerpc/pseries: remove obsolete memory hotplug DT notifier code (bsc#
    1181674 ltc#189159).
  o powerpc/pseries: remove prrn special case from DT update path (bsc#1181674
    ltc#189159).
  o powerpc/rtas: add rtas_activate_firmware() (bsc#1181674 ltc#189159).
  o powerpc/rtas: add rtas_ibm_suspend_me() (bsc#1181674 ltc#189159).
  o powerpc/rtas: complete ibm,suspend-me status codes (bsc#1181674 ltc#
    189159).
  o powerpc/rtas: dispatch partition migration requests to pseries (bsc#1181674
    ltc#189159).
  o powerpc/rtasd: simplify handle_rtas_event(), emit message on events (bsc#
    1181674 ltc#189159).
  o powerpc/rtas: prevent suspend-related sys_rtas use on LE (bsc#1181674 ltc#
    189159).
  o powerpc/rtas: remove rtas_ibm_suspend_me_unsafe() (bsc#1181674 ltc#189159).
  o powerpc/rtas: remove rtas_suspend_cpu() (bsc#1181674 ltc#189159).
  o powerpc/rtas: remove unused rtas_suspend_last_cpu() (bsc#1181674 ltc#
    189159).
  o powerpc/rtas: remove unused rtas_suspend_me_data (bsc#1181674 ltc#189159).
  o powerpc/rtas: rtas_ibm_suspend_me -> rtas_ibm_suspend_me_unsafe (bsc#
    1181674 ltc#189159).
  o powerpc/rtas: Unexport rtas_online_cpus_mask, rtas_offline_cpus_mask (bsc#
    1181674 ltc#189159).
  o powerpc/vio: Use device_type to detect family (bsc#1181674 ltc#189159).
  o printk: fix deadlock when kernel panic (bsc#1183018).
  o pseries/drmem: do not cache node id in drmem_lmb struct (bsc#1132477 ltc#
    175530).
  o pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc
    #175530).
  o pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()
    (git-fixes).
  o qxl: Fix uninitialised struct field head.surface_id (git-fixes).
  o random: fix the RNDRESEEDCRNG ioctl (git-fixes).
  o rcu: Allow only one expedited GP to run concurrently with (git-fixes)
  o rcu: Fix missed wakeup of exp_wq waiters (git-fixes)
  o RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation (bsc#1103991).
  o RDMA/rxe: Remove useless code in rxe_recv.c (bsc#1103992 ).
  o RDMA/srp: Fix support for unpopulated and unbalanced NUMA nodes (bsc#
    1169709)
  o RDMA/uverbs: Fix kernel-doc warning of _uverbs_alloc (bsc#1103992).
  o Revert "ibmvnic: remove never executed if statement" (bsc#1184114 ltc#
    192237 bsc#1179243 ltc#189290).
  o rpadlpar: fix potential drc_name corruption in store functions (bsc#1183416
    ltc#191079).
  o rsxx: Return -EFAULT if copy_to_user() fails (git-fixes).
  o s390/cio: return -EFAULT if copy_to_user() fails (git-fixes).
  o s390/cio: return -EFAULT if copy_to_user() fails (git-fixes).
  o s390/crypto: return -EFAULT if copy_to_user() fails (git-fixes).
  o s390/dasd: fix hanging offline processing due to canceled worker (bsc#
    1175165).
  o s390/dasd: fix hanging offline processing due to canceled worker (bsc#
    1175165).
  o s390/pci: Fix s390_mmio_read/write with MIO (LTC#192079 bsc#1183755).
  o s390/vtime: fix increased steal time accounting (bsc#1183861).
  o sched/fair: Fix wrong cpu selecting from isolated domain (git-fixes)
  o sched/vtime: Fix guest/system mis-accounting on task switch (git-fixes)
  o scsi: lpfc: Change wording of invalid pci reset log message (bsc#1182574).
  o scsi: lpfc: Correct function header comments related to ndlp reference
    counting (bsc#1182574).
  o scsi: lpfc: Fix ADISC handling that never frees nodes (bsc#1182574).
  o scsi: lpfc: Fix ancient double free (bsc#1182574).
  o scsi: lpfc: Fix crash caused by switch reboot (bsc#1182574).
  o scsi: lpfc: Fix dropped FLOGI during pt2pt discovery recovery (bsc#
    1182574).
  o scsi: lpfc: Fix EEH encountering oops with NVMe traffic (bsc#1182574).
  o scsi: lpfc: Fix FLOGI failure due to accessing a freed node (bsc#1182574).
  o scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
    (bsc#1182574).
  o scsi: lpfc: Fix kerneldoc inconsistency in lpfc_sli4_dump_page_a0() (bsc#
    1182574).
  o scsi: lpfc: Fix lpfc_els_retry() possible null pointer dereference (bsc#
    1182574).
  o scsi: lpfc: Fix nodeinfo debugfs output (bsc#1182574).
  o scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() (bsc#
    1182574).
  o scsi: lpfc: Fix 'physical' typos (bsc#1182574).
  o scsi: lpfc: Fix PLOGI ACC to be transmit after REG_LOGIN (bsc#1182574).
  o scsi: lpfc: Fix pt2pt connection does not recover after LOGO (bsc#1182574).
  o scsi: lpfc: Fix pt2pt state transition causing rmmod hang (bsc#1182574).
  o scsi: lpfc: Fix reftag generation sizing errors (bsc#1182574).
  o scsi: lpfc: Fix stale node accesses on stale RRQ request (bsc#1182574).
  o scsi: lpfc: Fix status returned in lpfc_els_retry() error exit path (bsc#
    1182574).
  o scsi: lpfc: Fix unnecessary null check in lpfc_release_scsi_buf (bsc#
    1182574).
  o scsi: lpfc: Fix use after free in lpfc_els_free_iocb (bsc#1182574).
  o scsi: lpfc: Fix vport indices in lpfc_find_vport_by_vpid() (bsc#1182574).
  o scsi: lpfc: Reduce LOG_TRACE_EVENT logging for vports (bsc#1182574).
  o scsi: lpfc: Update copyrights for 12.8.0.7 and 12.8.0.8 changes (bsc#
    1182574).
  o scsi: lpfc: Update lpfc version to 12.8.0.8 (bsc#1182574).
  o selinux: never allow relabeling on context mounts (git-fixes).
  o smb3: add dynamic trace point to trace when credits obtained (bsc#1181507).
  o smb3: fix crediting for compounding when only one request in flight (bsc#
    1181507).
  o smp: Add source and destination CPUs to __call_single_data (bsc#1180846).
  o Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#
    1180846).
  o Update config files: disable CONFIG_CSD_LOCK_WAIT_DEBUG (bsc#1180846).
  o usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio
    slot (git-fixes).
  o usbip: fix stub_dev to check for stream socket (git-fixes).
  o usbip: fix stub_dev usbip_sockfd_store() races leading to gpf (git-fixes).
  o usbip: Fix unsafe unaligned pointer usage (git-fixes).
  o usbip: fix vhci_hcd attach_store() races leading to gpf (git-fixes).
  o usbip: fix vhci_hcd to check for stream socket (git-fixes).
  o usbip: tools: fix build error for multiple definition (git-fixes).
  o usb: quirks: add quirk to start video capture on ELMO L-12F document camera
    reliable (git-fixes).
  o usb: replace hardcode maximum usb string length by definition (git-fixes).
  o usb: serial: io_edgeport: fix memory leak in edge_startup (git-fixes).
  o usb: serial: option: add Quectel EM160R-GL (git-fixes).
  o usb-storage: Add quirk to defeat Kindle's automatic unload (git-fixes).
  o use __netdev_notify_peers in ibmvnic (bsc#1184114 ltc#192237 bsc#1183871
    ltc#192139).
  o video: fbdev: acornfb: remove free_unused_pages() (bsc#1129770)
  o video: fbdev: atmel_lcdfb: fix return error code in (bsc#1129770)
    Backporting notes: * context changes * fallout from trailing whitespaces
  o vsprintf: Do not have bprintf dereference pointers (bsc#1184494).
  o vsprintf: Do not preprocess non-dereferenced pointers for bprintf (%px and
    %pK) (bsc#1184494).
  o vsprintf: Fix off-by-one bug in bstr_printf() processing dereferenced
    pointers (bsc#1184494).
  o wlcore: Fix command execute failure 19 for wl12xx (git-fixes).
  o x86/ioapic: Ignore IRQ2 again (12sp5).
  o x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc
    () (12sp5).
  o xen/gnttab: handle p2m update errors on a per-slot basis (bsc#1183022
    XSA-367).
  o xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
  o xen/netback: fix spurious event detection for common event case (bsc#
    1182175).
  o xen-netback: respect gnttab_map_refs()'s return value (bsc#1183022
    XSA-367).
  o xfs: Fix assert failure in xfs_setattr_size() (git-fixes).
  o xsk: Remove dangling function declaration from header file (bsc#1109837).

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  o SUSE Linux Enterprise Workstation Extension 12-SP5:
    zypper in -t patch SUSE-SLE-WE-12-SP5-2021-1210=1
  o SUSE Linux Enterprise Software Development Kit 12-SP5:
    zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-1210=1
  o SUSE Linux Enterprise Server 12-SP5:
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-1210=1
  o SUSE Linux Enterprise Live Patching 12-SP5:
    zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2021-1210=1
  o SUSE Linux Enterprise High Availability 12-SP5:
    zypper in -t patch SUSE-SLE-HA-12-SP5-2021-1210=1

Package List:

  o SUSE Linux Enterprise Workstation Extension 12-SP5 (x86_64):
       kernel-default-debuginfo-4.12.14-122.66.2
       kernel-default-debugsource-4.12.14-122.66.2
       kernel-default-extra-4.12.14-122.66.2
       kernel-default-extra-debuginfo-4.12.14-122.66.2
  o SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le
    s390x x86_64):
       kernel-obs-build-4.12.14-122.66.2
       kernel-obs-build-debugsource-4.12.14-122.66.2
  o SUSE Linux Enterprise Software Development Kit 12-SP5 (noarch):
       kernel-docs-4.12.14-122.66.2
  o SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64):
       kernel-default-4.12.14-122.66.2
       kernel-default-base-4.12.14-122.66.2
       kernel-default-base-debuginfo-4.12.14-122.66.2
       kernel-default-debuginfo-4.12.14-122.66.2
       kernel-default-debugsource-4.12.14-122.66.2
       kernel-default-devel-4.12.14-122.66.2
       kernel-syms-4.12.14-122.66.2
  o SUSE Linux Enterprise Server 12-SP5 (noarch):
       kernel-devel-4.12.14-122.66.2
       kernel-macros-4.12.14-122.66.2
       kernel-source-4.12.14-122.66.2
  o SUSE Linux Enterprise Server 12-SP5 (x86_64):
       kernel-default-devel-debuginfo-4.12.14-122.66.2
  o SUSE Linux Enterprise Server 12-SP5 (s390x):
       kernel-default-man-4.12.14-122.66.2
  o SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64):
       kernel-default-debuginfo-4.12.14-122.66.2
       kernel-default-debugsource-4.12.14-122.66.2
       kernel-default-kgraft-4.12.14-122.66.2
       kernel-default-kgraft-devel-4.12.14-122.66.2
       kgraft-patch-4_12_14-122_66-default-1-8.3.2
  o SUSE Linux Enterprise High Availability 12-SP5 (ppc64le s390x x86_64):
       cluster-md-kmp-default-4.12.14-122.66.2
       cluster-md-kmp-default-debuginfo-4.12.14-122.66.2
       dlm-kmp-default-4.12.14-122.66.2
       dlm-kmp-default-debuginfo-4.12.14-122.66.2
       gfs2-kmp-default-4.12.14-122.66.2
       gfs2-kmp-default-debuginfo-4.12.14-122.66.2
       kernel-default-debuginfo-4.12.14-122.66.2
       kernel-default-debugsource-4.12.14-122.66.2
       ocfs2-kmp-default-4.12.14-122.66.2
       ocfs2-kmp-default-debuginfo-4.12.14-122.66.2


References:

  o https://www.suse.com/security/cve/CVE-2020-0433.html
  o https://www.suse.com/security/cve/CVE-2020-25670.html
  o https://www.suse.com/security/cve/CVE-2020-25671.html
  o https://www.suse.com/security/cve/CVE-2020-25672.html
  o https://www.suse.com/security/cve/CVE-2020-25673.html
  o https://www.suse.com/security/cve/CVE-2020-27170.html
  o https://www.suse.com/security/cve/CVE-2020-27171.html
  o https://www.suse.com/security/cve/CVE-2020-27815.html
  o https://www.suse.com/security/cve/CVE-2020-29368.html
  o https://www.suse.com/security/cve/CVE-2020-29374.html
  o https://www.suse.com/security/cve/CVE-2020-35519.html
  o https://www.suse.com/security/cve/CVE-2020-36311.html
  o https://www.suse.com/security/cve/CVE-2021-20219.html
  o https://www.suse.com/security/cve/CVE-2021-26930.html
  o https://www.suse.com/security/cve/CVE-2021-26931.html
  o https://www.suse.com/security/cve/CVE-2021-26932.html
  o https://www.suse.com/security/cve/CVE-2021-27363.html
  o https://www.suse.com/security/cve/CVE-2021-27364.html
  o https://www.suse.com/security/cve/CVE-2021-27365.html
  o https://www.suse.com/security/cve/CVE-2021-28038.html
  o https://www.suse.com/security/cve/CVE-2021-28660.html
  o https://www.suse.com/security/cve/CVE-2021-28688.html
  o https://www.suse.com/security/cve/CVE-2021-28964.html
  o https://www.suse.com/security/cve/CVE-2021-28971.html
  o https://www.suse.com/security/cve/CVE-2021-28972.html
  o https://www.suse.com/security/cve/CVE-2021-29154.html
  o https://www.suse.com/security/cve/CVE-2021-29264.html
  o https://www.suse.com/security/cve/CVE-2021-29265.html
  o https://www.suse.com/security/cve/CVE-2021-29647.html
  o https://www.suse.com/security/cve/CVE-2021-30002.html
  o https://www.suse.com/security/cve/CVE-2021-3428.html
  o https://www.suse.com/security/cve/CVE-2021-3444.html
  o https://www.suse.com/security/cve/CVE-2021-3483.html
  o https://bugzilla.suse.com/1065600
  o https://bugzilla.suse.com/1065729
  o https://bugzilla.suse.com/1103990
  o https://bugzilla.suse.com/1103991
  o https://bugzilla.suse.com/1103992
  o https://bugzilla.suse.com/1104270
  o https://bugzilla.suse.com/1104353
  o https://bugzilla.suse.com/1109837
  o https://bugzilla.suse.com/1111981
  o https://bugzilla.suse.com/1112374
  o https://bugzilla.suse.com/1113295
  o https://bugzilla.suse.com/1113994
  o https://bugzilla.suse.com/1118657
  o https://bugzilla.suse.com/1118661
  o https://bugzilla.suse.com/1119113
  o https://bugzilla.suse.com/1126390
  o https://bugzilla.suse.com/1129770
  o https://bugzilla.suse.com/1132477
  o https://bugzilla.suse.com/1142635
  o https://bugzilla.suse.com/1152446
  o https://bugzilla.suse.com/1154048
  o https://bugzilla.suse.com/1169709
  o https://bugzilla.suse.com/1172455
  o https://bugzilla.suse.com/1173485
  o https://bugzilla.suse.com/1175165
  o https://bugzilla.suse.com/1176720
  o https://bugzilla.suse.com/1176855
  o https://bugzilla.suse.com/1178163
  o https://bugzilla.suse.com/1178181
  o https://bugzilla.suse.com/1179243
  o https://bugzilla.suse.com/1179428
  o https://bugzilla.suse.com/1179454
  o https://bugzilla.suse.com/1179660
  o https://bugzilla.suse.com/1179755
  o https://bugzilla.suse.com/1180846
  o https://bugzilla.suse.com/1181507
  o https://bugzilla.suse.com/1181515
  o https://bugzilla.suse.com/1181544
  o https://bugzilla.suse.com/1181655
  o https://bugzilla.suse.com/1181674
  o https://bugzilla.suse.com/1181747
  o https://bugzilla.suse.com/1181753
  o https://bugzilla.suse.com/1181843
  o https://bugzilla.suse.com/1182011
  o https://bugzilla.suse.com/1182175
  o https://bugzilla.suse.com/1182485
  o https://bugzilla.suse.com/1182574
  o https://bugzilla.suse.com/1182715
  o https://bugzilla.suse.com/1182716
  o https://bugzilla.suse.com/1182717
  o https://bugzilla.suse.com/1183018
  o https://bugzilla.suse.com/1183022
  o https://bugzilla.suse.com/1183023
  o https://bugzilla.suse.com/1183378
  o https://bugzilla.suse.com/1183379
  o https://bugzilla.suse.com/1183380
  o https://bugzilla.suse.com/1183381
  o https://bugzilla.suse.com/1183382
  o https://bugzilla.suse.com/1183405
  o https://bugzilla.suse.com/1183416
  o https://bugzilla.suse.com/1183509
  o https://bugzilla.suse.com/1183593
  o https://bugzilla.suse.com/1183646
  o https://bugzilla.suse.com/1183662
  o https://bugzilla.suse.com/1183686
  o https://bugzilla.suse.com/1183692
  o https://bugzilla.suse.com/1183696
  o https://bugzilla.suse.com/1183755
  o https://bugzilla.suse.com/1183775
  o https://bugzilla.suse.com/1183861
  o https://bugzilla.suse.com/1183871
  o https://bugzilla.suse.com/1184114
  o https://bugzilla.suse.com/1184120
  o https://bugzilla.suse.com/1184167
  o https://bugzilla.suse.com/1184168
  o https://bugzilla.suse.com/1184170
  o https://bugzilla.suse.com/1184192
  o https://bugzilla.suse.com/1184193
  o https://bugzilla.suse.com/1184196
  o https://bugzilla.suse.com/1184198
  o https://bugzilla.suse.com/1184391
  o https://bugzilla.suse.com/1184393
  o https://bugzilla.suse.com/1184397
  o https://bugzilla.suse.com/1184494
  o https://bugzilla.suse.com/1184511
  o https://bugzilla.suse.com/1184583

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQIVAwUBYHkCYuNLKJtyKPYoAQjAmxAAlo1s8TKrSK+05UOY4k1c/IxEfBAIMXv0
qa+iy4HmCKOcMw5cNFldtWHyjl/iVenae6trPBUmxMc1Ew0D2spIHEt025Ouv8i1
SKjaNukZRzua0g8/OTYazVuvAL1VWtf/xF8DVWXzQGPaZHQGaFBQtgUzP2Uu8stP
HAOveWygM/K6qb1ezpZOYUCK8M6QQO7ajKamwGNeTMM5Tjqov1DLeg98IW67ieEl
fVYiwJ0NvUnBFDkmm4ks+e70Xy368ri3U8aUKcKGPwgXOjbvRW0LlcpkyiIHPKJX
MrKXnaYxFX/JKEzVE+BRXjBKhkhSAWaLX+RksJ8zgTEerg7UUohpi2CXTVaQDn2x
zNONVzbvIjZvYUrCATLcb6JTiJKd3+vtH8fFPu0QT0fIr1gpMg4sClTMjh5ev5SU
7cKtpy0d2F1fYFKUEhyUKlVCqdlEy50hgOxtYSueatzzs15eSi25/wSvePFYPsgt
03lyidBjUFQpmooRsFHI8ZZQTINHNwWYU8XQWwFmaqEStNGy4YB3uuH128mQwFX6
eCRqnoUCOyoYWWaXk4/59ENf7U7gaRzrMRczXa/EB8SrW4PztrqLMaRRNbWMDx6t
va/hePzk8DUrun61P/b2/g0MCa3z/ems7/vwtpayH9pfwwztYh0t73FUh+UeIyYg
TcEgUISYiI8=
=Lr2+
-----END PGP SIGNATURE-----