SUSE-SU-2017:2956-1

The SUSE Linux Enterprise 12 SP2 RT kernel was updated to 4.4.88 to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2017-1000365: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMITSTACK/RLIMINFINITY (1/4 of the size), but did not take the argument and environment pointers into account, which allowed attackers to bypass this limitation (bnc#1039354)
• CVE-2017-1000112: Prevent race condition in net-packet code that could have been exploited by unprivileged users to gain root access. (bnc#1052311)
• CVE-2017-1000251: The native Bluetooth stack was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in remote code execution in kernel space (bnc#1057389)
• CVE-2017-14051: An integer overflow in the qla2x00sysfswriteoptromctl function in drivers/scsi/qla2xxx/qla_attr.c allowed local users to cause a denial of service (memory corruption and system crash) by leveraging root access (bnc#1056588)
• CVE-2017-8831: The saa7164busget function allowed local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a 'double fetch' vulnerability (bnc#1037994)
• CVE-2017-1000252: Wrong gsi values via KVM_IRQFD allowed unprivileged users using KVM to cause DoS on Intel systems (bsc#1058038).
• CVE-2017-1000111: Prevent in packetsetring on PACKET_RESERVE (bsc#1052365).
• CVE-2017-10810: Memory leak in the virtiogpuobjectcreate function in drivers/gpu/drm/virtio/virtgpuobject.c allowed attackers to cause a denial of service (memory consumption) by triggering object-initialization failures (bnc#1047277).
• CVE-2017-11472: The acpinsterminate() function did not flush the operand cache and causes a kernel stack dump, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table (bnc#1049580).
• CVE-2017-11473: Buffer overflow in the mpoverridelegacy_irq() function allowed local users to gain privileges via a crafted ACPI table (bnc#1049603).
• CVE-2017-12134: The xenbiovecphys_mergeable function might have allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation (bnc#1051790).
• CVE-2017-12154: L2 guest could have accessed hardware(L0) CR8 register and crashed the host system (bsc#1058507).
• CVE-2017-14106: The tcpdisconnect function allowed local users to cause a denial of service (tcpselectwindow divide-by-zero error and system crash) by triggering a disconnect within a certain tcprecvmsg code path (bnc#1056982).
• CVE-2017-7518: Faulty debug exception via syscall emulation allowed non-linux guests to escalate their privileges in the guest (bsc#1045922).
• CVE-2017-7533: Race condition in the fsnotify implementation allowed local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotifyhandleevent and vfs_rename functions (bsc#1049483).
• CVE-2017-7541: The brcmfcfg80211mgmttx function allowed local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211CMD_FRAME Netlink packet (bsc#1049645).
• CVE-2017-7542: The ip6find1stfragopt function allowed local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket (bsc#1049882).

The following non-security bugs were fixed:

• ACPI / processor: Avoid reserving IO regions too early (bsc#1051478).
• ACPI / scan: Prefer devices without _HID for _ADR matching.
• ALSA: fm801: Initialize chip after IRQ handler is registered (bsc#1031717).
• ALSA: hda - Add stereo mic quirk for Lenovo G50-70 (17aa:3978) (bsc#1020657).
• ALSA: hda - Fix endless loop of codec configure (bsc#1031717).
• ALSA: hda - Implement mic-mute LED mode enum (bsc#1055013).
• ALSA: hda - set input_path bitmap to zero after moving it to new place (bsc#1031717).
• ALSA: hda/realtek - Add support headphone Mic for ALC221 of HP platform (bsc#1024405).
• ALSA: ice1712: Add support for STAudio ADCIII (bsc#1048934).
• ALSA: usb-audio: Apply sample rate quirk to Sennheiser headset (bsc#1052580).
• Add 'shutdown' to 'struct class' (bsc#1053117).
• Bluetooth: bnep: fix possible might sleep error in bnep_session (bsc#1031784).
• Bluetooth: cmtp: fix possible might sleep error in cmtp_session (bsc#1031784).
• Bluetooth: hidp: fix possible might sleep error in hidpsessionthread (bsc#1031784).
• Drivers: hv: Fix the bug in generating the guest ID.
• Drivers: hv: util: Fix a typo.
• Drivers: hv: vmbus: Get the current time from the current clocksource (bnc#1044112, bnc#1042778, bnc#1029693).
• Drivers: hv: vmbus: Move the code to signal end of message.
• Drivers: hv: vmbus: Move the definition of generateguestid().
• Drivers: hv: vmbus: Move the definition of hvx64msrhypercallcontents.
• Drivers: hv: vmbus: Restructure the clockevents code.
• Fix kABI breakage by KVM CVE fix (bsc#1045922).
• IB/hfi1: Wait for QSFP modules to initialize (bsc#1019151).
• Input: gpio-keys - fix check for disabling unsupported keys (bsc#1031717).
• KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
• KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC (bsc#1051478).
• KVM: x86: avoid simultaneous queueing of both IRQ and SMI (bsc#1051478).
• MD: fix sleep in atomic (bsc#1040351).
• More Git-commit header fixups No functional change intended.
• NFS: Cache aggressively when file is open for writing (bsc#1033587).
• NFS: Do not flush caches for a getattr that races with writeback (bsc#1033587).
• NFS: flush data when locking a file to ensure cache coherence for mmap (bsc#981309).
• NFS: invalidate file size when taking a lock (git-fixes).
• NFS: only invalidate dentrys that are clearly invalid (bsc#1047118).
• PCI / PM: Fix native PME handling during system suspend/resume (bsc#1051478).
• PCI: Add Mellanox device IDs (bsc#1051478).
• PCI: Convert Mellanox broken INTx quirks to be for listed devices only (bsc#1051478).
• PCI: Correct PCISTDRESOURCE_END usage (bsc#1051478).
• PCI: Enable ECRC only if device supports it (bsc#1051478).
• PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+ (bsc#1051478).
• PCI: dwc: Fix uninitialized variable in dwhandlemsi_irq() (bsc#1051478).
• PCI: dwc: dra7xx: Use RW1C for IRQSTATUSMSI and IRQSTATUSMAIN (bsc#1051478).
• PM / Hibernate: Fix scheduling while atomic during hibernation (bsc#1051059).
• Revert '/proc/iomem: only expose physical resource addresses to privileged users' (kabi).
• Revert 'ACPI / video: Add force_native quirk for HP Pavilion dv6' (bsc#1031717).
• Revert 'Add 'shutdown' to 'struct class'.' (kabi).
• Revert 'KVM: x86: fix emulation of RSM and IRET instructions' (kabi).
• Revert 'Make file credentials available to the seqfile interfaces' (kabi).
• Revert 'mm/listlru.c: fix listlrucountnode() to be race free' (kabi).
• Revert 'powerpc/numa: Fix percpu allocations to be NUMA aware' (bsc#1048914).
• Revert 'tpm: Issue a TPM2_Shutdown for TPM2 devices.' (kabi).
• USB: core: fix device node leak (bsc#1047487).
• Update kabi files: sync with 4.4.74 updates
• af_key: Add lock to key dump (bsc#1047653).
• afkey: Fix slab-out-of-bounds in pfkeycompile_policy (bsc#1047354).
• b43: Add missing MODULE_FIRMWARE() (bsc#1037344).
• bcache: force trigger gc (bsc#1038078).
• bcache: force trigger gc (bsc#1038078).
• bcache: only recovery I/O error for writethrough mode (bsc#1043652).
• bcache: only recovery I/O error for writethrough mode (bsc#1043652).
• bdi: Fix use-after-free in wbcongestedput() (bsc#1040307).
• blacklist.conf: 9eeacd3a2f17 not a bug fix (bnc#1050061)
• blacklist.conf: Blacklist c133c7615751 ('x86/nmi: Fix timeout test in testnmiipi()') It only fixes a self-test (bsc#1051478).
• blacklist.conf: Blacklist c9525a3fab63 ('x86/watchdog: Fix Kconfig help text file path reference to lockup watchdog documentation') Updates only kconfig help-text (bsc#1051478).
• blacklist.conf: add inapplicable commits for wifi (bsc#1031717)
• blacklist.conf: add unapplicable drm fixes (bsc#1031717).
• blacklist.conf: add unapplicable/cosmetic iwlwifi fixes (bsc#1031717).
• blkfront: add uevent for size change (bnc#1036632).
• block: Allow bdi re-registration (bsc#1040307).
• block: Fix front merge check (bsc#1051239).
• block: Make del_gendisk() safer for disks without queues (bsc#1040307).
• block: Move bdiunregister() to delgendisk() (bsc#1040307).
• block: do not allow updates through sysfs until registration completes (bsc#1047027).
• bnxt: add a missing rcu synchronization (bnc#1038583).
• bnxt: do not busy-poll when link is down (bnc#1038583).
• bnxt_en: Enable MRU enables bit when configuring VNIC MRU (bnc#1038583).
• bnxt_en: Fix 'uninitialized variable' bug in TPA code path (bnc#1038583).
• bnxt_en: Fix NULL pointer dereference in a failure path during open (bnc#1038583).
• bnxt_en: Fix NULL pointer dereference in reopen failure path (bnc#1038583).
• bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
• bnxt_en: Fix VF virtual link state (bnc#1038583).
• bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
• bnxten: Fix and clarify linkinfo->advertising (bnc#1038583).
• bnxten: Fix ring arithmetic in bnxtsetup_tc() (bnc#1038583).
• bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
• bnxt_en: Refactor TPA code path (bnc#1038583).
• bnxten: fix pci cleanup in bnxtinit_one() failure path (bnc#1038583).
• bnxt_en: initialize rc to zero to avoid returning garbage (bnc#1038583).
• brcmfmac: Fix glomskb leak in brcmfsdiodrecvchain (bsc#1031717).
• btrfs: Add WARN_ON for qgroup reserved underflow (bsc#1031515).
• btrfs: Do not clear SGID when inheriting ACLs (bsc#1030552).
• btrfs: add condresched to btrfsqgrouptraceleaf_items (bsc#1028286).
• btrfs: fix early ENOSPC due to delalloc (bsc#1049226).
• btrfs: fix lockup in findfreeextent with read-only block groups (bsc#1046682).
• btrfs: incremental send, fix invalid path for link commands (bsc#1051479).
• btrfs: incremental send, fix invalid path for unlink commands (bsc#1051479).
• btrfs: resume qgroup rescan on rw remount (bsc#1047152).
• btrfs: send, fix invalid path after renaming and linking file (bsc#1051479).
• ceph: fix readpage from fscache (bsc#1057015).
• cpuidle: dt: Add missing 'ofnodeput()' (bnc#1022476).
• crypto: s5p-sss - fix incorrect usage of scatterlists api (bsc#1048317).
• cx82310eth: use skbcow_head() to deal with cloned skbs (bsc# 1045154).
• cxgb4: Fix stack out-of-bounds read due to wrong size to t4recordmbox() (bsc#1021424 bsc#1022743).
• cxl: Unlock on error in probe (bsc#1034762, Pending SUSE Kernel Fixes).
• dentry name snapshots (bsc#1049483).
• dm: fix second blkdelayqueue() parameter to be in msec units not (bsc#1047670).
• drivers: hv: vmbus: Increase the time between retries in vmbuspostmsg() (bnc#1044112).
• drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
• drm/amdgpu: Fix overflow of watermark calcs at greater than 4k resolutions (bsc#1031717).
• drm/bochs: Implement nomodeset (bsc#1047096).
• drm/i915/fbdev: Stop repeating tile configuration on stagnation (bsc#1031717).
• drm/i915: Fix scaler init during CRTC HW state readout (bsc#1031717).
• drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821).
• drm/virtio: do not leak bo on drmgemobject_init failure (bsc#1047277).
• drm/vmwgfx: Fix large topology crash (bsc#1048155).
• drm/vmwgfx: Limit max desktop dimensions to 8Kx8K (bsc#1048155).
• drm/vmwgfx: Support topology greater than texture size (bsc#1048155).
• efi/libstub: Skip GOP with PIXELBLTONLY format (bnc#974215).
• ext2: Do not clear SGID when inheriting ACLs (bsc#1030552).
• ext4: Do not clear SGID when inheriting ACLs (bsc#1030552).
• ext4: avoid unnecessary stalls in ext4evictinode() (bsc#1049486).
• ext4: handle the rest of ext4mbload_buddy() ENOMEM errors (bsc#1012829).
• fs/fcntl: f_setown, avoid undefined behaviour (bnc#1006180).
• fuse: initialize the flock flag in fuse_file on allocation (git-fixes).
• gcov: add support for gcc version greater than 6 (bsc#1051663).
• gcov: support GCC 7.1 (bsc#1051663).
• gfs2: Do not clear SGID when inheriting ACLs (bsc#1012829).
• gfs2: fix flock panic issue (bsc#1012829).
• hrtimer: Catch invalid clockids again (bsc#1047651).
• hrtimer: Revert CLOCKMONOTONICRAW support (bsc#1047651).
• hv_util: switch to using timespec64.
• hv_utils: drop .getcrosststamp() support from PTP driver (bnc#1044112, bnc#1042778, bnc#1029693).
• hv_utils: fix TimeSync work on pre-TimeSync-v4 hosts (bnc#1044112, bnc#1042778, bnc#1029693).
• i2c: designware-baytrail: fix potential null pointer dereference on dev (bsc#1011913).
• i40e: Removal of workaround for simple MAC address filter deletion (bsc#1039915).
• i40e: When searching all MAC/VLAN filters, ignore removed filters (bsc#1039915).
• i40e: add VSI info to macaddr messages (bsc#1039915).
• i40e: add hw struct local variable (bsc#1039915).
• i40e: add private flag to control source pruning (bsc#1034075).
• i40e: avoid O(n^2) loop when deleting all filters (bsc#1039915).
• i40e: avoid looping to check whether we're in VLAN mode (bsc#1039915).
• i40e: delete filter after adding its replacement when converting (bsc#1039915).
• i40e: do not add broadcast filter for VFs (bsc#1039915).
• i40e: do not allow i40evsi(add|kill)_vlan to operate when VID lower than 1 (bsc#1039915).
• i40e: drop isvf and isnetdev fields in struct i40emacfilter (bsc#1039915).
• i40e: enable VSI broadcast promiscuous mode instead of adding broadcast filter (bsc#1039915).
• i40e: factor out addition/deletion of VLAN per each MAC address (bsc#1039915).
• i40e: fix MAC filters when removing VLANs (bsc#1039915).
• i40e: fold the i40eisvsiinvlan check into i40eputmacinvlan (bsc#1039915).
• i40e: implement _i40edel_filter and use where applicable (bsc#1039915).
• i40e: make use of _devucsync and _devmcsync (bsc#1039915).
• i40e: move all updates for VLAN mode into i40esyncvsi_filters (bsc#1039915).
• i40e: move i40eputmacinvlan and i40edelmacallvlan (bsc#1039915).
• i40e: no need to check isvsiinvlan before calling i40edelmacall_vlan (bsc#1039915).
• i40e: properly cleanup on allocation failure in i40esyncvsi_filters (bsc#1039915).
• i40e: recalculate vsi->active_filters from hash contents (bsc#1039915).
• i40e: refactor Rx filter handling (bsc#1039915).
• i40e: refactor i40eputmacinvlan to avoid changing f->vlan (bsc#1039915).
• i40e: refactor i40eupdatefilterstate to avoid passing aqerr (bsc#1039915).
• i40e: remove code to handle dev_addr specially (bsc#1039915).
• i40e: remove duplicate add/delete adminq command code for filters (bsc#1039915).
• i40e: remove second check of VLANNVID in i40evlanrxaddvid (bsc#1039915).
• i40e: removed unreachable code (bsc#1039915).
• i40e: rename i40eputmacinvlan and i40edelmacallvlan (bsc#1039915).
• i40e: restore workaround for removing default MAC filter (bsc#1039915).
• i40e: set broadcast promiscuous mode for each active VLAN (bsc#1039915).
• i40e: store MAC/VLAN filters in a hash with the MAC Address as key (bsc#1039915).
• i40e: use (add|rm)vlanall_mac helper functions when changing PVID (bsc#1039915).
• i40e: when adding or removing MAC filters, correctly handle VLANs (bsc#1039915).
• i40e: write HENA for VFs (bsc#1039915).
• ibmvnic: Check for transport event on driver resume (bsc#1051556, bsc#1052709).
• ibmvnic: Clean up resources on probe failure (bsc#1058116).
• ibmvnic: Initialize SCRQ's during login renegotiation (bsc#1052223).
• ibmvnic: Report rx buffer return codes as netdev_dbg (bsc#1052794).
• iio: hid-sensor: fix return of -EINVAL on invalid values in ret or value (bsc#1031717).
• introduce the walkprocesstree() helper (bnc#1022476).
• iommu/amd: Fix schedule-while-atomic BUG in initialization code (bsc1052533).
• ipv4: Should use consistent conditional judgement for ip fragment in _ipappenddata and ipfinish_output (bsc#1041958).
• ipv6: Should use consistent conditional judgement for ip6 fragment between _ip6appenddata and ip6finish_output (bsc#1041958).
• iwlwifi: missing error code in iwltranspcie_alloc() (bsc#1031717).
• iwlwifi: mvm: compare full command ID.
• iwlwifi: mvm: do not send CTDP commands via debugfs if not supported (bsc#1031717).
• iwlwifi: mvm: reset the fwdumpdesc pointer after ASSERT (bsc#1031717).
• iwlwifi: mvm: synchronize firmware DMA paging memory.
• iwlwifi: mvm: unconditionally stop device after init (bsc#1031717).
• iwlwifi: mvm: unmap the paging memory before freeing it.
• iwlwifi: pcie: fix command completion name debug (bsc#1031717).
• kABI-fix for 'x86/panic: replace smpsendstop() with kdump friendly version in panic path' (bsc#1051478).
• kernel/*: switch to memdupusernul() (bsc#1048893).
• kvm: nVMX: Fix nestedvmxcheckmsrbitmap_controls (bsc#1051478).
• lib: test_rhashtable: Fix KASAN warning (bsc#1055359).
• lib: test_rhashtable: fix for large entry counts (bsc#1055359).
• libnvdimm, pmem: fix a NULL pointer BUG in ndpmemnotify (bsc#1023175).
• libnvdimm: fix badblock range handling of ARS range (bsc#1023175).
• lightnvm: nvme reset_controller is not working after adapter's firmware upgrade (bsc#988784).
• lightnvm: remove unused rq parameter of nvmenvmrqtocmd() to kill warning.
• mac80211_hwsim: Replace bogus hrtimer clockid (bsc#1047651).
• md/raid5: fix a race condition in stripe batch (linux-stable).
• mm, madvise: ensure poisoned pages are removed from per-cpu lists (VM hw poison -- git fixes).
• mm-adaptive-hash-table-scaling-v5 (bnc#1036303).
• mm/pagealloc.c: apply gfpallowed_mask before the first allocation attempt (bnc#971975 VM -- git fixes).
• mm: adaptive hash table scaling (bnc#1036303).
• mm: call pageextinit() after all struct pages are initialized (VM Debugging Functionality, bsc#1047048).
• mm: drop HASH_ADAPT (bnc#1036303).
• mm: fix classzoneidx underflow in shrinkzones() (VM Functionality, bsc#1042314).
• mm: make PRSETTHP_DISABLE immediately active (bnc#1048891).
• mptsas: Fixup device hotplug for VMWare ESXi (bsc#1030850).
• mwifiex: do not update MCS set from hostapd (bsc#1031717).
• net/mlx5: Fix driver load error flow when firmware is stuck (git-fixes).
• net: account for current skb length when deciding about UFO (bsc#1041958).
• net: ena: add hardware hints capability to the driver (bsc#1047121).
• net: ena: add missing return when enacomgetiohandlers() fails (bsc#1047121).
• net: ena: add missing unmap bars on device removal (bsc#1047121).
• net: ena: add reset reason for each device FLR (bsc#1047121).
• net: ena: add support for out of order rx buffers refill (bsc#1047121).
• net: ena: allow the driver to work with small number of msix vectors (bsc#1047121).
• net: ena: bug fix in lost tx packets detection mechanism (bsc#1047121).
• net: ena: change return value for unsupported features unsupported return value (bsc#1047121).
• net: ena: change sizeof() argument to be the type pointer (bsc#1047121).
• net: ena: disable admin msix while working in polling mode (bsc#1047121).
• net: ena: fix bug that might cause hang after consecutive open/close interface (bsc#1047121).
• net: ena: fix race condition between submit and completion admin command (bsc#1047121).
• net: ena: fix rare uncompleted admin command false alarm (bsc#1047121).
• net: ena: fix theoretical Rx hang on low memory systems (bsc#1047121).
• net: ena: separate skb allocation to dedicated function (bsc#1047121).
• net: ena: update driver's rx drop statistics (bsc#1047121).
• net: ena: update ena driver to version 1.1.7 (bsc#1047121).
• net: ena: update ena driver to version 1.2.0 (bsc#1047121).
• net: ena: use lower32bits()/upper32bits() to split dma address (bsc#1047121).
• net: ena: use napischeduleirqoff when possible (bsc#1047121).
• net: handle NAPIGROFREESTOLENHEAD case also in napifragsfinish() (bsc#1042286).
• net: phy: Do not perform software reset for Generic PHY (bsc#1042286).
• netfilter: fix ISERRVALUE usage (bsc#1052888).
• netfilter: x_tables: pack percpu counter allocations (bsc#1052888).
• netfilter: xtables: pass xtcounters struct instead of packet counter (bsc#1052888).
• netfilter: xtables: pass xtcounters struct to counter allocator (bsc#1052888).
• new helper: memdupusernul() (bsc#1048893).
• ocfs2: Do not clear SGID when inheriting ACLs (bsc#1030552).
• ocfs2: Make ocfs2setacl() static (bsc#1030552).
• ocfs2: fix deadlock caused by recursive locking in xattr (bsc#1012829).
• of: fix '/cpus' reference leak in ofnumaparsecpunodes() (bsc#1056827).
• ovl: fix dentry leak for default_permissions (bsc#1054084).
• percpu_ref: allow operation mode switching operations to be called concurrently (bsc#1055096).
• percpu_ref: remove unnecessary RCU grace period for staggered atomic switching confirmation (bsc#1055096).
• percpuref: reorganize _percpurefswitchtoatomic() and relocate percpurefswitchtoatomic() (bsc#1055096).
• percpu_ref: restructure operation mode switching (bsc#1055096).
• percpu_ref: unify staggered atomic switching wait behavior (bsc#1055096).
• perf/x86/intel: Cure bogus unwind from PEBS entries (bsc#1051478).
• perf/x86/intel: Fix PEBSv3 record drain (bsc#1051478).
• perf/x86: Fix spurious NMI with PEBS Load Latency event (bsc#1051478).
• platform/x86: ideapad-laptop: Add IdeaPad 310-15IKB to nohwrfkill (bsc#1051022).
• platform/x86: ideapad-laptop: Add IdeaPad V310-15ISK to nohwrfkill (bsc#1051022).
• platform/x86: ideapad-laptop: Add IdeaPad V510-15IKB to nohwrfkill (bsc#1051022).
• platform/x86: ideapad-laptop: Add Lenovo Yoga 910-13IKB to nohwrfkill dmi list (bsc#1051022).
• platform/x86: ideapad-laptop: Add Y520-15IKBN to nohwrfkill (bsc#1051022).
• platform/x86: ideapad-laptop: Add Y700 15-ACZ to nohwrfkill DMI list (bsc#1051022).
• platform/x86: ideapad-laptop: Add Y720-15IKBN to nohwrfkill (bsc#1051022).
• platform/x86: ideapad-laptop: Add several models to nohwrfkill (bsc#1051022).
• prctl: propagate haschildsubreaper flag to every descendant (bnc#1022476).
• qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773, LTC#157374).
• reiserfs: Do not clear SGID when inheriting ACLs (bsc#1030552).
• rpm/kernel-binary.spec.in: find-debuginfo.sh should not touch build-id This needs rpm-4.14+ (bsc#964063).
• rtnetlink: fix rtnlvfinfosize (bsc#1056261).
• s390: export symbols for crash-kmp (bsc#1053915).
• sched/core: Allow _schedsetscheduler() in interrupts when PI is not used (bnc#1022476).
• sched/debug: Print the scheduler topology group mask (bnc#1022476).
• sched/fair, cpumask: Export foreachcpu_wrap() (bnc#1022476).
• sched/fair: Fix O(nr_cgroups) in load balance path (bnc#1022476).
• sched/fair: Use taskgroups instead of leafcfsrqlist to walk all cfs_rqs (bnc#1022476).
• sched/topology: Add schedgroupcapacity debugging (bnc#1022476).
• sched/topology: Fix building of overlapping sched-groups (bnc#1022476).
• sched/topology: Fix overlapping schedgroupcapacity (bnc#1022476).
• sched/topology: Move comment about asymmetric node setups (bnc#1022476).
• sched/topology: Refactor function buildoverlapsched_groups() (bnc#1022476).
• sched/topology: Remove FORCESDOVERLAP (bnc#1022476).
• sched/topology: Simplify buildoverlapsched_groups() (bnc#1022476).
• sched/topology: Small cleanup (bnc#1022476).
• sched/topology: Verify the first group matches the child domain (bnc#1022476).
• scsi: Add STARGETCREATEREMOVE state to scsitargetstate (bsc#1013887).
• scsi: bnx2i: missing error code in bnx2iepconnect() (bsc#1048221).
• scsi: kABI fix for new state STARGETCREATEDREMOVE (bsc#1013887).
• scsi: storvsc: Workaround for virtual DVD SCSI version (bnc#1044636).
• scsi_devinfo: fixup string compare (bsc#1037404).
• scsidhalua: suppress errors from unsupported devices (bsc#1038792).
• smsc75xx: use skbcowhead() to deal with cloned skbs (bsc#1045154).
• sr9700: use skbcowhead() to deal with cloned skbs (bsc#1045154).
• supported.conf: clear mistaken external support flag for cifs.ko (bsc#1053802).
• sysctl: do not print negative flag for proc_douintvec (bnc#1046985).
• sysctl: fix lax sysctlchecktable() sanity check (bsc#1048893).
• sysctl: fold sysctlwritesstrict checks into helper (bsc#1048893).
• sysctl: kdoc'ify sysctlwritesstrict (bsc#1048893).
• sysctl: simplify unsigned int support (bsc#1048893).
• timers: Plug locking race vs. timer migration (bnc#1022476).
• tpm: Issue a TPM2_Shutdown for TPM2 devices (bsc#1053117).
• tpm: KABI fix (bsc#1053117).
• tpm: fix: return rc when devmaddaction() fails (bsc#1020645, bsc#1034048).
• tpm: read burstcount from TPM_STS in one 32-bit transaction (bsc#1020645, bsc#1034048).
• tpmtiscore: Choose appropriate timeout for reading burstcount (bsc#1020645, bsc#1034048).
• tpmtiscore: convert max timeouts from msec to jiffies (bsc#1020645, bsc#1034048).
• tty: serial: msm: Support more bauds (git-fixes).
• ubifs: Correctly evict xattr inodes (bsc#1012829).
• ubifs: Do not leak kernel memory to the MTD (bsc#1012829).
• udf: Fix deadlock between writeback and udf_setsize() (bsc#1012829).
• udf: Fix races with i_size changes during readpage (bsc#1012829).
• vfs: fix missing inodegetdev sites (bsc#1052049).
• x86/LDT: Print the real LDT base address (bsc#1051478).
• x86/dmi: Switch dmiremap() from ioremap() to ioremapcache() (bsc#1051399).
• x86/mce: Make timer handling more robust (bsc#1042422).
• x86/panic: replace smpsendstop() with kdump friendly version in panic path (bsc#1051478).
• xen-netfront: Rework the fix for Rx stall during OOM and network stress (git-fixes).
• xen/balloon: do not online new memory initially (bnc#1028173).
• xen/pvh*: Support greater than 32 VCPUs at domain restore (bnc#1045563).
• xen: allocate page for shared info page from low memory (bnc#1038616).
• xen: hold lockdevicehotplug throughout vcpu hotplug operations (bsc#1042422).
• xfrm: NULL dereference on allocation failure (bsc#1047343).
• xfrm: Oops on error in pfkeymsg2xfrmstate() (bsc#1047653).
• xfs: Do not clear SGID when inheriting ACLs (bsc#1030552).
• xfs: do not BUG() on mixed direct and mapped I/O (bsc#1050188).
• xfs: fix inobt inode allocation search optimization (bsc#1012829).