SUSE-SU-2018:2980-1

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2018-14617: Prevent NULL pointer dereference and panic in hfsplus_lookup() when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory (bsc#1102870)
• CVE-2018-14613: Prevent invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image, caused by a lack of block group item validation in check_leaf_item (bsc#1102896).
• CVE-2018-10940: The cdrom_ioctl_media_changed function allowed local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory (bsc#1092903)
• CVE-2018-13093: Prevent NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occured because of a lack of proper validation that cached inodes are free during allocation (bnc#1100001)
• CVE-2018-13094: Prevent OOPS that may have occured for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp (bnc#1100000)
• CVE-2018-13095: Prevent denial of service (memory corruption and BUG) that could have occurred for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork (bnc#1099999)
• CVE-2018-12896: Prevent integer overflow in the POSIX timer code that was caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically made the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. This allowed a local user to cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls (bnc#1099922)
• CVE-2018-16658: Prevent information leak in cdrom_ioctl_drive_status that could have been used by local attackers to read kernel memory (bnc#1107689)
• CVE-2018-6555: The irda_setsockopt function allowed local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (bnc#1106511)
• CVE-2018-6554: Prevent memory leak in the irda_bind function that allowed local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket (bnc#1106509)
• CVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol (bnc#1096748)
• CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service (bnc#1096748)
• CVE-2018-10938: A crafted network packet sent remotely by an attacker forced the kernel to enter an infinite loop in the cipso_v4_optptr() function leading to a denial-of-service (bnc#1106016)

The following non-security bugs were fixed:

• /dev/mem: Add bounce buffer for copy-out (git-fixes).
• /dev/mem: Avoid overwriting 'err' in read_mem() (git-fixes).
• 9p/net: Fix zero-copy path in the 9p virtio transport (bsc#1051510).
• 9p/virtio: fix off-by-one error in sg list bounds check (bsc#1051510).
• 9p: fix multiple NULL-pointer-dereferences (bsc#1051510).
• ACPI / EC: Add another entry for Thinkpad X1 Carbon 6th (bsc#1051510).
• ACPI / EC: Add parameter to force disable the GPE on suspend (bsc#1051510).
• ACPI / EC: Use ec_no_wakeup on ThinkPad X1 Yoga 3rd (bsc#1051510).
• ACPI / EC: Use ec_no_wakeup on Thinkpad X1 Carbon 6th (bsc#1051510).
• ACPI / EC: Use ec_no_wakeup on more Thinkpad X1 Carbon 6th systems (bsc#1051510).
• ACPI / PCI: pci_link: Allow the absence of _PRS and change log level (bsc#1104172).
• ACPI / bus: Only call dmi_check_system on X86 (bsc#1105597, bsc#1106178).
• ACPI / scan: Initialize status to ACPI_STA_DEFAULT (bsc#1051510).
• ACPI/IORT: Remove temporary iort_get_id_mapping_index() ACPICA guard (bsc#1103387).
• ACPI/PCI: pci_link: reduce verbosity when IRQ is enabled (bsc#1104172).
• ACPICA: iasl: Add SMMUv3 device ID mapping index support (bsc#1103387).
• ALSA: cs46xx: Deliver indirect-PCM transfer error.
• ALSA: emu10k1: Deliver indirect-PCM transfer error.
• ALSA: fireface: fix memory leak in ff400_switch_fetching_mode() (bsc#1051510).
• ALSA: firewire-digi00x: fix memory leak of private data (bsc#1051510).
• ALSA: firewire-tascam: fix memory leak of private data (bsc#1051510).
• ALSA: hda - Fix cancel_work_sync() stall from jackpoll work (bsc#1051510).
• ALSA: mips: Deliver indirect-PCM transfer error.
• ALSA: oxfw: fix memory leak for model-dependent data at error path (bsc#1051510).
• ALSA: oxfw: fix memory leak of discovered stream formats at error path (bsc#1051510).
• ALSA: oxfw: fix memory leak of private data (bsc#1051510).
• ALSA: pcm: Call ack() whenever appl_ptr is updated.
• ALSA: pcm: Fix negative appl_ptr handling in pcm-indirect helpers.
• ALSA: pcm: Fix possible inconsistent appl_ptr update via mmap.
• ALSA: pcm: Simplify forward/rewind codes.
• ALSA: pcm: Skip ack callback without actual appl_ptr update.
• ALSA: pcm: Use a common helper for PCM state check and hwsync.
• ALSA: pcm: Workaround for weird PulseAudio behavior on rewind error.
• ALSA: rme32: Deliver indirect-PCM transfer error.
• ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot (bsc#1051510).
• ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary cores (bsc#1051510).
• ARM: hisi: fix error handling and missing of_node_put (bsc#1051510).
• ARM: hisi: handle of_iomap and fix missing of_node_put (bsc#1051510).
• ARM: imx: flag failure of of_iomap (bsc#1051510).
• ARM: imx_v4_v5_defconfig: Select ULPI support (bsc#1051510).
• ARM: imx_v6_v7_defconfig: Select ULPI support (bsc#1051510).
• ARM: pxa: irq: fix handling of ICMR registers in suspend/resume (bsc#1051510).
• ASoC: rsnd: fixup not to call clk_get/set under non-atomic (bsc#1051510).
• ASoC: rsnd: move rsnd_ssi_config_init() execute condition into it (bsc#1051510).
• ASoC: rsnd: update pointer more accurate (bsc#1051510).
• ASoC: wm8994: Fix missing break in switch (bsc#1051510).
• Apply e666d4e9ceec crypto: vmx - Use skcipher for ctr fallback to SLE12-SP4 (bsc#1106464).
• Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV (bsc#1051510).
• Bluetooth: hidp: Fix handling of strncpy for hid->name information (bsc#1051510).
• Prevent errors at reboot (bsc#1093389)
• Documentation: add some docs for errseq_t (bsc#1107008).
• Fix buggy backport of patches.drivers/libnvdimm-btt-fix-an-incompatibility-in-the-log-layout.patch (bsc#1103961).
• Fix kABI breakage due to enum addition for ath10k (bsc#1051510).
• HID: add quirk for another PIXART OEM mouse used by HP (bsc#1051510).
• HID: i2c-hid: Add no-irq-after-reset quirk for 0911:5288 device.
• IB/core: type promotion bug in rdma_rw_init_one_mr() (bsc#1046306).
• IB/hfi1: Invalid NUMA node information can cause a divide by zero (bsc#1060463).
• IB/hfi1: Remove incorrect call to do_interrupt callback (bsc#1060463).
• IB/hfi1: Set in_use_ctxts bits for user ctxts only (bsc#1060463 ).
• IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler (bsc#1046307).
• IB/ipoib: Fix error return code in ipoib_dev_init() (bsc#1046307 ).
• IB/mlx4: Test port number before querying type (bsc#1046302 ).
• IB/mlx4: Use 4K pages for kernel QP's WQE buffer (bsc#1046302 ).
• Input: atmel_mxt_ts - only use first T9 instance (bsc#1051510).
• Input: edt-ft5x06 - fix error handling for factory mode on non-M06 (bsc#1051510).
• Input: edt-ft5x06 - implement support for the EDT-M12 series (bsc#1051510).
• Input: edt-ft5x06 - make distinction between m06/m09/generic more clear (bsc#1051510).
• Input: synaptics-rmi4 - fix axis-swap behavior (bsc#1051510).
• KABI: tpm: change relinquish_locality return value back to void (bsc#1082555).
• KABI: tpm: do keep the cmd_ready and go_idle as pm ops (bsc#1082555).
• KVM/x86: remove WARN_ON() for when vm_munmap() fails (bsc#1106240).
• KVM: Enforce error in ioctl for compat tasks when !KVM_COMPAT (bsc#1106240).
• KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages (bsc#1077761, git-fixes, bsc#1103948, bsc#1103949).
• KVM: VMX: Work around kABI breakage in 'enum vmx_l1d_flush_state' (bsc#1106369).
• KVM: VMX: fixes for vmentry_l1d_flush module parameter (bsc#1106369).
• KVM: nVMX: Do not flush TLB when vmcs12 uses VPID (bsc#1106240).
• KVM: nVMX: Fix injection to L2 when L1 do not intercept external-interrupts (bsc#1106240).
• KVM: nVMX: Fix races when sending nested PI while dest enters/leaves L2 (bsc#1106240).
• KVM: nVMX: Re-evaluate L1 pending events when running L2 and L1 got posted-interrupt (bsc#1106240).
• KVM: s390: add etoken support for guests (bsc#1106948, LTC#171029).
• KVM: s390: force bp isolation for VSIE (bsc#1103421).
• KVM: s390: implement CPU model only facilities (bsc#1106948, LTC#171029).
• KVM: x86: Change __kvm_apic_update_irr() to also return if max IRR updated (bsc#1106240).
• KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (git-fixes 1f50ddb4f418).
• KVM: x86: fix APIC page invalidation (bsc#1106240).
• NET: stmmac: align DMA stuff to largest cache line length (netfilter-stable-18_08_01).
• NFSv4 client live hangs after live data migration recovery (git-fixes).
• NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence() (git-fixes).
• NFSv4: Fix possible 1-byte stack overflow in nfs_idmap_read_and_verify_message (git-fixes).
• Netperf performance issue due to AppArmor net mediation (bsc#1108520)
• PCI: Match Root Port's MPS to endpoint's MPSS as necessary (bsc#1109269).
• PCI: OF: Fix I/O space page leak (git-fixes).
• PCI: aardvark: Fix I/O space page leak (git-fixes).
• PCI: hotplug: Do not leak pci_slot on registration failure (bsc#1051510).
• PCI: hv: Make sure the bus domain is really unique (git-fixes).
• PCI: mvebu: Fix I/O space end address calculation (bsc#1051510).
• PCI: pciehp: Fix use-after-free on unplug (bsc#1051510).
• PM / Domains: Fix error path during attach in genpd (bsc#1051510).
• PM / clk: signedness bug in of_pm_clk_add_clks() (bsc#1051510).
• PM / runtime: Drop usage count for suppliers at device link removal (bsc#1100132).
• RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c (bsc#1050244).
• RDMA/bnxt_re: Fix a couple off by one bugs (bsc#1050244 ).
• RDMA/i40w: Hold read semaphore while looking after VMA (bsc#1058659).
• Refresh with the upstream patches for lan78xx fixes (bsc#1085262)
• Replace magic for trusting the secondary keyring with #define (bsc#1051510).
• Revert 'PCI: Add ACS quirk for Intel 300 series' (bsc#1051510).
• Revert 'UBIFS: Fix potential integer overflow in allocation' (bsc#1051510).
• Revert 'mm: page_alloc: skip over regions of invalid pfns where possible' (bnc#1107078).
• Revert 'vhost: cache used event for better performance' (bsc#1090528).
• Revert 'vmalloc: back off when the current task is killed' (bnc#1107073).
• Staging: vc04_services: remove unused variables.
• Tools: hv: vss: fix loop device detection.
• USB: net2280: Fix erroneous synchronization change (bsc#1051510).
• USB: serial: io_ti: fix array underflow in completion handler (bsc#1051510).
• USB: serial: ti_usb_3410_5052: fix array underflow in completion handler (bsc#1051510).
• Update patches.drivers/0016-arm64-vgic-v2-Fix-proxying-of-cpuif-access.patch (bsc#1106901, bsc#1107265).
• Update patches.fixes/4.4.139-043-powerpc-mm-hash-Add-missing-isync-prior-to-ke.patch (bnc#1012382, bsc#1094244).
• Update config files, make CRYPTO_CRCT10DIF_PCLMUL built-in (bsc#1105603).
• Update patch tag of dmi fix (bsc#1105597) Also moved to the sorted section.
• Update patch tags of recent security fixes (bsc#1106426)
• Update references (bsc#1064232)
• Workaround kABI breakage by __must_check drop of strscpy() (bsc#1051510).
• ahci: Add Intel Ice Lake LP PCI ID (bsc#1051510).
• apparmor: Fix regression in profile conflict logic (bsc#1106427)
• apparmor: ensure that undecidable profile attachments fail (bsc#1106427).
• apparmor: fix an error code in __aa_create_ns() (bsc#1106427).
• apparmor: remove no-op permission check in policy_unpack (bsc#1106427).
• arm64/acpi: Create arch specific cpu to acpi id helper (bsc#1106903).
• arm64/kasan: do not allocate extra shadow memory (bsc#1106897).
• arm64/mm/kasan: do not use vmemmap_populate() to initialize shadow (bsc#1106898).
• arm64: Enforce BBM for huge IO/VMAP mappings (bsc#1106890).
• arm64: Ignore hardware dirty bit updates in ptep_set_wrprotect() (bsc#1108010).
• arm64: Make sure permission updates happen for pmd/pud (bsc#1106891).
• arm64: dma-mapping: clear buffers allocated with FORCE_CONTIGUOUS flag (bsc#1106902).
• arm64: export memblock_reserve()d regions via /proc/iomem (bsc#1106892).
• arm64: fix unwind_frame() for filtered out fn for function graph tracing (bsc#1106900).
• arm64: fix vmemmap BUILD_BUG_ON() triggering on !vmemmap setups (bsc#1106896).
• arm64: fpsimd: Avoid FPSIMD context leakage for the init task (bsc#1106894).
• arm64: kasan: avoid pfn_to_nid() before page array is initialized (bsc#1106899).
• arm64: mm: Ensure writes to swapper are ordered wrt subsequent cache maintenance (bsc#1106906).
• arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid() (bsc#1106893).
• arm64: numa: rework ACPI NUMA initialization (bsc#1106905).
• arm64: vgic-v2: Fix proxying of cpuif access (bsc#1106901).
• ata: libahci: Allow reconfigure of DEVSLP register (bsc#1051510).
• ata: libahci: Correct setting of DEVSLP register (bsc#1051510).
• ath10k: disable bundle mgmt tx completion event support (bsc#1051510).
• ath10k: update the phymode along with bandwidth change request (bsc#1051510).
• ath9k: add MSI support.
• ath9k: report tx status on EOSP (bsc#1051510).
• ath9k_hw: fix channel maximum power level test (bsc#1051510).
• b43/leds: Ensure NUL-termination of LED name string (bsc#1051510).
• b43legacy/leds: Ensure NUL-termination of LED name string (bsc#1051510).
• bcache: avoid unncessary cache prefetch bch_btree_node_get().
• bcache: calculate the number of incremental GC nodes according to the total of btree nodes.
• bcache: display rate debug parameters to 0 when writeback is not running.
• bcache: do not check return value of debugfs_create_dir().
• bcache: finish incremental GC.
• bcache: fix I/O significant decline while backend devices registering.
• bcache: fix error setting writeback_rate through sysfs interface.
• bcache: free heap cache_set->flush_btree in bch_journal_free.
• bcache: make the pr_err statement used for ENOENT only in sysfs_attatch section.
• bcache: release dc->writeback_lock properly in bch_writeback_thread().
• bcache: set max writeback rate when I/O request is idle.
• bcache: simplify the calculation of the total amount of flash dirty data.
• Add a blacklist entry for the reverted patch (bsc#1106743)
• blk-mq: avoid to synchronize rcu inside blk_cleanup_queue() (bsc#1077989).
• blkdev: __blkdev_direct_IO_simple: fix leak in error case (bsc#1083663).
• block, bfq: return nbytes and not zero from struct cftype .write() method (bsc#1106238).
• block: bio_iov_iter_get_pages: fix size of last iovec (bsc#1083663).
• block: bio_iov_iter_get_pages: pin more pages for multi-segment IOs (bsc#1083663).
• block: do not print a message when the device went away (bsc#1098459).
• block: do not warn for flush on read-only device (bsc#1107756).
• bnxt_en: Clean up unused functions (bsc#1086282).
• bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA (bsc#1086282).
• bnxt_en: Fix VF mac address regression (bsc#1086282 ).
• bnxt_re: Fix couple of memory leaks that could lead to IOMMU call traces (bsc#1050244).
• bonding: avoid lockdep confusion in bond_get_stats() (netfilter-stable-18_08_04).
• bpf, s390: fix potential memleak when later bpf_jit_prog fails (bsc#1083647).
• bpf: fix references to free_bpf_prog_info() in comments (bsc#1083647).
• bpf: fix uninitialized variable in bpf tools (bsc#1083647).
• bpf: hash map: decrement counter on error (bsc#1083647).
• bpf: powerpc64: pad function address loads with NOPs (bsc#1083647).
• bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog() (bsc#1083647).
• brcmfmac: stop watchdog before detach and free everything (bsc#1051510).
• btrfs: Add checker for EXTENT_CSUM (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Add sanity check for EXTENT_DATA when reading out leaf (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Check if item pointer overlaps with the item itself (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Check that each block group has corresponding chunk at mount time (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Fix use-after-free when cleaning up fs_devs with a single stale device (bsc#1097105).
• btrfs: Handle error from btrfs_uuid_tree_rem call in _btrfs_ioctl_set_received_subvol (bsc#1097105).
• btrfs: Introduce mount time chunk <-> dev extent mapping check (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912).
• btrfs: Move leaf and node validation checker to tree-checker.c (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Round down values which are written for total_bytes_size (bsc#1043912).
• btrfs: Verify that every chunk has corresponding block group at mount time (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: fix error handling in btrfs_dev_replace_start (bsc#1107535).
• btrfs: round down size diff when shrinking/growing device (bsc#1097105).
• btrfs: tree-checker: Add checker for dir item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Detect invalid and empty essential trees (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Enhance btrfs_check_node output (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Enhance output for check_extent_data_item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Enhance output for btrfs_check_leaf (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Enhance output for check_csum_item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Fix false panic for sanity test (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Replace root parameter with fs_info (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Verify block_group_item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: use %zu format string for size_t (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: use %zu format string for size_t (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (bsc#1051510).
• ceph: fix incorrect use of strncpy (bsc#1107319).
• ceph: return errors from posix_acl_equiv_mode() correctly (bsc#1107320).
• cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE (bsc#1051510).
• cgroup: avoid copying strings longer than the buffers (bsc#1051510).
• cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf() (bsc#1051510).
• cifs: check kmalloc before use (bsc#1051510).
• cifs: store the leaseKey in the fid on SMB2_open (bsc#1051510).
• cls_matchall: fix tcf_unbind_filter missing (networking-stable-18_08_21).
• crypto: caam/jr - fix descriptor DMA unmapping (bsc#1051510).
• crypto: caam/qi - fix error path in xts setkey (bsc#1051510).
• crypto: vmx - Fix sleep-in-atomic bugs (bsc#1051510).
• cxl: Configure PSL to not use APC virtual machines (bsc#1055014, git-fixes).
• cxl: Fix wrong comparison in cxl_adapter_context_get() (bsc#1055014, git-fixes).
• dax: remove VM_MIXEDMAP for fsdax and device dax (bsc#1106007).
• dccp: fix undefined behavior with 'cwnd' shift in ccid2_cwnd_restart() (netfilter-stable-18_08_17).
• drm/amd/pp/Polaris12: Fix a chunk of registers missed to program (bsc#1051510).
• drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode (bsc#1051510).
• drm/amdgpu: fix swapped emit_ib_size in vce3 (bsc#1051510).
• drm/amdgpu: update tmr mc address (bsc#1100132).
• drm/amdgpu:add new firmware id for VCN (bsc#1051510).
• drm/amdgpu:add tmr mc address into amdgpu_firmware_info (bsc#1051510).
• drm/arm/malidp: Preserve LAYER_FORMAT contents when setting format (bsc#1051510).
• drm/armada: fix colorkey mode property (bsc#1051510).
• drm/armada: fix irq handling (bsc#1051510).
• drm/bridge/sii8620: Fix display of packed pixel modes (bsc#1051510).
• drm/bridge/sii8620: fix display of packed pixel modes in MHL2 (bsc#1051510).
• drm/bridge/sii8620: fix loops in EDID fetch logic (bsc#1051510).
• drm/bridge: adv7511: Reset registers on hotplug (bsc#1051510).
• drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80 (bsc#1051510).
• drm/exynos: decon5433: Fix WINCONx reset value (bsc#1051510).
• drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes (bsc#1051510).
• drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes (bsc#1051510).
• drm/i915/audio: Fix audio enumeration issue on BXT.
• drm/i915/gvt: Fix the incorrect length of child_device_config issue (bsc#1051510).
• drm/i915/gvt: clear ggtt entries when destroy vgpu (bsc#1051510).
• drm/i915/gvt: request srcu_read_lock before checking if one gfn is valid (bsc#1051510).
• drm/i915/kvmgt: Fix potential Spectre v1 (bsc#1051510).
• drm/i915/lpe: Mark LPE audio runtime pm as 'no callbacks' (bsc#1051510).
• drm/i915/overlay: Allocate physical registers from stolen (bsc#1051510).
• drm/i915: Increase LSPCON timeout (bsc#1051510).
• drm/i915: set DP Main Stream Attribute for color range on DDI platforms (bsc#1051510).
• drm/imx: imx-ldb: check if channel is enabled before printing warning (bsc#1051510).
• drm/imx: imx-ldb: disable LDB on driver bind (bsc#1051510).
• drm/modes: Introduce drm_mode_match().
• drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement (bsc#1051510).
• drm/tegra: Check for malformed offsets and sizes in the 'submit' IOCTL (bsc#1106170).
• drm/tegra: Fix comparison operator for buffer size (bsc#1100132).
• drm/vc4: Fix the 'no scaling' case on multi-planar YUV formats (bsc#1051510).
• drm: Add DRM client cap for aspect-ratio.
• drm: Add and handle new aspect ratios in DRM layer.
• drm: Add aspect ratio parsing in DRM layer.
• drm: Expose modes with aspect ratio, only if requested.
• drm: Handle aspect ratio info in legacy modeset path.
• drm: mali-dp: Enable Global SE interrupts mask for DP500 (bsc#1051510).
• dwc2: gadget: Fix ISOC IN DDMA PID bitfield value calculation (bsc#1051510).
• errseq: Add to documentation tree (bsc#1107008).
• errseq: Always report a writeback error once (bsc#1107008).
• ext4: sysfs: print ext4_super_block fields as little-endian (bsc#1106229).
• f2fs: remove unneeded memory footprint accounting (bsc#1106233).
• f2fs: remove unneeded memory footprint accounting (bsc#1106297).
• f2fs: validate before set/clear free nat bitmap (bsc#1106231).
• f2fs: validate before set/clear free nat bitmap (bsc#1106297).
• fat: fix memory allocation failure handling of match_strdup() (bsc#1051510).
• fb: fix lost console when the user unplugs a USB adapter (bsc#1051510).
• fbdev: omapfb: off by one in omapfb_register_client() (bsc#1051510).
• fix __legitimize_mnt()/mntput() race (bsc#1106297).
• fix a page leak in vhost_scsi_iov_to_sgl() error recovery (bsc#1051510).
• fix mntput/mntput race (bsc#1106297).
• fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed (bsc#1051510).
• fs/proc/proc_sysctl.c: fix potential page fault while unregistering sysctl table (bsc#1106297).
• fuse: Add missed unlock_page() to fuse_readpages_fill() (bsc#1106291).
• fuse: Fix oops at process_init_reply() (bsc#1106291).
• fuse: fix double request_end() (bsc#1106291).
• fuse: fix initial parallel dirops (bsc#1106291).
• fuse: fix unlocked access to processing queue (bsc#1106291).
• fuse: umount should wait for all requests (bsc#1106291).
• getxattr: use correct xattr length (bsc#1106235).
• getxattr: use correct xattr length (bsc#1106297).
• gpio: ml-ioh: Fix buffer underwrite on probe error path (bsc#1051510).
• gpio: tegra: Move driver registration to subsys_init level (bsc#1051510).
• gpiolib-acpi: make sure we trigger edge events at least once on boot (bsc#1051510).
• gpiolib: acpi: Switch to cansleep version of GPIO library call (bsc#1051510).
• gpu: host1x: Check whether size of unpin isn't 0 (bsc#1051510).
• gpu: ipu-v3: default to id 0 on missing OF alias (bsc#1051510).
• i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes (bsc#1051510).
• i2c: davinci: Avoid zero value of CLKH (bsc#1051510).
• i2c: i801: Add missing documentation entries for Braswell and Kaby Lake (bsc#1051510).
• i2c: i801: Add support for Intel Cedar Fork (bsc#1051510).
• i2c: i801: Add support for Intel Ice Lake (bsc#1051510).
• i2c: i801: Consolidate chipset names in documentation and Kconfig (bsc#1051510).
• i2c: i801: fix DNV's SMBCTRL register offset (bsc#1051510).
• i2c: imx: Fix race condition in dma read (bsc#1051510).
• i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP (bsc#1051510).
• i2c: uniphier: issue STOP only for last message or I2C_M_STOP (bsc#1051510).
• i2c: xiic: Make the start and the byte count write atomic (bsc#1051510).
• i2c: xlp9xx: Fix case where SSIF read transaction completes early (bsc#1105907).
• i2c: xlp9xx: Fix issue seen when updating receive length (bsc#1105907).
• i2c: xlp9xx: Make sure the transfer size is not more than I2C_SMBUS_BLOCK_SIZE (bsc#1105907).
• i40e: fix condition of WARN_ONCE for stat strings (bsc#1107522).
• ib_srpt: Fix a use-after-free in srpt_close_ch() (bsc#1046306 ).
• ibmvnic: Include missing return code checks in reset function (bnc#1107966).
• iommu/amd: Add support for IOMMU XT mode.
• iommu/amd: Add support for higher 64-bit IOMMU Control Register.
• iommu/amd: Finish TLB flush in amd_iommu_unmap() (bsc#1106105).
• iommu/amd: make sure TLB to be flushed before IOVA freed (bsc#1106105).
• iommu/arm-smmu-v3: Do not free page table ops twice (bsc#1106237).
• iommu/vt-d: Fix a potential memory leak (bsc#1106105).
• iommu/vt-d: Ratelimit each dmar fault printing (bsc#1106105).
• ipmi/powernv: Fix error return code in ipmi_powernv_probe() (git-fixes).
• ipmi: Fix some counter issues (bsc#1105907).
• ipmi: Move BT capabilities detection to the detect call (bsc#1106779).
• ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver (bsc#1105907).
• ipmi:bt: Set the timeout before doing a capabilities check (bsc#1051510).
• ipv4: remove BUG_ON() from fib_compute_spec_dst (netfilter-stable-18_08_01).
• irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP (bsc#1051510).
• iw_cxgb4: remove duplicate memcpy() in c4iw_create_listen() (bsc#1046543).
• ixgbe: Refactor queue disable logic to take completion time into account (bsc#1101557).
• ixgbe: Reorder Tx/Rx shutdown to reduce time needed to stop device (bsc#1101557).
• kabi fix for check_disk_size_change() (bsc#1098459).
• kabi protect hnae_ae_ops (bsc#1107924).
• kabi protect struct kvm_sync_regs (bsc#1106948).
• kabi/severities: Whitelist libceph, rbd, and ceph (bsc#1096748).
• kabi: move s390 mm_context_t lock to mm_struct and ignore the change (bsc#1103421).
• kabi: x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (bnc#1105536).
• kvm: arm64: Convert kvm_set_s2pte_readonly() from inline asm to cmpxchg() (bsc#1108010).
• kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 (bsc#1106105).
• kvm: nVMX: Use nested_run_pending rather than from_vmentry (bsc#1106240).
• kvm: x86: vmx: fix vpid leak (bsc#1106240).
• l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache (netfilter-stable-18_08_17).
• lan78xx: Lan7801 Support for Fixed PHY (bsc#1085262).
• lan78xx: Set ASD in MAC_CR when EEE is enabled (bsc#1085262).
• lan78xx: remove redundant initialization of pointer 'phydev' (bsc#1085262).
• lib/test_hexdump.c: fix failure on big endian cpu (bsc#1051510).
• libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store() (bsc#1051510).
• libbpf: Makefile set specified permission mode (bsc#1083647).
• libceph: check authorizer reply/challenge length before reading (bsc#1096748).
• libceph: factor out __ceph_x_decrypt() (bsc#1096748).
• libceph: factor out __prepare_write_connect() (bsc#1096748).
• libceph: factor out encrypt_authorizer() (bsc#1096748).
• libceph: store ceph_auth_handshake pointer in ceph_connection (bsc#1096748).
• libceph: weaken sizeof check in ceph_x_verify_authorizer_reply() (bsc#1096748).
• libnvdimm, btt: fix uninitialized err_lock (bsc#1103961).
• libnvdimm, nfit: enable support for volatile ranges (bsc#1103961).
• libnvdimm, nfit: move the check on nd_reserved2 to the endpoint (bsc#1103961).
• libnvdimm: Use max contiguous area for namespace size (git-fixes).
• libnvdimm: rename nd_sector_size_{show,store} to nd_size_select_{show,store} (bsc#1103961).
• livepatch: Remove reliable stacktrace check in klp_try_switch_task() (bsc#1071995).
• livepatch: Validate module/old func name length (bsc#1071995).
• llc: use refcount_inc_not_zero() for llc_sap_find() (netfilter-stable-18_08_17).
• mac80211: add stations tied to AP_VLANs during hw reconfig (bsc#1051510).
• mac80211: always account for A-MSDU header changes (bsc#1051510).
• mac80211: avoid kernel panic when building AMSDU from non-linear SKB (bsc#1051510).
• mac80211: fix an off-by-one issue in A-MSDU max_subframe computation (bsc#1051510).
• macros.kernel-source: pass -b properly in kernel module package (bsc#1107870).
• md-cluster: clear another node's suspend_area after the copy is finished (bsc#1106333).
• md-cluster: do not send msg if array is closing (bsc#1106333).
• md-cluster: release RESYNC lock after the last resync message (bsc#1106688).
• md-cluster: show array's status more accurate (bsc#1106333).
• media: Revert '[media] tvp5150: fix pad format frame height' (bsc#1051510).
• mei: do not update offset in write (bsc#1051510).
• mei: me: enable asynchronous probing.
• memcg, thp: do not invoke oom killer on thp charges (bnc#1089663).
• memory: tegra: Apply interrupts mask per SoC (bsc#1051510).
• memory: tegra: Do not handle spurious interrupts (bsc#1051510).
• mfd: intel-lpss: Add Ice Lake PCI IDs (bsc#1051510).
• mfd: lpc_ich: Do not touch SPI-NOR write protection bit on Apollo Lake (bsc#1051510).
• mlxsw: core_acl_flex_actions: Return error for conflicting actions (netfilter-stable-18_08_17).
• mm/huge_memory.c: fix data loss when splitting a file pmd (bnc#1107074).
• mm/hugetlb: filter out hugetlb pages if HUGEPAGE migration is not supported (bnc#1106697).
• mm/vmscan: wake up flushers for legacy cgroups too (bnc#1107061).
• mm: fix devmem_is_allowed() for sub-page System RAM intersections (bsc#1106800).
• mm: memcg: fix use after free in mem_cgroup_iter() (bnc#1107065).
• mmc: omap_hsmmc: fix wakeirq handling on removal (bsc#1051510).
• module: exclude SHN_UNDEF symbols from kallsyms api (bsc#1071995).
• net/9p/client.c: version pointer uninitialized (bsc#1051510).
• net/9p/trans_fd.c: fix race by holding the lock (bsc#1051510).
• net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree() (bsc#1051510).
• net/9p: Switch to wait_event_killable() (bsc#1051510).
• net/9p: fix error path of p9_virtio_probe (bsc#1051510).
• net: dsa: Do not suspend/resume closed slave_dev (netfilter-stable-18_08_04).
• net: ena: Eliminate duplicate barriers on weakly-ordered archs (bsc#1108093).
• net: ena: Fix use of uninitialized DMA address bits field (netfilter-stable-18_08_01).
• net: ena: fix device destruction to gracefully free resources (bsc#1108093).
• net: ena: fix driver when PAGE_SIZE == 64kB (bsc#1108093).
• net: ena: fix incorrect usage of memory barriers (bsc#1108093).
• net: ena: fix missing calls to READ_ONCE (bsc#1108093).
• net: ena: fix missing lock during device destruction (bsc#1108093).
• net: ena: fix potential double ena_destroy_device() (bsc#1108093).
• net: ena: fix surprise unplug NULL dereference kernel crash (bsc#1108093).
• net: ethernet: mvneta: Fix napi structure mixup on armada 3700 (networking-stable-18_08_21).
• net: fix amd-xgbe flow-control issue (netfilter-stable-18_08_01).
• net: hns3: Fix for waterline not setting correctly (bsc#1104353 ).
• net: hns3: fix page_offset overflow when CONFIG_ARM64_64K_PAGES (bsc#1104353).
• net: hns: add netif_carrier_off before change speed and duplex (bsc#1107924).
• net: hns: add the code for cleaning pkt in chip (bsc#1107924).
• net: mdio-mux: bcm-iproc: fix wrong getter and setter pair (netfilter-stable-18_08_01).
• net: mvneta: fix mvneta_config_rss on armada 3700 (networking-stable-18_08_21).
• net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags (git-fixes).
• net: stmmac: Fix WoL for PCI-based setups (netfilter-stable-18_08_04).
• net: stmmac: mark PM functions as __maybe_unused (git-fixes).
• net_sched: Fix missing res info when create new tc_index filter (netfilter-stable-18_08_17).
• netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses (git-fixes).
• netlink: Do not shift on 64 for ngroups (git-fixes).
• netlink: Do not shift with UB on nlk->ngroups (netfilter-stable-18_08_01).
• netlink: Do not subscribe to non-existent groups (netfilter-stable-18_08_01).
• netlink: Fix spectre v1 gadget in netlink_create() (netfilter-stable-18_08_04).
• nfs/pnfs: fix nfs_direct_req ref leak when i/o falls back to the mds (git-fixes).
• nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (git-fixes).
• nfsd: remove blocked locks on client teardown (git-fixes).
• nl80211: Add a missing break in parse_station_flags (bsc#1051510).
• nl80211: check nla_parse_nested() return values (bsc#1051510).
• nvme: register ns_id attributes as default sysfs groups (bsc#1105247).
• nvme_fc: add 'nvme_discovery' sysfs attribute to fc transport device (bsc#1044189).
• pinctrl/amd: only handle irq if it is pending and unmasked (bsc#1051510).
• pipe: actually allow root to exceed the pipe buffer limits (bsc#1106297).
• platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 (bsc#1051510).
• pnfs/blocklayout: off by one in bl_map_stripe() (git-fixes).
• powerpc/64s: Default l1d_size to 64K in RFI fallback flush (bsc#1068032, git-fixes).
• powerpc/64s: Fix DT CPU features Power9 DD2.1 logic (bsc#1055117).
• powerpc/64s: Fix compiler store ordering to SLB shadow area (bsc#1094244).
• powerpc/64s: move machine check SLB flushing to mm/slb.c (bsc#1094244).
• powerpc/kprobes: Fix call trace due to incorrect preempt count (bsc#1065729).
• powerpc/lib: Fix the feature fixup tests to actually work (bsc#1065729).
• powerpc/mce: Fix SLB rebolting during MCE recovery path (bsc#1094244).
• powerpc/perf: Fix IMC allocation routine (bsc#1054914).
• powerpc/perf: Fix memory allocation for core-imc based on num_possible_cpus() (bsc#1054914).
• powerpc/perf: Remove sched_task function defined for thread-imc (bsc#1054914).
• powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX (bsc#1094244).
• powerpc/pseries: Fix endianness while restoring of r3 in MCE handler (bsc#1094244).
• powerpc/pseries: fix EEH recovery of some IOV devices (bsc#1078720, git-fixes).
• powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (bsc#1068032, bsc#1080157, git-fixes).
• powerpc: Avoid code patching freed init sections (bnc#1107735).
• powerpc: make feature-fixup tests fortify-safe (bsc#1065729).
• pstore: Fix incorrect persistent ram buffer mapping (bsc#1051510).
• pwm: tiehrpwm: Fix disabling of output of PWMs (bsc#1051510).
• qlge: Fix netdev features configuration (bsc#1098822).
• r8169: add support for NCube 8168 network card (bsc#1051510).
• reiserfs: fix broken xattr handling (heap corruption, bad retval) (bsc#1106236).
• rhashtable: add schedule points (bsc#1051510).
• root dentries need RCU-delayed freeing (bsc#1106297).
• rsi: Fix 'invalid vdd' warning in mmc (bsc#1051510).
• rxrpc: Fix user call ID check in rxrpc_service_prealloc_one (netfilter-stable-18_08_04).
• s390/entry.S: use assembler alternatives (bsc#1103421).
• s390/lib: use expoline for all bcr instructions (git-fixes, bsc#1103421).
• s390/mm: fix local TLB flushing vs. detach of an mm address space (bsc#1103421).
• s390/mm: fix race on mm->context.flush_mm (bsc#1103421).
• s390/runtime instrumentation: simplify task exit handling (bsc#1103421).
• s390: always save and restore all registers on context switch (bsc#1103421).
• s390: detect etoken facility (bsc#1103421).
• s390: fix br_r1_trampoline for machines without exrl (git-fixes, bsc#1103421).
• s390: fix compat system call table (bsc#1103421).
• s390: fix handling of -1 in set{,fs}id16 syscalls (bsc#1103421).
• s390: use expoline thunks for all branches generated by the BPF JIT (bsc#1103421).
• samples/bpf: adjust rlimit RLIMIT_MEMLOCK for xdp1 (bsc#1083647).
• sched/fair: Fix vruntime_normalized() for remote non-migration wakeup (git-fixes).
• sched/numa: Do not move imbalanced load purely on the basis of an idle CPU (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: Evaluate move once per node (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: Remove numa_has_capacity() (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: Remove unused task_capacity from 'struct numa_stats' (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: Stop comparing tasks for NUMA placement after selecting an idle core (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: remove unused code from update_numa_stats() (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: remove unused nr_running field (bnc#1101669 optimise numa balancing for fast migrate).
• scripts/git_sort/git_sort.py: Add fixes branch from mkp/scsi.git.
• scripts/git_sort/git_sort.py: add mkp 4.20/scsi-queue
• scripts/tar-up.sh: Do not package gitlog-excludes file Also fix the evaluation of gitlog-excludes file, too
• scripts: modpost: check memory allocation results (bsc#1051510).
• scsi: fcoe: hold disc_mutex when traversing rport lists (bsc#1077989).
• scsi: hpsa: limit transfer length to 1MB, not 512kB (bsc#1102346).
• scsi: libfc: Add lockdep annotations (bsc#1077989).
• scsi: libfc: fixup 'sleeping function called from invalid context' (bsc#1077989).
• scsi: libfc: fixup lockdep annotations (bsc#1077989).
• scsi: libfc: hold disc_mutex in fc_disc_stop_rports() (bsc#1077989).
• scsi: lpfc: Correct MDS diag and nvmet configuration (bsc#1106636).
• scsi: mpt3sas: Fix calltrace observed while running IO and reset (bsc#1077989).
• scsi: qla2xxx: Add appropriate debug info for invalid RX_ID (bsc#1108870).
• scsi: qla2xxx: Add logic to detect ABTS hang and response completion (bsc#1108870).
• scsi: qla2xxx: Add mode control for each physical port (bsc#1108870).
• scsi: qla2xxx: Add support for ZIO6 interrupt threshold (bsc#1108870).
• scsi: qla2xxx: Allow FC-NVMe underrun to be handled by transport (bsc#1108870).
• scsi: qla2xxx: Check for Register disconnect (bsc#1108870).
• scsi: qla2xxx: Decrement login retry count for only plogi (bsc#1108870).
• scsi: qla2xxx: Defer chip reset until target mode is enabled (bsc#1108870).
• scsi: qla2xxx: Fix Remote port registration (bsc#1108870).
• scsi: qla2xxx: Fix deadlock between ATIO and HW lock (bsc#1108870).
• scsi: qla2xxx: Fix double increment of switch scan retry count (bsc#1108870).
• scsi: qla2xxx: Fix dropped srb resource (bsc#1108870).
• scsi: qla2xxx: Fix duplicate switch's Nport ID entries (bsc#1108870).
• scsi: qla2xxx: Fix early srb free on abort (bsc#1108870).
• scsi: qla2xxx: Fix iIDMA error (bsc#1108870).
• scsi: qla2xxx: Fix incorrect port speed being set for FC adapters (bsc#1108870).
• scsi: qla2xxx: Fix out of order Termination and ABTS response (bsc#1108870).
• scsi: qla2xxx: Fix port speed display on chip reset (bsc#1108870).
• scsi: qla2xxx: Fix premature command free (bsc#1108870).
• scsi: qla2xxx: Fix process response queue for ISP26XX and above (bsc#1108870).
• scsi: qla2xxx: Fix race condition for resource cleanup (bsc#1108870).
• scsi: qla2xxx: Fix stuck session in PLOGI state (bsc#1108870).
• scsi: qla2xxx: Force fw cleanup on ADISC error (bsc#1108870).
• scsi: qla2xxx: Increase abort timeout value (bsc#1108870).
• scsi: qla2xxx: Move ABTS code behind qpair (bsc#1108870).
• scsi: qla2xxx: Move rport registration out of internal work_list (bsc#1108870).
• scsi: qla2xxx: Move {get|rel}_sp to base_qpair struct (bsc#1108870).
• scsi: qla2xxx: Reduce holding sess_lock to prevent CPU lock-up (bsc#1108870).
• scsi: qla2xxx: Reject bsg request if chip is down (bsc#1108870).
• scsi: qla2xxx: Remove ASYNC GIDPN switch command (bsc#1108870).
• scsi: qla2xxx: Remove all rports if fabric scan retry fails (bsc#1108870).
• scsi: qla2xxx: Remove redundant check for fcport deletion (bsc#1108870).
• scsi: qla2xxx: Remove stale ADISC_DONE event (bsc#1108870).
• scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx (bsc#1108870).
• scsi: qla2xxx: Serialize mailbox request (bsc#1108870).
• scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0 (bsc#1108870).
• scsi: qla2xxx: Turn off IOCB timeout timer on IOCB completion (bsc#1108870).
• scsi: qla2xxx: Update driver to version 10.00.00.09-k (bsc#1108870).
• scsi: qla2xxx: Update driver version to 10.00.00.10-k (bsc#1108870).
• scsi: qla2xxx: Update driver version to 10.00.00.11-k (bsc#1108870).
• scsi: qla2xxx: Update rscn_rcvd field to more meaningful scan_needed (bsc#1108870).
• scsi: qla2xxx: Use correct qpair for ABTS/CMD (bsc#1108870).
• scsi: qla2xxx: shutdown chip if reset fail (bsc#1108870).
• scsi_debug: call resp_XXX function after setting host_scribble (bsc#1069138).
• scsi_debug: reset injection flags for every_nth > 0 (bsc#1069138).
• selftests/bpf/test_maps: exit child process without error in ENOMEM case (bsc#1083647).
• selftests/bpf: fix a typo in map in map test (bsc#1083647).
• serial: enable spi in sc16is7xx driver References: bsc#1105672
• serial: make sc16is7xx driver supported References: bsc#1105672
• slab: __GFP_ZERO is incompatible with a constructor (bnc#1107060).
• spi-nor: intel-spi: Fix number of protected range registers for BYT/LPT.
• spi: cadence: Change usleep_range() to udelay(), for atomic context (bsc#1051510).
• spi: davinci: fix a NULL pointer dereference (bsc#1051510).
• spi: pxa2xx: Add support for Intel Ice Lake (bsc#1051510).
• staging: bcm2835-audio: Check if workqueue allocation failed.
• staging: bcm2835-audio: Deliver indirect-PCM transfer error.
• staging: bcm2835-audio: Disconnect and free vchi_instance on module_exit().
• staging: bcm2835-audio: Do not leak workqueue if open fails.
• staging: bcm2835-audio: constify snd_pcm_ops structures.
• staging: bcm2835-audio: make snd_pcm_hardware const.
• staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice (bsc#1051510).
• staging: lustre: Use 'kvfree()' for memory allocated by 'kvzalloc()' (bsc#1051510).
• staging: lustre: disable preempt while sampling processor id (bsc#1051510).
• staging: lustre: fix bug in osc_enter_cache_try (bsc#1051510).
• staging: lustre: ldlm: free resource when ldlm_lock_create() fails (bsc#1051510).
• staging: lustre: libcfs: Prevent harmless read underflow (bsc#1051510).
• staging: lustre: libcfs: fix test for libcfs_ioctl_hdr minimum size (bsc#1051510).
• staging: lustre: llite: correct removexattr detection (bsc#1051510).
• staging: lustre: llite: initialize xattr->xe_namelen (bsc#1051510).
• staging: lustre: lmv: correctly iput lmo_root (bsc#1051510).
• staging: lustre: lov: use correct env in lov_io_data_version_end() (bsc#1051510).
• staging: lustre: o2iblnd: Fix FastReg map/unmap for MLX5 (bsc#1051510).
• staging: lustre: o2iblnd: Fix crash in kiblnd_handle_early_rxs() (bsc#1051510).
• staging: lustre: o2iblnd: fix race at kiblnd_connect_peer (bsc#1051510).
• staging: lustre: obd_mount: use correct niduuid suffix (bsc#1051510).
• staging: lustre: obdclass: return -EFAULT if copy_from_user() fails (bsc#1051510).
• staging: lustre: ptlrpc: kfree used instead of kvfree (bsc#1051510).
• staging: lustre: remove invariant in cl_io_read_ahead() (bsc#1051510).
• staging: lustre: statahead: remove incorrect test on agl_list_empty() (bsc#1051510).
• staging: vc04_services: Fix platform_no_drv_owner.cocci warnings.
• staging: vc04_services: bcm2835-audio Format multiline comment.
• staging: vc04_services: bcm2835-audio: Add blank line after declaration.
• staging: vc04_services: bcm2835-audio: Change to unsigned int *.
• staging: vc04_services: bcm2835-audio: add SPDX identifiers.
• staging: vc04_services: bcm2835-audio: remove redundant license text.
• staging: vc04_services: please do not use multiple blank lines.
• string: drop __must_check from strscpy() and restore strscpy() usages in cgroup (bsc#1051510).
• sunxi-rsb: Include OF based modalias in device uevent (bsc#1051510).
• sys: do not hold uts_sem while accessing userspace memory (bnc#1106995).
• target_core_rbd: break up free_device callback (bsc#1105524).
• target_core_rbd: use RCU in free_device (bsc#1105524).
• tcp: add max_quickacks param to tcp_incr_quickack and tcp_enter_quickack_mode (netfilter-stable-18_08_01).
• tcp: add one more quick ack after after ECN events (netfilter-stable-18_08_01).
• tcp: do not aggressively quick ack after ECN events (netfilter-stable-18_08_01).
• tcp: do not force quickack when receiving out-of-order packets (netfilter-stable-18_08_01).
• tcp: refactor tcp_ecn_check_ce to remove sk type cast (netfilter-stable-18_08_01).
• tcp_bbr: fix bw probing to raise in-flight data for very small BDPs (netfilter-stable-18_08_01).
• thermal: thermal_hwmon: Convert to hwmon_device_register_with_info() (bsc#1103363).
• thermal_hwmon: Pass the originating device down to hwmon_device_register_with_info (bsc#1103363).
• thermal_hwmon: Sanitize attribute name passed to hwmon (bsc#1103363).
• ti: ethernet: cpdma: Use correct format for genpool_* (bsc#1051510).
• tools/power turbostat: Read extended processor family from CPUID (bsc#1051510).
• tools/power turbostat: fix -S on UP systems (bsc#1051510).
• tools: usb: ffs-test: Fix build on big endian systems (bsc#1051510).
• tpm: Introduce flag TPM_TRANSMIT_RAW (bsc#1082555).
• tpm: cmd_ready command can be issued only after granting locality (bsc#1082555).
• tpm: fix race condition in tpm_common_write() (bsc#1082555).
• tpm: fix use after free in tpm2_load_context() (bsc#1082555).
• tpm: separate cmd_ready/go_idle from runtime_pm (bsc#1082555).
• tpm: tpm_crb: relinquish locality on error path (bsc#1082555).
• tpm: vtpm_proxy: Implement request_locality function (bsc#1082555).
• tracepoint: Do not warn on ENOMEM (bsc#1051510).
• uart: fix race between uart_put_char() and uart_shutdown() (bsc#1051510).
• ubifs: Check data node size before truncate (bsc#1051510).
• ubifs: Fix directory size calculation for symlinks (bsc#1106230).
• ubifs: Fix memory leak in lprobs self-check (bsc#1051510).
• ubifs: Fix synced_i_size calculation for xattr inodes (bsc#1051510).
• ubifs: xattr: Do not operate on deleted inodes (bsc#1051510).
• udl-kms: avoid division (bsc#1051510).
• udl-kms: change down_interruptible to down (bsc#1051510).
• udl-kms: fix crash due to uninitialized memory (bsc#1051510).
• udl-kms: handle allocation failure (bsc#1051510).
• udlfb: set optimal write delay (bsc#1051510).
• usb/phy: fix PPC64 build errors in phy-fsl-usb.c (bsc#1051510).
• usb: Do not die twice if PCI xhci host is not responding in resume (bsc#1051510).
• usb: dwc2: fix isoc split in transfer with no data (bsc#1051510).
• usb: dwc2: gadget: Fix issue in dwc2_gadget_start_isoc() (bsc#1051510).
• usb: dwc3: pci: add support for Intel IceLake (bsc#1051510).
• usb: gadget: composite: fix delayed_status race condition when set_interface (bsc#1051510).
• usb: gadget: dwc2: fix memory leak in gadget_init() (bsc#1051510).
• usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in r8a66597_queue() (bsc#1051510).
• usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in init_controller() (bsc#1051510).
• usb: gadget: udc: renesas_usb3: fix maxpacket size of ep0 (bsc#1051510).
• usb: xhci: increase CRS timeout value (bsc#1051510).
• userns: move user access out of the mutex (bsc#1051510).
• vfio/pci: Virtualize Maximum Payload Size (bsc#1051510).
• vfio/pci: Virtualize Maximum Read Request Size (bsc#1051510).
• vfio/type1: Fix task tracking for QEMU vCPU hotplug (bsc#1051510).
• vhost: correctly check the iova range when waking virtqueue (bsc#1051510).
• vhost: do not try to access device IOTLB when not initialized (bsc#1051510).
• vhost: reset metadata cache when initializing new IOTLB (netfilter-stable-18_08_17).
• vhost: use mutex_lock_nested() in vhost_dev_lock_vqs() (bsc#1051510).
• video: fbdev: pxafb: clear allocated memory for video modes (bsc#1051510).
• vsock: split dwork to avoid reinitializations (netfilter-stable-18_08_17).
• wlcore: Set rx_status boottime_ns field on rx (bsc#1051510).
• x86/CPU/AMD: Derive CPU topology from CPUID function 0xB when available.
• x86/CPU: Modify detect_extended_topology() to return result.
• x86/events/intel/ds: Fix bts_interrupt_threshold alignment (git-fixes c1961a4631da).
• x86/init: fix build with CONFIG_SWAP=n (bnc#1106121).
• x86/kasan/64: Teach KASAN about the cpu_entry_area (kasan).
• x86/kvm: fix LAPIC timer drift when guest uses periodic mode (bsc#1106240).
• x86/mcelog: Get rid of RCU remnants (git-fixes 5de97c9f6d85).
• x86/mm/kasan: Do not use vmemmap_populate() to initialize shadow (kasan).
• x86/mm/memory_hotplug: determine block size based on the end of boot memory (bsc#1108243).
• x86/platform/UV: Add adjustable set memory block size function (bsc#1108243).
• x86/platform/UV: Add kernel parameter to set memory block size (bsc#1108243).
• x86/platform/UV: Mark memblock related init code and data correctly (bsc#1108243).
• x86/platform/UV: Use new set memory block size function (bsc#1108243).
• x86/spectre: Add missing family 6 check to microcode check (git-fixes a5b296636453).
• x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (bnc#1105536).
• x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (bnc#1105536).
• x86/speculation/l1tf: Suggest what to do on systems with too much RAM (bnc#1105536).
• x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (bsc#1106369).
• x86/vdso: Fix vDSO build if a retpoline is emitted (git-fixes 76b043848fd2).
• x86/xen/efi: Initialize only the EFI struct members used by Xen (bnc#1107945).
• x86: irq_remapping: Move irq remapping mode enum.
• xen-netfront-dont-bug-in-case-of-too-many-frags.patch: (bnc#1104824).
• xen-netfront: fix queue name setting (bnc#1065600).
• xen-netfront: fix warn message as irq device name has '/' (bnc#1065600).
• xen/blkback: do not keep persistent grants too long (bsc#1085042).
• xen/blkback: move persistent grants flags to bool (bsc#1085042).
• xen/blkback: remove unused pers_gnts_lock from struct (bsc#1085042).
• xen/blkfront: cleanup stale persistent grants (bsc#1085042).
• xen/blkfront: reorder tests in xlblk_init() (bsc#1085042).
• xen: avoid crash in disable_hotplug_cpu (bsc#1106594).
• xen: xenbus_dev_frontend: Fix XS_TRANSACTION_END handling (bnc#1065600).
• xen: xenbus_dev_frontend: Really return response string (bnc#1065600).
• xenbus: track caller request id (bnc#1065600).
• xfs: Fix per-inode DAX flag inheritance (Git-fixes bsc#1109511).
• xfs: add a new xfs_iext_lookup_extent_before helper (bsc#1095344).
• xfs: add a xfs_bmap_fork_to_state helper (bsc#1095344).
• xfs: add a xfs_iext_update_extent helper (bsc#1095344).
• xfs: add asserts for the mmap lock in xfs_{insert,collapse}_file_space (bsc#1095344).
• xfs: add comments documenting the rebalance algorithm (bsc#1095344).
• xfs: add some comments to xfs_iext_insert/xfs_iext_insert_node (bsc#1095344).
• xfs: allow unaligned extent records in xfs_bmbt_disk_set_all (bsc#1095344).
• xfs: do not create overlapping extents in xfs_bmap_add_extent_delay_real (bsc#1095344).
• xfs: do not rely on extent indices in xfs_bmap_collapse_extents (bsc#1095344).
• xfs: do not rely on extent indices in xfs_bmap_insert_extents (bsc#1095344).
• xfs: do not set XFS_BTCUR_BPRV_WASDEL in xfs_bunmapi (bsc#1095344).
• xfs: fix memory leak in xfs_iext_free_last_leaf (bsc#1095344).
• xfs: fix number of records handling in xfs_iext_split_leaf (bsc#1095344).
• xfs: fix type usage (bsc#1095344).
• xfs: handle zero entries case in xfs_iext_rebalance_leaf (bsc#1095344).
• xfs: inline xfs_shift_file_space into callers (bsc#1095344).
• xfs: introduce the xfs_iext_cursor abstraction (bsc#1095344).
• xfs: iterate backwards in xfs_reflink_cancel_cow_blocks (bsc#1095344).
• xfs: iterate over extents in xfs_bmap_extents_to_btree (bsc#1095344).
• xfs: iterate over extents in xfs_iextents_copy (bsc#1095344).
• xfs: make better use of the 'state' variable in xfs_bmap_del_extent_real (bsc#1095344).
• xfs: merge xfs_bmap_read_extents into xfs_iread_extents (bsc#1095344).
• xfs: move pre/post-bmap tracing into xfs_iext_update_extent (bsc#1095344).
• xfs: move some code around inside xfs_bmap_shift_extents (bsc#1095344).
• xfs: move some more code into xfs_bmap_del_extent_real (bsc#1095344).
• xfs: move xfs_bmbt_irec and xfs_exntst_t to xfs_types.h (bsc#1095344).
• xfs: move xfs_iext_insert tracepoint to report useful information (bsc#1095344).
• xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_lookup_eq (bsc#1095344).
• xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_update (bsc#1095344).
• xfs: pass an on-disk extent to xfs_bmbt_validate_extent (bsc#1095344).
• xfs: pass struct xfs_bmbt_irec to xfs_bmbt_validate_extent (bsc#1095344).
• xfs: preserve i_rdev when recycling a reclaimable inode (bsc#1095344).
• xfs: refactor delalloc accounting in xfs_bmap_add_extent_delay_real (bsc#1095344).
• xfs: refactor dir2 leaf readahead shadow buffer cleverness (bsc#1095344).
• xfs: refactor xfs_bmap_add_extent_delay_real (bsc#1095344).
• xfs: refactor xfs_bmap_add_extent_hole_delay (bsc#1095344).
• xfs: refactor xfs_bmap_add_extent_hole_real (bsc#1095344).
• xfs: refactor xfs_bmap_add_extent_unwritten_real (bsc#1095344).
• xfs: refactor xfs_del_extent_real (bsc#1095344).
• xfs: remove XFS_BMAP_MAX_SHIFT_EXTENTS (bsc#1095344).
• xfs: remove XFS_BMAP_TRACE_EXLIST (bsc#1095344).
• xfs: remove a duplicate assignment in xfs_bmap_add_extent_delay_real (bsc#1095344).
• xfs: remove a superflous assignment in xfs_iext_remove_node (bsc#1095344).
• xfs: remove all xfs_bmbt_set_* helpers except for xfs_bmbt_set_all (bsc#1095344).
• xfs: remove if_rdev (bsc#1095344).
• xfs: remove post-bmap tracing in xfs_bmap_local_to_extents (bsc#1095344).
• xfs: remove support for inlining data/extents into the inode fork (bsc#1095344).
• xfs: remove the never fully implemented UUID fork format (bsc#1095344).
• xfs: remove the nr_extents argument to xfs_iext_insert (bsc#1095344).
• xfs: remove the nr_extents argument to xfs_iext_remove (bsc#1095344).
• xfs: remove xfs_bmbt_get_state (bsc#1095344).
• xfs: remove xfs_bmse_shift_one (bsc#1095344).
• xfs: rename bno to end in __xfs_bunmapi (bsc#1095344).
• xfs: replace xfs_bmbt_lookup_ge with xfs_bmbt_lookup_first (bsc#1095344).
• xfs: replace xfs_qm_get_rtblks with a direct call to xfs_bmap_count_leaves (bsc#1095344).
• xfs: rewrite getbmap using the xfs_iext_* helpers (bsc#1095344).
• xfs: rewrite xfs_bmap_count_leaves using xfs_iext_get_extent (bsc#1095344).
• xfs: rewrite xfs_bmap_first_unused to make better use of xfs_iext_get_extent (bsc#1095344).
• xfs: simplify the xfs_getbmap interface (bsc#1095344).
• xfs: simplify xfs_reflink_convert_cow (bsc#1095344).
• xfs: split xfs_bmap_shift_extents (bsc#1095344).
• xfs: switch xfs_bmap_local_to_extents to use xfs_iext_insert (bsc#1095344).
• xfs: treat idx as a cursor in xfs_bmap_add_extent_delay_real (bsc#1095344).
• xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_delay (bsc#1095344).
• xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_real (bsc#1095344).
• xfs: treat idx as a cursor in xfs_bmap_add_extent_unwritten_real (bsc#1095344).
• xfs: treat idx as a cursor in xfs_bmap_collapse_extents (bsc#1095344).
• xfs: treat idx as a cursor in xfs_bmap_del_extent_* (bsc#1095344).
• xfs: trivial indentation fixup for xfs_iext_remove_node (bsc#1095344).
• xfs: update got in xfs_bmap_shift_update_extent (bsc#1095344).
• xfs: use a b+tree for the in-core extent list (bsc#1095344).
• xfs: use correct state defines in xfs_bmap_del_extent_{cow,delay} (bsc#1095344).
• xfs: use the state defines in xfs_bmap_del_extent_real (bsc#1095344).
• xfs: use xfs_bmap_del_extent_delay for the data fork as well (bsc#1095344).
• xfs: use xfs_iext_*_extent helpers in xfs_bmap_shift_extents (bsc#1095344).
• xfs: use xfs_iext_*_extent helpers in xfs_bmap_split_extent_at (bsc#1095344).
• xfs: use xfs_iext_get_extent in xfs_bmap_first_unused (bsc#1095344).
• xfs: use xfs_iext_get_extent instead of open coding it (bsc#1095344).