SUSE-SU-2019:1536-1

The SUSE Linux Enterprise 12 SP4 kernel was updated to 4.12.14 to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, leading to a kernel panic.
• CVE-2019-11479: An attacker could force the Linux kernel to segment its responses into multiple TCP segments. This would drastically increased the bandwidth required to deliver the same amount of data. Further, it would consume additional resources such as CPU and NIC processing power.
• CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network. (bnc#1136424)
• CVE-2019-12382: An issue was discovered in drmloadedidfirmware in drivers/gpu/drm/drmedid_load.c in the Linux kernel There was an unchecked kstrdup of fwstr, which might have allowed an attacker to cause a denial of service (NULL pointer dereference and system crash). (bnc#1136586)
• CVE-2019-11487: The Linux kernel allowed page reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM existed. It could have occured with FUSE requests. (bnc#1133190)
• CVE-2019-5489: The mincore() implementation in mm/mincore.c in the Linux kernel allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may have been possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. (bnc#1120843)
• CVE-2019-11833: fs/ext4/extents.c in the Linux kernel did not zero out the unused memory region in the extent tree block, which might have allowed local users to obtain sensitive information by reading uninitialized data in the filesystem. (bnc#1135281)
• CVE-2018-7191: In the tun subsystem in the Linux kernel, devgetvalidname was not called before registernetdevice. This allowed local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. (bnc#1135603)
• CVE-2019-11085: Insufficient input validation in Kernel Mode Driver in i915 Graphics for Linux may have allowed an authenticated user to potentially enable escalation of privilege via local access. (bnc#1135278)
• CVE-2019-11815: An issue was discovered in rdstcpkill_sock in net/rds/tcp.c in the Linux kernel There was a race condition leading to a use-after-free, related to net namespace cleanup. (bnc#1134537)
• CVE-2019-11884: The dohidpsock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel allowed a local user to obtain potentially sensitive information from kernel stack memory via a hidPCONNADD command, because a name field may not end with a '\0' character. (bnc#1134848)
• CVE-2019-11486: The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel had multiple race conditions. (bnc#1133188)

The following non-security bugs were fixed:

• 9p locks: add mount option for lock retry interval (bsc#1051510).
• acpi: button: reinitialize button state upon resume (bsc#1051510).
• acpica: AML interpreter: add region addresses in global list during initialization (bsc#1051510).
• acpica: Namespace: remove address node from global list after method termination (bsc#1051510).
• acpi: fix menuconfig presentation of ACPI submenu (bsc#1117158).
• acpi / utils: Drop reference in test for device presence (bsc#1051510).
• alsa: core: Do not refer to snd_cards array directly (bsc#1051510).
• alsa: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
• alsa: hda/hdmi - Consider eld_valid when reporting jack event (bsc#1051510).
• alsa: hda/hdmi - Read the pin sense from register when repolling (bsc#1051510).
• alsa: hda/realtek - Avoid superfluous COEF EAPD setups (bsc#1051510).
• alsa: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) (bsc#1051510).
• alsa: hda/realtek - EAPD turn on later (bsc#1051510).
• alsa: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug (bsc#1051510).
• alsa: hda/realtek - Fixup headphone noise via runtime suspend (bsc#1051510).
• alsa: hda/realtek - Improve the headset mic for Acer Aspire laptops (bsc#1051510).
• alsa: hda - Register irq handler after the chip initialization (bsc#1051510).
• alsa: hda - Use a macro for snd_array iteration loops (bsc#1051510).
• alsa: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) (bsc#1051510).
• alsa: line6: Avoid polluting led_* namespace (bsc#1051510).
• alsa: seq: Align temporary re-locking with irqsave version (bsc#1051510).
• alsa: seq: Correct unlock sequence at sndseqclientioctlunlock() (bsc#1051510).
• alsa: seq: Cover unsubscribeport() in listmutex (bsc#1051510).
• alsa: seq: Fix race of get-subscription call vs port-delete ioctls (bsc#1051510).
• alsa: seq: Protect in-kernel ioctl calls with mutex (bsc#1051510).
• alsa: seq: Protect racy pool manipulation from OSS sequencer (bsc#1051510).
• alsa: seq: Remove superfluous irqsave flags (bsc#1051510).
• alsa: seq: Simplify sndseqkernelclientenqueue() helper (bsc#1051510).
• alsa: timer: Check ack_list emptiness instead of bit flag (bsc#1051510).
• alsa: timer: Coding style fixes (bsc#1051510).
• alsa: timer: Make sndtimerclose() really kill pending actions (bsc#1051510).
• alsa: timer: Make sure to clear pending ack list (bsc#1051510).
• alsa: timer: Revert active callback sync check at close (bsc#1051510).
• alsa: timer: Simplify error path in sndtimeropen() (bsc#1051510).
• alsa: timer: Unify timer callback process code (bsc#1051510).
• alsa: usb-audio: Fix a memory leak bug (bsc#1051510).
• alsa: usb-audio: Handle the error from sndusbmixerapplycreate_quirk() (bsc#1051510).
• alsa: usx2y: fix a double free bug (bsc#1051510).
• appletalk: Fix compile regression (bsc#1051510).
• appletalk: Fix use-after-free in atalkprocexit (bsc#1051510).
• arch: arm64: acpi: KABI ginore includes (bsc#1117158 bsc#1134671).
• arm64: acpi: fix alignment fault in accessing ACPI (bsc#1117158).
• arm64: Export savestacktrace_tsk() (jsc#SLE-4214).
• arm64: fix ACPI dependencies (bsc#1117158).
• arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table (bsc#1117158).
• arm: 8824/1: fix a migrating irq bug when hotplug cpu (bsc#1051510).
• arm: 8833/1: Ensure that NEON code always compiles with Clang (bsc#1051510).
• arm: 8839/1: kprobe: make patchlock a rawspinlock_t (bsc#1051510).
• arm: 8840/1: use a rawspinlockt in unwind (bsc#1051510).
• arm: avoid Cortex-A9 livelock on tight dmb loops (bsc#1051510).
• arm: imx6q: cpuidle: fix bug that CPU might not wake up at expected time (bsc#1051510).
• arm: iop: do not use using 64-bit DMA masks (bsc#1051510).
• arm: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug (bsc#1051510).
• arm: OMAP2+: Variable 'reg' in function omap4dsimux_pads() could be uninitialized (bsc#1051510).
• arm: orion: do not use using 64-bit DMA masks (bsc#1051510).
• arm: pxa: ssp: unneeded to free devm_ allocated data (bsc#1051510).
• arm: s3c24xx: Fix boolean expressions in osirisdvsnotify (bsc#1051510).
• arm: samsung: Limit SAMSUNGPMCHECK config option to non-Exynos platforms (bsc#1051510).
• asoc: cs4270: Set auto-increment bit for register writes (bsc#1051510).
• asoc: fix valid stream condition (bsc#1051510).
• asoc: fsl_esai: Fix missing break in switch statement (bsc#1051510).
• asoc: hdmi-codec: fix S/PDIF DAI (bsc#1051510).
• asoc: Intel: avoid Oops if DMA setup fails (bsc#1051510).
• asoc: max98090: Fix restore of DAPM Muxes (bsc#1051510).
• asoc: nau8810: fix the issue of widget with prefixed name (bsc#1051510).
• asoc: nau8824: fix the issue of the widget with prefix name (bsc#1051510).
• asoc: RT5677-SPI: Disable 16Bit SPI Transfers (bsc#1051510).
• asoc: samsung: odroid: Fix clock configuration for 44100 sample rate (bsc#1051510).
• asoc:soc-pcm:fix a codec fixup issue in TDM case (bsc#1051510).
• asoc: stm32: fix sai driver name initialisation (bsc#1051510).
• asoc: tlv320aic32x4: Fix Common Pins (bsc#1051510).
• asoc: wmadsp: Add locking to wmadsp2buserror (bsc#1051510).
• at76c50x-usb: Do not register ledtrigger if usbregister_driver failed (bsc#1051510).
• audit: fix a memleak caused by auditing load module (bsc#1051510).
• b43: shut up clang -Wuninitialized variable warning (bsc#1051510).
• backlight: lm3630a: Return 0 on success in update_status functions (bsc#1051510).
• bcache: account size of buckets used in uuid write to ca->metasectorswritten (bsc#1130972).
• bcache: add a comment in super.c (bsc#1130972).
• bcache: add code comments for bset.c (bsc#1130972).
• bcache: add comment for cacheset->filliter (bsc#1130972).
• bcache: add identifier names to arguments of function definitions (bsc#1130972).
• bcache: add missing SPDX header (bsc#1130972).
• bcache: add MODULE_DESCRIPTION information (bsc#1130972).
• bcache: add separate workqueue for journal_write to avoid deadlock (bsc#1130972).
• bcache: add static const prefix to char * array declarations (bsc#1130972).
• bcache: add sysfsstrtoulbool() for setting bit-field variables (bsc#1130972).
• bcache: add the missing comments for smpmb()/smpwmb() (bsc#1130972).
• bcache: cannot set writeback_running via sysfs if no writeback kthread created (bsc#1130972).
• bcache: correct dirty data statistics (bsc#1130972).
• bcache: do not assign in if condition in bcache_init() (bsc#1130972).
• bcache: do not assign in if condition register_bcache() (bsc#1130972).
• bcache: do not check if debug dentry is ERR or NULL explicitly on remove (bsc#1130972).
• bcache: do not check NULL pointer before calling kmemcachedestroy (bsc#1130972).
• bcache: do not clone bio in bchdataverify (bsc#1130972).
• bcache: do not mark writeback_running too early (bsc#1130972).
• bcache: export backingdevname via sysfs (bsc#1130972).
• bcache: export backingdevuuid via sysfs (bsc#1130972).
• bcache: fix code comments style (bsc#1130972).
• bcache: fix indentation issue, remove tabs on a hunk of code (bsc#1130972).
• bcache: fix indent by replacing blank by tabs (bsc#1130972).
• bcache: fix input integer overflow of congested threshold (bsc#1130972).
• bcache: fix input overflow to cache set ioerrorlimit (bsc#1130972).
• bcache: fix input overflow to cache set sysfs file ioerrorhalflife (bsc#1130972).
• bcache: fix input overflow to journaldelayms (bsc#1130972).
• bcache: fix input overflow to sequential_cutoff (bsc#1130972).
• bcache: fix input overflow to writeback_delay (bsc#1130972).
• bcache: fix input overflow to writebackrateminimum (bsc#1130972).
• bcache: fix ioctl in flash device (bsc#1130972).
• bcache: fix mistaken code comments in bcache.h (bsc#1130972).
• bcache: fix mistaken comments in request.c (bsc#1130972).
• bcache: fix potential div-zero error of writebackrateiterminverse (bsc#1130972).
• bcache: fix potential div-zero error of writebackratepterminverse (bsc#1130972).
• bcache: fix typo in code comments of closurereturnwith_destructor() (bsc#1130972).
• bcache: fix typo 'succesfully' to 'successfully' (bsc#1130972).
• bcache: improve sysfsstrtoulclamp() (bsc#1130972).
• bcache: introduce forcewakeup_gc() (bsc#1130972).
• bcache: make cutoffwriteback and cutoffwriteback_sync tunable (bsc#1130972).
• bcache: Move couple of functions to sysfs.c (bsc#1130972).
• bcache: Move couple of string arrays to sysfs.c (bsc#1130972).
• bcache: move open brace at end of function definitions to next line (bsc#1130972).
• bcache: never writeback a discard operation (bsc#1130972).
• bcache: not use hard coded memset size in bchcacheaccounting_clear() (bsc#1130972).
• bcache: option to automatically run gc thread after writeback (bsc#1130972).
• bcache: panic fix for making cache device (bsc#1130972).
• bcache: Populate writebackrateminimum attribute (bsc#1130972).
• bcache: prefer 'help' in Kconfig (bsc#1130972).
• bcache: print number of keys in tracebcachejournal_write (bsc#1130972).
• bcache: recal cacheddevsectors on detach (bsc#1130972).
• bcache: remove unnecessary space before ioctl function pointer arguments (bsc#1130972).
• bcache: remove unused bchpassthroughcache (bsc#1130972).
• bcache: remove useless parameter of bchdebuginit() (bsc#1130972).
• bcache: Replace bchreadstringlist() by _sysfsmatchstring() (bsc#1130972).
• bcache: replace hard coded number with BUCKETGCGEN_MAX (bsc#1130972).
• bcache: replace '%pF' by '%pS' in seq_printf() (bsc#1130972).
• bcache: replace printk() by pr_*() routines (bsc#1130972).
• bcache: replace Symbolic permissions by octal permission numbers (bsc#1130972).
• bcache: set writeback_percent in a flexible range (bsc#1130972).
• bcache: split combined if-condition code into separate ones (bsc#1130972).
• bcache: stop bcache device when backing device is offline (bsc#1130972).
• bcache: stop using the deprecated get_seconds() (bsc#1130972).
• bcache: style fixes for lines over 80 characters (bsc#1130972).
• bcache: style fix to add a blank line after declarations (bsc#1130972).
• bcache: style fix to replace 'unsigned' by 'unsigned int' (bsc#1130972).
• bcache: treat stale dirty keys as bad keys (bsc#1130972).
• bcache: trivial - remove tailing backslash in macro BTREE_FLAG (bsc#1130972).
• bcache: update comment for bchdatainsert (bsc#1130972).
• bcache: update comment in sysfs.c (bsc#1130972).
• bcache: use MAXCACHESPERSET instead of magic number 8 in _bchbucketalloc_set (bsc#1130972).
• bcache: use (REQMETA|REQPRIO) to indicate bio for metadata (bsc#1130972).
• bcache: use REQ_PRIO to indicate bio for metadata (bsc#1130972).
• bcache: use routines from lib/crc64.c for CRC64 calculation (bsc#1130972).
• bcache: use sysfsstrtoulbool() to set bit-field variables (bsc#1130972).
• block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
• block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
• block: do not leak memory in biocopyuser_iov() (bsc#1135309).
• block: Do not revalidate bdev of hidden gendisk (bsc#1120091).
• block: fix the return errno for direct IO (bsc#1135320).
• block: fix use-after-free on gendisk (bsc#1135312).
• bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bsc#1051510).
• bluetooth: Check key sizes only when Secure Simple Pairing is enabled (bsc#1135556).
• bluetooth: hidp: fix buffer overflow (bsc#1051510).
• bnxten: Free short FW command HWRM memory in error path in bnxtinit_one() (bsc#1050242).
• bnxten: Improve multicast address setup logic (networking-stable-1905_04).
• bnxten: Improve RX consumer index validity check (networking-stable-1904_10).
• bnxten: Reset device on RX buffer errors (networking-stable-1904_10).
• bonding: fix event handling for stacked bonds (networking-stable-190419).
• bpf: add maplookupelemsysonly for lookups from syscall side (bsc#1083647).
• bpf: Add missed newline in verifier verbose log (bsc#1056787).
• bpf, lru: avoid messing with eviction heuristics upon syscall lookup (bsc#1083647).
• brcm80211: potential NULL dereference in brcmfcfg80211vndrcmdsdcmd_handler() (bsc#1051510).
• btrfs: add a helper to return a head ref (bsc#1134813).
• btrfs: breakout empty head cleanup to a helper (bsc#1134813).
• btrfs: delayed-ref: Introduce better documented delayed ref structures (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: delayed-ref: Use btrfsref to refactor btrfsadddelayeddata_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: delayed-ref: Use btrfsref to refactor btrfsadddelayedtree_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: do not allow trimming when a fs is mounted with the nologreplay option (bsc#1135758).
• btrfs: do not double unlock on error in btrfspunchhole (bsc#1136881).
• btrfs: Do not panic when we can't find a root key (bsc#1112063).
• btrfs: extent-tree: Fix a bug that btrfs is unable to add pinned bytes (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: extent-tree: Open-code processfunc in _btrfsmodref (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: extent-tree: Use btrfsref to refactor addpinned_bytes() (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: extent-tree: Use btrfsref to refactor btrfsfree_extent() (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: extent-tree: Use btrfsref to refactor btrfsincextentref() (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: Factor out common delayed refs init code (bsc#1134813).
• btrfs: fix fsync not persisting changed attributes of a directory (bsc#1137151).
• btrfs: fix race between ranged fsync and writeback of adjacent ranges (bsc#1136477).
• btrfs: fix race updating log root item during fsync (bsc#1137153).
• btrfs: fix wrong ctime and mtime of a directory after log replay (bsc#1137152).
• btrfs: improve performance on fsync of files with multiple hardlinks (bsc#1123454).
• btrfs: Introduce initdelayedref_head (bsc#1134813).
• btrfs: move all ref head cleanup to the helper function (bsc#1134813).
• btrfs: move extent_op cleanup to a helper (bsc#1134813).
• btrfs: move ref_mod modification into the if (ref) logic (bsc#1134813).
• btrfs: Open-code adddelayeddata_ref (bsc#1134813).
• btrfs: Open-code adddelayedtree_ref (bsc#1134813).
• btrfs: qgroup: Check bg while resuming relocation to avoid NULL pointer dereference (bsc#1134806).
• btrfs: qgroup: Do not scan leaf if we're modifying reloc tree (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: qgroup: Move reserved data accounting from btrfsdelayedrefhead to btrfsqgroupextentrecord (bsc#1134162).
• btrfs: qgroup: Remove duplicated trace points for qgrouprsvadd/release (bsc#1134160).
• btrfs: reloc: Also queue orphan reloc tree for cleanup to avoid BUG_ON() (bsc#1133612).
• btrfs: remove delayedrefnode from ref_head (bsc#1134813).
• btrfs: send, flush dellaloc in order to avoid data loss (bsc#1133320).
• btrfs: split delayed ref head initialization and addition (bsc#1134813).
• btrfs: track refs in a rb_tree instead of a list (bsc#1134813).
• btrfs: tree-checker: detect file extent items with overlapping ranges (bsc#1136478).
• btrfs: Use initdelayedrefcommon in adddelayeddataref (bsc#1134813).
• btrfs: Use initdelayedrefcommon in adddelayedtreeref (bsc#1134813).
• btrfs: Use initdelayedrefhead in adddelayedrefhead (bsc#1134813).
• ceph: ensure dname stability in cephdentry_hash() (bsc#1134461).
• ceph: fix ci->iheadsnapc leak (bsc#1122776).
• ceph: fix use-after-free on symlink traversal (bsc#1134459).
• ceph: only use d_name directly when parent is locked (bsc#1134460).
• cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565).
• clk: rockchip: Fix video codec clocks on rk3288 (bsc#1051510).
• clk: rockchip: fix wrong clock definitions for rk3328 (bsc#1051510).
• configfs: fix possible use-after-free in configfsregistergroup (bsc#1051510).
• configfs: Fix use-after-free when accessing sd->s_dentry (bsc#1051510).
• crypto: arm/aes-neonbs - do not access already-freed walk.iv (bsc#1051510).
• crypto: caam - fix caamdumpsg that iterates through scatterlist (bsc#1051510).
• crypto: ccm - fix incompatibility between 'ccm' and 'ccm_base' (bsc#1051510).
• crypto: ccp - Do not free pspmaster when PLATFORMINIT fails (bsc#1051510).
• crypto: chacha20poly1305 - set cra_name correctly (bsc#1051510).
• crypto: crct10dif-generic - fix use via cryptoshashdigest() (bsc#1051510).
• crypto: fips - Grammar s/options/option/, s/to/the/ (bsc#1051510).
• crypto: gcm - fix incompatibility between 'gcm' and 'gcm_base' (bsc#1051510).
• crypto: skcipher - do not WARN on unprocessed data after slow walk step (bsc#1051510).
• crypto: sun4i-ss - Fix invalid calculation of hash end (bsc#1051510).
• crypto: vmx - CTR: always increment IV as quadword (bsc#1051510).
• crypto: vmx - fix copy-paste error in CTR mode (bsc#1051510).
• crypto: vmx - ghash: do nosimd fallback manually (bsc#1135661, bsc#1137162).
• crypto: vmx - return correct error code on failed setkey (bsc#1135661, bsc#1137162).
• crypto: x86/crct10dif-pcl - fix use via cryptoshashdigest() (bsc#1051510).
• dccp: do not use ipv6 header for ipv4 flow (networking-stable-190328).
• dccp: Fix memleak in _featregister_sp (bsc#1051510).
• debugfs: fix use-after-free on symlink traversal (bsc#1051510).
• devres: Align data[] to ARCHKMALLOCMINALIGN (bsc#1051510).
• dmaengine: axi-dmac: Do not check the number of frames for alignment (bsc#1051510).
• dmaengine: tegra210-dma: free dma controller in remove() (bsc#1051510).
• documentation: Add MDS vulnerability documentation (bsc#1135642).
• drivers: acpi: add dependency of EFI for arm64 (bsc#1117158).
• drm/bridge: adv7511: Fix low refresh rate selection (bsc#1051510).
• drm/etnaviv: lock MMU while dumping core (bsc#1113722)
• drm/fb-helper: dpms_legacy(): Only set on connectors in use (bsc#1051510).
• drm/i915: Disable LP3 watermarks on all SNB machines (bsc#1051510).
• drm/i915: Downgrade Gen9 Plane WM latency error (bsc#1051510).
• drm/i915/fbc: disable framebuffer compression on GeminiLake (bsc#1051510).
• drm/i915: Fix I915EXECRING_MASK (bsc#1051510).
• drm/i915/gvt: add 0x4dfc to gen9 save-restore list (bsc#1113722)
• drm/i915/gvt: do not let TRTTE and 0x4dfc write passthrough to hardware (bsc#1051510).
• drm/i915/gvt: Fix cmd length of VEBDIIECP (bsc#1113722)
• drm/i915/gvt: Fix incorrect mask of mmio 0x22028 in gen8/9 mmio list (bnc#1113722)
• drm/i915/gvt: refine ggtt range validation (bsc#1113722)
• drm/i915/gvt: Tiled Resources mmios are in-context mmios for gen9+ (bsc#1113722)
• drm/imx: do not skip DP channel disable for background plane (bsc#1051510).
• drm/mediatek: fix possible object reference leak (bsc#1051510).
• drm/meson: add size and alignment requirements for dumb buffers (bnc#1113722)
• drm/nouveau/i2c: Disable i2c bus access after ->fini() (bsc#1113722)
• drm/rockchip: fix for mailbox read validation (bsc#1051510).
• drm/rockchip: shutdown drm subsystem on shutdown (bsc#1051510).
• drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)
• drm/ttm: Remove warning about inconsistent mapping information (bnc#1131488)
• drm/vmwgfx: Do not send drm sysfs hotplug events on initial master set (bsc#1051510).
• drm/vmwgfx: integer underflow in vmwcmddxsetshader() leading to an invalid read (bsc#1051510).
• drm/vmwgfx: NULL pointer dereference from vmwcmddxviewdefine() (bsc#1113722)
• dt-bindings: clock: r8a7795: Remove CSIREF clock (bsc#1120902).
• dt-bindings: clock: r8a7796: Remove CSIREF clock (bsc#1120902).
• dt-bindings: net: Add binding for the external clock for TI WiLink (bsc#1085535).
• dt-bindings: net: Fix a typo in the phy-mode list for ethernet bindings (bsc#1129770).
• dt-bindings: rtc: sun6i-rtc: Fix register range in example (bsc#1120902).
• dwc2: gadget: Fix completed transfer size calculation in DDMA (bsc#1051510).
• efi: add API to reserve memory persistently across kexec reboot (bsc#1117158).
• efi/arm: Defer persistent reservations until after paging_init() (bsc#1117158).
• efi/arm: Do not mark ACPI reclaim memory as MEMBLOCK_NOMAP (bsc#1117158 bsc#1115688 bsc#1120566).
• efi/arm: libstub: add a root memreserve config table (bsc#1117158).
• efi/arm: map UEFI memory map even w/o runtime services enabled (bsc#1117158).
• efi/arm: preserve early mapping of UEFI memory map longer for BGRT (bsc#1117158).
• efi/arm: Revert 'Defer persistent reservations until after paging_init()' (bsc#1117158).
• efi/arm: Revert deferred unmap of early memmap mapping (bsc#1117158).
• efi: honour memory reservations passed via a linux specific config table (bsc#1117158).
• efi: Permit calling efimemreserve_persistent() from atomic context (bsc#1117158).
• efi: Permit multiple entries in persistent memreserve data structure (bsc#1117158).
• efi: Prevent GICv3 WARN() by mapping the memreserve table before first use (bsc#1117158).
• efi: Reduce the amount of memblock reservations for persistent allocations (bsc#1117158).
• ext4: actually request zeroing of inode table after grow (bsc#1135315).
• ext4: avoid panic during forced reboot due to aborted journal (bsc#1126356).
• ext4: Do not warn when enabling DAX (bsc#1132894).
• ext4: fix data corruption caused by overlapping unaligned and aligned IO (bsc#1136428).
• ext4: fix ext4showoptions for file systems w/o journal (bsc#1135316).
• ext4: fix use-after-free race with debugwantextra_isize (bsc#1135314).
• ext4: make sanity check in mballoc more strict (bsc#1136439).
• ext4: wait for outstanding dio during truncate in nojournal mode (bsc#1136438).
• fbdev: fix divide error in fbvarto_videomode (bsc#1113722)
• fbdev: fix WARNING in _allocpages_nodemask bug (bsc#1113722)
• firmware: efi: factor out mem_reserve (bsc#1117158 bsc#1134671).
• fix rtnh_ok() (git-fixes).
• fs/sync.c: syncfilerange(2) may use WBSYNCALL writeback (bsc#1136432).
• fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount (bsc#1136435).
• ftrace/x86_64: Emulate call function while updating in breakpoint handler (bsc#1099658).
• genetlink: Fix a memory leak on error path (networking-stable-190328).
• ghes, EDAC: Fix ghes_edac registration (bsc#1133176).
• git_sort: add crypto maintainer tree.
• git-sort: Always explicitely handle a pygit2 import error As pointed out by Michal Suchanek, the limitation in commit 6d67b1042a73 ('series_sort: Catch pygit2 import failure.') is wrong; given that there is no explicit installation step of the git-sort scripts and that they are 'just there' in the kernel-source repository, every user-callable script needs to check that the user followed installation requirements.
• git-sort: Handle new pygit2.discoverrepository behavior A consequence of pygit2 commit c32ee0c25384 ('Now discoverrepository returns None if repo not found').
• git-sort: Move mainline remote check to seriessort gitsort can be used on any git repository. seriessort() OTOH expects the reference repository to be a clone of the mainline Linux kernel repository. Move the warning accordingly and make it an error since further operations would fail. Fixes: 027d52475873 ('scripts: gitsort: Warn about missing upstream repo')
• git-sort: README: Add information about how to report problems
• gpio: aspeed: fix a potential NULL pointer dereference (bsc#1051510).
• gpu: ipu-v3: dp: fix CSC handling (bsc#1051510).
• hid: debug: fix race condition with between rdesc_show() and device removal (bsc#1051510).
• hid: input: add mapping for Assistant key (bsc#1051510).
• hid: input: add mapping for Expose/Overview key (bsc#1051510).
• hid: input: add mapping for keyboard Brightness Up/Down/Toggle keys (bsc#1051510).
• hid: input: add mapping for 'Toggle Display' key (bsc#1051510).
• hid: logitech: check the return value of createsinglethreadworkqueue (bsc#1051510).
• hwmon: (f71805f) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (pc87427) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (smsc47b397) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (smsc47m1) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (vt1211) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (w83627hf) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• ibmvnic: Add device identification to requested IRQs (bsc#1137739).
• ibmvnic: Do not close unopened driver during reset (bsc#1137752).
• ibmvnic: Fix unchecked return codes of memory allocations (bsc#1137752).
• ibmvnic: Refresh device multicast list after reset (bsc#1137752).
• ibmvnic: remove set but not used variable 'netdev' (bsc#1137739).
• igmp: fix incorrect unsolicit report count when join group (git-fixes).
• iio: adc: xilinx: fix potential use-after-free on remove (bsc#1051510).
• indirect call wrappers: helpers to speed-up indirect calls of builtin (bsc#1124503).
• inetpeer: fix uninit-value in inet_getpeer (git-fixes).
• input: elan_i2c - add hardware ID for multiple Lenovo laptops (bsc#1051510).
• input: introduce KEY_ASSISTANT (bsc#1051510).
• input: synaptics-rmi4 - fix possible double free (bsc#1051510).
• intel_th: msu: Fix single mode with IOMMU (bsc#1051510).
• intel_th: pci: Add Comet Lake support (bsc#1051510).
• iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel (bsc#1117158).
• iommu/arm-smmu-v3: Do not disable SMMU in kdump kernel (bsc#1117158 bsc#1134671).
• iommu/vt-d: Do not request page request irq under dmargloballock (bsc#1135006).
• iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU (bsc#1135007).
• iommu/vt-d: Set inteliommugfx_mapped correctly (bsc#1135008).
• ip6tunnel: collectmd xmit: Use iptunnelkey's provided src address (git-fixes).
• ip6tunnel: Match to ARPHRDTUNNEL6 for dev type (networking-stable-190410).
• ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
• ipgre: fix parsing gre header in ipgreerr (git-fixes).
• ipmi:ssif: compare block number correctly for multi-part return messages (bsc#1051510).
• iptunnel: Fix name string concatenate in _iptunnelcreate() (git-fixes).
• ipv4: add sanity checks in ipv4linkfailure() (git-fixes).
• ipv4: Define _ipv4neighlookupnoref when CONFIG_INET is disabled (git-fixes).
• ipv4: ensure rcureadlock() in ipv4linkfailure() (networking-stable-190419).
• ipv4: ipdofragment: Preserve skbiif during fragmentation (networking-stable-1905_04).
• ipv4: recompile ip options in ipv4linkfailure (networking-stable-190419).
• ipv4: set the tcpminrttwlen range from 0 to one day (networking-stable-1904_30).
• ipv6: fix cleanup ordering for ip6_mr failure (git-fixes).
• ipv6: fix cleanup ordering for pingv6 registration (git-fixes).
• ipv6/flowlabel: wait rcu grace period before put_pid() (git-fixes).
• ipv6: invert flowlabel sharing check in process and user mode (git-fixes).
• ipv6: mcast: fix unsolicited report interval after receiving querys (git-fixes).
• ipvlan: Add the skb->mark as flow4's member to lookup route (bsc#1051510).
• ipvlan: fix ipv6 outbound device (bsc#1051510).
• ipvlan: use ETHMAXMTU as max mtu (bsc#1051510).
• ipvs: call ipvsdstnotifier earlier than ipv6dev_notf (git-fixes).
• ipvs: fix buffer overflow with sync daemon and service (git-fixes).
• ipvs: fix check on xmit to non-local addresses (git-fixes).
• ipvs: fix race between ipvsconnnew() and ipvsdeldest() (bsc#1051510).
• ipvs: fix rtnllock lockups caused by startsync_thread (git-fixes).
• ipvs: Fix signed integer overflow when setsockopt timeout (bsc#1051510).
• ipvs: fix stats update from local clients (git-fixes).
• iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
• jbd2: check superblock mapped prior to committing (bsc#1136430).
• kabi: drop LINUXMIBTCPWQUEUETOOBIG snmp counter (bsc#1137586).
• kabi: implement maplookupelemsysonly in another way (bsc#1083647).
• kabi: move sysctltcpminsndmss to preserve struct net layout (bsc#1137586).
• kABI: protect dma-mapping.h include (kabi).
• kABI: protect functions using struct net_generic (bsc#1130409 LTC#176346).
• kABI: protect ipoptionsrcv_srr (kabi).
• kABI: protect struct mlx5_td (kabi).
• kABI: protect struct pci_dev (kabi).
• kABI: protect struct smcd_dev (bsc#1130409 LTC#176346).
• kABI: protect struct smcibdevice (bsc#1130409 LTC#176346).
• kABI: protect struct smc_link (bsc#1129857 LTC#176247).
• kABI workaround for removed usbinterface.pmusage_cnt field (bsc#1051510).
• kABI workaround for sndseqkernelclientenqueue() API changes (bsc#1051510).
• kernel/signal.c: tracesignaldeliver when signalgroupexit (git-fixes).
• kernel/sys.c: prctl: fix false positive in validateprctlmap() (git-fixes).
• kernel/sysctl.c: add missing range check in doprocdointvecminmaxconv (bsc#1051510).
• kernel/sysctl.c: fix out-of-bounds access when setting file-max (bsc#1051510).
• keys: safe concurrent user->{session,uid}_keyring access (bsc#1135642).
• kmsg: Update message catalog to latest IBM level (2019/03/08) (bsc#1128904 LTC#176078).
• kmsg: Update message catalog to latest IBM level (2019/03/08) (bsc#1128905 LTC#176077).
• kvm: Fix UAF in nested posted interrupt processing (bsc#1134199).
• kvm: nVMX: Clear reserved bits of #DB exit qualification (bsc#1134200).
• kvm: nVMX: restore host state in nestedvmxvmexit for VMFail (bsc#1134201).
• kvm: s390: fix memory overwrites when not using SCA entries (bsc#1136206).
• kvm: s390: provide io interrupt kvm_stat (bsc#1136206).
• kvm: s390: use created_vcpus in more places (bsc#1136206).
• kvm: s390: vsie: fix 8k check for the itdba (bsc#1136206).
• kvm: VMX: Zero out all general purpose registers after VM-Exit (bsc#1134202).
• kvm: x86: Always use 32-bit SMRAM save state for 32-bit kernels (bsc#1134203).
• kvm: x86: Do not clear EFER during SMM transitions for 32-bit vCPU (bsc#1134204).
• kvm: x86: svm: make sure NMI is injected after nmi_singlestep (bsc#1134205).
• l2tp: cleanup l2tptunneldelete calls (bsc#1051510).
• l2tp: filter out non-PPP sessions in pppol2tptunnelioctl() (git-fixes).
• l2tp: fix missing refcount drop in pppol2tptunnelioctl() (git-fixes).
• l2tp: only accept PPP sessions in pppol2tp_connect() (git-fixes).
• l2tp: prevent pppol2tp_connect() from creating kernel sockets (git-fixes).
• l2tp: revert 'l2tp: fix missing print session offset info' (bsc#1051510).
• leds: avoid races with workqueue (bsc#1051510).
• leds: pwm: silently error out on EPROBE_DEFER (bsc#1051510).
• lib: add crc64 calculation routines (bsc#1130972).
• libata: fix using DMA buffers on stack (bsc#1051510).
• lib: do not depend on linux headers being installed (bsc#1130972).
• linux/kernel.h: Use parentheses around argument in u64touser_ptr() (bsc#1051510).
• livepatch: Convert error about unsupported reliable stacktrace into a warning (bsc#1071995).
• livepatch: Remove custom kobject state handling (bsc#1071995).
• livepatch: Remove duplicated code for early initialization (bsc#1071995).
• lpfc: validate command in lpfcsli4scmdtowqidx_distr() (bsc#1129138).
• mac80211: fix memory accounting with A-MSDU aggregation (bsc#1051510).
• mac80211: fix unaligned access in mesh table hash function (bsc#1051510).
• mac8390: Fix mmio access size probe (bsc#1051510).
• md: fix invalid stored role for a disk (bsc#1051510).
• media: atmel: atmel-isc: fix INIT_WORK misplacement (bsc#1051510).
• media: cx18: update *pos correctly in cx18readpos() (bsc#1051510).
• media: cx23885: check allocation return (bsc#1051510).
• media: davinci-isif: avoid uninitialized variable use (bsc#1051510).
• media: davinci/vpbe: array underflow in vpbeenumoutputs() (bsc#1051510).
• media: ivtv: update *pos correctly in ivtvreadpos() (bsc#1051510).
• media: omapvout: potential buffer overflow in vidiocdqbuf() (bsc#1051510).
• media: ov2659: fix unbalanced mutex_lock/unlock (bsc#1051510).
• media: pvrusb2: Prevent a buffer overflow (bsc#1129770).
• media: serialir: Fix use-after-free in serialirinitmodule (bsc#1051510).
• media: tw5864: Fix possible NULL pointer dereference in tw5864handleframe (bsc#1051510).
• media: vivid: use vfree() instead of kfree() for dev->bitmap_cap (bsc#1051510).
• media: wl128x: Fix an error code in fmdownloadfirmware() (bsc#1051510).
• media: wl128x: prevent two potential buffer overflows (bsc#1051510).
• memcg: make it work on sparse non-0-node systems (bnc#1133616).
• memcg: make it work on sparse non-0-node systems kabi (bnc#1133616).
• mISDN: Check address length before reading address family (bsc#1051510).
• mlxsw: spectrum: Fix autoneg status in ethtool (networking-stable-190430).
• mmc: block: Delete gendisk before cleaning up the request queue (bsc#1127616).
• mmc: core: fix possible use after free of host (bsc#1051510).
• mm: Fix buggy backport leading to MAP_SYNC failures (bsc#1137372)
• mm/hugememory: fix vmfinsertpfn{pmd, pud}() crash, handle unaligned addresses (bsc#1135330).
• mm: thp: relax _GFPTHISNODE for MADV_HUGEPAGE mappings (bnc#1012382).
• mount: copy the port field into the cloned nfs_server structure (bsc#1136990).
• mtd: docg3: fix a possible memory leak of mtd->name (bsc#1051510).
• mtd: docg3: Fix passing zero to 'PTRERR' warning in docprobe_device (bsc#1051510).
• mtd: nand: omap: Fix comment in platform data using wrong Kconfig symbol (bsc#1051510).
• mtd: part: fix incorrect format specifier for an unsigned long long (bsc#1051510).
• mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write (bsc#1129770).
• mwifiex: Fix heap overflow in mwifiexuapparsetailies() (bsc#1136935).
• mwifiex: Fix mem leak in mwifiextmcmd (bsc#1051510).
• mwifiex: Fix possible buffer overflows at parsing bss descriptor
• mwifiex: prevent an array overflow (bsc#1051510).
• mwl8k: Fix rate_idx underflow (bsc#1051510).
• neighbor: Call _ipv4neighlookupnoref in neigh_xmit (git-fixes).
• net: aquantia: fix rx checksum offload for UDP/TCP over IPv6 (networking-stable-190328).
• net: atm: Fix potential Spectre v1 vulnerabilities (networking-stable-190419).
• net: avoid skbwarnbadoffload on ISERR (git-fixes).
• net: do not keep lonely packets forever in the gro hash (git-fixes).
• net: dsa: bcmsf2: fix buffer overflow doing setrxnfc (networking-stable-190504).
• net: dsa: legacy: do not unmask port bitmaps (git-fixes).
• net: dsa: mv88e6xxx: fix handling of upper half of STATSTYPEPORT (git-fixes).
• net: ena: fix return value of enacomconfigllqinfo() (bsc#1111696 bsc#1117561).
• net: ethtool: not call vzalloc for zero sized memory request (networking-stable-190410).
• netfilter: bridge: Do not sabotage nf_hook calls from an l3mdev (git-fixes).
• netfilter: bridge: ebt_among: add missing match size checks (git-fixes).
• netfilter: bridge: ebt_among: add more missing match size checks (git-fixes).
• netfilter: drop template ct when conntrack is skipped (git-fixes).
• netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule (git-fixes).
• netfilter: ebtables: handle string from userspace with care (git-fixes).
• netfilter: ebtables: reject non-bridge targets (git-fixes).
• netfilter: ipset: do not call ipsetnestend after nlanestcancel (git-fixes).
• netfilter: nflog: do not hold nflog_mutex during user access (git-fixes).
• netfilter: nflog: fix uninit read in nflogprocdostring (git-fixes).
• netfilter: nfsocket: Fix out of bounds access in nfsklookupslow_v{4,6} (git-fixes).
• netfilter: nf_tables: can't fail after linking rule into active rule list (git-fixes).
• netfilter: nftables: check msgtype before nfttransset(trans) (git-fixes).
• netfilter: nf_tables: fix leaking object reference count (git-fixes).
• netfilter: nftables: fix NULL pointer dereference on nftcthelperobj_dump() (git-fixes).
• netfilter: nf_tables: release chain in flushing set (git-fixes).
• netfilter: nft_compat: do not dump private area (git-fixes).
• netfilter: x_tables: initialise match/target check parameter struct (git-fixes).
• net: Fix a bug in removing queues from XPS map (git-fixes).
• net: fix uninit-value in _hwaddraddex() (git-fixes).
• net: fou: do not use guehdr after iptunnelpulloffloads in gueudprecv (networking-stable-190419).
• net-gro: Fix GRO flush when receiving a GSO packet (networking-stable-190410).
• net: hns3: remove resetting check in hclgevfresettask_schedule (bsc#1104353 bsc#1135056).
• net/ibmvnic: Remove tests of member address (bsc#1137739).
• net/ibmvnic: Update carrier state after link state change (bsc#1135100).
• net/ibmvnic: Update MAC address settings after adapter reset (bsc#1134760).
• net: initialize skb->peeked when cloning (git-fixes).
• net/ipv4: defensive cipso option parsing (git-fixes).
• net/ipv6: do not reinitialize ndev->cnf.addrgenmode on new inet6_dev (git-fixes).
• net/ipv6: fix addrconfsysctladdrgenmode (git-fixes).
• net/ipv6: propagate net.ipv6.conf.all.addrgenmode to devices (git-fixes).
• net/ipv6: reserve room for IFLAINET6ADDRGENMODE (git-fixes).
• netlink: fix uninit-value in netlink_sendmsg (git-fixes).
• net: make skbpartialcsum_set() more robust against overflows (git-fixes).
• net/mlx5: Decrease default mr cache size (networking-stable-190410).
• net/mlx5e: Add a lock on tir list (networking-stable-190410).
• net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-190430).
• net/mlx5e: Fix trailing semicolon (bsc#1075020).
• net/mlx5e: IPoIB, Reset QP after channels are closed (bsc#1075020).
• net: phy: marvell: Fix buffer overrun with stats counters (networking-stable-190504).
• net: rds: exchange of 8K and 1M pool (networking-stable-190430).
• net: rose: fix a possible stack overflow (networking-stable-190328).
• net/rose: fix unbound loop in roseloopbacktimer() (networking-stable-190430).
• net/sched: actsample: fix divide by zero in the traffic path (networking-stable-1904_10).
• net/sched: do not dereference a->goto_chain to read the chain index (bsc#1064802 bsc#1066129).
• net/sched: fix ->get helper of the matchall cls (networking-stable-190410).
• net/smc: add pnet table namespace support (bsc#1130409 LTC#176346).
• net/smc: add smcd support to the pnet table (bsc#1130409 LTC#176346).
• net/smc: allow 16 byte pnetids in netlink policy (bsc#1129857 LTC#176247).
• net/smc: allow pci IDs as ib device names in the pnet table (bsc#1130409 LTC#176346).
• net/smc: allow pnetid-less configuration (bsc#1130409 LTC#176346).
• net/smc: call smccdcmsgsend() under sendlock (bsc#1129857 LTC#176247).
• net/smc: check connections in smclgrfree_work (bsc#1129857 LTC#176247).
• net/smc: check for ip prefix and subnet (bsc#1134607 LTC#177518).
• net/smc: check port_idx of ib event (bsc#1129857 LTC#176247).
• net/smc: cleanup for smcrtxsndbuf_nonempty (bsc#1130409 LTC#176346).
• net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
• net/smc: code cleanup smclistenwork (bsc#1134607 LTC#177518).
• net/smc: consolidate function parameters (bsc#1134607 LTC#177518).
• net/smc: correct state change for peer closing (bsc#1129857 LTC#176247).
• net/smc: delete rkey first before switching to unused (bsc#1129857 LTC#176247).
• net/smc: do not wait for send buffer space when data was already sent (bsc#1129857 LTC#176247).
• net/smc: do not wait under send_lock (bsc#1129857 LTC#176247).
• net/smc: fallback to TCP after connect problems (bsc#1134607 LTC#177518).
• net/smc: fix another sizeof to int comparison (bsc#1129857 LTC#176247).
• net/smc: fix a NULL pointer dereference (bsc#1134607 LTC#177518).
• net/smc: fix byteorder for rxcurs_confirmed (bsc#1129848 LTC#176249).
• net/smc: fix return code from FLUSH command (bsc#1134607 LTC#177518).
• net/smc: fix sender_free computation (bsc#1129857 LTC#176247).
• net/smc: fix smcpoll in SMCINIT state (bsc#1129848 LTC#176249).
• net/smc: fix use of variable in cleared area (bsc#1129857 LTC#176247).
• net/smc: improve smcconncreate reason codes (bsc#1134607 LTC#177518).
• net/smc: improve smclistenwork reason codes (bsc#1134607 LTC#177518).
• net/smc: move code to clear the conn->lgr field (bsc#1129857 LTC#176247).
• net/smc: move unhash before release of clcsock (bsc#1134607 LTC#177518).
• net/smc: move wake up of close waiter (bsc#1129857 LTC#176247).
• net/smc: no delay for free tx buffer wait (bsc#1129857 LTC#176247).
• net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
• net/smc: postpone release of clcsock (bsc#1129857 LTC#176247).
• net/smc: preallocated memory for rdma work requests (bsc#1129857 LTC#176247).
• net/smc: prevent races between smclgrterminate() and smcconnfree() (bsc#1129857 LTC#176247).
• net/smc: propagate file from SMC to TCP socket (bsc#1134607 LTC#177518).
• net/smc: recvmsg and splice_read should return 0 after shutdown (bsc#1129857 LTC#176247).
• net/smc: reduce amount of status updates to peer (bsc#1129857 LTC#176247).
• net/smc: reset cursor update required flag (bsc#1129857 LTC#176247).
• net/smc: rework pnet table (bsc#1130409 LTC#176346).
• net/smc: unlock LGR pending lock earlier for SMC-D (bsc#1129857 LTC#176247).
• net/smc: use client and server LGR pending locks for SMC-R (bsc#1129857 LTC#176247).
• net/smc: use device link provided in qp_context (bsc#1129857 LTC#176247).
• net/smc: use smccurscopy() for SMC-D (bsc#1129857 LTC#176247).
• net/smc: wait for pending work before clcsock release_sock (bsc#1134607 LTC#177518).
• net: socket: fix potential spectre v1 gadget in socketcall (git-fixes).
• net: stmmac: fix memory corruption with large MTUs (networking-stable-190328).
• net: stmmac: move stmmacchecketheraddr() to driver probe (networking-stable-1904_30).
• net: test tailroom before appending to linear skb (git-fixes).
• net: thunderx: do not allow jumbo frames with XDP (networking-stable-190419).
• net: thunderx: raise XDP MTU to 1508 (networking-stable-190419).
• net: unbreak CONFIG_RETPOLINE=n builds (bsc#1124503).
• net: use indirect call wrappers at GRO network layer (bsc#1124503).
• net: use indirect call wrappers at GRO transport layer (bsc#1124503).
• nfs: add module option to limit NFSv4 minor version (jsc#PM-231).
• nfs: Update config files for NFSv4.2 Enable NFSv4.2 support - jsc@PM-231 This requires a module parameter for NFSv4.2 to actually be available on SLE12 and SLE15-SP0
• nfsv4.x: always serialize open/close operations (bsc#1114893).
• nl80211: Add NL80211FLAGCLEAR_SKB flag for other NL commands (bsc#1051510).
• nvme: Do not remove namespaces during reset (bsc#1131673).
• nvme: flush scan_work when resetting controller (bsc#1131673).
• nvme-rdma: fix possible free of a non-allocated async event buffer (bsc#1120423).
• objtool: Fix function fallthrough detection (bsc#1058115).
• ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (bsc#1136434).
• ocfs2: turn on OCFS2FSSTATS setting(bsc#1134393) We need to turn on OCFS2FSSTATS kernel configuration setting, to fix bsc#1134393.
• of: fix clang -Wunsequenced for be32tocpu() (bsc#1135642).
• omapfb: add missing ofnodeput after ofdeviceis_available (bsc#1051510).
• openvswitch: add seqadj extension when NAT is used (bsc#1051510).
• openvswitch: fix flow actions reallocation (bsc#1051510).
• p54: drop device reference count if fails to enable device (bsc#1135642).
• packet: fix reserve calculation (git-fixes).
• packet: in packet_snd start writing at link layer allocation (git-fixes).
• packet: refine ring v3 block size test to hold one frame (git-fixes).
• packet: reset network header if packet shorter than ll reserved space (git-fixes).
• packets: Always register packet sk in the same order (networking-stable-190328).
• packet: validate msg_namelen in send directly (git-fixes).
• pci: endpoint: Use EPC's device in dmaalloccoherent()/dmafreecoherent() (git-fixes).
• pci: Factor out pcieretrainlink() function (git-fixes).
• pci: Mark AMD Stoney Radeon R7 GPU ATS as broken (bsc#1051510).
• pci: Mark Atheros AR9462 to avoid bus reset (bsc#1051510).
• pci: Work around Pericom pcie-to-pci bridge Retrain Link erratum (git-fixes).
• phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode (bsc#1051510).
• platform/x86: alienware-wmi: printing the wrong error code (bsc#1051510).
• platform/x86: dell-rbtn: Add missing #include (bsc#1051510).
• platform/x86: intelpmcipc: adding error handling (bsc#1051510).
• platform/x86: intelpunitipc: Revert 'Fix resource ioremap warning' (bsc#1051510).
• platform/x86: pmcatom: Add Lex 3I380D industrial PC to critclksystems DMI table (bsc#1051510).
• platform/x86: pmcatom: Add several Beckhoff Automation boards to critclksystems DMI table (bsc#1051510).
• platform/x86: pmcatom: Drop _initconst on dmi table (bsc#1051510).
• platform/x86: sony-laptop: Fix unintentional fall-through (bsc#1051510).
• powerpc: Always initialize input array when calling epapr_hypercall() (bsc#1065729).
• powerpc/eeh: Fix race with driver un/bind (bsc#1065729).
• powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y (bsc#1065729).
• powerpc/msi: Fix NULL pointer access in teardown code (bsc#1065729).
• powerpc/perf: Fix MMCRA corruption by bhrb_filter (bsc#1053043).
• powerpc/powernv/idle: Restore IAMR after idle (bsc#1065729).
• powerpc/process: Fix sparse address space warnings (bsc#1065729).
• power: supply: axp20xusbpower: Fix typo in VBUS current limit macros (bsc#1051510).
• power: supply: axp288_charger: Fix unchecked return value (bsc#1051510).
• proc/kcore: do not bounds check against address 0 (bsc#1051510).
• proc: revalidate kernel thread inodes to root:root (bsc#1051510).
• proc/sysctl: fix return error for procdoulongvecminmax() (bsc#1051510).
• ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK (git-fixes).
• pwm: Fix deadlock warning when removing PWM device (bsc#1051510).
• pwm: meson: Consider 128 a valid pre-divider (bsc#1051510).
• pwm: meson: Do not disable PWM when setting duty repeatedly (bsc#1051510).
• pwm: meson: Use the spin-lock only to protect register modifications (bsc#1051510).
• pwm: tiehrpwm: Update shadow register for disabling PWMs (bsc#1051510).
• qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128979).
• qla2xxx: always allocate qlatgtwq (bsc#1131451).
• qmi_wwan: add Olicard 600 (bsc#1051510).
• rdma/hns: Fix bug that caused srq creation to fail (bsc#1104427 ).
• rdma/rxe: Consider skb reserve space based on netdev of GID (bsc#1082387, bsc#1103992).
• re-export snd_cards for kABI compatibility (bsc#1051510).
• regulator: tps65086: Fix tps65086ldoa1ranges for selector 0xB (bsc#1051510).
• Revert 'ALSA: seq: Protect in-kernel ioctl calls with mutex' (bsc#1051510).
• Revert 'block: unexport DISKEVENTMEDIA_CHANGE for legacy/fringe drivers' (bsc#1110946, bsc#1119843).
• Revert 'drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)' The patch seems buggy, breaks the build for armv7hl/pae config.
• Revert 'ide: unexport DISKEVENTMEDIA_CHANGE for ide-gd and ide-cd' (bsc#1110946).
• Revert 'tty: pty: Fix race condition between releaseonetty and pty_write' (bsc#1051510).
• rt2x00: do not increment sequence number while re-transmitting (bsc#1051510).
• rtc: da9063: set uie_unsupported when relevant (bsc#1051510).
• rtc: sh: Fix invalid alarm warning for non-enabled alarm (bsc#1051510).
• rtlwifi: rtl8723ae: Fix missing break in switch statement (bsc#1051510).
• rxrpc: Fix error reception on AF_INET6 sockets (git-fixes).
• rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket (git-fixes).
• s390/ism: ignore some errors during deregistration (bsc#1129857 LTC#176247).
• s390/qdio: clear intparm during shutdown (bsc#1134597 LTC#177516).
• sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() (bsc#1051510).
• sc16is7xx: move label 'err_spi' to correct section (bsc#1051510).
• sc16is7xx: put errspi and erri2c into correct #ifdef (bsc#1051510).
• scripts/bugzilla-create: Set 'Proactive-Upstream-Fix' keyword
• scripts/gitsort/gitsort.py: Add mkp/scsi 5.0/scsi-fixes
• scripts: override locale from environment when running recordmcount.pl (bsc#1134354).
• scsi: qedf: fixup bit operations (bsc#1135542).
• scsi: qedf: fixup locking in qedfrestartrport() (bsc#1135542).
• scsi: qedf: missing krefput in qedfxmit() (bsc#1135542).
• scsi: qla2xxx: Declare local functions 'static' (bsc#1137444).
• scsi: qla2xxx: fix error message on qla2400 (bsc#1118139).
• scsi: qla2xxx: Fix function argument descriptions (bsc#1118139).
• scsi: qla2xxx: Fix memory corruption during hba reset test (bsc#1118139).
• scsi: qla2xxx: Fix panic in qladfstgtcountersshow (bsc#1132044).
• scsi: qla2xxx: fix spelling mistake: 'existant' -> 'existent' (bsc#1118139).
• scsi: qla2xxx: fully convert to the generic DMA API (bsc#1137444).
• scsi: qla2xxx: fx00 copypaste typo (bsc#1118139).
• scsi: qla2xxx: Improve several kernel-doc headers (bsc#1137444).
• scsi: qla2xxx: Introduce a switch/case statement in qltxmittm_rsp() (bsc#1137444).
• scsi: qla2xxx: Make qla2x00sysfswrite_nvram() easier to analyze (bsc#1137444).
• scsi: qla2xxx: Make sure that qlafx00ioctliosb_entry() initializes 'res' (bsc#1137444).
• scsi: qla2xxx: NULL check before some freeing functions is not needed (bsc#1137444).
• scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1137444).
• scsi: qla2xxx: remove the unused tcmqla2xxxcmd_wq (bsc#1118139).
• scsi: qla2xxx: Remove two arguments from qlafx00errorentry() (bsc#1137444).
• scsi: qla2xxx: Remove unused symbols (bsc#1118139).
• scsi: qla2xxx: Split the _qla2x00abortallcmds() function (bsc#1137444).
• scsi: qla2xxx: use lower32bits and upper32bits instead of reinventing them (bsc#1137444).
• scsi: qla2xxx: Use %p for printing pointers (bsc#1118139).
• sctp: avoid running the sctp state machine recursively (networking-stable-190504).
• sctp: fix identification of new acks for SFR-CACC (git-fixes).
• sctp: get sctphdr by offset in sctpcomputecksum (networking-stable-190328).
• sctp: initialize pad of sockaddrin before copying to user memory (networking-stable-190410).
• sctp: only update outstandingbytes for transmitted queue when doing prsctpprune (git-fixes).
• sctp: set fragpoint in sctpsetsockopt_maxseg correctly` (git-fixes).
• selinux: use kernel linux/socket.h for genheaders and mdp (bsc#1134810).
• serial: 8250_pxa: honor the port number from devicetree (bsc#1051510).
• serial: ar933x_uart: Fix build failure with disabled console (bsc#1051510).
• serial: uartps: console_setup() can't be placed to init section (bsc#1051510).
• signal: Always notice exiting tasks (git-fixes).
• signal: Better detection of synchronous signals (git-fixes).
• signal: Restore the stop PTRACEEVENTEXIT (git-fixes).
• smc: move unhash as early as possible in smc_release() (bsc#1129857 LTC#176247).
• soc/fsl/qe: Fix an error code in qepinrequest() (bsc#1051510).
• soc/tegra: pmc: Drop locking from tegrapowergateis_powered() (bsc#1051510).
• spi: a3700: Clear DATA_OUT when performing a read (bsc#1051510).
• spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios (bsc#1051510).
• spi: bcm2835aux: setup gpio-cs to output and correct level during setup (bsc#1051510).
• spi: bcm2835aux: warn in dmesg that native cs is not really supported (bsc#1051510).
• spi: Micrel eth switch: declare missing of table (bsc#1051510).
• spi: rspi: Fix sequencer reset during initialization (bsc#1051510).
• spi: ST ST95HF NFC: declare missing of table (bsc#1051510).
• ssb: Fix possible NULL pointer dereference in ssbhostpcmcia_exit (bsc#1051510).
• staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc (bsc#1051510).
• stm class: Fix an endless loop in channel allocation (bsc#1051510).
• stm class: Fix channel free in stm output free path (bsc#1051510).
• stm class: Prevent division by zero (bsc#1051510).
• stmmac: pci: Adjust IOT2000 matching (networking-stable-190430).
• supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
• supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
• switchtec: Fix unintended mask of MRPC event (git-fixes).
• tcp: add tcpminsnd_mss sysctl (bsc#1137586).
• tcp: do not use ipv6 header for ipv4 flow (networking-stable-190328).
• tcp: enforce tcpminsndmss in tcpmtu_probing() (bsc#1137586).
• tcp: Ensure DCTCP reacts to losses (networking-stable-190410).
• tcp: limit payload size of sacked skbs (bsc#1137586).
• tcp: purge write queue in tcpconnectinit() (git-fixes).
• tcp: tcp_fragment() should apply sane memory limits (bsc#1137586).
• tcp: tcpgrowwindow() needs to respect tcpspace() (networking-stable-1904_19).
• team: fix possible recursive locking when add slaves (networking-stable-190430).
• team: set slave to promisc if team is already in promisc mode (bsc#1051510).
• thermal: cpucooling: Actually trace CPU load in thermalpowercpuget_power (bsc#1051510).
• thermal/int340x_thermal: Add additional UUIDs (bsc#1051510).
• thermal/int340x_thermal: fix mode setting (bsc#1051510).
• thunderx: eliminate extra calls to putpage() for pages held for recycling (networking-stable-1903_28).
• thunderx: enable page recycling for non-XDP case (networking-stable-190328).
• tipc: fix hanging clients using poll with EPOLLOUT flag (git-fixes).
• tipc: missing entries in name table of publications (networking-stable-190419).
• tools lib traceevent: Fix missing equality check for strcmp (bsc#1129770).
• tracing: Fix partial reading of trace event's id file (bsc#1136573).
• treewide: Use DEVICEATTRWO (bsc#1137739).
• tty: increase the default flip buffer limit to 2*640K (bsc#1051510).
• tty: pty: Fix race condition between releaseonetty and pty_write (bsc#1051510).
• tty: serial_core, add ->install (bnc#1129693).
• tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 (bsc#1051510).
• tun: add a missing rcureadunlock() in error path (networking-stable-190328).
• tun: properly test for IFFUP (networking-stable-1903_28).
• uas: fix alignment of scatter/gather segments (bsc#1129770).
• udp: use indirect call wrappers for GRO socket lookup (bsc#1124503).
• ufs: fix braino in ufsgetinode_gid() for solaris UFS flavour (bsc#1135323).
• usb: cdc-acm: fix unthrottle races (bsc#1051510).
• usb: core: Fix bug caused by duplicate interface PM usage counter (bsc#1051510).
• usb: core: Fix unterminated string returned by usb_string() (bsc#1051510).
• usb: dwc3: Fix default lpmnyetthreshold value (bsc#1051510).
• usb: gadget: net2272: Fix net2272_dequeue() (bsc#1051510).
• usb: gadget: net2280: Fix net2280_dequeue() (bsc#1051510).
• usb: gadget: net2280: Fix overrun of OUT messages (bsc#1051510).
• usb: serial: f81232: fix interrupt worker not stop (bsc#1051510).
• usb: serial: fix unthrottle races (bsc#1051510).
• usb-storage: Set virtboundarymask to avoid SG overflows (bsc#1051510).
• usb: u132-hcd: fix resource leak (bsc#1051510).
• usb: usb251xb: fix to avoid potential NULL pointer dereference (bsc#1051510).
• usb: usbip: fix isoc packet num validation in get_pipe (bsc#1051510).
• usb: w1 ds2490: Fix bug caused by improper use of altsetting array (bsc#1051510).
• usb: yurex: Fix protection fault after device removal (bsc#1051510).
• userfaultfd: use RCU to free the task struct when fork fails (git-fixes).
• vfio/mdev: Avoid release parent reference during error path (bsc#1051510).
• vfio/mdev: Fix aborting mdev child device removal if one fails (bsc#1051510).
• vfiopci: Enable memory accesses before calling pcimap_rom (bsc#1051510).
• vfio/pci: use correct format characters (bsc#1051510).
• vhost: reject zero size iova range (networking-stable-190419).
• vhost/vsock: fix reset orphans race with close timeout (bsc#1051510).
• virtio-blk: limit number of hw queues by nrcpuids (bsc#1051510).
• virtio: Honour 'mayreducenum' in vringcreatevirtqueue (bsc#1051510).
• virtiopci: fix a NULL pointer reference in vpdel_vqs (bsc#1051510).
• vrf: check acceptsourceroute on the original netdevice (networking-stable-190410).
• vsock/virtio: fix kernel panic after device hot-unplug (bsc#1051510).
• vsock/virtio: fix kernel panic from virtiotransportresetnosock (bsc#1051510).
• vsock/virtio: Initialize core virtio vsock before registering the driver (bsc#1051510).
• vsock/virtio: reset connected sockets on device removal (bsc#1051510).
• vt: always call notifier with the console lock held (bsc#1051510).
• vxlan: Do not call grocellsdestroy() before device is unregistered (networking-stable-190328).
• x86_64: Add gap to int3 to allow for call emulation (bsc#1099658).
• x86_64: Allow breakpoints to emulate call instructions (bsc#1099658).
• x86/speculation/mds: Fix documentation typo (bsc#1135642).
• xenbus: drop useless LISTHEAD in xenbuswritewatch() and xenbusfile_write() (bsc#1065600).
• xfrm6: avoid potential infinite loop in decodesession6() (git-fixes).
• xfrm6: call kfree_skb when skb is toobig (git-fixes).
• xfrm: fix missing dst_release() after policy blocking lbcast and multicast (git-fixes).
• xfrm: fix 'passing zero to ERR_PTR()' warning (git-fixes).
• xfrm: Fix stack-out-of-bounds read on socket policy lookup (git-fixes).
• xfrm: fix xfrmdomigrate() with AEAD e.g(AES-GCM) (git-fixes).
• xfrm: reset crypto_done when iterating over multiple input xfrms (git-fixes).
• xfrm: reset transport header back to network header after all input transforms ahave been applied (git-fixes).
• xfrm: Return error on unknown encaptype in initstate (git-fixes).
• xfrm_user: prevent leaking 2 bytes of kernel memory (git-fixes).
• xfrm: Validate address prefix lengths in the xfrm selector (git-fixes).
• xfs: add log item pinning error injection tag (bsc#1114427).
• xfs: buffer lru reference count error injection tag (bsc#1114427).
• xfs: check btreecheck_block value (bsc#1123663).
• xfs: convert drop_writes to use the errortag mechanism (bsc#1114427).
• xfs: create block pointer check functions (bsc#1123663).
• xfs: create inode pointer verifiers (bsc#1114427).
• xfs: detect and fix bad summary counts at mount (bsc#1114427).
• xfs: export inobtbtrectoirec and ialloccluster_alignment for scrub (bsc#1114427).
• xfs: export various function for the online scrubber (bsc#1123663).
• xfs: expose errortag knobs via sysfs (bsc#1114427).
• xfs: fix unused variable warning in xfsbufset_ref() (bsc#1114427).
• xfs: force summary counter recalc at next mount (bsc#1114427).
• xfs: kill meaningless variable 'zero' (bsc#1106011).
• xfs: make errortag a per-mountpoint structure (bsc#1123663).
• xfs: move error injection tags into their own file (bsc#1114427).
• xfs: prepare xfsbreaklayouts() for another layout type (bsc#1106011).
• xfs: prepare xfsbreaklayouts() to be called with XFSMMAPLOCKEXCL (bsc#1106011).
• xfs: refactor btree block header checking functions (bsc#1123663).
• xfs: refactor btree pointer checks (bsc#1123663).
• xfs: refactor unmount record write (bsc#1114427).
• xfs: remove unneeded parameter from XFSTESTERROR (bsc#1123663).
• xfs: remove xfszerorange (bsc#1106011).
• xfs: rename MAXPATHLEN to XFSSYMLINKMAXLEN (bsc#1123663).
• xfs: replace logbadcrcfactor knob with error injection tag (bsc#1114427).
• xfs: sanity-check the unused space before trying to use it (bsc#1123663).
• xfs: serialize unaligned dio writes against all other dio writes (bsc#1134936).