The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
CVE-2019-20095: mwifiextmcmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c had some error-handling cases that did not free allocated hostcmd memory. This will cause a memory leak and denial of service (bnc#1159909).
CVE-2019-20054: Fixed a a NULL pointer dereference in dropsysctltable() in fs/proc/procsysctl.c, related to putlinks (bnc#1159910).
CVE-2019-20096: Fixed a memory leak in _featregister_sp() in net/dccp/feat.c, which may cause denial of service (bnc#1159908).
CVE-2019-19966: Fixed a use-after-free in cpia2exit() in drivers/media/usb/cpia2/cpia2v4l.c that will cause denial of service (bnc#1159841).
CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4putsuper in fs/ext4/super.c, related to dumporphanlist in fs/ext4/super.c (bnc#1158819).
CVE-2019-19319: A setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4xattrsetentry use-after-free in fs/ext4/xattr.c when a large oldsize value is used in a memset call (bnc#1158021).
CVE-2019-19767: Fixed mishandling of ext4expandextraisize, as demonstrated by use-after-free errors in _ext4expandextraisize and ext4xattrsetentry, related to fs/ext4/inode.c and fs/ext4/super.c (bnc#1159297).
CVE-2019-18808: A memory leak in the ccprunsha_cmd() function in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption) (bnc#1156259).
CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where the length of variable elements in a beacon head were not checked, leading to a buffer overflow (bnc#1152107).
CVE-2019-19066: A memory leak in the bfadimgetstats() function in drivers/scsi/bfa/bfadattr.c allowed attackers to cause a denial of service (memory consumption) by triggering bfaportget_stats() failures (bnc#1157303).
CVE-2019-19051: There was a memory leak in the i2400moprfkillswtoggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1159024).
CVE-2019-19338: There was an incomplete fix for Transaction Asynchronous Abort (TAA) (bnc#1158954).
CVE-2019-19332: There was an OOB memory write via kvmdevioctlgetcpuid (bnc#1158827).
CVE-2019-19537: There was a race condition bug that can be caused by a malicious USB device in the USB character device driver layer (bnc#1158904).
CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusb_fd.c driver (bnc#1158903).
CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (bnc#1158900).
CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver (bnc#1158893).
CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver (bnc#1158834).
CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers (bnc#1158824).
CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bnc#1158381 1158823 1158834).
CVE-2019-15213: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).
CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
CVE-2019-19543: There was a use-after-free in serialirinitmodule() in drivers/media/rc/serialir.c (bnc#1158427).
CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusb_pro.c driver (bnc#1158394).
CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusb_core.c driver (bnc#1158398).
CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vividstopgeneratingvidcap(), vividstopgeneratingvidout(), sdrcapstop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
CVE-2019-18809: A memory leak in the af9005identifystate() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1156258).
CVE-2019-19046: A memory leak in the _ipmibmcregister() function in drivers/char/ipmi/ipmimsghandler.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering idasimpleget() failure (bnc#1157304).
CVE-2019-19078: A memory leak in the ath10kusbhiftxsg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usbsubmiturb() failures (bnc#1157032).
CVE-2019-19062: A memory leak in the cryptoreport() function in crypto/cryptouserbase.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering cryptoreport_alg() failures (bnc#1157333).
CVE-2019-19057: Two memory leaks in the mwifiexpcieinitevtring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiexmappci_memory() failures (bnc#1157197).
CVE-2019-19056: A memory leak in the mwifiexpciealloccmdrspbuf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiexmappci_memory() failures (bnc#1157197).
CVE-2019-19068: A memory leak in the rtl8xxxusubmitinturb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxucore.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usbsubmiturb() failures (bnc#1157307).
CVE-2019-19063: Two memory leaks in the rtlusbprobe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157298).
CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel there was a potential NULL pointer dereference because registersnapclient may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregistersnapclient (bnc#1157678).
CVE-2019-19081: A memory leak in the nfpflowerspawnvnicreprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157045).
CVE-2019-19080: Four memory leaks in the nfpflowerspawnphyreprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157044).
CVE-2019-19065: A memory leak in the sdmainit() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering rhashtableinit() failures (bnc#1157191).
CVE-2019-19077: A memory leak in the bnxtrecreatesrq() function in drivers/infiniband/hw/bnxtre/ib_verbs.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering copy to udata failures (bnc#1157171).
CVE-2019-19052: A memory leak in the gscanopen() function in drivers/net/can/usb/gsusb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usbsubmit_urb() failures (bnc#1157324).
CVE-2019-19067: Four memory leaks in the acphwinit() function in drivers/gpu/drm/amd/amdgpu/amdgpuacp.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mfdaddhotplugdevices() or pmgenpdadd_device() failures (bsc#1157180).
CVE-2019-19060: A memory leak in the adisupdatescanmode() function in drivers/iio/imu/adisbuffer.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157178).
CVE-2019-19049: A memory leak in the unittestdataadd() function in drivers/of/unittest.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering offdtunflatten_tree() failures (bsc#1157173).
CVE-2019-19075: A memory leak in the ca8210probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ca8210getplatformdata() failures (bnc#1157162).
CVE-2019-19058: A memory leak in the allocsgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering allocpage() failures (bnc#1157145).
CVE-2019-19074: A memory leak in the ath9kwmicmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157143).
CVE-2019-19073: Fixed memory leaks in drivers/net/wireless/ath/ath9k/htchst.c allowed attackers to cause a denial of service (memory consumption) by triggering waitforcompletiontimeout() failures (bnc#1157070).
CVE-2019-19083: Memory leaks in *clocksourcecreate() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157049).
CVE-2019-19082: Memory leaks in *createresourcepool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157046).
CVE-2019-15916: An issue was discovered in the Linux kernel There was a memory leak in registerqueuekobjects() in net/core/net-sysfs.c, which will cause denial of service (bnc#1149448).
CVE-2019-0154: Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1135966).
CVE-2019-0155: Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may have allowed an authenticated user to potentially enable escalation of privilege via local access (bnc#1135967).
CVE-2019-16231: drivers/net/fjes/fjesmain.c in the Linux kernel 5.2.14 did not check the allocworkqueue return value, leading to a NULL pointer dereference (bnc#1150466).
CVE-2019-18805: An issue was discovered in net/ipv4/sysctlnetipv4.c in the Linux kernel There was a net/ipv4/tcpinput.c signed integer overflow in tcpackupdatertt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcpminrtt_wlen, leading to a denial of service or possibly unspecified other impact (bnc#1156187).
CVE-2019-17055: basesockcreate in drivers/isdn/mISDN/socket.c in the AFISDN network module in the Linux kernel did not enforce CAPNET_RAW, which means that unprivileged users can create a raw socket (bnc#1152782).
CVE-2019-16995: In the Linux kernel before 5.0.3, a memory leak exits in hsrdevfinalize() in net/hsr/hsrdevice.c if hsradd_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d (bnc#1152685).
CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may have allowed an authenticated user to potentially enable information disclosure via a side channel with local access (bnc#1139073).
CVE-2019-16233: drivers/scsi/qla2xxx/qlaos.c in the Linux kernel 5.2.14 did not check the allocworkqueue return value, leading to a NULL pointer dereference (bnc#1150457).
CVE-2018-12207: Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may have allowed an authenticated user to potentially enable denial of service of the host system via local access (bnc#1117665).
CVE-2019-10220: Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists (bnc#1144903).
CVE-2019-17666: rtlp2pnoa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow (bnc#1154372).
CVE-2019-16232: drivers/net/wireless/marvell/libertas/ifsdio.c did not check the allocworkqueue return value, leading to a NULL pointer dereference (bnc#1150465).
CVE-2019-16234: drivers/net/wireless/intel/iwlwifi/pcie/trans.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150452).
CVE-2019-17133: cfg80211mgdwext_giwessid in net/wireless/wext-sme.c did not reject a long SSID IE, leading to a Buffer Overflow (bnc#1153158).
CVE-2019-17056: llcpsockcreate in net/nfc/llcpsock.c in the AFNFC network module in the Linux kernel did not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176 (bnc#1152788).
CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation (bnc#1151350).
CVE-2017-18595: An issue was discovered in the Linux kernel A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c (bnc#1149555).
CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that can decrypt traffic and inject arbitrary ciphertext without the victim noticing (bnc#1146042).
CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration (bnc#1150112).
CVE-2019-9456: Ther is an issue inside the USB monitor driver that can lead to a possible OOB write due to a missing bounds check (bnc#1150025).
CVE-2019-15031: In the Linux kernel on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt (bnc#1149713).
CVE-2019-15030: In the Linux kernel on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception (bnc#1149713).
The following non-security bugs were fixed:
9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
ACPI / APEI: Do not wait to serialise with oops messages when panic()ing (bsc#1051510).
ACPI / CPPC: do not require the _PSD method (bsc#1051510).
ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmcatomd3_mask (bsc#1051510).
ACPI / LPSS: Ignore acpidevicefixuppower() return value (bsc#1051510).
RDMA/bnxt_re: Fix stat push into dma buffer on gen p5 devices (bsc#1157115)
RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805)
RDMA/efa: Clear the admin command buffer prior to its submission (git-fixes) Patch was already picked through Amazon driver repo but was not marked with a Git-commit tag
RDMA/hns: Add mtr support for mixed multihop addressing (bsc#1104427).
RDMA/hns: Add reset process for function-clear (bsc#1155061).
RDMA/hns: Bugfix for calculating qp buffer size (bsc#1104427 ).
RDMA/hns: Bugfix for filling the sge of srq (bsc#1104427 ).
RDMA/hns: Bugfix for qpc/cqc timer configuration (bsc#1104427 bsc#1126206).
RDMA/hns: Correct the value of srqdescsize (bsc#1104427 ).
RDMA/hns: Fix an error code in hnsrocesetusersq_size() (bsc#1104427).
RDMA/hns: Fix comparison of unsigned long variable 'end' with less than zero (bsc#1104427 bsc#1137236).
RDMA/hns: Fix to support 64K page for srq (bsc#1104427 ).
RDMA/hns: Fix wrong assignment of qpaccessflags (bsc#1104427 ).
irqchip/gic-v3-its: Fix misuse of GENMASK macro (jsc#ECO-561).
irqdomain: Add the missing assignment of domain->fwnode for named fwnode (bsc#1111666).
isdn/capi: check message length in capi_write() (bsc#1051510).
iwlwifi: api: annotate compressed BA notif array sizes (bsc#1051510).
iwlwifi: check kasprintf() return value (bsc#1051510).
iwlwifi: do not panic in error path on non-msix systems (bsc#1155692).
iwlwifi: drop packets with bad status in CD (bsc#1111666).
iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
iwlwifi: fix bad dma handling in page_mem dumping flow (bsc#1120902).
iwlwifi: fw: do not send GEOTXPOWER_LIMIT command to FW version 36 (bsc#1111666).
iwlwifi: fw: use helper to determine whether to dump paging (bsc#1106434). Patch needed to be adjusted, because our tree does not have the global variable IWLFWERRORDUMPPAGING
iwlwifi: mvm: Send non offchannel traffic via AP sta (bsc#1051510).
iwlwifi: mvm: avoid sending too many BARs (bsc#1051510).
iwlwifi: mvm: do not send keys when entering D3 (bsc#1051510).
iwlwifi: mvm: force TCM re-evaluation on TCM resume (bsc#1111666).
iwlwifi: mvm: synchronize TID queue removal (bsc#1051510).
iwlwifi: mvm: use correct FIFO length (bsc#1111666).
iwlwifi: pcie: fit reclaim msg to MAXMSGLEN (bsc#1111666).
iwlwifi: pcie: fix erroneous print (bsc#1111666).
iwlwifi: pcie: fix memory leaks in iwlpciectxtinfogen3_init (bsc#1111666).
iwlwifi: pcie: read correct prph address for newer devices (bsc#1111666).
ixgbe: Fix secpath usage for IPsec TX offload (bsc#1113994 bsc#1151807).
ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674).
ixgbe: fix double clean of Tx descriptors with xdp (bsc#1113994 ).
ixgbe: fix possible deadlock in ixgbeservicetask() (bsc#1113994).
ixgbe: sync the first fragment unconditionally (bsc#1133140).
ixgbevf: Fix secpath usage for IPsec Tx offload (bsc#1113994 ).
kABI fix for 'ipmi: Do not allow device module unload when in use' (bsc#1154768).
kABI fixup allocdaxregion (bsc#1158071).
kABI workaround for ath10k hwfilterreset_required field (bsc#1111666).
kABI workaround for ath10k lastwmivdevstartstatus field (bsc#1051510).
kABI workaround for crypto/af_alg changes (bsc#1154737).
kABI workaround for drm_connector.registered type changes (bsc#1111666).
kABI workaround for drmvmaoffset_node readonly field addition (bsc#1135967)
kABI workaround for iwlwifi iwlrxcmd_buffer change (bsc#1111666).
kABI workaround for mmchost retunecrc_disable flag addition (bsc#1111666).
kABI workaround for sndhdapickpinfixup() changes (bsc#1051510).
kABI workaround for struct mwifiexpowercfg change (bsc#1051510).
kABI: Fix for 'KVM: x86: Introduce vcpu->arch.xsaves_enabled' (bsc#1158066).
kABI: add _q suffix to exports that take struct dh (bsc#1155331).
kABI: media: em28xx: fix handler for vidiocsinput() (bsc#1051510). fixes kABI
kABI: media: em28xx: stop rewriting device's struct (bsc#1051510). fixes kABI
kabi protect enum RDMADRIVEREFA (jsc#SLE-4805)
kabi/severities: Whitelist a couple of xive functions xivecleanupirqdata and xivenativepopulateirq_data are exported by the xive interupt controller driver and used by KVM. I do not expect any out-of-tree driver can sanely use these.
kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code.
kabi: net: sched: actsample: fix psample group handling on overwrite (networking-stable-1909_05).
kabi: s390: struct subchannel (git-fixes).
kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578).
kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354).
kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875).
kernfs: Fix range checks in kernfsgettarget_path (bsc#1051510).
kexec: bail out upon SIGKILL when allocating memory (git-fixes).
keys: Fix missing null pointer check in requestkeyauth_describe() (bsc#1051510).
ksm: cleanup stable_node chain collapse case (bnc#1144338).
ksm: fix use after free with mergeacrossnodes = 0 (bnc#1144338).
ksm: introduce ksmmaxpage_sharing per page deduplication limit (bnc#1144338).
ksm: optimize refile of stablenodedup at the head of the chain (bnc#1144338).
ksm: swap the two output parameters of chain/chain_prune (bnc#1144338).
kvm: Convert kvm_lock to a mutex (bsc#1117665).
kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665).
kvm: x86: Do not release the page inside mmusetspte() (bsc#1117665).
lan78xx: Fix memory leaks (bsc#1051510).
leds: leds-lp5562 allow firmware files up to the maximum length (bsc#1051510).
leds: trigger: gpio: GPIO 0 is valid (bsc#1051510).
lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510).
lib/scatterlist: Fix chaining support in sglallocorder() (git-fixes).
lib/scatterlist: Introduce sglalloc() and sglfree() (git-fixes).
libertas: Add missing sentinel at end of ifusb.c fwtable (bsc#1051510).
libertastf: Use correct channel range in lbtfgeo_init (bsc#1051510).
libiscsi: do not try to bypass SCSI EH (bsc#1142076).
libnvdimm/altmap: Track namespace boundaries in altmap (bsc#1150305).
libnvdimm/security: provide fix for secure-erase to use zero-key (bsc#1149853).
libnvdimm: Export the target_node attribute for regions and namespaces (bsc#1158071).
libnvdimm: prevent nvdimm from requesting key when security is disabled (bsc#1137982).
lightnvm: remove dependencies on BLKDEVNVME and PCI (bsc#1150846).
liquidio: add cleanup in octeonsetupiq() (bsc#1051510).
liquidio: fix race condition in instruction completion processing (bsc#1051510).
livepatch: Allow to distinguish different version of system state changes (bsc#1071995).
livepatch: Basic API to track system state changes (bsc#1071995 ).
livepatch: Keep replaced patches until post_patch callback is called (bsc#1071995).
livepatch: Nullify obj->mod in klpmodulecoming()'s error path (bsc#1071995).
livepatch: Selftests of the API for tracking system state changes (bsc#1071995).
loop: add ioctl for changing logical block size (bsc#1108043).
resource: fix locking in findnextiomem_res() (bsc#1114279).
rpm/config.sh: Enable kgraft.
rpm/config.sh: Enable livepatch.
rpm/constraints.in: lower disk space required for ARM With a requirement of 35GB, only 2 slow workers are usable for ARM. Current aarch64 build requires 27G and armv6/7 requires 14G. Set requirements respectively to 30GB and 20GB.
rpm/dtb.spec.in.in: do not make dtb directory inaccessible There is no reason to lock down the dtb directory for ordinary users.
rpm/kernel-binary.spec.in: add COMPRESSVMLINUX (bnc#1155921) Let COMPRESSVMLINUX determine the compression used for vmlinux. By default (historically), it is gz.
rpm/kernel-binary.spec.in: handle modules.builtin.modinfo It was added in 5.2.
rpm/kernel-binary.spec.in: remove code duplicated by merge.
rpm/kernel-binary.spec.in: support partial rt debug config.
rpm/kernel-source.spec.in: Fix dependency of kernel-devel (bsc#1154043)
rpm/kernel-subpackage-spec: Exclude kernel-firmware recommends (bsc#1143959) For reducing the dependency on kernel-firmware in sub packages
rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)
rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119).
rpm/kernel-subpackage-spec: Unify dependency handling.
rpm/kernel-subpackage-spec: fix kernel-default-base build There were some issues with recent changes to subpackage dependencies handling:
rpm/macros.kernel-source: KMPs should depend on kmod-compat to build. kmod-compat links are used in find-provides.ksyms, find-requires.ksyms, and find-supplements.ksyms in rpm-config-SUSE.
rpm/mkspec: Correct tarball URL for rc kernels.
rpm/mkspec: Make building DTBs optional.
rpm/modflist: Simplify compression support.
rpm/modules.fips: update module list (bsc#1157853)
rpm: raise required disk space for binary packages Current disk space constraints (10 GB on s390x, 25 GB on other architectures) no longer suffice for 5.3 kernel builds. The statistics show ~30 GB of disk consumption on x86_64 and ~11 GB on s390x so raise the constraints to 35 GB in general and 14 GB on s390x.
rpm: support compressed modules Some of our scripts and scriptlets in rpm/ do not expect module files not ending with '.ko' which currently leads to failure in preuninstall scriptlet of cluster-md-kmp-default (and probably also other subpackages). Let those which could be run on compressed module files recognize '.ko.xz' in addition to '.ko'.
sched/fair: WARN() and refuse to set buddy when !se->on_rq (bsc#1158132).
scripts/arch-symbols: add missing link.
scripts/gitsort/gitsort.py:
scripts/run_oldconfig.sh: Fix update-vanilla When CC is set we want to use it for native only. Cross-compilation still needs the crosscompilers. flush (bsc#1055117 bsc#1152161 ltc#181664).
scsi: bfa: convert to strlcpy/strlcat (git-fixes).
scsi: cxlflash: Prevent deadlock when adapter probe fails (git-fixes).
scsi: lpfc: Add enablement of multiple adapter dumps (bsc#1154601).
scsi: lpfc: Add registration for CPU Offline/Online events (bsc#1154601).
scsi: lpfc: Change default IRQ model on AMD architectures (bsc#1154601).
scsi: lpfc: Check queue pointer before use (bsc#1154242).
scsi: qla2xxx: Declare the fourth qldumpbuffer() argument const (bsc#1143706).
scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1123034 bsc#1131304 bsc#1127988).
scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
scsi: qla2xxx: Do not call qltasyncevent twice (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
scsi: qla2xxx: Do not corrupt vha->plogiacklist (bsc#1123034 bsc#1131304 bsc#1127988).
scsi: qla2xxx: Do not corrupt vha->plogiacklist (bsc#1143706).
scsi: qla2xxx: Do not defer relogin unconditonally (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
scsi: qla2xxx: Downgrade driver to 10.01.00.19-k There are upstream bug reports against 10.01.00.19-k which haven't been resolved. Also the newer version failed to get a proper review. For time being it's better to got with the older version and do not introduce new bugs.
scsi: qla2xxx: Drop superfluous INITWORK of delwork (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1123034 bsc#1131304 bsc#1127988).
scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1123034 bsc#1131304 bsc#1127988).
scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1143706).
scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1123034 bsc#1131304 bsc#1127988).