SUSE-SU-2020:0560-1

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-8992: An issue was discovered in ext4protectreservedinode in fs/ext4/blockvalidity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069).
• CVE-2020-8648: There was a use-after-free vulnerability in the nttyreceivebufcommon function in drivers/tty/n_tty.c (bnc#1162928).
• CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).
• CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9 (bnc#1162109).
• CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
• CVE-2019-16994: A memory leak existed in sitinitnet() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
• CVE-2019-19054: A memory leak in the cx23888irprobe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
• CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbsibssjoin_existing function is called after a STA connects to an AP (bnc#1157157).
• CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155).
• CVE-2020-7053: There was a use-after-free (write) in the i915ppgttclose function in drivers/gpu/drm/i915/i915gemgtt.c, aka CID-7dc40713618c (bnc#1160966).
• CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free (bnc#1158026).
• CVE-2019-19036: An issue discovered in btrfsrootnode in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root->node) can be zero (bnc#1157692).
• CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
• CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5 (bnc#1159911).
• CVE-2019-19927: A slab-out-of-bounds read access could have been caused when mounting a crafted f2fs filesystem image and performing some operations on it, in drivers/gpu/drm/ttm/ttmpagealloc.c (bnc#1160147).
• CVE-2019-20095: Several memory leaks were found in drivers/net/wireless/marvell/mwifiex/cfg80211.c, aka CID-003b686ace82 (bnc#1159909).
• CVE-2019-20054: There was a NULL pointer dereference in dropsysctltable() in fs/proc/procsysctl.c, related to putlinks, aka CID-23da9588037e (bnc#1159910).
• CVE-2019-20096: There was a memory leak in _featregister_sp() in net/dccp/feat.c, aka CID-1d3ff0950e2b (bnc#1159908).
• CVE-2019-19966: There was a use-after-free in cpia2exit() in drivers/media/usb/cpia2/cpia2v4l.c that could have caused a denial of service, aka CID-dea37a972655 (bnc#1159841).
• CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting could have led to a use-after-free in fs/ext4/super.c (bnc#1158819).
• CVE-2019-19319: A slab-out-of-bounds write access could have occured when setxattr was called after mounting of a specially crafted ext4 image (bnc#1158021).
• CVE-2019-19767: There were multiple use-after-free errors in _ext4expandextraisize and ext4xattrset_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163 (bnc#1159297).
• CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
• CVE-2019-19066: A memory leak in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption), aka CID-0e62395da2bd (bnc#1157303).
• CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
• CVE-2019-19338: There was an incomplete fix for an issue with Transactional Synchronisation Extensions in the KVM code (bsc#1158954).
• CVE-2019-19332: An out-of-bounds memory write issue was found in the way the KVM hypervisor handled the 'KVMGETEMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could have used this flaw to crash the system (bnc#1158827).
• CVE-2019-19537: There was a race condition bug that could be caused by a malicious USB character device, aka CID-303911cfc5b9. (bsc#1158904).
• CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusb_fd.c driver, aka CID-30a8beeb3042 (bsc#1158903).
• CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e (bsc#1158900).
• CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098 (bsc#1158893).
• CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464 (bsc#1158834).
• CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB HID device, aka CID-d9d4b1e46d95 (bsc#1158824).
• CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bsc#1158823).
• CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
• CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971).

The following non-security bugs were fixed:

• 6pack,mkiss: fix possible deadlock (bsc#1051510).
• ACPI / APEI: Do not wait to serialise with oops messages when panic()ing (bsc#1051510).
• ACPI / APEI: Switch estatus pool to use vmalloc memory (bsc#1051510).
• ACPI / LPSS: Ignore acpidevicefixuppower() return value (bsc#1051510).
• ACPI / video: Add force_none quirk for Dell OptiPlex 9020M (bsc#1051510).
• ACPI / watchdog: Fix init failure with overlapping register regions (bsc#1162557).
• ACPI / watchdog: Set default timeout in probe (bsc#1162557).
• ACPI: bus: Fix NULL pointer check in acpibusgetprivatedata() (bsc#1051510).
• ACPI: fix acpifindchilddevice() invocation in acpipreset_companion() (bsc#1051510).
• ACPI: OSL: only free map once in osl.c (bsc#1051510).
• ACPI: PM: Avoid attaching ACPI PM domain to certain devices (bsc#1051510).
• ACPI: sysfs: Change ACPIMASKABLEGPE_MAX to 0x100 (bsc#1051510).
• ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards (bsc#1051510).
• ACPI: watchdog: Allow disabling WDAT at boot (bsc#1162557).
• af_packet: set defaule value for tmo (bsc#1051510).
• ALSA: control: remove useless assignment in .info callback of PCM chmap element (git-fixes).
• ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
• ALSA: echoaudio: simplify getaudiolevels (bsc#1051510).
• ALSA: fireface: fix return value in error path of isochronous resources reservation (bsc#1051510).
• ALSA: hda - Add docking station support for Lenovo Thinkpad T420s (git-fixes).
• ALSA: hda - Apply sync-write workaround to old Intel platforms, too (bsc#1111666).
• ALSA: hda - constify and cleanup static NodeID tables (bsc#1111666).
• ALSA: hda - Downgrade error message for single-cmd fallback (git-fixes).
• ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen (git-fixes).
• ALSA: hda/analog - Minor optimization for SPDIF mux connections (git-fixes).
• ALSA: hda/ca0132 - Avoid endless loop (git-fixes).
• ALSA: hda/ca0132 - Fix work handling in delayed HP detection (git-fixes).
• ALSA: hda/ca0132 - Keep power on during processing DSP response (git-fixes).
• ALSA: hda/hdmi - Add new pci ids for AMD GPU display audio (git-fixes).
• ALSA: hda/hdmi - add retry logic to parseintelhdmi() (git-fixes).
• ALSA: hda/hdmi - Clean up Intel platform-specific fixup checks (bsc#1111666).
• ALSA: hda/hdmi - fix atpx_present when CLASS is not VGA (bsc#1051510).
• ALSA: hda/hdmi - Fix duplicate unref of pci_dev (bsc#1051510).
• ALSA: hda/hdmi - fix vgaswitcheroo detection for AMD (git-fixes).
• ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker (bsc#1111666).
• ALSA: hda/realtek - Add headset Mic no shutup for ALC283 (bsc#1051510).
• ALSA: hda/realtek - Add Headset Mic supported for HP cPC (bsc#1111666).
• ALSA: hda/realtek - Add new codec supported for ALCS1200A (bsc#1111666).
• ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen (bsc#1111666).
• ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too (bsc#1111666).
• ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 (git-fixes).
• ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC (bsc#1111666).
• ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G (git-fixes).
• ALSA: hda/realtek - Fix silent output on MSI-GL73 (git-fixes).
• ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported (bsc#1111666).
• ALSA: hda/realtek - Line-out jack does not work on a Dell AIO (bsc#1051510).
• ALSA: hda/realtek - More constifications (bsc#1111666).
• ALSA: hda/realtek - Set EAPD control to default for ALC222 (bsc#1111666).
• ALSA: hda: Add Clevo W6567SB the powersave blacklist (git-fixes).
• ALSA: hda: Add JasperLake PCI ID and codec vid (bsc#1111666).
• ALSA: hda: Clear RIRB status before reading WP (bsc#1111666).
• ALSA: hda: constify copied structure (bsc#1111666).
• ALSA: hda: Constify sndkcontrolnew items (bsc#1111666).
• ALSA: hda: Constify sndpciquirk tables (bsc#1111666).
• ALSA: hda: correct kernel-doc parameter descriptions (bsc#1111666).
• ALSA: hda: hdmi - add Tigerlake support (bsc#1111666).
• ALSA: hda: hdmi - fix pin setup on Tigerlake (bsc#1111666).
• ALSA: hda: More constifications (bsc#1111666).
• ALSA: hda: patch_hdmi: remove warnings with empty body (bsc#1111666).
• ALSA: hda: patch_realtek: fix empty macro usage in if block (bsc#1111666).
• ALSA: hda: Reset stream if DMA RUN bit not cleared (bsc#1111666).
• ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs (git-fixes).
• ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code (bsc#1051510).
• ALSA: oxfw: fix return value in error path of isochronous resources reservation (bsc#1051510).
• ALSA: pcm: Avoid possible info leaks from PCM stream buffers (git-fixes).
• ALSA: pcm: oss: Avoid potential buffer overflows (git-fixes).
• ALSA: seq: Avoid concurrent access to queue flags (git-fixes).
• ALSA: seq: Fix concurrent access to queue current tick/time (git-fixes).
• ALSA: seq: Fix racy access for queue timer in proc read (bsc#1051510).
• ALSA: sh: Fix compile warning wrt const (git-fixes).
• ALSA: sh: Fix unused variable warnings (bsc#1111666).
• ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 (git-fixes).
• ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 (bsc#1111666).
• ALSA: usb-audio: Fix endianess in descriptor validation (bsc#1111666).
• ALSA: usb-audio: fix set_format altsetting sanity check (bsc#1051510).
• ALSA: usb-audio: fix sync-ep altsetting sanity check (bsc#1051510).
• apparmor: fix unsigned len comparison with less than zero (git-fixes).
• ar5523: check NULL before memcpy() in ar5523_cmd() (bsc#1051510).
• arm64: Revert support for execute-only user mappings (bsc#1160218).
• ASoC: au8540: use 64-bit arithmetic instead of 32-bit (bsc#1051510).
• ASoC: compress: fix unsigned integer overflow check (bsc#1051510).
• ASoC: cs4349: Use PM ops 'cs4349runtimepm' (bsc#1051510).
• ASoC: Jack: Fix NULL pointer dereference in sndsocjack_report (bsc#1051510).
• ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 (bsc#1051510).
• ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI (bsc#1111666).
• ASoC: sun8i-codec: Fix setting DAI data format (git-fixes).
• ASoC: wm8962: fix lambda value (git-fixes).
• ata: ahci: Add shutdown to freeze hardware resources of ahci (bsc#1164388).
• ath10k: Correct the DMA direction for management tx buffers (bsc#1111666).
• ath10k: fix fw crash by moving chip reset after napi disabled (bsc#1051510).
• ath10k: pci: Fix comment on ath10kpcidumpmemorysram (bsc#1111666).
• ath10k: pci: Only dump ATH10KMEMREGIONTYPEIOREG when safe (bsc#1111666).
• ath6kl: Fix off by one error in scan completion (bsc#1051510).
• ath9k: fix storage endpoint lookup (git-fixes).
• atl1e: checking the status of atl1ewritephy_reg (bsc#1051510).
• audit: Allow auditd to set pid to 0 to end auditing (bsc#1158094).
• batman-adv: Fix DAT candidate selection on little endian systems (bsc#1051510).
• bcache: add code comment bchkeylistpop() and bchkeylistpop_front() (bsc#1163762).
• bcache: add code comments for state->pool in _btreesort() (bsc#1163762).
• bcache: add code comments in bchbtreeleaf_dirty() (bsc#1163762).
• bcache: add condresched() in _bchcachecmp() (bsc#1163762).
• bcache: add idlemaxwriteback_rate sysfs interface (bsc#1163762).
• bcache: add more accurate error messages in read_super() (bsc#1163762).
• bcache: add readahead cache policy options via sysfs interface (bsc#1163762).
• bcache: at least try to shrink 1 node in bchmcascan() (bsc#1163762).
• bcache: avoid unnecessary btree nodes flushing in btreeflushwrite() (bsc#1163762).
• bcache: check return value of prio_read() (bsc#1163762).
• bcache: deleted code comments for dead code in bchdatainsert_keys() (bsc#1163762).
• bcache: do not export symbols (bsc#1163762).
• bcache: explicity type cast in bsetbkeylast() (bsc#1163762).
• bcache: fix a lost wake-up problem caused by mcacannibalizelock (bsc#1163762).
• bcache: Fix an error code in bchdumpread() (bsc#1163762).
• bcache: fix deadlock in bcache_allocator (bsc#1163762).
• bcache: fix incorrect data type usage in btreeflushwrite() (bsc#1163762).
• bcache: fix memory corruption in bchcacheaccounting_clear() (bsc#1163762).
• bcache: fix static checker warning in bcachedevicefree() (bsc#1163762).
• bcache: ignore pending signals when creating gc and allocator thread (bsc#1163762, bsc#1112504).
• bcache: print written and keys in tracebcachebtree_write (bsc#1163762).
• bcache: reap c->btreecachefreeable from the tail in bchmcascan() (bsc#1163762).
• bcache: reap from tail of c->btreecache in bchmca_scan() (bsc#1163762).
• bcache: remove macro nrtofifo_front() (bsc#1163762).
• bcache: remove member accessed from struct btree (bsc#1163762).
• bcache: remove the extra cflags for request.o (bsc#1163762).
• bcache: Revert 'bcache: shrink btree node cache after bchbtreecheck()' (bsc#1163762, bsc#1112504).
• bcma: remove set but not used variable 'sizel' (git-fixes).
• blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1159377).
• blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1163840).
• blk-mq: make sure that line break can be printed (bsc#1159377).
• blk-mq: make sure that line break can be printed (bsc#1164098).
• Bluetooth: Fix race condition in hcireleasesock() (bsc#1051510).
• Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading (bsc#1051510).
• bnxt: apply computed clamp value for coalece parameter (bsc#1104745).
• bnxt_en: Fix MSIX request logic for RDMA driver (bsc#1104745 ).
• bnxt_en: Return error if FW returns more data than dump length (bsc#1104745).
• bonding: fix active-backup transition after link failure (git-fixes).
• bonding: fix potential NULL deref in bondupdateslave_arr (bsc#1051510).
• bonding: fix slave stuck in BONDLINKFAIL state (networking-stable-191110).
• bonding: fix state transition issue in link monitoring (networking-stable-191110).
• bonding: fix unexpected IFF_BONDING bit unset (bsc#1051510).
• bpf, offload: Unlock on error in bpfoffloaddev_create() (bsc#1109837).
• bpf/sockmap: Read psock ingressmsg before skreceive_queue (bsc#1083647).
• bpf/stackmap: Fix deadlock with rqlock in bpfget_stack() (bsc#1083647).
• bpf: add self-check logic to liveness analysis (bsc#1160618).
• bpf: add verifier stats and log_level bit 2 (bsc#1160618).
• bpf: Fix incorrect verifier simulation of ARSH under ALU32 (bsc#1083647).
• bpf: improve stacksafe state comparison (bco#1160618).
• bpf: improve verification speed by droping states (bsc#1160618).
• bpf: improve verification speed by not remarking live_read (bsc#1160618).
• bpf: improve verifier branch analysis (bsc#1160618).
• bpf: increase complexity limit and maximum program size (bsc#1160618).
• bpf: increase verifier log limit (bsc#1160618).
• bpf: Make use of probeuserwrite in probe write helper (bsc#1083647).
• bpf: Reject indirect var_off stack access in raw mode (bsc#1160618).
• bpf: Reject indirect var_off stack access in unpriv mode (bco#1160618).
• bpf: Sanity check max value for var_off stack access (bco#1160618).
• bpf: skmsg, fix potential psock NULL pointer dereference (bsc#1109837).
• bpf: speed up stacksafe check (bco#1160618).
• bpf: Support variable offset stack access from helpers (bco#1160618).
• bpf: verifier: teach the verifier to reason about the BPF_JSET instruction (bco#1160618).
• brcmfmac: fix interface sanity check (git-fixes).
• brcmfmac: Fix memory leak in brcmfp2pcreate_p2pdev() (bsc#1111666).
• brcmfmac: Fix memory leak in brcmfusbdevqinit (git-fixes).
• brcmfmac: Fix use after free in brcmfsdioreadframes() (git-fixes).
• brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 (bsc#1111666).
• brcmfmac: set F2 watermark to 256 for 4373 (bsc#1111666).
• brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 (bsc#1111666).
• btrfs: abort transaction after failed inode updates in create_subvol (bsc#1161936).
• btrfs: add missing extents release on file extent cluster relocation error (bsc#1159483).
• btrfs: avoid fallback to transaction commit during fsync of files with holes (bsc#1159569).
• btrfs: dev-replace: remove warning for unknown return codes when finished (dependency for bsc#1162067).
• btrfs: do not call synchronizesrcu() in inodetree_del (bsc#1161934).
• btrfs: do not double lock the subvol_sem for rename exchange (bsc#1162943).
• btrfs: Ensure we trim ranges across block group boundary (bsc#1151910).
• btrfs: fix block group remaining RO forever after error during device replace (bsc#1160442).
• btrfs: fix btrfswriteinode vs delayed iput deadlock (bsc#1154243).
• btrfs: fix infinite loop during fsync after rename operations (bsc#1163383).
• btrfs: fix infinite loop during nocow writeback due to race (bsc#1160804).
• btrfs: fix integer overflow in calcreclaimitems_nr (bsc#1160433).
• btrfs: fix missing data checksums after replaying a log tree (bsc#1161931).
• btrfs: fix negative subv_writers counter and data space leak after buffered write (bsc#1160802).
• btrfs: fix race between adding and putting tree mod seq elements and nodes (bsc#1163384).
• btrfs: fix removal logic of the tree mod log that leads to use-after-free issues (bsc#1160803).
• btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Fix for dependency of bsc#1157692).
• btrfs: handle ENOENT in btrfsuuidtree_iterate (bsc#1161937).
• btrfs: harden agaist duplicate fsid on scanned devices (bsc#1134973).
• btrfs: inode: Verify inode mode to avoid NULL pointer dereference (dependency for bsc#1157692).
• btrfs: make tree checker detect checksum items with overlapping ranges (bsc#1161931).
• btrfs: Move btrfscheckchunk_valid() to tree-check.[ch] and export it (dependency for bsc#1157692).
• btrfs: record all roots for rename exchange on a subvol (bsc#1161933).
• btrfs: relocation: fix reloc_root lifespan and access (bsc#1159588).
• btrfs: scrub: Require mandatory block group RO for dev-replace (bsc#1162067).
• btrfs: send, skip backreference walking for extents with many references (bsc#1162139).
• btrfs: simplify inode locking for RWF_NOWAIT (git-fixes).
• btrfs: skip log replay on orphaned roots (bsc#1161935).
• btrfs: tree-checker: Check chunk item at tree block read time (dependency for bsc#1157692).
• btrfs: tree-checker: Check level for leaves and nodes (dependency for bsc#1157692).
• btrfs: tree-checker: Enhance chunk checker to validate chunk profile (dependency for bsc#1157692).
• btrfs: tree-checker: Fix wrong check on max devid (fixes for dependency of bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in blockgroup_err (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in checkblockgroupitem (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in checkcsum_item (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in checkdev_item (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in checkdir_item (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in checkextentdataitem (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in checkinode_item (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in checkleaf (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in checkleaf_item (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in chunkerr (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in devitem_err (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in diritem_err (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in fileextent_err (dependency for bsc#1157692).
• btrfs: tree-checker: get fsinfo from eb in genericerr (dependency for bsc#1157692).
• btrfs: tree-checker: Make btrfscheckchunk_valid() return EUCLEAN instead of EIO (dependency for bsc#1157692).
• btrfs: tree-checker: Make chunk item checker messages more readable (dependency for bsc#1157692).
• btrfs: tree-checker: Verify dev item (dependency for bsc#1157692).
• btrfs: tree-checker: Verify inode item (dependency for bsc#1157692).
• btrfs: volumes: Use more straightforward way to calculate map length (bsc#1151910).
• can, slip: Protect tty->discdata in writewakeup and close with RCU (bsc#1051510).
• can: candroppedinvalidskb(): ensure an initialized headroom in outgoing CAN skbuffs (bsc#1051510).
• can: ccan: DCAN: ccanchip_config(): perform a sofware reset on open (bsc#1051510).
• can: gsusb: gsusb_probe(): use descriptors of current altsetting (bsc#1051510).
• can: mscan: mscanrxpoll(): fix rx path lockup when returning from polling to irq mode (bsc#1051510).
• can: peak_usb: report bus recovery as well (bsc#1051510).
• can: rx-offload: canrxoffloadirqoffload_fifo(): continue on error (bsc#1051510).
• can: rx-offload: canrxoffloadirqoffload_timestamp(): continue on error (bsc#1051510).
• can: rx-offload: canrxoffloadoffloadone(): increment rxfifoerrors on queue overflow or OOM (bsc#1051510).
• can: rx-offload: canrxoffloadoffloadone(): use ERR_PTR() to propagate error value in case of errors (bsc#1051510).
• can: slcan: Fix use-after-free Read in slcan_open (bsc#1051510).
• CDC-NCM: handle incomplete transfer of MTU (networking-stable-191110).
• cdrom: respect device capabilities during opening action (boo#1164632).
• cfg80211/mac80211: make ieee80211sendlayer2_update a public function (bsc#1051510).
• cfg80211: check for setwiphyparams (bsc#1051510).
• cfg80211: fix deadlocks in autodisconnect work (bsc#1111666).
• cfg80211: fix memory leak in cfg80211cqmrssi_update (bsc#1111666).
• cfg80211: fix page refcount issue in A-MSDU decap (bsc#1051510).
• cgroup,writeback: do not switch wbs immediately on dead wbs if the memcg is dead (bsc#1158645).
• cgroup: pids: use atomic64_t for pids->limit (bsc#1161514).
• chardev: Avoid potential use-after-free in 'chrdev_open()' (bsc#1163849).
• cifs: add support for flock (bsc#1144333).
• cifs: Close cached root handle only if it had a lease (bsc#1144333).
• cifs: Close open handle after interrupted close (bsc#1144333).
• cifs: close the shared root handle on tree disconnect (bsc#1144333).
• cifs: Do not miss cancelled OPEN responses (bsc#1144333).
• cifs: Fix lookup of root ses in DFS referral cache (bsc#1144333).
• cifs: Fix memory allocation in _smb2handlecancelledcmd() (bsc#1144333).
• cifs: fix mount option display for sec=krb5i (bsc#1161907).
• cifs: Fix mount options set in automount (bsc#1144333).
• cifs: Fix NULL pointer dereference in mid callback (bsc#1144333).
• cifs: Fix NULL-pointer dereference in smb2pushmandatory_locks (bsc#1144333).
• cifs: Fix potential softlockups while refreshing DFS cache (bsc#1144333).
• cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1144333).
• cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1144333).
• cifs: Properly process SMB3 lease breaks (bsc#1144333).
• cifs: remove set but not used variables 'cinode' and 'netfid' (bsc#1144333).
• cifs: Respect OSYNC and ODIRECT flags during reconnect (bsc#1144333).
• clk: Do not try to enable critical clocks if prepare failed (bsc#1051510).
• clk: imx: clk-composite-8m: add lock to gate/mux (git-fixes).
• clk: mmp2: Fix the order of timer mux parents (bsc#1051510).
• clk: qcom: rcg2: Do not crash if our parent can't be found; return an error (bsc#1051510).
• clk: rockchip: fix I2S1 clock gate register for rk3328 (bsc#1051510).
• clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 (bsc#1051510).
• clk: rockchip: fix rk3188 sclkmaclbtest parameter ordering (bsc#1051510).
• clk: rockchip: fix rk3188 sclk_smc gate data (bsc#1051510).
• clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (bsc#1051510).
• clk: sunxi: sun9i-mmc: Implement reset callback for reset controls (bsc#1051510).
• clk: tegra: Mark fuse clock as critical (bsc#1051510).
• clocksource/drivers/bcm2835_timer: Fix memory leak of timer (bsc#1051510).
• clocksource: Prevent double addtimeron() for watchdog_timer (bsc#1051510).
• closures: fix a race on wakeup from closure_sync (bsc#1163762).
• configfsregistergroup() shouldn't be (and isn't) called in rmdirable parts (bsc#1051510).
• copy/pasted 'Recommends:' instead of 'Provides:', 'Obsoletes:' and 'Conflicts:
• Cover up kABI breakage due to DH key verification (bsc#1155331).
• crypto: afalg - Use bhlocksock in skdestruct (bsc#1051510).
• crypto: api - Check spawn->alg under lock in cryptodropspawn (bsc#1051510).
• crypto: api - Fix race condition in cryptospawnalg (bsc#1051510).
• crypto: atmel-sha - fix error handling when setting hmac key (bsc#1051510).
• crypto: caam/qi2 - fix typo in algorithm's driver name (bsc#1111666).
• crypto: ccp - fix uninitialized list head (bsc#1051510).
• crypto: chelsio - fix writing tfm flags to wrong place (bsc#1051510).
• crypto: dh - add public key verification test (bsc#1155331).
• crypto: dh - fix calculating encoded key size (bsc#1155331).
• crypto: dh - fix memory leak (bsc#1155331).
• crypto: dh - update test for public key verification (bsc#1155331).
• crypto: DRBG - add FIPS 140-2 CTRNG for noise source (bsc#1155334).
• crypto: ecdh - add public key verification test (bsc#1155331).
• crypto: ecdh - fix typo of P-192 b value (bsc#1155331).
• crypto: mxc-scc - fix build warnings on ARM64 (bsc#1051510).
• crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (bsc#1051510).
• crypto: picoxcell - adjust the position of taskletinit and fix missed taskletkill (bsc#1051510).
• crypto: reexport cryptoshootalg() (bsc#1051510, kABI fix).
• cxgb4: request the TX CIDX updates to status page (bsc#1127371).
• dma-buf: Fix memory leak in syncfilemerge() (git-fixes).
• dma-mapping: fix return type of dmasetmaxsegsize() (bsc#1051510).
• dmaengine: coh901318: Fix a double-lock bug (bsc#1051510).
• dmaengine: coh901318: Remove unused variable (bsc#1051510).
• dmaengine: Fix access to uninitialized dmaslavecaps (bsc#1051510).
• Documentation: Document arm64 kpti control (bsc#1162623).
• drivers/base/memory.c: cache blocks in radix tree to accelerate lookup (bsc#1159955 ltc#182993).
• drivers/base/memory.c: do not access uninitialized memmaps in softofflinepage_store() (bsc#1051510).
• drivers/base/platform.c: kmemleak ignore a known leak (bsc#1051510).
• drivers/regulator: fix a missing check of return value (bsc#1051510).
• drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero (bsc#1111666).
• drm/amd/powerplay: remove set but not used variable 'us_mvdd' (bsc#1111666).
• drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc (bsc#1111666).
• drm/amdgpu: add function parameter description in 'amdgpudevicesetcgstate' (bsc#1111666).
• drm/amdgpu: add function parameter description in 'amdgpugartbind' (bsc#1051510).
• drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1114279)
• drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) (bsc#1111666).
• drm/amdgpu: remove 4 set but not used variable in amdgpuatombiosgetconnectorinfofromobject_table (bsc#1051510).
• drm/amdgpu: remove always false comparison in 'amdgpuatombiosi2cprocessi2c_ch' (bsc#1051510).
• drm/amdgpu: remove set but not used variable 'amdgpu_connector' (bsc#1051510).
• drm/amdgpu: remove set but not used variable 'dig' (bsc#1051510).
• drm/amdgpu: remove set but not used variable 'dig_connector' (bsc#1051510).
• drm/amdgpu: remove set but not used variable 'invalid' (bsc#1111666).
• drm/amdgpu: remove set but not used variable 'mcsharedchmap' (bsc#1051510).
• drm/amdgpu: remove set but not used variable 'mcsharedchmap' from 'gfxv60.c' and 'gfxv70.c' (bsc#1051510).
• drm/dpmst: correct the shifting in DPREMOTEI2CREAD (bsc#1051510).
• drm/fb-helper: Round up bitsperpixel if possible (bsc#1051510).
• drm/i810: Prevent underflow in ioctl (bsc#1114279)
• drm/i915/gvt: Pin vgpu dma address before using (bsc#1112178)
• drm/i915/gvt: set guest display buffer as readonly (bsc#1112178)
• drm/i915/gvt: use vgpu lock for active state setting (bsc#1112178)
• drm/i915/perf: add missing delay for OA muxes configuration (bsc#1111666).
• drm/i915: Add missing include file <linux/math64.h> (bsc#1051510).
• drm/i915: Call dmasetmaxsegsize() in i915driverhw_probe() (bsc#1111666).
• drm/i915: Fix pid leak with banned clients (bsc#1114279)
• drm/i915: Handle vmmmap error during I915GEM_MMAP ioctl with WC set (bsc#1111666).
• drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV (bsc#1111666).
• drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770).
• drm/i915: Sanity check mmap length against object size (bsc#1111666).
• drm/msm: include linux/sched/task.h (bsc#1112178)
• drm/mst: Fix MST sideband up-reply failure handling (bsc#1051510).
• drm/nouveau/bar/gf100: ensure BAR is mapped (bsc#1111666).
• drm/nouveau/bar/nv50: check bar1 vmm return value (bsc#1111666).
• drm/nouveau/mmu: qualify vmm during dtor (bsc#1111666).
• drm/nouveau/secboot/gm20b: initialize pointer in gm20bsecbootnew() (bsc#1051510).
• drm/nouveau: Fix copy-paste error in nouveaufencewaitueventhandler (bsc#1051510).
• drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
• drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
• drm/radeon: fix r1xx/r2xx register checker for POT textures (bsc#1114279)
• drm/rect: Avoid division by zero (bsc#1111666).
• drm/rect: update kerneldoc for drmrectclip_scaled() (bsc#1111666).
• drm/rockchip: lvds: Fix indentation of a #define (bsc#1051510).
• drm/rockchip: Round up before giving to the clock framework (bsc#1114279)
• drm/sun4i: hdmi: Remove duplicate cleanup calls (bsc#1113956)
• drm/sun4i: tcon: Set min division of TCON0_DCLK to 1 (bsc#1111666).
• drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model (bsc#1111666).
• drm/ttm: ttmttinit_fields() can be static (bsc#1111666).
• drm/vmwgfx: prevent memory leak in vmwcmdbufres_add (bsc#1051510).
• drm: bridge: dw-hdmi: constify copied structure (bsc#1051510).
• drm: limit to INTMAX in createblob ioctl (bsc#1051510).
• drm: meson: venc: cvbs: fix CVBS mode matching (bsc#1051510).
• drm: msm: mdp4: Adjust indentation in mdp4dsiencoder_enable (bsc#1111666).
• drm: panel-lvds: Potential Oops in probe error handling (bsc#1114279)
• e1000e: Add support for Comet Lake (bsc#1158533).
• e1000e: Add support for Tiger Lake (bsc#1158533).
• e1000e: Increase pause and refresh time (bsc#1158533).
• e100: Fix passing zero to 'PTRERR' warning in e100loaducodewait (bsc#1051510).
• ecryptfslookupinterpose(): lowerdentry->dinode is not stable (bsc#1158646).
• ecryptfslookupinterpose(): lowerdentry->dparent is not stable either (bsc#1158647).
• EDAC/ghes: Fix locking and memory barrier issues (bsc#1114279). EDAC/ghes: Do not warn when incrementing refcount on 0 (bsc#1114279).
• Enable CONFIGBLKDEVSRVENDOR (boo#1164632).
• enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147).
• exit: panic before exit_mm() on global init exit (bsc#1161549).
• ext2: check err when partial != NULL (bsc#1163859).
• ext4, jbd2: ensure panic when aborting with zero errno (bsc#1163853).
• ext4: check for directory entries too close to block end (bsc#1163861).
• ext4: fix a bug in ext4waitfortailpage_commit (bsc#1163841).
• ext4: fix checksum errors with indexed dirs (bsc#1160979).
• ext4: fix deadlock allocating crypto bounce page from mempool (bsc#1163842).
• ext4: Fix mount failure with quota configured as module (bsc#1164471).
• ext4: fix mount failure with quota configured as module (bsc#1164471).
• ext4: fix punch hole for inline_data file systems (bsc#1158640).
• ext4: improve explanation of a mount failure caused by a misconfigured kernel (bsc#1163843).
• ext4: update direct I/O read lock pattern for IOCB_NOWAIT (bsc#1158639).
• extcon: max8997: Fix lack of path setting in USB device mode (bsc#1051510).
• firestream: fix memory leaks (bsc#1051510).
• fix autofs regression caused by follow_managed() changes (bsc#1159271).
• fix dget_parent() fastpath race (bsc#1159271).
• fix partial checked out tree build ... so that bisection does not break.
• fix the locking in dcache_readdir() and friends (bsc#1123328).
• fjes: fix missed check in fjesacpiadd (bsc#1051510).
• fs/namei.c: fix missing barriers when checking positivity (bsc#1159271).
• fs/namei.c: pull positivity check into follow_managed() (bsc#1159271).
• fs/open.c: allow opening only regular files during execve() (bsc#1163845).
• fs: cifs: Fix atime update check vs mtime (bsc#1144333).
• fscrypt: do not set policy for a dead directory (bsc#1163846).
• ftrace: Add comment to why rcudereferencesched() is open coded (git-fixes).
• ftrace: Avoid potential division by zero in function profiler (bsc#1160784).
• ftrace: Protect ftracegraphhash with ftrace_sync (git-fixes).
• genirq/proc: Return proper error code when irqsetaffinity() fails (bnc#1105392).
• genirq: Prevent NULL pointer dereference in resend_irqs() (bsc#1051510).
• genirq: Properly pair kobjectdel() with kobjectadd() (bsc#1051510).
• gpio: Fix error message on out-of-range GPIO in lookup table (bsc#1051510).
• gtp: avoid zero size hashtable (networking-stable-200101).
• gtp: do not allow adding duplicate tid and msaddr pdp context (networking-stable-2001_01).
• gtp: fix an use-after-free in ipv4pdpfind() (networking-stable-200101).
• gtp: fix wrong condition in gtpgenldumppdp() (networking-stable-2001_01).
• HID: doc: fix wrong data structure reference for UHID_OUTPUT (bsc#1051510).
• HID: hidraw, uhid: Always report EPOLLOUT (bsc#1051510).
• HID: hidraw: Fix returning EPOLLOUT from hidraw_poll (bsc#1051510).
• HID: intel-ish-hid: fixes incorrect error handling (bsc#1051510).
• HID: uhid: Fix returning EPOLLOUT from uhidcharpoll (bsc#1051510).
• hidraw: Return EPOLLOUT from hidraw_poll (bsc#1051510).
• hotplug/drc-info: Add code to search ibm,drc-info property (bsc#1157480 ltc#181028).
• hvnetvsc: Fix offset usage in netvscsend_table() (bsc#1164598).
• hvnetvsc: Fix sendtable offset in case of a host bug (bsc#1164598).
• hvnetvsc: Fix txtable init in rndissetsubchannel() (bsc#1164598).
• hvnetvsc: Fix unwanted rxtable reset (bsc#1164598).
• hwmon: (adt7475) Make volt2reg return same reg as reg2volt input (bsc#1051510).
• hwmon: (core) Do not use device managed functions for memory allocations (bsc#1051510).
• hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs (bsc#1163206).
• hwmon: (nct7802) Fix voltage limits to wrong registers (bsc#1051510).
• hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions (bsc#1051510).
• hwrng: stm32 - fix unbalanced pmruntimeenable (bsc#1051510).
• i2c: imx: do not print error message on probe defer (bsc#1051510).
• IB/hfi1: Do not cancel unused work item (bsc#1114685 ).
• IB/mlx5: Fix steering rule of drop and count (bsc#1103991 ).
• IB/mlx5: Remove dead code (bsc#1103991).
• ibmveth: Detect unsupported packets before sending to the hypervisor (bsc#1159484 ltc#182983).
• ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
• ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
• ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
• ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
• ice: fix stack leakage (bsc#1118661).
• idr: Fix idrallocu32 on 32-bit systems (bsc#1051510).
• iio: adc: max9611: Fix too short conversion time delay (bsc#1051510).
• iio: buffer: align the size of scan bytes to size of the largest element (bsc#1051510).
• inet: protect against too small mtu values (networking-stable-191216).
• Input: aiptek - fix endpoint sanity check (bsc#1051510).
• Input: cyttsp4_core - fix use after free bug (bsc#1051510).
• Input: goodix - add upside-down quirk for Teclast X89 tablet (bsc#1051510).
• Input: gtco - fix endpoint sanity check (bsc#1051510).
• Input: keyspan-remote - fix control-message timeouts (bsc#1051510).
• Input: pegasus_notetaker - fix endpoint sanity check (bsc#1051510).
• Input: pm8xxx-vib - fix handling of separate enable register (bsc#1051510).
• Input: rmi_f54 - read from FIFO in 32 byte blocks (bsc#1051510).
• Input: sun4i-ts - add a check for devmthermalzoneofsensor_register (bsc#1051510).
• Input: sur40 - fix interface sanity checks (bsc#1051510).
• Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus (bsc#1051510).
• Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers (bsc#1051510).
• Input: synaptics-rmi4 - simplify data read in rmif54work (bsc#1051510).
• iomap: Fix pipe page leakage during splicing (bsc#1158651).
• iommu/amd: Fix IOMMU perf counter clobbering during init (bsc#1162617).
• iommu/arm-smmu-v3: Populate VMID field for CMDQOPTLBINHVA (bsc#1164314).
• iommu/io-pgtable-arm: Fix race handling in splitblkunmap() (bsc#1164115).
• iommu/iova: Init the struct iova to fix the possible memleak (bsc#1160469).
• iommu/mediatek: Correct the flushiotlball callback (bsc#1160470).
• iommu/vt-d: Unlink device if failed to add to group (bsc#1160756).
• iommu: Remove device link to group on failure (bsc#1160755).
• ipmi: Do not allow device module unload when in use (bsc#1154768).
• ipv4: Fix table id reference in fibsyncdownaddr (networking-stable-1911_10).
• iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop (git-fixes).
• iwlwifi: change monitor DMA to be coherent (bsc#1161243).
• iwlwifi: clear persistence bit according to device family (bsc#1111666).
• iwlwifi: do not throw error when trying to remove IGTK (bsc#1051510).
• iwlwifi: mvm: fix NVM check for 3168 devices (bsc#1051510).
• iwlwifi: mvm: force TCM re-evaluation on TCM resume (bsc#1111666).
• iwlwifi: mvm: Send non offchannel traffic via AP sta (bsc#1051510).
• iwlwifi: mvm: synchronize TID queue removal (bsc#1051510).
• iwlwifi: pcie: fix erroneous print (bsc#1111666).
• iwlwifi: trans: Clear persistence bit when starting the FW (bsc#1111666).
• jbd2: clear JBD2ABORT flag before journalreset to update log tail info when load journal (bsc#1163862).
• jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer (bsc#1163836).
• jbd2: Fix possible overflow in jbd2logspace_left() (bsc#1163860).
• jbd2: make sure ESHUTDOWN to be recorded in the journal superblock (bsc#1163863).
• jbd2: move the clearing of bmodified flag to the journalunmap_buffer() (bsc#1163880).
• jbd2: switch to use jbd2journalabort() when failed to submit the commit record (bsc#1163852).
• kABI fix for 'ipmi: Do not allow device module unload when in use' (bsc#1154768).
• kABI fixup for allocdaxregion (bsc#1158071,bsc#1160678).
• kABI workaround for can/skb.h inclusion (bsc#1051510).
• kABI/severities: Whitelist rpaphpgetdrc_props (bsc#1157480 ltc#181028).
• kABI: add _q suffix to exports that take struct dh (bsc#1155331).
• kABI: protect struct sctpepcommon (kabi).
• kABI: Protest new fields in BPF structs (bsc#1160618).
• kconfig: fix broken dependency in randconfig-generated .config (bsc#1051510).
• kernel-binary.spec.in: do not recommend firmware for kvmsmall and azure flavor (boo#1161360).
• kernel/trace: Fix do not unregister tracepoints when register schedmigratetask fail (bsc#1160787).
• kernfs: Fix range checks in kernfsgettarget_path (bsc#1051510).
• kexec: bail out upon SIGKILL when allocating memory (git-fixes).
• KVM: Clean up _kvmgfntohvacacheinit() and its callers (bsc#1133021).
• KVM: fix spectrev1 gadgets (bsc#1164705).
• KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails (bsc#1061840).
• KVM: PPC: Book3S PR: Fix -Werror=return-type build failure (bsc#1061840).
• KVM: PPC: Book3S PR: Free shared page if mmu initialization fails (bsc#1061840).
• KVM: s390: Do not leak kernel stack data in the KVMS390INTERRUPT ioctl (git-fixes).
• KVM: s390: Test for bad access register and size at the start of S390MEMOP (git-fixes).
• KVM: SVM: Override default MMIO mask if memory encryption is enabled (bsc#1162618).
• KVM: x86: Host feature SSBD does not imply guest feature SPECCTRLSSBD (bsc#1160476).
• KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks (bsc#1164734).
• KVM: x86: Protect ioapicreadindirect() from Spectre-v1/L1TF attacks (bsc#1164728).
• KVM: x86: Protect ioapicwriteindirect() from Spectre-v1/L1TF attacks (bsc#1164729).
• KVM: x86: Protect kvmhvmsr[get|set]crash_data() from Spectre-v1/L1TF attacks (bsc#1164712).
• KVM: x86: Protect kvmlapicreg_write() from Spectre-v1/L1TF attacks (bsc#1164730).
• KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c (bsc#1164733).
• KVM: x86: Protect MSR-based index computations in fixedmsrtosegunit() from Spectre-v1/L1TF attacks (bsc#1164731).
• KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks (bsc#1164732).
• KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks (bsc#1164735).
• KVM: x86: Protect x86decodeinsn from Spectre-v1/L1TF attacks (bsc#1164705).
• KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks (bsc#1164727).
• KVM: x86: Remove a spurious export of a static function (bsc#1158954).
• lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop (bsc#1050549).
• leds: Allow to call ledclassdevunregister() unconditionally (bsc#1161674).
• leds: class: ensure workqueue is initialized before setting brightness (bsc#1161674).
• lib/scatterlist.c: adjust indentation in _sgalloc_table (bsc#1051510).
• lib/testkasan.c: fix memory leak in kmallocoobkreallocmore() (bsc#1051510).
• lib: crc64: include <linux/crc64.h> for 'crc64_be' (bsc#1163762).
• libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (bsc#1153535).
• libnvdimm/pfn: Account for PAGESIZE > info-block-size in ndpfn_init() (bsc#1127682 bsc#1153535 ltc#175033 ltc#181834).
• libnvdimm: Fix devmnsioenable() kabi (bsc#1153535).
• livepatch/samples/selftest: Use klpshadowalloc() API correctly (bsc#1071995).
• livepatch/selftest: Clean up shadow variable names and type (bsc#1071995).
• locking/rwsem: Prevent decrement of reader count before increment (bsc#1050549).
• loop: fix no-unmap write-zeroes request behavior (bsc#1158637).
• mac80211: Do not send Layer 2 Update frame before authorization (bsc#1051510).
• mac80211: fix ieee80211txqsetup_flows() failure path (bsc#1111666).
• mac80211: fix station inactive_time shortly after boot (bsc#1051510).
• mac80211: Fix TKIP replay protection immediately after key setup (bsc#1051510).
• mac80211: mesh: restrict airtime metric to peered established plinks (bsc#1051510).
• macvlan: do not assume macheader is set in macvlanbroadcast() (bsc#1051510).
• macvlan: use skbresetmacheader() in macvlanqueue_xmit() (bsc#1051510).
• mailbox: mailbox-test: fix null pointer if no mmio (bsc#1051510).
• md/raid0: Fix buffer overflow at debug print (bsc#1164051).
• media/v4l2-core: set pages dirty upon releasing DMA buffers (bsc#1051510).
• media: af9005: uninitialized variable printked (bsc#1051510).
• media: cec.h: CECOPRECFLAG values were swapped (bsc#1051510).
• media: cec: CEC 2.0-only bcast messages were ignored (git-fixes).
• media: cec: report Vendor ID after initialization (bsc#1051510).
• media: digitv: do not continue if remote control state can't be read (bsc#1051510).
• media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 (bsc#1051510).
• media: exynos4-is: fix wrong mdev and v4l2 dev order in error path (git-fixes).
• media: gspca: zero usb_buf (bsc#1051510).
• media: iguanair: fix endpoint sanity check (bsc#1051510).
• media: ov6650: Fix control handler not freed on init error (git-fixes).
• media: ov6650: Fix crop rectangle alignment not passed back (git-fixes).
• media: ov6650: Fix incorrect use of JPEG colorspace (git-fixes).
• media: pulse8-cec: fix lost cectransmitattempt_done() call.
• media: pulse8-cec: return 0 when invalidating the logical address (bsc#1051510).
• media: stkwebcam: Bugfix for wrong return values (bsc#1051510).
• media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (bsc#1051510).
• media: uvcvideo: Fix error path in control parsing failure (git-fixes).
• media: v4l2-ctrl: fix flags for DOWHITEBALANCE (bsc#1051510).
• media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT (bsc#1051510).
• media: v4l2-rect.h: fix v4l2rectmap_inside() top/left adjustments (bsc#1051510).
• mei: bus: prefix device names on bus with the bus name (bsc#1051510).
• mfd: da9062: Fix watchdog compatible string (bsc#1051510).
• mfd: dln2: More sanity checking for endpoints (bsc#1051510).
• mfd: rn5t618: Mark ADC control register volatile (bsc#1051510).
• missing escaping of backslashes in macro expansions Fixes: f3b74b0ae86b ('rpm/kernel-subpackage-spec: Unify dependency handling.') Fixes: 3fd22e219f77 ('rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)')
• mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO (bsc#1112374).
• mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel (bsc#1112374).
• mm, memoryhotplug: do not clear numanode association after hot_remove (bnc#1115026).
• mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock (bsc#1159394).
• mm: memoryhotplug: use putdevice() if device_register fail (bsc#1159955 ltc#182993).
• mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode (bsc#1051510).
• mmc: sdhci-of-esdhc: fix P2020 errata handling (bsc#1051510).
• mmc: sdhci-of-esdhc: Revert 'mmc: sdhci-of-esdhc: add erratum A-009204 support' (bsc#1051510).
• mmc: sdhci: Add a quirk for broken command queuing (git-fixes).
• mmc: sdhci: fix minimum clock rate for v3 controller (bsc#1051510).
• mmc: sdhci: Workaround broken command queuing on Intel GLK (git-fixes).
• mmc: spi: Toggle SPI polarity, do not hardcode it (bsc#1051510).
• mmc: tegra: fix SDR50 tuning override (bsc#1051510).
• moduleparam: fix parameter description mismatch (bsc#1051510).
• moddevicetable: fix PHY module format (networking-stable-1912_28).
• mqprio: Fix out-of-bounds access in mqprio_dump (bsc#1109837).
• mtd: fix mtd_oobavail() incoherent returned value (bsc#1051510).
• mwifiex: debugfs: correct histogram spacing, formatting (bsc#1051510).
• mwifiex: delete unused mwifiexgetintf_num() (bsc#1111666).
• mwifiex: drop most magic numbers from mwifiexprocesstdlsactionframe() (git-fixes).
• mwifiex: fix potential NULL dereference and use after free (bsc#1051510).
• mwifiex: update setmacaddress logic (bsc#1111666).
• namei: only return -ECHILD from followdotdotrcu() (bsc#1163851).
• nbd: prevent memory leak (bsc#1158638).
• net, sysctl: Fix compiler warning when only cBPF is present (bsc#1109837).
• net/ibmvnic: Fix typo in retry check (bsc#1155689 ltc#182047).
• net/mlx4en: fix mlx4 ethtool -N insertion (networking-stable-1911_25).
• net/mlx4_en: Fix wrong limitation for number of TX rings (bsc#1103989).
• net/mlx5: Accumulate levels for chains prio namespaces (bsc#1103990).
• net/mlx5: prevent memory leak in mlx5fpgaconncreatecq (bsc#1046303).
• net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
• net/mlx5e: Fix set vf link state error flow (networking-stable-191125).
• net/mlx5e: Fix SFF 8472 eeprom length (git-fixes).
• net/mlx5e: Query global pause state before setting prio2buffer (bsc#1103990).
• net/mlxfw: Fix out-of-memory error in mfa2 flash burning (bsc#1051858).
• net/sched: actpedit: fix WARN() in the traffic path (networking-stable-1911_25).
• net: add sendmsglocked and sendpagelocked to af_inet6 (bsc#1144162).
• net: bridge: deny devsetmacaddress() when unregistering (networking-stable-1912_16).
• net: cdcncm: Signedness bug in cdcncmsetdgram_size() (git-fixes).
• net: dst: Force 4-byte alignment of dstmetrics (networking-stable-1912_28).
• net: ena: fix napi handler misbehavior when the napi budget is zero (networking-stable-200101).
• net: ethernet: octeonmgmt: Account for second possible VLAN header (networking-stable-1911_10).
• net: ethernet: ti: cpsw: fix extra rx interrupt (networking-stable-191216).
• net: fix data-race in neigheventsend() (networking-stable-191110).
• net: hisilicon: Fix a BUG trigered by wrong bytescompl (networking-stable-1912_28).
• net: hns3: fix ETS bandwidth validation bug (bsc#1104353 ).
• net: nfc: nci: fix a possible sleep-in-atomic-context bug in nciuartttyreceive() (networking-stable-1912_28).
• net: phy: at803x: Change error to EINVAL for invalid MAC (bsc#1051510).
• net: phy: broadcom: Use strlcpy() for ethtool::get_strings (bsc#1051510).
• net: phy: Check against net_device being NULL (bsc#1051510).
• net: phy: dp83867: Set up RGMII TX delay (bsc#1051510).
• net: phy: Fix not to call phy_resume() if PHY is not attached (bsc#1051510).
• net: phy: Fix the register offsets in Broadcom iProc mdio mux driver (bsc#1051510).
• net: phy: fixedphy: Fix fixedphy not checking GPIO (bsc#1051510).
• net: phy: marvell: clear wol event before setting it (bsc#1051510).
• net: phy: marvell: Use strlcpy() for ethtool::get_strings (bsc#1051510).
• net: phy: meson-gxl: check phy_write return value (bsc#1051510).
• net: phy: micrel: Use strlcpy() for ethtool::get_strings (bsc#1051510).
• net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 (bsc#1051510).
• net: phy: mscc: read 'vsc8531,vddmac' as an u32 (bsc#1051510).
• net: phy: xgene: disable clk on error paths (bsc#1051510).
• net: phy: xgmiitorgmii: Check phy_driver ready before accessing (bsc#1051510).
• net: phy: xgmiitorgmii: Check read_status results (bsc#1051510).
• net: phy: xgmiitorgmii: Support generic PHY status read (bsc#1051510).
• net: psample: fix skboverpanic (networking-stable-191203).
• net: qlogic: Fix error paths in qlalloclargebuffers() (networking-stable-1912_28).
• net: rtnetlink: prevent underflows in dosetvfinfo() (networking-stable-1911_25).
• net: sched: correct flower port blocking (git-fixes).
• net: sched: ensure optslen <= IPTUNNELOPTSMAX in acttunnelkey (bsc#1109837).
• net: sched: fix dump qlen for schmq/schmqprio with NOLOCK subqueues (bsc#1109837).
• net: sched: fix tc -s class show no bstats on class with nolock subqueues (networking-stable-191203).
• net: usb: lan78xx: Fix suspend/resume PHY register access error (networking-stable-191228).
• net: usb: lan78xx: limit size of local TSO packets (bsc#1051510).
• net: usb: qmiwwan: add support for DW5821e with eSIM support (networking-stable-1911_10).
• net: usb: qmiwwan: add support for Foxconn T77W968 LTE modules (networking-stable-1911_18).
• netfilter: nf_queue: enqueue skbs with NULL dst (git-fixes).
• new helper: lookuppositiveunlocked() (bsc#1159271).
• NFC: fdp: fix incorrect free object (networking-stable-191110).
• NFC: pn533: fix bulk-message timeout (bsc#1051510).
• NFC: pn544: Adjust indentation in pn544hcicheck_presence (git-fixes).
• NFC: st21nfca: fix double free (networking-stable-191110).
• nvme: fix the parameter order for nvmegetlog in nvmegetfwslotinfo (bsc#1163774).
• ocfs2: fix panic due to ocfs2_wq is null (bsc#1158644).
• ocfs2: fix passing zero to 'PTR_ERR' warning (bsc#1158649).
• openvswitch: drop unneeded BUGON() in ovsflowcmdbuildinfo() (networking-stable-1912_03).
• openvswitch: remove another BUGON() (networking-stable-1912_03).
• openvswitch: support asymmetric conntrack (networking-stable-191216).
• orinoco_usb: fix interface sanity check (git-fixes).
• PCI/IOV: Fix memory leak in pciiovadd_virtfn() (git-fixes).
• PCI/MSI: Return -ENOSPC from pciallocirqvectorsaffinity() (bsc#1051510).
• PCI/switchtec: Fix vepvectornumber ioread width (bsc#1051510).
• PCI: Add DMA alias quirk for Intel VCA NTB (bsc#1051510).
• PCI: Do not disable bridge BARs when assigning bus resources (bsc#1051510).
• PCI: pciehp: Avoid returning prematurely from sysfs requests (git-fixes).
• PCI: rpaphp: Add drc-info support for hotplug slot registration (bsc#1157480 ltc#181028).
• PCI: rpaphp: Annotate and correctly byte swap DRC properties (bsc#1157480 ltc#181028).
• PCI: rpaphp: Avoid a sometimes-uninitialized warning (bsc#1157480 ltc#181028).
• PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info (bsc#1157480 ltc#181028).
• PCI: rpaphp: Do not rely on firmware feature to imply drc-info support (bsc#1157480 ltc#181028).
• PCI: rpaphp: Fix up pointer to first drc-info entry (bsc#1157480 ltc#181028).
• percpu: Separate decrypted varaibles anytime encryption can be enabled (bsc#1114279).
• perf/x86/intel: Fix inaccurate period in context switch for auto-reload (bsc#1164315).
• phy: qualcomm: Adjust indentation in readpolltimeout (bsc#1051510).
• pinctrl: cherryview: Fix irqvalidmask calculation (bsc#1111666).
• pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues (bsc#1051510).
• pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELFB and SD1CLK_B (bsc#1051510).
• pinctrl: xway: fix gpio-hog related boot issues (bsc#1051510).
• pktcdvd: remove warning on attempting to register non-passthrough dev (bsc#1051510).
• platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 (bsc#1051510).
• platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (bsc#1051510).
• platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (bsc#1051510).
• platform/x86: hp-wmi: Make buffer for HPWMIFEATURE2QUERY 128 bytes (bsc#1051510).
• platform/x86: pmcatom: Add Siemens CONNECT X300 to critclksystems DMI table (bsc#1051510).
• PM / AVS: SmartReflex: NULL check before some freeing functions is not needed (bsc#1051510).
• PM / Domains: Deal with multiple states but no governor in genpd (bsc#1051510).
• power: supply: ltc2941-battery-gauge: fix use-after-free (bsc#1051510).
• powerpc/archrandom: fix archgetrandomseedint() (bsc#1065729).
• powerpc/irq: fix stack overflow verification (bsc#1065729).
• powerpc/mm: drop #ifdef CONFIGMMU in isioremap_addr() (bsc#1065729).
• powerpc/mm: Remove kvm radix prefetch workaround for Power9 DD2.2 (bsc#1061840).
• powerpc/papr_scm: Do not enable direct map for a region by default (bsc#1129551).
• powerpc/paprscm: Fix leaking 'busdesc.provider_name' in some paths (bsc#1142685 ltc#179509).
• powerpc/pkeys: remove unused pkeyallowsreadwrite (bsc#1065729).
• powerpc/powernv: Disable native PCIe port management (bsc#1065729).
• powerpc/pseries/hotplug-memory: Change rc variable to bool (bsc#1065729).
• powerpc/pseries/lparcfg: Fix display of Maximum Memory (bsc#1162028 ltc#181740).
• powerpc/pseries/mobility: notify network peers after migration (bsc#1152631 ltc#181798).
• powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning (bsc#1065729).
• powerpc/pseries: Add cpu DLPAR support for drc-info property (bsc#1157480 ltc#181028).
• powerpc/pseries: Advance pfn if section is not present in lmbisremovable() (bsc#1065729).
• powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW (bsc#1065729).
• powerpc/pseries: Drop pointless static qualifier in vpadebugfsinit() (git-fixes).
• powerpc/pseries: Enable support for ibm,drc-info property (bsc#1157480 ltc#181028).
• powerpc/pseries: Fix bad drcindexstart value parsing of drc-info entry (bsc#1157480 ltc#181028).
• powerpc/pseries: Fix drc-info mappings of logical cpus to drc-index (bsc#1157480 ltc#181028).
• powerpc/pseries: Fix vector5 in ibm architecture vector table (bsc#1157480 ltc#181028).
• powerpc/pseries: Revert support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
• powerpc/security: Fix debugfs data leak on 32-bit (bsc#1065729).
• powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery (bsc#1118338 ltc#173734).
• powerpc/tools: Do not quote $objdump in scripts (bsc#1065729).
• powerpc/xive: Discard ESB load value when interrupt is invalid (bsc#1085030).
• powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts (bsc#1085030).
• powerpc/xmon: do not access ASDR in VMs (bsc#1065729).
• powerpc: Allow 64bit VDSO _kernelsync_dicache to work across ranges >4GB (bnc#1151927 5.3.17).
• powerpc: Allow flushicacherange to work across ranges >4GB (bnc#1151927 5.3.17).
• powerpc: avoid adjusting memory_limit for capture kernel memory reservation (bsc#1140025 ltc#176086).
• powerpc: Enable support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
• powerpc: Fix vDSO clock_getres() (bsc#1065729).
• powerpc: reserve memory for capture kernel after hugepages init (bsc#1140025 ltc#176086).
• ppp: Adjust indentation into pppasyncinput (git-fixes).
• prevent active file list thrashing due to refault detection (VM Performance, bsc#1156286).
• pseries/drc-info: Search DRC properties for CPU indexes (bsc#1157480 ltc#181028).
• pstore/ram: Write new dumps to start of recycled zones (bsc#1051510).
• pwm: Clear chipdata in pwmput() (bsc#1051510).
• pwm: clps711x: Fix period calculation (bsc#1051510).
• pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional (git-fixes).
• pwm: Remove set but not set variable 'pwm' (git-fixes).
• pxa168fb: Fix the function used to release some memory in an error (bsc#1114279)
• qede: Disable hardware gro when xdp prog is installed (bsc#1086314 bsc#1086313 bsc#1086301 ).
• qede: Fix multicast mac configuration (networking-stable-191228).
• qede: fix NULL pointer deref in _qederemove() (networking-stable-191110).
• qmi_wwan: Add support for Quectel RM500Q (bsc#1051510).
• quota: Check that quota is not dirty before release (bsc#1163858).
• quota: fix livelock in dquotwritebackdquots (bsc#1163857).
• r8152: add missing endpoint sanity check (bsc#1051510).
• r8152: get default setting of WOL before initializing (bsc#1051510).
• random: move FIPS continuous test to output functions (bsc#1155334).
• RDMA/bnxt_re: Avoid freeing MR resources if dereg fails (bsc#1050244).
• RDMA/bnxt_re: Enable SRIOV VF support on Broadcom's 57500 adapter series (bsc#1154916).
• RDMA/bnxt_re: Fix chip number validation Broadcom's Gen P5 series (bsc#1157895).
• RDMA/bnxtre: Fix missing le16to_cpu (bsc#1157895).
• RDMA/hns: Bugfix for qpc/cqc timer configuration (bsc#1104427 bsc#1126206).
• RDMA/hns: Correct the value of srqdescsize (bsc#1104427 ).
• RDMA/hns: Fix to support 64K page for srq (bsc#1104427 ).
• RDMA/hns: Prevent memory leaks of eq->buf_list (bsc#1104427 ).
• README.BRANCH: Removing myself from the maintainer list
• README.BRANCH: Update the branch name to cve/linux-4.12
• regulator: Fix return value of setload() stub (bsc#1051510).
• regulator: rk808: Lower log level on optional GPIOs being not available (bsc#1051510).
• regulator: rn5t618: fix module aliases (bsc#1051510).
• regulator: tps65910: fix a missing check of return value (bsc#1051510).
• reiserfs: Fix memory leak of journal device string (bsc#1163867).
• reiserfs: Fix spurious unlock in reiserfsfillsuper() error handling (bsc#1163869).
• reset: fix resetcontrolops kerneldoc comment (bsc#1051510).
• resource: fix locking in findnextiomem_res() (bsc#1114279).
• Revert 'ath10k: fix DMA related firmware crashes on multiple devices' (git-fixes).
• Revert 'Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers' (bsc#1051510).
• Revert 'locking/pvqspinlock: Do not wait if vCPU is preempted' (bsc#1050549).
• Revert 'mmc: sdhci: Fix incorrect switch to HS mode' (bsc#1051510).
• rpm/kabi.pl: support new (>=5.4) Module.symvers format (new symbol namespace field)
• rpm/kernel-binary.spec.in: Conflict with too old powerpc-utils (jsc#ECO-920, jsc#SLE-11054, jsc#SLE-11322).
• rpm/kernel-binary.spec.in: Replace Novell with SUSE
• rpm/kernel-subpackage-spec: Exclude kernel-firmware recommends (bsc#1143959) For reducing the dependency on kernel-firmware in sub packages
• rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)
• rpm/kernel-subpackage-spec: fix kernel-default-base build There were some issues with recent changes to subpackage dependencies handling:
• rpm/kernel-subpackage-spec: Unify dependency handling.
• rpm/modules.fips: update module list (bsc#1157853)
• rsi91xusb: fix interface sanity check (git-fixes).
• rt2800: remove errornous duplicate condition (git-fixes).
• rtc: cmos: Stop using shared IRQ (bsc#1051510).
• rtc: dt-binding: abx80x: fix resistance scale (bsc#1051510).
• rtc: hym8563: Return -EINVAL if the time is known to be invalid (bsc#1051510).
• rtc: max8997: Fix the returned value in case of error in 'max8997rtcread_alarm()' (bsc#1051510).
• rtc: msm6242: Fix reading of 10-hour digit (bsc#1051510).
• rtc: pcf8523: set xtal load capacitance from DT (bsc#1051510).
• rtc: s35390a: Change buf's type to u8 in s35390a_init (bsc#1051510).
• rtl818x: fix potential use after free (bsc#1051510).
• rtl8xxxu: fix interface sanity check (git-fixes).
• rtlwifi: Fix MAX MPDU of VHT capability (git-fixes).
• rtlwifi: Remove redundant semicolon in wifi.h (git-fixes).
• rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (bsc#1111666).
• s390/qeth: clean up page frag creation (git-fixes).
• s390/qeth: consolidate skb allocation (git-fixes).
• s390/qeth: ensure linear access to packet headers (git-fixes).
• s390/qeth: guard against runt packets (git-fixes).
• sched/fair: Add tmpalonebranch assertion (bnc#1156462).
• sched/fair: Fix insertion in rq->leafcfsrq_list (bnc#1156462).
• sched/fair: Fix O(nr_cgroups) in the load balancing path (bnc#1156462).
• sched/fair: Optimize updateblockedaverages() (bnc#1156462).
• sched/fair: WARN() and refuse to set buddy when !se->on_rq (bsc#1158132).
• scsi: lpfc: fix build failure with DEBUGFS disabled (bsc#1154601).
• scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (bsc#1158013).
• scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (bsc#1158013).
• scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
• scsi: qla2xxx: Cleanup unused asynclogoutdone (bsc#1158013).
• scsi: qla2xxx: Consolidate fabric scan (bsc#1158013).
• scsi: qla2xxx: Correct fcport flags handling (bsc#1158013).
• scsi: qla2xxx: Correctly retrieve and interpret active flash region (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
• scsi: qla2xxx: Fix a NULL pointer dereference in an error path (bsc#1157966 bsc#1158013 bsc#1157424).
• scsi: qla2xxx: Fix fabric scan hang (bsc#1158013).
• scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
• scsi: qla2xxx: Fix mtcp dump collection failure (bsc#1158013).
• scsi: qla2xxx: Fix RIDA Format-2 (bsc#1158013).
• scsi: qla2xxx: Fix stuck login session using prlipendtimer (bsc#1158013).
• scsi: qla2xxx: Fix stuck session in GNL (bsc#1158013).
• scsi: qla2xxx: Fix the endianness of the qla82xxgetfw_size() return type (bsc#1158013).
• scsi: qla2xxx: Fix unbound NVME response length (bsc#1157966 bsc#1158013 bsc#1157424).
• scsi: qla2xxx: Fix updatefcport for currenttopology (bsc#1158013).
• scsi: qla2xxx: Improve readability of the code that handles qlafltheader (bsc#1158013).
• scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (bsc#1158013).
• scsi: qla2xxx: Update driver version to 10.01.00.22-k (bsc#1158013).
• scsi: qla2xxx: Use common routine to free fcport struct (bsc#1158013).
• scsi: qla2xxx: Use getunaligned*() instead of open-coding these functions (bsc#1158013).
• scsi: zfcp: trace channel log even for FCP command responses (git-fixes).
• sctp: cache netns in sctpepcommon (networking-stable-191203).
• sctp: fully initialize v4 addr in some functions (networking-stable-191228).
• serial: 8250_bcm2835aux: Fix line mismatch on driver unbind (bsc#1051510).
• serial: ifx6x60: add missed pmruntimedisable (bsc#1051510).
• serial: max310x: Fix tx_empty() callback (bsc#1051510).
• serial: pl011: Fix DMA ->flush_buffer() (bsc#1051510).
• serial: serialcore: Perform NULL checks for breakctl ops (bsc#1051510).
• serial: stm32: fix transmit_chars when tx is stopped (bsc#1051510).
• sfc: Only cancel the PPS workqueue if it exists (networking-stable-191125).
• sfc: Remove 'PCIE error reporting unavailable' (bsc#1161472).
• sheth: check shethcpudata::dual_port when dumping registers (bsc#1051510).
• sh_eth: fix dumping ARSTR (bsc#1051510).
• sh_eth: fix invalid context bug while calling auto-negotiation by ethtool (bsc#1051510).
• sh_eth: fix invalid context bug while changing link options by ethtool (bsc#1051510).
• sh_eth: fix TSU init on SH7734/R8A7740 (bsc#1051510).
• sh_eth: fix TXALCR1 offsets (bsc#1051510).
• sheth: TSUQTAG0/1 registers the same as TSU_QTAGM0/1 (bsc#1051510).
• smb3: Fix crash in SMB2openinit due to uninitialized field in compounding path (bsc#1144333).
• smb3: Fix persistent handles reconnect (bsc#1144333).
• smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1144333).
• smb3: remove confusing dmesg when mounting with encryption ('seal') (bsc#1144333).
• soc/tegra: fuse: Correct straps' address for older Tegra124 device trees (bsc#1051510).
• soc: renesas: rcar-sysc: Add goto to ofnodeput() before return (bsc#1051510).
• soc: ti: wkupm3ipc: Fix race condition with rproc_boot (bsc#1051510).
• spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch (bsc#1051510).
• spi: omap2-mcspi: Set FIFO DMA trigger level to word length (bsc#1051510).
• spi: tegra114: clear packed bit for unpacked mode (bsc#1051510).
• spi: tegra114: configure dma burst size to fifo trig level (bsc#1051510).
• spi: tegra114: fix for unpacked mode transfers (bsc#1051510).
• spi: tegra114: flush fifos (bsc#1051510).
• spi: tegra114: terminate dma and reset on transfer timeout (bsc#1051510).
• sr_vendor: support Beurer GL50 evo CD-on-a-chip devices (boo#1164632).
• staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 (bsc#1051510).
• Staging: iio: adt7316: Fix i2c data reading, set the data field (bsc#1051510).
• staging: rtl8188eu: fix interface sanity check (bsc#1051510).
• staging: rtl8192e: fix potential use after free (bsc#1051510).
• staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (bsc#1051510).
• staging: rtl8723bs: Drop ACPI device ids (bsc#1051510).
• staging: vt6656: correct packet types for CTS protect, mode (bsc#1051510).
• staging: vt6656: Fix false Tx excessive retries reporting (bsc#1051510).
• staging: vt6656: use NULLFUCTION stack on mac80211 (bsc#1051510).
• staging: wlan-ng: ensure error return is actually returned (bsc#1051510).
• stm class: Fix a double free of stmsourcedevice (bsc#1051510).
• stopmachine, sched: Fix migrateswap() vs. active_balance() deadlock (bsc#1088810, bsc#1161702).
• stop_machine: Atomically queue and wake stopper threads (bsc#1088810, bsc#1161702).
• stop_machine: Disable preemption after queueing stopper threads (bsc#1088810, bsc#1161702).
• stop_machine: Disable preemption when waking two stopper threads (bsc#1088810, bsc#1161702).
• tcp: clear tp->packets_out when purging write queue (bsc#1160560).
• tcp: do not send empty skb from tcpwritexmit() (networking-stable-200101).
• tcp: exit if nothing to retransmit on RTO timeout (bsc#1160560, stable 4.14.159).
• tcp: md5: fix potential overestimation of TCP option space (networking-stable-191216).
• thermal: Fix deadlock in thermal thermalzonedevice_check (bsc#1051510).
• tipc: fix a missing check of genlmsg_put (bsc#1051510).
• tipc: fix link name length check (bsc#1051510).
• tipc: fix memory leak in tipcnlcompatpubldump (bsc#1051510).
• tipc: fix skb may be leaky in tipclinkinput (bsc#1051510).
• tracing: Annotate ftracegraphhash pointer with __rcu (git-fixes).
• tracing: Annotate ftracegraphnotracehash pointer with _rcu (git-fixes).
• tracing: Fix tracing_stat return values in error handling paths (git-fixes).
• tracing: Fix very unlikely race of registering two stat tracers (git-fixes).
• tracing: Have the histogram compare functions convert to u64 first (bsc#1160210).
• tracing: xen: Ordered comparison of function pointers (git-fixes).
• tty/serial: atmel: Add ishalfduplex helper (bsc#1051510).
• tty: n_hdlc: fix build on SPARC (bsc#1051510).
• tty: serial: msm_serial: Fix lockup for sysrq and oops (bsc#1051510).
• tty: vt: keyboard: reject invalid keycodes (bsc#1051510).
• uaccess: Add non-pagefault user-space write function (bsc#1083647).
• ubifs: Correctly initialize c->minlogbytes (bsc#1158641).
• ubifs: do not trigger assertion on invalid no-key filename (bsc#1163850).
• ubifs: Fix deadlock in concurrent bulk-read and writepage (bsc#1163856).
• ubifs: Fix FSIOCSETFLAGS unexpectedly clearing encrypt flag (bsc#1163855).
• ubifs: Limit the number of pages in shrink_liability (bsc#1158643).
• ubifs: Reject unsupported ioctl flags explicitly (bsc#1163844).
• udp: fix integer overflow while computing available space in skrcvbuf (networking-stable-2001_01).
• usb-storage: Disable UAS on JMicron SATA enclosure (bsc#1051510).
• usb: adutux: fix interface sanity check (bsc#1051510).
• usb: Allow USB device to be warm reset in suspended state (bsc#1051510).
• usb: atm: ueagle-atm: add missing endpoint check (bsc#1051510).
• usb: chipidea: host: Disable port power only if previously enabled (bsc#1051510).
• usb: core: fix check for duplicate endpoints (git-fixes).
• usb: core: hub: Improved device recognition on remote wakeup (bsc#1051510).
• usb: core: urb: fix URB structure initialization function (bsc#1051510).
• usb: documentation: flags on usb-storage versus UAS (bsc#1051510).
• usb: dwc3: debugfs: Properly print/set link state for HS (bsc#1051510).
• usb: dwc3: do not log probe deferrals; but do log other error codes (bsc#1051510).
• usb: dwc3: ep0: Clear started flag on completion (bsc#1051510).
• usb: dwc3: turn off VBUS when leaving host mode (bsc#1051510).
• usb: EHCI: Do not return -EPIPE when hub is disconnected (git-fixes).
• usb: gadget: fecm: Use atomict to track in-flight request (bsc#1051510).
• usb: gadget: fncm: Use atomict to track in-flight request (bsc#1051510).
• usb: gadget: legacy: set max_speed to super-speed (bsc#1051510).
• usb: gadget: pch_udc: fix use after free (bsc#1051510).
• usb: gadget: u_serial: add missing port entry locking (bsc#1051510).
• usb: gadget: Zero ffsiodata (bsc#1051510).
• usb: host: xhci-hub: fix extra endianness conversion (bsc#1051510).
• usb: idmouse: fix interface sanity checks (bsc#1051510).
• usb: mon: Fix a deadlock in usbmon between mmap and read (bsc#1051510).
• usb: mtu3: fix dbginfo in qmutxzlperrorhandler (bsc#1051510).
• usb: musb: dma: Correct parameter passed to IRQ handler (bsc#1051510).
• usb: musb: fix idling for suspend after disconnect interrupt (bsc#1051510).
• usb: roles: fix a potential use after free (git-fixes).
• usb: serial: ch341: handle unbound port at reset_resume (bsc#1051510).
• usb: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (bsc#1051510).
• usb: serial: io_edgeport: add missing active-port sanity check (bsc#1051510).
• usb: serial: io_edgeport: fix epic endpoint lookup (bsc#1051510).
• usb: serial: io_edgeport: handle unbound ports on URB completion (bsc#1051510).
• usb: serial: io_edgeport: use irqsave() in USB's complete callback (bsc#1051510).
• usb: serial: ir-usb: add missing endpoint sanity check (bsc#1051510).
• usb: serial: ir-usb: fix IrLAP framing (bsc#1051510).
• usb: serial: ir-usb: fix link-speed handling (bsc#1051510).
• usb: serial: keyspan: handle unbound ports (bsc#1051510).
• usb: serial: opticon: fix control-message timeouts (bsc#1051510).
• usb: serial: option: Add support for Quectel RM500Q (bsc#1051510).
• usb: serial: option: add support for Quectel RM500Q in QDL mode (git-fixes).
• usb: serial: option: add Telit ME910G1 0x110a composition (git-fixes).
• usb: serial: option: add ZLP support for 0x1bc7/0x9010 (git-fixes).
• usb: serial: quatech2: handle unbound ports (bsc#1051510).
• usb: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx (bsc#1051510).
• usb: serial: suppress driver bind attributes (bsc#1051510).
• usb: typec: tcpci: mask event interrupts when remove driver (bsc#1051510).
• usb: uas: heed CAPACITY_HEURISTICS (bsc#1051510).
• usb: uas: honor flag to avoid CAPACITY16 (bsc#1051510).
• usb: xhci: Fix build warning seen with CONFIG_PM=n (bsc#1051510).
• usb: xhci: only set D3hot for pci device (bsc#1051510).
• usbip: Fix error path of vhcirecvret_submit() (git-fixes).
• usbip: Fix receive error in vhci-hcd when using scatter-gather (bsc#1051510).
• vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1 (bsc#1051510).
• vhost/vsock: accept only packets with the right dstcid (networking-stable-2001_01).
• video: backlight: Add devres versions of offindbacklight (bsc#1090888) Taken for 6010831dde5.
• video: backlight: Add offindbacklight helper in backlight.c (bsc#1090888) Taken for 6010831dde5.
• watchdog: max77620_wdt: fix potential build errors (bsc#1051510).
• watchdog: rn5t618_wdt: fix module aliases (bsc#1051510).
• watchdog: sama5d4: fix WDD value to be always set to max (bsc#1051510).
• watchdog: wdatwdt: fix gettimeleft call for wdat_wdt (bsc#1162557).
• wireless: fix enabling channel 12 for custom regulatory domain (bsc#1051510).
• wireless: wext: avoid gcc -O3 warning (bsc#1051510).
• workqueue: Fix pwq ref leak in rescuer_thread() (bsc#1160211).
• x86/amd_nb: Add PCI device IDs for family 17h, model 70h (bsc#1163206).
• x86/cpu: Update cached HLE state on write to TSXCTRLCPUID_CLEAR (bsc#1162619).
• x86/intel_rdt: Split resource group removal in two (bsc#1112178).
• x86/intel_rdt: Split resource group removal in two (bsc#1112178).
• x86/kgbd: Use NMIVECTOR not APICDM_NMI (bsc#1114279).
• x86/mce/AMD: Allow any CPU to initialize the smca_banks array (bsc#1114279).
• x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks (bsc#1114279).
• x86/MCE/AMD: Do not use rdmsrsafeoncpu() in smcaconfigure() (bsc#1114279).
• x86/mce: Fix possibly incorrect severity calculation on AMD (bsc#1114279).
• x86/resctrl: Check monitoring static key in the MBM overflow handler (bsc#1114279).
• x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
• x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
• x86/resctrl: Fix an imbalance in domainremovecpu() (bsc#1114279).
• x86/resctrl: Fix potential memory leak (bsc#1114279).
• x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
• x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
• x86/resctrl: Fix use-after-free when deleting resource groups (bsc#1114279).
• x86/speculation: Fix incorrect MDS/TAA mitigation status (bsc#1114279).
• x86/speculation: Fix redundant MDS mitigation message (bsc#1114279).
• xen-blkfront: switch kcalloc to kvcalloc for large array allocation (bsc#1160917).
• xen/balloon: Support xend-based toolstack take two (bsc#1065600).
• xen/blkback: Avoid unmapping unmapped grant pages (bsc#1065600).
• xen/blkfront: Adjust indentation in xlvbdallocgendisk (bsc#1065600).
• xen: Enable interrupts when calling condresched() (bsc#1065600).
• xfrm: Fix transport mode skb control buffer usage (bsc#1161552).
• xfs: Fix tail rounding in xfsallocfile_space() (bsc#1161087, bsc#1153917).
• xfs: Sanity check flags of Q_XQUOTARM call (bsc#1158652).
• xhci: Fix memory leak in xhciaddin_port() (bsc#1051510).
• xhci: fix USB3 device initiated resume race with roothub autosuspend (bsc#1051510).
• xhci: handle some XHCITRUSTTX_LENGTH quirks cases as default behaviour (bsc#1051510).
• xhci: Increase STSHALT timeout in xhcisuspend() (bsc#1051510).
• xhci: make sure interrupts are restored to correct state (bsc#1051510).
• zd1211rw: fix storage endpoint lookup (git-fixes).