SUSE-SU-2020:1603-1

The SUSE Linux Enterprise 12 SP4 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
• CVE-2020-13143: Fixed an out-of-bounds read in gadgetdevdescUDCstore in drivers/usb/gadget/configfs.c (bsc#1171982).
• CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dwspiirq and dwspitransfer_one (bsc#1171983).
• CVE-2020-12768: Fixed a memory leak in svmcpuuninit in arch/x86/kvm/svm.c (bsc#1171736).
• CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
• CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
• CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).
• CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
• CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
• CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
• CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).
• CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
• CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).
• CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook where it was assumed that an skb would only contain a single netlink message (bsc#1171189).
• CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).
• CVE-2020-10720: Fixed a use-after-free read in napigrofrags() (bsc#1170778).
• CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).
• CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).
• CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).
• CVE-2019-20812: Fixed an issue in prbcalcretireblktmo() which could have resulted in a denial of service (bsc#1172453).
• CVE-2019-20806: Fixed a null pointer dereference which may had lead to denial of service (bsc#1172199).
• CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).
• CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895).

The following non-security bugs were fixed:

• ACPI: CPPC: Fix reference count leak in acpicppcprocessor_probe() (bsc#1051510).
• ACPI: sysfs: Fix reference count leak in acpisysfsaddhotplugprofile() (bsc#1051510).
• acpi/x86: ignore unspecified bit positions in the ACPI global lock field (bsc#1051510).
• Add commit for git-fix that's not a fix This commit cleans up debug code but does not fix anything, and it relies on a new kernel function that isn't yet in this version of SLE.
• agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).
• ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).
• ALSA: hda: Do not release card at firmware loading error (bsc#1051510).
• ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).
• ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).
• ALSA: hda: Keep the controller initialization even if no codecs found (bsc#1051510).
• ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes).
• ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).
• ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).
• ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).
• ALSA: hda/realtek - Fix unexpected init_amp override (bsc#1051510).
• ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (git-fixes bsc#1171293).
• ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bsc#1051510).
• ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes).
• ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (git-fixes).
• ALSA: opti9xx: shut up gcc-10 range warning (bsc#1051510).
• ALSA: pcm: fix incorrect hw_base increase (git-fixes).
• ALSA: pcm: oss: Place the plugin buffer overflow checks correctly (bsc#1170522).
• ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (git-fixes).
• ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (git-fixes).
• ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bsc#1051510).
• ALSA: usb-audio: Do not override ignorectlerror value from the map (bsc#1051510).
• ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif (bsc#1051510).
• ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (git-fixes).
• ALSA: usx2y: Fix potential NULL dereference (bsc#1051510).
• ASoC: codecs: hdachdmi: Fix incorrect use of listforeachentry (bsc#1051510).
• ASoC: dapm: connect virtual mux with default value (bsc#1051510).
• ASoC: dapm: fixup dapm kcontrol widget (bsc#1051510).
• ASoC: dpcm: allow start or stop during pause for backend (bsc#1051510).
• ASoC: fix regwmask (bsc#1051510).
• ASoC: msm8916-wcd-digital: Reset RX interpolation path after use (bsc#1051510).
• ASoC: topology: Check return value of pcmnewver (bsc#1051510).
• ASoC: topology: use name_prefix for new kcontrol (bsc#1051510).
• b43legacy: Fix case where channel status is corrupted (bsc#1051510).
• batman-adv: fix batadvncrandomweighttq (git-fixes).
• batman-adv: Fix refcnt leak in batadvshowthroughput_override (git-fixes).
• batman-adv: Fix refcnt leak in batadvstorethroughput_override (git-fixes).
• batman-adv: Fix refcnt leak in batadvvogm_process (git-fixes).
• bcache: avoid unnecessary btree nodes flushing in btreeflushwrite() (git fixes (block drivers)).
• bcache: fix incorrect data type usage in btreeflushwrite() (git fixes (block drivers)).
• bcache: Revert 'bcache: shrink btree node cache after bchbtreecheck()' (git fixes (block drivers)).
• block/drbd: delete invalid function drbdmdmarkdirty (bsc#1171527).
• block: drbd: remove a stray unlock in _drbdsend_protocol() (bsc#1171599).
• block: fix busy device checking in blkdroppartitions again (bsc#1171948).
• block: fix busy device checking in blkdroppartitions (bsc#1171948).
• block: fix memleak of bio integrity data (git fixes (block drivers)).
• block: remove the bdopeners checks in blkdrop_partitions (bsc#1171948).
• bnxten: fix memory leaks in bnxtdcbnlieeegetets() (networking-stable-200328).
• bnxten: reinitialize IRQs when MTU is modified (networking-stable-2003_14).
• bonding/alb: make sure arp header is pulled before accessing it (networking-stable-200314).
• brcmfmac: abort and release host after error (bsc#1051510).
• btrfs: fix deadlock with memory reclaim during scrub (bsc#1172127).
• btrfs: fix log context list corruption after rename whiteout error (bsc#1172342).
• btrfs: fix partial loss of prealloc extent past i_size after fsync (bsc#1172343).
• btrfs: move the dio_sem higher up the callchain (bsc#1171761).
• btrfs: reloc: clear DEADRELOCTREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366).
• btrfs: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417 bsc#1160947 bsc#1172366).
• btrfs: setup a nofs context for memory allocation at btrfscreatetree() (bsc#1172127).
• btrfs: setup a nofs context for memory allocation at _btrfsset_acl (bsc#1172127).
• btrfs: use nofs context when initializing security xattrs to avoid deadlock (bsc#1172127).
• can: add missing attribute validation for termination (networking-stable-200314).
• cdc-acm: close race betrween suspend() and acm_softint (git-fixes).
• cdc-acm: introduce a cool down (git-fixes).
• ceph: fix double unlock in handlecapexport() (bsc#1171694).
• ceph: fix endianness bug when handling MDS session feature bits (bsc#1171695).
• cgroup, netclassid: periodically release filelock on classid updating (networking-stable-2003_14).
• CIFS: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1144333).
• CIFS: Allocate encryption header through kmalloc (bsc#1144333).
• CIFS: allow unlock flock and OFD lock across fork (bsc#1144333).
• CIFS: check new file size when extending file by fallocate (bsc#1144333).
• CIFS: cifspdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
• CIFS: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1144333).
• CIFS: do not share tcons with DFS (bsc#1144333).
• CIFS: dump the session id and keys also for SMB2 sessions (bsc#1144333).
• CIFS: ensure correct super block for DFS reconnect (bsc#1144333).
• CIFS: Fix bug which the return value by asynchronous read is error (bsc#1144333).
• CIFS: fix uninitialised leasekey in openshroot() (bsc#1144333).
• CIFS: improve read performance for page size 64KB & cache=strict & vers=2.1+ (bsc#1144333).
• CIFS: Increment numremoteopens stats counter even in case of smb2querydir_first (bsc#1144333).
• CIFS: minor update to comments around the cifstcpses_lock mutex (bsc#1144333).
• CIFS: protect updating server->dstaddr with a spinlock (bsc#1144333).
• CIFS: smb2pdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
• CIFS: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1144333).
• CIFS: smbd: Check and extend sender credits in interrupt context (bsc#1144333).
• CIFS: smbd: Check send queue size before posting a send (bsc#1144333).
• CIFS: smbd: Do not schedule work to send immediate packet on every receive (bsc#1144333).
• CIFS: smbd: Merge code to track pending packets (bsc#1144333).
• CIFS: smbd: Properly process errors on ibpostsend (bsc#1144333).
• CIFS: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1144333).
• CIFS: Warn less noisily on default mount (bsc#1144333).
• clk: Add clkhwunregister_composite helper function definition (bsc#1051510).
• clk: imx6ull: use OSC clock during AXI rate change (bsc#1051510).
• clk: imx: make mux parent strings const (bsc#1051510).
• clk: mediatek: correct the clocks for MT2701 HDMI PHY module (bsc#1051510).
• clk: sunxi-ng: a64: Fix gate bit of DSI DPHY (bsc#1051510).
• clocksource/drivers/hyper-v: Set TSC clocksource as default w/ InvariantTSC (bsc#1170620).
• clocksource: dwapbtimer_of: Fix missing clockevent timers (bsc#1051510).
• component: Silence bind error on -EPROBE_DEFER (bsc#1051510).
• coresight: do not use the BIT() macro in the UAPI header (git fixes (block drivers)).
• cpufreq: s3c64xx: Remove pointless NULL check in s3c64xxcpufreqdriver_init (bsc#1051510).
• crypto: ccp - AES CFB mode is a stream cipher (git-fixes).
• crypto: ccp - Clean up and exit correctly on allocation failure (git-fixes).
• crypto: ccp - Cleanup miscdev on sevexit() (bsc#1114279).
• crypto: ccp - Cleanup spdevmaster in pspdevdestroy() (bsc#1114279).
• debugfs: Add debugfscreatexul() for hexadecimal unsigned long (git-fixes).
• dmaengine: dmatest: Fix iteration non-stop logic (bsc#1051510).
• dm mpath: switch paths in dmblkioctl() code path (bsc#1167574).
• dm writecache: fix data corruption when reloading the target (git fixes (block drivers)).
• dm writecache: fix incorrect flush sequence when doing SSD mode commit (git fixes (block drivers)).
• dm writecache: verify watermark during resume (git fixes (block drivers)).
• dm zoned: fix invalid memory access (git fixes (block drivers)).
• dm zoned: reduce overhead of backing device checks (git fixes (block drivers)).
• dm zoned: remove duplicate nrrndzones increase in dmzinitzone() (git fixes (block drivers)).
• dm zoned: support zone sizes smaller than 128MiB (git fixes (block drivers)).
• dp83640: reverse arguments to listaddtail (git-fixes).
• Drivers: hv: Add a module description line to the hv_vmbus driver (bsc#1172253).
• Drivers: HV: Send one page worth of kmsg dump over Hyper-V during panic (bsc#1170618).
• Drivers: hv: vmbus: Fix the issue with freeing up hvctltable_hdr (bsc#1170618).
• Drivers: hv: vmbus: Get rid of MSR access from vmbus_drv.c (bsc#1170618).
• Drivers: hv: vmus: Fix the check for return value from kmsg get dump buffer (bsc#1170618).
• drivers/net/ibmvnic: Update VNIC protocol version reporting (bsc#1065729).
• drm: amd/acp: fix broken menu structure (bsc#1114279) * context changes
• drm/crc: Actually allow to change the crc source (bsc#1114279) * offset changes
• drm/dp_mst: Fix clearing payload state on topology disable (bsc#1051510).
• drm/dpmst: Reformat drmdpcheckact_status() a bit (bsc#1051510).
• drm/edid: Fix off-by-one in DispID DTD pixel clock (bsc#1114279)
• drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of (bsc#1114279)
• drm/i915: properly sanity check batchstartoffset (bsc#1114279) * renamed display/intelfbc.c -> intelfb.c * renamed gt/intelrc6.c -> intelpm.c * context changes
• drm/meson: Delete an error message in mesondwhdmi_bind() (bsc#1051510).
• drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem (bsc#1114279)
• drm/qxl: qxlrelease leak in qxldrawdirtyfb() (bsc#1051510).
• drm/qxl: qxlrelease leak in qxlhwsurfacealloc() (bsc#1051510).
• drm/qxl: qxl_release use after free (bsc#1051510).
• drm: Remove PageReserved manipulation from drmpcialloc (bsc#1114279) * offset changes
• dumpstack: avoid the livelock of the dumplock (git fixes (block drivers)).
• EDAC, sb_edac: Add support for systems with segmented PCI buses (bsc#1169525).
• ext4: do not zeroout extents beyond i_disksize (bsc#1167851).
• ext4: fix extent_status fragmentation for plain files (bsc#1171949).
• ext4: use non-movable memory for superblock readahead (bsc#1171952).
• fanotify: fix merging marks masks with FAN_ONDIR (bsc#1171679).
• fbcon: fix null-ptr-deref in fbcon_switch (bsc#1114279) * rename drivers/video/fbdev/core to drivers/video/console * context changes
• fib: add missing attribute validation for tunid (networking-stable-2003_14).
• firmware: qcom: scm: fix compilation error when disabled (bsc#1051510).
• fs/cifs: fix gcc warning in sidtoid (bsc#1144333).
• fs/seqfile.c: simplify seqfile iteration code and interface (bsc#1170125).
• gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).
• gre: fix uninit-value in _iptunnelpullheader (networking-stable-2003_14).
• HID: hid-input: clear unmapped usages (git-fixes).
• HID: hyperv: Add a module description line (bsc#1172253).
• HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (git-fixes).
• HID: i2c-hid: override HID descriptors for certain devices (git-fixes).
• HID: multitouch: add eGalaxTouch P80H84 support (bsc#1051510).
• HID: wacom: Read HIDDGCONTACTMAX directly for non-generic devices (git-fixes).
• hrtimer: Annotate lockless access to timer->state (git fixes (block drivers)).
• hsr: add restart routine into hsrgetnodelist() (networking-stable-2003_28).
• hsr: check protocol version in hsrnewlink() (networking-stable-2004_17).
• hsr: fix general protection fault in hsraddrisself() (networking-stable-2003_28).
• hsr: set .netnsok flag (networking-stable-200328).
• hsr: use rcureadlock() in hsrgetnode{list/status}() (networking-stable-2003_28).
• i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (git-fixes).
• i2c: acpi: put device when verifying client fails (git-fixes).
• i2c: brcmstb: remove unused struct member (git-fixes).
• i2c: core: Allow empty id_table in ACPI case as well (git-fixes).
• i2c: core: decrease reference count of device node in i2cunregisterdevice (git-fixes).
• i2c: dev: Fix the race between the release of i2c_dev and cdev (bsc#1051510).
• i2c: fix missing pmruntimeputsync in i2cdevice_probe (git-fixes).
• i2c-hid: properly terminate i2chiddmidescoverride_table array (git-fixes).
• i2c: i801: Do not add ICHRESIOSMI for the iTCOwdt device (git-fixes).
• i2c: iproc: Stop advertising support of SMBUS quick cmd (git-fixes).
• i2c: isch: Remove unnecessary acpi.h include (git-fixes).
• i2c: mux: demux-pinctrl: Fix an error handling path in 'i2cdemuxpinctrl_probe()' (bsc#1051510).
• i2c: st: fix missing struct parameter description (bsc#1051510).
• IB/ipoib: Add child to parent list only if device initialized (bsc#1168503).
• IB/ipoib: Consolidate checking of the proposed child interface (bsc#1168503).
• IB/ipoib: Do not remove child devices from within the ndo_uninit (bsc#1168503).
• IB/ipoib: Get rid of IPOIBFLAGGOING_DOWN (bsc#1168503).
• IB/ipoib: Get rid of the sysfs_mutex (bsc#1168503).
• IB/ipoib: Maintain the childintfs list from ndoinit/uninit (bsc#1168503).
• IB/ipoib: Move all uninit code into ndo_uninit (bsc#1168503).
• IB/ipoib: Move init code to ndo_init (bsc#1168503).
• IB/ipoib: Replace printk with pr_warn (bsc#1168503).
• IB/ipoib: Use canceldelayedwork_sync for neigh-clean task (bsc#1168503).
• IB/ipoib: Warn when one port fails to initialize (bsc#1168503).
• ibmvnic: Skip fatal error reset after passive init (bsc#1171078 ltc#184239).
• iio:ad7797: Use correct attribute_group (bsc#1051510).
• iio: adc: stm32-adc: fix device used to request dma (bsc#1051510).
• iio: adc: stm32-adc: fix sleep in atomic context (git-fixes).
• iio: adc: stm32-adc: Use dmarequestchan() instead dmarequestslave_channel() (bsc#1051510).
• iio: dac: vf610: Fix an error handling path in 'vf610dacprobe()' (bsc#1051510).
• iio: sca3000: Remove an erroneous 'get_device()' (bsc#1051510).
• iio: xilinx-xadc: Fix ADC-B powerdown (bsc#1051510).
• iio: xilinx-xadc: Fix clearing interrupt when enabling trigger (bsc#1051510).
• iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode (bsc#1051510).
• ima: Fix return value of imawritepolicy() (git-fixes).
• Input: evdev - call inputflushdevice() on release(), not flush() (bsc#1051510).
• Input: hyperv-keyboard - add module description (bsc#1172253).
• Input: i8042 - add Acer Aspire 5738z to nomux list (bsc#1051510).
• Input: i8042 - add ThinkPad S230u to i8042 reset list (bsc#1051510).
• Input: raydiumi2cts - use true and false for boolean values (bsc#1051510).
• Input: synaptics-rmi4 - fix error return code in rmidriverprobe() (bsc#1051510).
• Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes).
• Input: usbtouchscreen - add support for BonXeon TP (bsc#1051510).
• Input: xpad - add custom init packet for Xbox One S controllers (bsc#1051510).
• iommu/amd: Call domainflushcomplete() in update_domain() (bsc#1172096).
• iommu/amd: Do not flush Device Table in iommumappage() (bsc#1172097).
• iommu/amd: Do not loop forever when trying to increase address space (bsc#1172098).
• iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bsc#1172099).
• iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172101).
• iommu/amd: Fix race in increaseaddressspace()/fetch_pte() (bsc#1172102).
• iommu/amd: Update Device Table in increaseaddressspace() (bsc#1172103).
• iommu: Fix reference count leak in iommugroupalloc (bsc#1172397).
• ipv4: fix a RCU-list lock in fibtriestatseqshow (networking-stable-2004_02).
• ipv6/addrconf: call ipv6mcup() for non-Ethernet interface (networking-stable-200314).
• ipv6: do not auto-add link-local address to lag ports (networking-stable-200409).
• ipvlan: add condreschedrcu() while processing muticast backlog (networking-stable-200314).
• ipvlan: do not deref eth hdr before checking it's set (networking-stable-200314).
• ipvlan: do not use condreschedrcu() in ipvlanprocessmulticast() (networking-stable-200314).
• iwlwifi: pcie: actually release queue memory in TVQM (bsc#1051510).
• kabi fix for early XHCI debug (git-fixes).
• kabi for for md: improve handling of bio with REQPREFLUSH in mdflush_request() (git-fixes).
• kabi, protect struct ib_device (bsc#1168503).
• kabi/severities: Do not track KVM internal symbols.
• kabi/severities: Ingnore getdevdata() The function is internal to the AMD IOMMU driver and must not be called by any third party.
• kabi workaround for sndrawmidi bufferref field addition (git-fixes).
• KEYS: reaching the keys quotas correctly (bsc#1051510).
• KVM: arm64: Change hyppanic()s dependency on tpidrel2 (bsc#1133021).
• KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (bsc#1133021).
• KVM: Check validity of resolved slot when searching memslots (bsc#1172104).
• KVM: s390: vsie: Fix delivery of addressing exceptions (git-fixes).
• KVM: SVM: Fix potential memory leak in svmcpuinit() (bsc#1171736).
• KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs (bsc#1152489).
• l2tp: Allow management of tunnels and session in user namespace (networking-stable-200417).
• libata: Remove extra scsihostput() in atascsiadd_hosts() (bsc#1051510).
• libata: Return correct status in satapmpehrecoverpm() when ATADFLAGDETACH is set (bsc#1051510).
• lib: raid6: fix awk build warnings (git fixes (block drivers)).
• lib/raid6/test: fix build on distros whose /bin/sh is not bash (git fixes (block drivers)).
• lib/stackdepot.c: fix global out-of-bounds in stack_slabs (git fixes (block drivers)).
• locks: print unsigned ino in /proc/locks (bsc#1171951).
• mac80211: add ieee80211isany_nullfunc() (bsc#1051510).
• mac80211_hwsim: Use kstrndup() in place of kasprintf() (bsc#1051510).
• mac80211: mesh: fix discovery timer re-arming issue / crash (bsc#1051510).
• macsec: avoid to set wrong mtu (bsc#1051510).
• macsec: restrict to ethernet devices (networking-stable-200328).
• macvlan: add condresched() during multicast processing (networking-stable-2003_14).
• macvlan: fix null dereference in macvlandeviceevent() (bsc#1051510).
• md: improve handling of bio with REQPREFLUSH in mdflush_request() (git-fixes).
• md/raid0: Fix an error message in raid0makerequest() (git fixes (block drivers)).
• md/raid10: prevent access of uninitialized resync_pages offset (git-fixes).
• media: dvb: return -EREMOTEIO on i2c transfer failure (bsc#1051510).
• media: platform: fcp: Set appropriate DMA parameters (bsc#1051510).
• media: ti-vpe: cal: fix disable_irqs to only the intended target (git-fixes).
• mei: release me_cl object reference (bsc#1051510).
• mlxsw: Fix some ISERR() vs NULL bugs (networking-stable-2004_27).
• mlxsw: spectrumflower: Do not stop at FLOWACTIONVLANMANGLE (networking-stable-200409).
• mmc: atmel-mci: Fix debugfs on 64-bit platforms (git-fixes).
• mmc: dw_mmc: Fix debugfs on 64-bit platforms (git-fixes).
• mmc: meson-gx: make sure the descriptor is stopped on errors (git-fixes).
• mmc: meson-gx: simplify interrupt handler (git-fixes).
• mmc: renesas_sdhi: limit block count to 16 bit for old revisions (git-fixes).
• mmc: sdhci-esdhc-imx: fix the mask for tuning start point (bsc#1051510).
• mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (bsc#1051510).
• mmc: sdhci-of-at91: fix memleak on clk_get failure (git-fixes).
• mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bsc#1051510).
• mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bsc#1051510).
• mmc: sdio: Fix potential NULL pointer error in mmcsdioinit_card() (bsc#1051510).
• mmc: tmio: fix access width of Block Count Register (git-fixes).
• mm: thp: handle page cache THP correctly in PageTransCompoundMap (git fixes (block drivers)).
• mtd: cfi: fix deadloop in cficmdset0002.c dowritebuffer (bsc#1051510).
• mtd: spi-nor: cadence-quadspi: add a delay in write sequence (git-fixes).
• mtd: spi-nor: enable 4B opcodes for mx66l51235l (git-fixes).
• mtd: spi-nor: fsl-quadspi: Do not let -EINVAL on the bus (git-fixes).
• mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).
• mwifiex: Fix memory corruption in dump_station (bsc#1051510).
• net: bcmgenet: correct per TX/RX ring statistics (networking-stable-200427).
• net: dsa: b53: Fix ARL register definitions (networking-stable-200427).
• net: dsa: b53: Rework ARL bin logic (networking-stable-200427).
• net: dsa: bcmsf2: Do not register slave MDIO bus with OF (networking-stable-2004_09).
• net: dsa: bcmsf2: Ensure correct sub-node is parsed (networking-stable-2004_09).
• net: dsa: Fix duplicate frames flooded by learning (networking-stable-200328).
• net: dsa: mv88e6xxx: fix lockup on warm boot (networking-stable-200314).
• net: fec: validate the new settings in fecenetsetcoalesce() (networking-stable-2003_14).
• net: fix race condition in _inetlookup_established() (bsc#1151794).
• net: fq: add missing attribute validation for orphan mask (networking-stable-200314).
• net, iptunnel: fix interface lookup with no key (networking-stable-2004_02).
• net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin (networking-stable-200417).
• net: ipv6: do not consider routes via gateways for anycast address check (networking-stable-200417).
• netlink: Use netlink header as base to calculate bad attribute offset (networking-stable-200314).
• net: memcg: fix lockdep splat in inetcskaccept() (networking-stable-200314).
• net: memcg: late association of sock to memcg (networking-stable-200314).
• net/mlx4en: avoid indirect call in TX completion (networking-stable-2004_27).
• net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).
• net/mlx5: Add RoCE RX ICRC encapsulated counter (bsc#1171118).
• net/mlx5e: Fix ethtool self test: link speed (bsc#1171118).
• net/mlx5e: Move port speed code from en_ethtool.c to en/port.c (bsc#1171118).
• net/mlx5: Expose link speed directly (bsc#1171118).
• net/mlx5: Expose port speed when possible (bsc#1171118).
• net: mvneta: Fix the case where the last poll did not process all rx (networking-stable-200328).
• net: netrom: Fix potential nrneigh refcnt leak in nraddnode (networking-stable-2004_27).
• net/packet: tpacketrcv: do not increment ring index on drop (networking-stable-2003_14).
• net: qmiwwan: add support for ASKEY WWHC050 (networking-stable-2003_28).
• net: revert default NAPI poll timeout to 2 jiffies (networking-stable-200417).
• netsched: clsroute: remove the right filter from hashtable (networking-stable-200328).
• net/x25: Fix x25neigh refcnt leak when receiving frame (networking-stable-2004_27).
• nfc: add missing attribute validation for SE API (networking-stable-200314).
• nfc: add missing attribute validation for vendor subcommand (networking-stable-200314).
• nfc: st21nfca: add missed kfree_skb() in an error path (bsc#1051510).
• nfsd4: fix up replaymatchescache() (git-fixes).
• nfsd: Ensure CLONE persists data and metadata changes to the target file (git-fixes).
• nfsd: fix delay timer on 32-bit architectures (git-fixes).
• nfsd: fix jiffies/time_t mixup in LRU list (git-fixes).
• NFS: Directory page cache pages need to be locked when read (git-fixes).
• nfsd: memory corruption in nfsd4_lock() (git-fixes).
• NFS: Do not call genericerrorremove_page() while holding locks (bsc#1170457).
• NFS: Fix memory leaks and corruption in readdir (git-fixes).
• NFS: Fix O_DIRECT accounting of number of bytes read/written (git-fixes).
• nfs: Fix potential posixacl refcnt leak in nfs3set_acl (git-fixes).
• NFS: fix racey wait in nfssetopenstateidlocked (bsc#1170592).
• NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O (git-fixes).
• NFS/pnfs: Fix pnfsgenericpreparetoresend_writes() (git-fixes).
• NFS: Revalidate the file size on a fatal write error (git-fixes).
• NFSv4.0: nfs4dofsinfo() should not do implicit lease renewals (git-fixes).
• NFSv4: Do not allow a cached open with a revoked delegation (git-fixes).
• NFSv4: Fix leak of clp->cl_acceptor string (git-fixes).
• NFSv4/pnfs: Return valid stateids in nfslayoutfindinodeby_stateid() (git-fixes).
• NFSv4: try lease recovery on NFS4ERR_EXPIRED (git-fixes).
• NFSv4.x: Drop the slot if nfs4delegreturnprepare waits for layoutreturn (git-fixes).
• nl802154: add missing attribute validation for devtype (networking-stable-2003_14).
• nl802154: add missing attribute validation (networking-stable-200314).
• nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391).
• objtool: Fix stack offset tracking for indirect CFAs (bsc#1169514).
• objtool: Fix switch table detection in .text.unlikely (bsc#1169514).
• objtool: Make BP scratch register warning more robust (bsc#1169514).
• padata: Remove broken queue flushing (git-fixes).
• Partially revert 'kfifo: fix kfifoalloc() and kfifoinit()' (git fixes (block drivers)).
• pinctrl: baytrail: Enable pin configuration setting for GPIO chip (git-fixes).
• pinctrl: cherryview: Add missing spinlock usage in chvgpioirq_handler (git-fixes).
• platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (bsc#1051510).
• pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (git-fixes).
• powerpc: Add attributes for setjmp/longjmp (bsc#1065729).
• powerpc/pci/of: Parse unassigned resources (bsc#1065729).
• powerpc/setup_64: Set cache-line-size based on cache-block-size (bsc#1065729).
• powerpc/sstep: Fix DS operand in ld encoding to appropriate value (bsc#1065729).
• r8152: check disconnect status after long sleep (networking-stable-200314).
• raid6/ppc: Fix build for clang (git fixes (block drivers)).
• rcu: locking and unlocking need to always be at least barriers (git fixes (block drivers)).
• RDMA/ipoib: Fix use of sizeof() (bsc#1168503).
• RDMA/netdev: Fix netlink support in IPoIB (bsc#1168503).
• RDMA/netdev: Hoist allocnetdevmqs out of the driver (bsc#1168503).
• RDMA/netdev: Use priv_destructor for netdev cleanup (bsc#1168503).
• Remove 2 git-fixes that cause build issues. (bsc#1171691)
• Revert 'ALSA: hda/realtek: Fix pop noise on ALC225' (git-fixes).
• Revert 'drm/panel: simple: Add support for Sharp LQ150X1LG11 panels' (bsc#1114279)
• Revert 'ipc,sem: remove uneeded semundolist lock usage in exit_sem()' (bsc#1172221).
• rtlwifi: Fix a double free in rtlusbtxurb_setup() (bsc#1051510).
• s390/ftrace: fix potential crashes when switching tracers (git-fixes).
• s390/ism: fix error return code in ism_probe() (git-fixes).
• s390/pci: Fix possible deadlock in recover_store() (bsc#1165183 LTC#184103).
• s390/pci: Recover handle in clpsetpci_fn() (bsc#1165183 LTC#184103).
• scripts/decodecode: fix trapping instruction formatting (bsc#1065729).
• scripts/dtc: Remove redundant YYLOC global declaration (bsc#1160388).
• scsi: bnx2i: fix potential use after free (bsc#1171600).
• scsi: core: Handle drivers which set sg_tablesize to zero (bsc#1171601) This commit also required: > scsi: core: avoid preallocating big SGL for data
• scsi: core: save/restore command resid for error handling (bsc#1171602).
• scsi: core: scsitrace: Use getunaligned_be*() (bsc#1171604).
• scsi: core: try to get module before removing device (bsc#1171605).
• scsi: csiostor: Adjust indentation in csiodevicereset (bsc#1171606).
• scsi: csiostor: Do not enable IRQs too early (bsc#1171607).
• scsi: esas2r: unlock on error in esas2rnvramread_direct() (bsc#1171608).
• scsi: fnic: fix invalid stack access (bsc#1171609).
• scsi: fnic: fix msix interrupt allocation (bsc#1171610).
• scsi: ibmvscsi: Fix WARN_ON during event pool release (bsc#1170791 ltc#185128).
• scsi: iscsi: Avoid potential deadlock in iscsiifrx func (bsc#1171611).
• scsi: iscsi: Fix a potential deadlock in the timeout handler (bsc#1171612).
• scsi: iscsi: qla4xxx: fix double free in probe (bsc#1171613).
• scsi: lpfc: fix: Coverity: lpfccmplels_rsp(): Null pointer dereferences (bsc#1171614).
• scsi: lpfc: Fix crash in target side cable pulls hitting WAITFORUNREG (bsc#1171615).
• scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (bsc#1171616).
• scsi: qla2xxx: add ring buffer for tracing debug logs (bsc#1157169).
• scsi: qla2xxx: check UNLOADING before posting async work (bsc#1157169).
• scsi: qla2xxx: Delete all sessions before unregister local nvme port (bsc#1157169).
• scsi: qla2xxx: Do not log message when reading port speed via sysfs (bsc#1157169).
• scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (bsc#1157169).
• scsi: qla2xxx: Fix regression warnings (bsc#1157169).
• scsi: qla2xxx: Remove non functional code (bsc#1157169).
• scsi: qla2xxx: set UNLOADING before waiting for session deletion (bsc#1157169).
• scsi: qla4xxx: Adjust indentation in qla4xxxmemfree (bsc#1171617).
• scsi: qla4xxx: fix double free bug (bsc#1171618).
• scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI (bsc#1171619).
• scsi: sg: add sgremoverequest in sgcommonwrite (bsc#1171620).
• scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) (bsc#1171621).
• scsi: ufs: change msleep to usleep_range (bsc#1171622).
• scsi: ufs: Clean up ufshcdscaleclks() and clock scaling error out path (bsc#1171623).
• scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic (bsc#1171624).
• scsi: ufs: Fix ufshcdprobehba() reture value in case ufshcdscsiadd_wlus() fails (bsc#1171625).
• scsi: ufs: Recheck bkops level if bkops is disabled (bsc#1171626).
• sctp: fix possibly using a bad saddr with a given dst (networking-stable-200402).
• sctp: fix refcount bug in sctpwfree (networking-stable-2004_02).
• seq_file: fix problem when seeking mid-record (bsc#1170125).
• serial: uartps: Move the spinlock after the read of the tx empty (git-fixes).
• sfc: detach from cbpage in efxcopychannel() (networking-stable-2003_14).
• signal/pidnamespace: Fix rebootpidns to use sendsig not force_sig (bsc#1172185).
• slcan: not call freenetdev before rtnlunlock in slcanopen (networking-stable-2003_28).
• slip: make slhccompress() more robust against malicious packets (networking-stable-2003_14).
• smb3: Additional compression structures (bsc#1144333).
• smb3: Add new compression flags (bsc#1144333).
• smb3: change noisy error message to FYI (bsc#1144333).
• smb3: enable swap on SMB3 mounts (bsc#1144333).
• smb3: Minor cleanup of protocol definitions (bsc#1144333).
• smb3: remove overly noisy debug line in signing errors (bsc#1144333).
• smb3: smbdirect support can be configured by default (bsc#1144333).
• smb3: use SMB2SIGNATURESIZE define (bsc#1144333).
• spi: bcm2835: Fix 3-wire mode if DMA is enabled (git-fixes).
• spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).
• spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).
• spi: dw: Add SPI Rx-done wait method to DMA-based transfer (bsc#1051510).
• spi: dw: Add SPI Tx-done wait method to DMA-based transfer (bsc#1051510).
• spi: dw: Zero DMA Tx and Rx configurations on stack (bsc#1051510).
• spi: fsl: do not map irq during probe (git-fixes).
• spi: fsl: use platformgetirq() instead of ofirqto_resource() (git-fixes).
• spi: pxa2xx: Add CS control clock quirk (bsc#1051510).
• spi: qup: call spiquppmresumeruntime before suspending (bsc#1051510).
• spi: spi-fsl-dspi: Replace interruptible wait queue with a simple completion (git-fixes).
• spi: spi-s3c64xx: Fix system resume support (git-fixes).
• spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).
• staging: comedi: dt2815: fix writing hi byte of analog output (bsc#1051510).
• staging: comedi: Fix comedidevice refcnt leak in comediopen (bsc#1051510).
• staging: iio: ad2s1210: Fix SPI reading (bsc#1051510).
• staging: vt6656: Do not set RCRMULTICAST or RCRBROADCAST by default (git-fixes).
• staging: vt6656: Fix drivers TBTT timing counter (git-fixes).
• staging: vt6656: Fix pairwise key entry save (git-fixes).
• sunrpc: expiry_time should be seconds not timeval (git-fixes).
• SUNRPC: Fix a potential buffer overflow in 'svcprintxprts()' (git-fixes).
• supported.conf: Add br_netfilter to base (bsc#1169020).
• svcrdma: Fix leak of transport addresses (git-fixes).
• taskstats: fix data-race (bsc#1172188).
• tcp: cache line align MAXTCPHEADER (networking-stable-200427).
• tcp: repair: fix TCPQUEUESEQ implementation (networking-stable-200328).
• team: add missing attribute validation for array index (networking-stable-200314).
• team: add missing attribute validation for port ifindex (networking-stable-200314).
• team: fix hang in teammodeget() (networking-stable-200427).
• tools lib traceevent: Remove unneeded qsort and uses memmove instead (git-fixes).
• tpm: ibmvtpm: retry on HCLOSED in tpmibmvtpm_send() (bsc#1065729).
• tpm/tpm_tis: Free IRQ if probing fails (bsc#1082555).
• tpm/tpm_tis: Free IRQ if probing fails (git-fixes).
• tracing: Add a vmallocsyncmappings() for safe measure (git-fixes).
• tracing: Disable trace_printk() on post poned tests (git-fixes).
• tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation (git-fixes).
• tty: rocket, avoid OOB access (git-fixes).
• UAS: fix deadlock in error handling and PM flushing work (git-fixes).
• UAS: no use logging any details in case of ENODEV (git-fixes).
• USB: Add USBQUIRKDELAYCTRLMSG and USBQUIRKDELAY_INIT for Corsair K70 RGB RAPIDFIRE (git-fixes).
• USB: cdc-acm: restore capability check order (git-fixes).
• USB: core: Fix misleading driver bug report (bsc#1051510).
• USB: dwc3: do not set gadget->is_otg flag (git-fixes).
• USB: dwc3: gadget: Do link recovery for SS and SSP (git-fixes).
• USB: early: Handle AMD's spec-compliant identifiers, too (git-fixes).
• USB: ffs: Clear OS Extended descriptor counts to zero in ffsdata_reset() (git-fixes).
• USB: gadget: audio: Fix a missing error return value in audio_bind() (git-fixes).
• USB: gadget: composite: Inform controller driver of self-powered (git-fixes).
• USB: gadget: legacy: fix error return code in cdc_bind() (git-fixes).
• USB: gadget: legacy: fix error return code in gncm_bind() (git-fixes).
• USB: gadget: legacy: fix redundant initialization warnings (bsc#1051510).
• USB: gadget: net2272: Fix a memory leak in an error handling path in 'net2272platprobe()' (git-fixes).
• USB: gadget: udc: atmel: Fix vbus disconnect handling (git-fixes).
• USB: gadget: udc: atmel: Make some symbols static (git-fixes).
• USB: gadget: udc: bdc: Remove unnecessary NULL checks in bdcreqcomplete (git-fixes).
• USB: host: xhci-plat: keep runtime active when removing host (git-fixes).
• USB: hub: Fix handling of connect changes during sleep (git-fixes).
• usbnet: silence an unnecessary warning (bsc#1170770).
• USB: serial: garmin_gps: add sanity checking for data length (git-fixes).
• USB: serial: option: add BroadMobi BM806U (git-fixes).
• USB: serial: option: add support for ASKEY WWHC050 (git-fixes).
• USB: serial: option: add Wistron Neweb D19Q1 (git-fixes).
• USB: serial: qcserial: Add DW5816e support (git-fixes).
• USB: sisusbvga: Change port variable from signed to unsigned (git-fixes).
• usb-storage: Add unusual_devs entry for JMicron JMS566 (git-fixes).
• USB: uas: add quirk for LaCie 2Big Quadra (git-fixes).
• USB: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (git-fixes).
• video: fbdev: sis: Remove unnecessary parentheses and commented code (bsc#1114279)
• video: fbdev: w100fb: Fix a potential double free (bsc#1051510).
• vrf: Check skb for XFRMTRANSFORMED flag (networking-stable-2004_27).
• vt: ioctl, switch VTISINUSE and VTBUSY to inlines (git-fixes).
• vt: selection, introduce vcissel (git-fixes).
• vt: vtioctl: fix race in VTRESIZEX (git-fixes).
• vt: vtioctl: fix use-after-free in vtin_use() (git-fixes).
• vt: vtioctl: fix VTDISALLOCATE freeing in-use virtual console (git-fixes).
• vxlan: check return value of grocellsinit() (networking-stable-200328).
• watchdog: reset lasthwkeepalive time at start (git-fixes).
• wcn36xx: Fix error handling path in 'wcn36xx_probe()' (bsc#1051510).
• wil6210: remove reset file from debugfs (git-fixes).
• wimax/i2400m: Fix potential urb refcnt leak (bsc#1051510).
• workqueue: do not use wqselectunbound_cpu() for bound works (bsc#1172130).
• x86/entry/64: Fix unwind hints in kernel exit path (bsc#1058115).
• x86/entry/64: Fix unwind hints in register clearing code (bsc#1058115).
• x86/entry/64: Fix unwind hints in rewindstackdo_exit() (bsc#1058115).
• x86/entry/64: Fix unwind hints in _switchto_asm() (bsc#1058115).
• x86/Hyper-V: Allow guests to enable InvariantTSC (bsc#1170620).
• x86/Hyper-V: Free hvpanicpage when fail to register kmsg dump (bsc#1170618).
• x86/Hyper-V: Report crash data in die() when paniconoops is set (bsc#1170618).
• x86/Hyper-V: Report crash register data or kmsg before running crash kernel (bsc#1170618).
• x86/Hyper-V: Report crash register data when sysctlrecordpanic_msg is not set (bsc#1170618).
• x86/Hyper-V: report value of misc_features (git-fixes).
• x86/Hyper-V: Trigger crash enlightenment only once during system crash (bsc#1170618).
• x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170618).
• x86/kprobes: Avoid kretprobe recursion bug (bsc#1114279).
• x86/resctrl: Fix invalid attempt at removing the default resource group (git-fixes).
• x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1114279).
• x86/unwind/orc: Do not skip the first frame for inactive tasks (bsc#1058115).
• x86/unwind/orc: Fix error handling in _unwindstart() (bsc#1058115).
• x86/unwind/orc: Fix error path for bad ORC entry type (bsc#1058115).
• x86/unwind/orc: Fix unwindgetreturnaddressptr() for inactive tasks (bsc#1058115).
• x86/unwind/orc: Prevent unwinding before ORC initialization (bsc#1058115).
• x86/unwind: Prevent false warnings for non-current tasks (bsc#1058115).
• xen/pci: reserve MCFG areas earlier (bsc#1170145).
• xfrm: Always set XFRMTRANSFORMED in xfrm{4,6}outputfinish (networking-stable-2004_27).
• xfs: Correctly invert xfs_buftarg LRU isolation logic (git-fixes).
• xfs: do not ever return a stale pointer from _xfsdir3freeread (git-fixes).
• xprtrdma: Fix completion wait during device removal (git-fixes).