SUSE-SU-2021:2208-1

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory (bsc#1186484).
• CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values. (bsc#1186111)
• CVE-2020-26139: Fixed a denial-of-service when an Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. (bnc#1186062)
• CVE-2021-23134: A Use After Free vulnerability in nfc sockets allowed local attackers to elevate their privileges. (bnc#1186060)
• CVE-2021-3491: Fixed a potential heap overflow in memrw(). This vulnerability is related to the PROVIDEBUFFERS operation, which allowed the MAXRWCOUNT limit to be bypassed (bsc#1185642).
• CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
• CVE-2020-24586: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances this can be abused to inject arbitrary network packets and/or exfiltrate user data (bnc#1185859).
• CVE-2020-24587: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed (bnc#1185859 bnc#1185862).
• CVE-2020-26147: The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments, even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used (bnc#1185859).
• CVE-2020-24588: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets. (bnc#1185861)
• CVE-2020-26145: An issue was discovered with Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. (bnc#1185860)
• CVE-2020-26141: An issue was discovered in the ALFA driver for AWUS036H, where the Message Integrity Check (authenticity) of fragmented TKIP frames was not verified. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol. (bnc#1185987)

The following non-security bugs were fixed:

• ACPI / hotplug / PCI: Fix reference count leak in enable_slot() (git-fixes).
• ACPI: GTDT: Do not corrupt interrupt mappings on watchdow probe failure (git-fixes).
• ACPI: custom_method: fix a possible memory leak (git-fixes).
• ACPI: custom_method: fix potential use-after-free issue (git-fixes).
• ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro (git-fixes).
• ALSA: bebob: enable to deliver MIDI messages for multiple ports (git-fixes).
• ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26 (git-fixes).
• ALSA: dice: fix stream format for TC Electronic Konnekt Live at high sampling transfer frequency (git-fixes).
• ALSA: firewire-lib: fix calculation for size of IR context payload (git-fixes).
• ALSA: firewire-lib: fix check for the size of isochronous packet payload (git-fixes).
• ALSA: hda/conexant: Re-order CX5066 quirk table entries (git-fixes).
• ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable (git-fixes).
• ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293 (git-fixes).
• ALSA: hda/realtek: Headphone volume is controlled by Front mixer (git-fixes).
• ALSA: hda/realtek: reset eapd coeff to default value for alc287 (git-fixes).
• ALSA: hda: fixup headset for ASUS GU502 laptop (git-fixes).
• ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP (git-fixes).
• ALSA: hdsp: do not disable if not enabled (git-fixes).
• ALSA: hdspm: do not disable if not enabled (git-fixes).
• ALSA: intel8x0: Do not update period unless prepared (git-fixes).
• ALSA: line6: Fix racy initialization of LINE6 MIDI (git-fixes).
• ALSA: rme9652: do not disable if not enabled (git-fixes).
• ALSA: usb-audio: Validate MS endpoint descriptors (git-fixes).
• ALSA: usb-audio: fix control-request direction (git-fixes).
• ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci (git-fixes).
• ALSA: usb-audio: scarlett2: Improve driver startup messages (git-fixes).
• ALSA: usb-audio: scarlett2: sndscarlettgen2controlscreate() can be static (git-fixes).
• ARM64: vdso32: Install vdso32 from vdso_install (git-fixes).
• ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet (git-fixes).
• ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus T100TAF (git-fixes).
• ASoC: cs35l33: fix an error code in probe() (git-fixes).
• ASoC: cs42l42: Regmap must usesingleread/write (git-fixes).
• ASoC: rsnd: call rsndssimasterclkstart() from rsndssiinit() (git-fixes).
• ASoC: rsnd: core: Check convert rate in rsndhwparams (git-fixes).
• ASoC: rt286: Generalize support for ALC3263 codec (git-fixes).
• ASoC: rt286: Make RT286SETGPIO_* readable and writable (git-fixes).
• Bluetooth: L2CAP: Fix handling LE modes by L2CAP_OPTIONS (git-fixes).
• Bluetooth: SMP: Fail if remote and local public keys are identical (git-fixes).
• Bluetooth: Set CONFNOTCOMPLETE as l2cap_chan default (git-fixes).
• Bluetooth: check for zapped sk before connecting (git-fixes).
• Bluetooth: initialize skbqueuehead at l2capchancreate() (git-fixes).
• Drivers: hv: vmbus: Fix Suspend-to-Idle for Generation-2 VM (git-fixes).
• Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1185725).
• Drivers: hv: vmbus: Initialize unload_event statically (bsc#1185725).
• Drivers: hv: vmbus: Use after free in _vmbusopen() (git-fixes).
• Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices (git-fixes).
• Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state (git-fixes).
• KVM: s390: fix guarded storage control register handling (bsc#1133021).
• Move upstreamed media fixes into sorted section
• NFC: nci: fix memory leak in nciallocatedevice (git-fixes).
• PCI/RCEC: Fix RCiEP device to RCEC association (git-fixes).
• PCI: Allow VPD access for QLogic ISP2722 (git-fixes).
• PCI: PM: Do not read power state in pcienabledevice_flags() (git-fixes).
• PCI: Release OF node in pciscandevice()'s error path (git-fixes).
• PCI: endpoint: Fix missing destroy_workqueue() (git-fixes).
• PCI: iproc: Fix return value of iprocmsiirqdomainalloc() (git-fixes).
• PCI: thunder: Fix compile testing (git-fixes).
• PM / devfreq: Use more accurate returned newfreq as resumefreq (git-fixes).
• RDMA/addr: create addrwq with WQMEM_RECLAIM flag (bsc#1183346).
• RDMA/core: create ibcm with WQMEM_RECLAIM flag (bsc#1183346).
• RDMA/hns: Delete redundant abnormal interrupt status (git-fixes).
• RDMA/hns: Delete redundant condition judgment related to eq (git-fixes).
• RDMA/qedr: Fix error return code in qedriwconnect() (jsc#SLE-8215).
• RDMA/srpt: Fix error return code in srptcmreq_recv() (git-fixes).
• SUNRPC in case of backlog, hand free slots directly to waiting task (bsc#1185428).
• SUNRPC: More fixes for backlog congestion (bsc#1185428).
• USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet (git-fixes).
• USB: Add reset-resume quirk for WD19's Realtek Hub (git-fixes).
• USB: serial: pl2303: add support for PL2303HXN (bsc#1186320).
• USB: serial: pl2303: fix line-speed handling on newer chips (bsc#1186320).
• USB: serial: tiusb3410_5052: fix TIOCSSERIAL permission check (git-fixes).
• USB: trancevibrator: fix control-request direction (git-fixes).
• amdgpu: avoid incorrect %hu format string (git-fixes).
• arm64/mm: Fix pfnvalid() for ZONEDEVICE based memory (git-fixes).
• arm64: Add missing ISB after invalidating TLB in _primaryswitch (git-fixes).
• arm64: avoid -Woverride-init warning (git-fixes).
• arm64: kasan: fix pagealloc tagging with DEBUGVIRTUAL (git-fixes).
• arm64: kdump: update ppos when reading elfcorehdr (git-fixes).
• arm64: kexecfile: fix memory leakage in createdtb() when fdtopeninto() fails (git-fixes).
• arm64: link with -z norelro for LLD or aarch64-elf (git-fixes).
• arm64: link with -z norelro regardless of CONFIG_RELOCATABLE (git-fixes).
• arm64: ptrace: Fix seccomp of traced syscall -1 (NO_SYSCALL) (git-fixes).
• arm64: ptrace: Use NOSYSCALL instead of -1 in syscalltrace_enter() (git-fixes).
• arm64: vdso32: make vdso32 install conditional (git-fixes).
• arm: mm: use _pfntosection() to get memsection (git-fixes).
• ata: ahci: Disable SXS for Hisilicon Kunpeng920 (git-fixes).
• blk-iocost: iocpdfree() shouldn't assume irq disabled (git-fixes).
• blk-mq: Swap two calls in blkmqexit_queue() (git-fixes).
• block/genhd: use atomict for diskevent->block (bsc#1185497).
• block: Fix three kernel-doc warnings (git-fixes).
• block: fix getmaxio_size() (git-fixes).
• bnxt_en: Fix RX consumer index logic in the error path (git-fixes).
• bnxten: fix ternary sign extension bug in bnxtshow_temp() (git-fixes).
• bpf: Fix leakage of uninitialized bpf stack under speculation (bsc#1155518).
• bpf: Fix masking negation logic upon negative dst register (bsc#1155518).
• btrfs: fix race between transaction aborts and fsyncs leading to use-after-free (bsc#1186441).
• btrfs: fix race when picking most recent mod log operation for an old root (bsc#1186439).
• cdc-wdm: untangle a circular dependency between callback and softint (git-fixes).
• cdrom: gdrom: deallocate struct gdromunit fields in removegdrom (git-fixes).
• cdrom: gdrom: initialize global variable at init time (git-fixes).
• ceph: do not clobber isnapcaps on non-I_NEW inode (bsc#1186501).
• ceph: fix inode leak on getattr error in _fhto_dentry (bsc#1186501).
• ceph: fix up error handling with snapdirs (bsc#1186501).
• ceph: only check pool permissions for regular files (bsc#1186501).
• cfg80211: scan: drop entry from hidden_list on overflow (git-fixes).
• clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return (git-fixes).
• cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (bsc#1185758).
• crypto: api - check for ERR pointers in cryptodestroytfm() (git-fixes).
• crypto: mips/poly1305 - enable for all MIPS processors (git-fixes).
• crypto: qat - ADFSTATUSPFRUNNING should be set after adfdev_init (git-fixes).
• crypto: qat - Fix a double free in adfcreatering (git-fixes).
• crypto: qat - do not release uninitialized resources (git-fixes).
• crypto: qat - fix error path in adfisrresource_alloc() (git-fixes).
• crypto: qat - fix unmap invalid dma address (git-fixes).
• crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c (git-fixes).
• crypto: stm32/hash - Fix PM reference leak on stm32-hash.c (git-fixes).
• cxgb4: Fix unintentional sign extension issues (git-fixes).
• dm: avoid filesystem lookup in dmgetdev_t() (git-fixes).
• dmaengine: dw-edma: Fix crash on loading/unloading driver (git-fixes).
• docs: kernel-parameters: Add gpiomockupnamed_lines (git-fixes).
• docs: kernel-parameters: Move gpio-mockup for alphabetic order (git-fixes).
• drivers: hv: Fix whitespace errors (bsc#1185725).
• drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool' (git-fixes).
• drm/amd/display: Fix two cursor duplication when using overlay (git-fixes).
• drm/amd/display: Force vsync flip when reconfiguring MPCC (git-fixes).
• drm/amd/display: Reject non-zero srcy and srcx for video planes (git-fixes).
• drm/amd/display: fix dml prefetch validation (git-fixes).
• drm/amd/display: fixed divide by zero kernel crash during dsc enablement (git-fixes).
• drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f (git-fixes).
• drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang (git-fixes).
• drm/amdgpu: fix NULL pointer dereference (git-fixes).
• drm/amdgpu: mask the xgmi number of hops reported from psp to kfd (git-fixes).
• drm/amdkfd: Fix cat debugfs hang_hws file causes system crash bug (git-fixes).
• drm/i915: Avoid div-by-zero on gen2 (git-fixes).
• drm/meson: fix shutdown crash when component not probed (git-fixes).
• drm/msm/mdp5: Configure PPSYNCHEIGHT to double the vtotal (git-fixes).
• drm/msm/mdp5: Do not multiply vclk line count by 100 (git-fixes).
• drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected (git-fixes).
• drm/radeon: Avoid power table parsing memory leaks (git-fixes).
• drm/radeon: Fix off-by-one power_state index heap overwrite (git-fixes).
• drm/vkms: fix misuse of WARN_ON (git-fixes).
• drm: Added orientation quirk for OneGX1 Pro (git-fixes).
• ethernet:enic: Fix a use after free bug in enichardstart_xmit (git-fixes).
• extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged (git-fixes).
• extcon: arizona: Fix various races on driver unbind (git-fixes).
• fbdev: zero-fill colormap in fbcmap.c (git-fixes).
• firmware: arm_scpi: Prevent the ternary sign expansion bug (git-fixes).
• fs/epoll: restore waking from epdonescan() (bsc#1183868).
• ftrace: Handle commands when closing setftracefilter file (git-fixes).
• futex: Change utime parameter to be 'const ... *' (git-fixes).
• futex: Do not apply time namespace adjustment on FUTEXLOCKPI (bsc#1164648).
• futex: Get rid of the val2 conditional dance (git-fixes).
• futex: Make syscall entry points less convoluted (git-fixes).
• genirq/irqdomain: Do not try to free an interrupt that has no (git-fixes)
• genirq: Disable interrupts for force threaded handlers (git-fixes)
• genirq: Reduce irqdebug cacheline bouncing (bsc#1185703 ltc#192641).
• gpio: xilinx: Correct kernel doc for xgpio_probe() (git-fixes).
• gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055 (git-fixes).
• hrtimer: Update softirqexpiresnext correctly after (git-fixes)
• hwmon: (occ) Fix poll rate limiting (git-fixes).
• i2c: Add I2CAQNOREPSTART adapter quirk (git-fixes).
• i2c: bail out early when RDWR parameters are wrong (git-fixes).
• i2c: i801: Do not generate an interrupt on bus reset (git-fixes).
• i2c: s3c2410: fix possible NULL pointer deref on read message after write (git-fixes).
• i2c: sh_mobile: Use new clock calculation formulas for RZ/G2E (git-fixes).
• i40e: Fix PHY type identifiers for 2.5G and 5G adapters (git-fixes).
• i40e: Fix use-after-free in i40eclientsubtask() (git-fixes).
• i40e: fix broken XDP support (git-fixes).
• i40e: fix the restart auto-negotiation after FEC modified (git-fixes).
• ibmvfc: Avoid move login if fast fail is enabled (bsc#1185938 ltc#192043).
• ibmvfc: Handle move login failure (bsc#1185938 ltc#192043).
• ibmvfc: Reinit target retries (bsc#1185938 ltc#192043).
• ibmvnic: remove default label from to_string switch (bsc#1152457 ltc#174432 git-fixes).
• ics932s401: fix broken handling of errors when word reading fails (git-fixes).
• iio: adc: ad7124: Fix missbalanced regulator enable / disable on error (git-fixes).
• iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers (git-fixes).
• iio: adc: ad7768-1: Fix too small buffer passed to iiopushtobufferswith_timestamp() (git-fixes).
• iio: adc: ad7793: Add missing error code in ad7793_setup() (git-fixes).
• iio: gyro: fxas21002c: balance runtime power in error path (git-fixes).
• iio: gyro: mpu3050: Fix reported temperature value (git-fixes).
• iio: proximity: pulsedlight: Fix rumtime PM imbalance on error (git-fixes).
• iio: tsl2583: Fix division by a zero lux_val (git-fixes).
• intel_th: Consistency and off-by-one fix (git-fixes).
• iommu/amd: Add support for map/unmap_resource (jsc#ECO-3482).
• ipc/mqueue, msg, sem: Avoid relying on a stack reference past its expiry (bsc#1185988).
• ipmi/watchdog: Stop watchdog timer when the current action is 'none' (bsc#1184855).
• kernel-docs.spec.in: Build using an utf-8 locale. Sphinx cannot handle UTF-8 input in non-UTF-8 locale.
• leds: lp5523: check return value of lp5xx_read and jump to cleanup code (git-fixes).
• locking/seqlock: Tweak DEFINE_SEQLOCK() kernel doc (bsc#1176564 bsc#1162702).
• lpfc: Decouple porttemplate and vporttemplate (bsc#185032).
• mac80211: clear the beacon's CRC after channel switch (git-fixes).
• md-cluster: fix use-after-free issue when removing rdev (bsc#1184082).
• md/raid1: properly indicate failure when ending a failed write request (bsc#1185680).
• md: do not flush workqueue unconditionally in md_open (bsc#1184081).
• md: factor out a mddevfindlocked helper from mddev_find (bsc#1184081).
• md: md_open returns -EBUSY when entering racing area (bsc#1184081).
• md: split mddev_find (bsc#1184081).
• media: adv7604: fix possible use-after-free in adv76xx_remove() (git-fixes).
• media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB (git-fixes).
• media: dvb-usb: fix memory leak in dvbusbadapter_init (git-fixes).
• media: em28xx: fix memory leak (git-fixes).
• media: gspca/sq905.c: fix uninitialized variable (git-fixes).
• media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove() (git-fixes).
• media: i2c: adv7842: fix possible use-after-free in adv7842_remove() (git-fixes).
• media: i2c: tda1997: Fix possible use-after-free in tda1997x_remove() (git-fixes).
• media: imx: capture: Return -EPIPE from _capturelegacytryfmt() (git-fixes).
• media: ite-cir: check for receive overflow (git-fixes).
• media: media/saa7164: fix saa7164encoderregister() memory leak bugs (git-fixes).
• media: platform: sti: Fix runtime PM imbalance in regs_show (git-fixes).
• media: tc358743: fix possible use-after-free in tc358743_remove() (git-fixes).
• mfd: arizona: Fix rumtime PM imbalance on error (git-fixes).
• misc/uss720: fix memory leak in uss720_probe (git-fixes).
• mlxsw: spectrum_mr: Update egress RIF list before route's action (git-fixes).
• mm: memcontrol: fix cpuhotplug statistics flushing (bsc#1185606).
• mmc: block: Update extcsd.cachectrl if it was written (git-fixes).
• mmc: core: Do a power cycle when the CMD11 fails (git-fixes).
• mmc: core: Set read only for SD cards with permanent write protect bit (git-fixes).
• mmc: sdhci-pci-gli: increase 1.8V regulator wait (git-fixes).
• mmc: sdhci-pci: Add PCI IDs for Intel LKF (git-fixes).
• mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based controllers (git-fixes).
• mmc: sdhci: Check for reset prior to DMA address unmap (git-fixes).
• net, xdp: Update pkt_type if generic XDP changes unicast MAC (git-fixes).
• net: enetc: fix link error again (git-fixes).
• net: hns3: Fix for geneve tx checksum bug (git-fixes).
• net: hns3: add check for HNS3NICSTATEINITED in hns3resetnotifyup_enet() (git-fixes).
• net: hns3: clear unnecessary reset request in hclgeresetrebuild (git-fixes).
• net: hns3: disable phy loopback setting in hclgemacstart_phy (git-fixes).
• net: hns3: fix for vxlan gpe tx checksum bug (git-fixes).
• net: hns3: fix incorrect configuration for igueguhw_err (git-fixes).
• net: hns3: initialize the message content in hclgegetlink_mode() (git-fixes).
• net: hns3: use netiftxdisable to stop the transmit queue (git-fixes).
• net: thunderx: Fix unintentional sign extension issue (git-fixes).
• net: usb: fix memory leak in smsc75xx_bind (git-fixes).
• net: xfrm: Localize sequence counter per network namespace (bsc#1185696).
• net: xfrm: Use sequence counter with associated spinlock (bsc#1185696).
• netdevice: Add missing IFFPHONYHEADROOM self-definition (git-fixes).
• netfilter: conntrack: add new sysctl to disable RST check (bsc#1183947 bsc#1185950).
• netfilter: conntrack: avoid misleading 'invalid' in log message (bsc#1183947 bsc#1185950).
• netfilter: conntrack: improve RST handling when tuple is re-used (bsc#1183947 bsc#1185950).
• nvme-core: add cancel tagset helpers (bsc#1183976).
• nvme-fabrics: decode host pathing error for connect (bsc#1179827).
• nvme-fc: check sgl supported by target (bsc#1179827).
• nvme-fc: clear q_live at beginning of association teardown (bsc#1186479).
• nvme-fc: return NVMESCHOSTABORTEDCMD when a command has been aborted (bsc#1184259).
• nvme-fc: set NVMEREQCANCELLED in nvmefcterminate_exchange() (bsc#1184259).
• nvme-fc: short-circuit reconnect retries (bsc#1179827).
• nvme-multipath: fix double initialization of ANA state (bsc#1178612, bsc#1184259).
• nvme-multipath: reset bdev to ns head when failover (bsc#178378 bsc#1182999).
• nvme-pci: Remove tag from process cq (git-fixes).
• nvme-pci: Remove two-pass completions (git-fixes).
• nvme-pci: Simplify nvmepollirqdisable (git-fixes).
• nvme-pci: align io queue count with allocted nvme_queue in (git-fixes).
• nvme-pci: avoid race between nvmereappendingcqes() and nvmepoll() (git-fixes).
• nvme-pci: dma read memory barrier for completions (git-fixes).
• nvme-pci: fix 'slimmer CQ head update' (git-fixes).
• nvme-pci: make sure write/poll_queues less or equal then cpu (git-fixes).
• nvme-pci: remove lastsqtail (git-fixes).
• nvme-pci: remove volatile cqes (git-fixes).
• nvme-pci: slimmer CQ head update (git-fixes).
• nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
• nvme-tcp: Fix possible race of io_work and direct send (git-fixes).
• nvme-tcp: Fix warning with CONFIGDEBUGPREEMPT (git-fixes).
• nvme-tcp: add clean action for failed reconnection (bsc#1183976).
• nvme-tcp: fix kconfig dependency warning when !CRYPTO (git-fixes).
• nvme-tcp: fix misuse of _smpprocessor_id with preemption (git-fixes).
• nvme-tcp: fix possible hang waiting for icresp response (bsc#1179519).
• nvme-tcp: use cancel tagset helper for tear down (bsc#1183976).
• nvme: Fix NULL dereference for pci nvme controllers (bsc#1182378).
• nvme: add 'kato' sysfs attribute (bsc#1179825).
• nvme: add NVMEREQCANCELLED flag in nvmecancelrequest() (bsc#1184259).
• nvme: define constants for identification values (git-fixes).
• nvme: do not intialize hwmon for discovery controllers (bsc#1184259).
• nvme: do not intialize hwmon for discovery controllers (git-fixes).
• nvme: document nvme controller states (git-fixes).
• nvme: explicitly update mpath disk capacity on revalidation (git-fixes).
• nvme: expose reconnectdelay and ctrlloss_tmo via sysfs (bsc#1182378).
• nvme: fix controller instance leak (git-fixes).
• nvme: fix deadlock in disconnect during scanwork and/or anawork (git-fixes).
• nvme: fix possible deadlock when I/O is blocked (git-fixes).
• nvme: remove superfluous else in nvmectrllosstmostore (bsc#1182378).
• nvme: retrigger ANA log update if group descriptor isn't found (git-fixes)
• nvme: sanitize KATO setting (bsc#1179825).
• nvme: simplify error logic in nvmevalidatens() (bsc#1184259).
• nvmet: fix a memory leak (git-fixes).
• nvmet: seset ns->file when open fails (bsc#1183873).
• nvmet: use new analogsize instead the old one (bsc#1184259).
• nxp-i2c: restore includes for kABI (bsc#1185589).
• nxp-nci: add NXP1002 id (bsc#1185589).
• phy: phy-twl4030-usb: Fix possible use-after-free in twl4030usbremove() (git-fixes).
• pinctrl: ingenic: Improve unreachable code generation (git-fixes).
• pinctrl: samsung: use 'int' for register masks in Exynos (git-fixes).
• platform/mellanox: mlxbf-tmfifo: Fix a memory barrier issue (git-fixes).
• platform/x86: intelpmccore: Do not use global pmcdev in quirks (git-fixes).
• platform/x86: thinkpad_acpi: Correct thermal sensor allocation (git-fixes).
• posix-timers: Preserve return value in clock_adjtime32() (git-fixes)
• power: supply: Use IRQF_ONESHOT (git-fixes).
• power: supply: generic-adc-battery: fix possible use-after-free in gab_remove() (git-fixes).
• power: supply: s3cadcbattery: fix possible use-after-free in s3cadcbat_remove() (git-fixes).
• powerpc/64s: Fix crashes when toggling entry flush barrier (bsc#1177666 git-fixes).
• powerpc/64s: Fix crashes when toggling stf barrier (bsc#1087082 git-fixes).
• qtnfmac: Fix possible buffer overflow in qtnfeventhandleexternalauth (git-fixes).
• rtc: pcf2127: handle timestamp interrupts (bsc#1185495).
• s390/dasd: fix hanging DASD driver unbind (bsc#1183932 LTC#192153).
• s390/entry: save the caller of psw_idle (bsc#1185677).
• s390/kdump: fix out-of-memory with PCI (bsc#1182257 LTC#191375).
• sched/eas: Do not update misfit status if the task is pinned (git-fixes)
• sched/fair: Avoid stale CPU util_est value for schedutil in (git-fixes)
• sched/fair: Fix unfairness caused by missing load decay (git-fixes)
• scripts/gitsort/gitsort.py: add bpf git repo
• scsi: core: Run queue in case of I/O resource contention failure (bsc#1186416).
• scsi: fnic: Kill 'excludeid' argument to fniccleanup_io() (bsc#1179851).
• scsi: libfc: Avoid invoking response handler twice if ep is already completed (bsc#1186573).
• scsi: lpfc: Add a option to enable interlocked ABTS before job completion (bsc#1186451).
• scsi: lpfc: Add ndlp kref accounting for resume RPI path (bsc#1186451).
• scsi: lpfc: Fix 'Unexpected timeout' error in direct attach topology (bsc#1186451).
• scsi: lpfc: Fix Node recovery when driver is handling simultaneous PLOGIs (bsc#1186451).
• scsi: lpfc: Fix bad memory access during VPD DUMP mailbox command (bsc#1186451).
• scsi: lpfc: Fix crash when lpfcsli4hba_setup() fails to initialize the SGLs (bsc#1186451).
• scsi: lpfc: Fix node handling for Fabric Controller and Domain Controller (bsc#1186451).
• scsi: lpfc: Fix non-optimized ERSP handling (bsc#1186451).
• scsi: lpfc: Fix unreleased RPIs when NPIV ports are created (bsc#1186451).
• scsi: lpfc: Ignore GID-FT response that may be received after a link flip (bsc#1186451).
• scsi: lpfc: Reregister FPIN types if ELS_RDF is received from fabric controller (bsc#1186451).
• scsi: lpfc: Update lpfc version to 12.8.0.10 (bsc#1186451).
• sctp: delay auto_asconf init until binding the first addr
• seqlock,lockdep: Fix seqcountlatchinit() (bsc#1176564 bsc#1162702).
• serial: core: fix suspicious securitylockeddown() call (git-fixes).
• serial: core: return early on unsupported ioctls (git-fixes).
• serial: sh-sci: Fix off-by-one error in FIFO threshold register setting (git-fixes).
• serial: stm32: fix incorrect characters on console (git-fixes).
• serial: stm32: fix tx_empty condition (git-fixes).
• serial: tegra: Fix a mask operation that is always true (git-fixes).
• smc: disallow TCPULP in smcsetsockopt() (git-fixes).
• spi: ath79: always call chipselect function (git-fixes).
• spi: ath79: remove spi-master setup and cleanup assignment (git-fixes).
• spi: dln2: Fix reference leak to master (git-fixes).
• spi: omap-100k: Fix reference leak to master (git-fixes).
• spi: qup: fix PM reference leak in spiqupremove() (git-fixes).
• spi: spi-fsl-dspi: Fix a resource leak in an error handling path (git-fixes).
• staging: emxxudc: fix loop in _nbu2ssnuke() (git-fixes).
• staging: iio: cdc: ad7746: avoid overwrite of num_channels (git-fixes).
• tcp: fix to update snd_wl1 in bulk receiver fast path
• thermal/drivers/ti-soc-thermal/bandgap Remove unused variable 'val' (git-fixes).
• thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue (git-fixes).
• tracing: Map all PIDs to command lines (git-fixes).
• tty: amiserial: fix TIOCSSERIAL permission check (git-fixes).
• tty: fix memory leak in vc_deallocate (git-fixes).
• tty: moxa: fix TIOCSSERIAL jiffies conversions (git-fixes).
• tty: moxa: fix TIOCSSERIAL permission check (git-fixes).
• uio: uiohvgeneric: use devm_kzalloc() for private data alloc (git-fixes).
• uiohvgeneric: Fix a memory leak in error handling paths (git-fixes).
• uiohvgeneric: Fix another memory leak in error handling paths (git-fixes).
• uiohvgeneric: add missed sysfsremovebin_file (git-fixes).
• usb: core: hub: Fix PM reference leak in usbportresume() (git-fixes).
• usb: core: hub: fix race condition about TRSMRCY of resume (git-fixes).
• usb: dwc2: Fix gadget DMA unmap direction (git-fixes).
• usb: dwc3: gadget: Enable suspend events (git-fixes).
• usb: dwc3: gadget: Return success always for kick transfer in ep queue (git-fixes).
• usb: dwc3: omap: improve extcon initialization (git-fixes).
• usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel Merrifield (git-fixes).
• usb: fotg210-hcd: Fix an error message (git-fixes).
• usb: gadget/function/f_fs string table fix for multiple languages (git-fixes).
• usb: gadget: dummyhcd: fix gpf in gadgetsetup (git-fixes).
• usb: gadget: f_uac1: validate input parameters (git-fixes).
• usb: gadget: f_uac2: validate input parameters (git-fixes).
• usb: gadget: udc: renesasusb3: Fix a race in usb3start_pipen() (git-fixes).
• usb: gadget: uvc: add bInterval checking for HS mode (git-fixes).
• usb: musb: fix PM reference leak in musbirqwork() (git-fixes).
• usb: sl811-hcd: improve misleading indentation (git-fixes).
• usb: webcam: Invalid size of Processing Unit Descriptor (git-fixes).
• usb: xhci: Fix port minor revision (git-fixes).
• usb: xhci: Increase timeout for HC halt (git-fixes).
• vgacon: Record video mode changes with VT_RESIZEX (git-fixes).
• video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
• vrf: fix a comment about loopback device (git-fixes).
• watchdog/softlockup: Remove obsolete check of last reported task (bsc#1185982).
• watchdog/softlockup: report the overall time of softlockups (bsc#1185982).
• watchdog: explicitly update timestamp when reporting softlockup (bsc#1185982).
• watchdog: rename _touchwatchdog() to a better descriptive name (bsc#1185982).
• whitespace cleanup
• wl3501cs: Fix out-of-bounds warnings in wl3501mgmt_join (git-fixes).
• wl3501cs: Fix out-of-bounds warnings in wl3501send_pkt (git-fixes).
• workqueue: Minor follow-ups to the rescuer destruction change (bsc#1185911).
• workqueue: more destroy_workqueue() fixes (bsc#1185911).
• x86/cpu: Initialize MSRTSCAUX if RDTSCP or RDPID is supported (bsc#1152489).
• xhci: Do not use GFP_KERNEL in (potentially) atomic context (git-fixes).
• xhci: check control context is valid before dereferencing it (git-fixes).
• xhci: fix potential array out of bounds with several interrupters (git-fixes).
• xsk: Respect device's headroom and tailroom on generic xmit path (git-fixes).