SUSE-SU-2021:3675-1

The following security bugs were fixed:

• CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
• CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563).
• CVE-2021-3715: Fixed a use-after-free in route4change() in net/sched/clsroute.c (bsc#1190349).
• CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rfconninfo object (bsc#1190067).
• CVE-2021-3772: Fixed sctp vtag check in sctpsfootb (bsc#1190351).
• CVE-2021-3896: Fixed a array-index-out-bounds in detachcapictr in drivers/isdn/capi/kcapi.c (bsc#1191958).
• CVE-2021-33033: Fixed a use-after-free in cipsov4genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109).
• CVE-2021-34866: Fixed eBPF Type Confusion Privilege Escalation Vulnerability (bsc#1191645).
• CVE-2021-37159: hsofreenetdevice in drivers/net/usb/hso.c called without checking for the NETREGREGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
• CVE-2021-41864: Fixed preallocelemsand_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
• CVE-2021-42008: Fixed a slab out-of-bounds write in the decodedata function in drivers/net/hamradio/6pack.c. Input from a process that had the CAPNET_ADMIN capability could have lead to root access (bsc#1191315).
• CVE-2021-42252: Fixed an issue inside aspeedlpcctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479).
• CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avccapmt mishandled bounds checking (bsc#1184673).
• CVE-2021-43056: Fixed possible KVM host crash via malicious KVM guest on Power8 (bnc#1192107).
• CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

The following non-security bugs were fixed:

• acpi/arm64: fix nextplatformtimer() section mismatch error (git-fixes).
• ACPI: bgrt: Fix CFI violation (git-fixes).
• ACPI: fix NULL pointer dereference (git-fixes).
• ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect (git-fixes).
• Add obsoleterebuildssubpackage (boo#1172073 bsc#1191731).
• ALSA: hda: avoid write to STATESTS if controller is in reset (git-fixes).
• ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 (git-fixes).
• ALSA: hda: intel: Allow repeatedly probing on codec configuration errors (bsc#1190801).
• ALSA: hda/realtek: Add quirk for Clevo PC50HS (git-fixes).
• ALSA: hda/realtek: Add quirk for Clevo X170KM-G (git-fixes).
• ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (git-fixes).
• ALSA: hda/realtek - ALC236 headset MIC recording issue (git-fixes).
• ALSA: hda/realtek: Complete partial device name to avoid ambiguity (git-fixes).
• ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop (git-fixes).
• ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 (git-fixes).
• ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14 (git-fixes).
• ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (git-fixes).
• ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops (git-fixes).
• ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
• ALSA: hda: Use position buffer for SKL+ again (git-fixes).
• ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl (git-fixes).
• ALSA: seq: Fix a potential UAF by wrong private_free call order (git-fixes).
• ALSA: ua101: fix division by zero at probe (git-fixes).
• ALSA: uapi: Fix a C++ style comment in asound.h (git-fixes).
• ALSA: usb-audio: Add quirk for VF0770 (git-fixes).
• ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (git-fixes).
• ASoC: atmel: ATMEL drivers do not need HAS_DMA (git-fixes).
• ASoC: cs42l42: Correct some register default values (git-fixes).
• ASoC: cs42l42: Defer probe if requestthreadedirq() returns EPROBE_DEFER (git-fixes).
• ASoC: cs42l42: Do not set defaults for volatile registers (git-fixes).
• ASoC: DAPM: Fix missing kctl change notifications (git-fixes).
• ASoC: dapm: use component prefix when checking widget names (git-fixes).
• ASoC: dt-bindings: cs42l42: Correct description of ts-inv (git-fixes).
• ASoC: fsl_spdif: register platform component before registering cpu dai (git-fixes).
• ASoC: Intel: bytcr_rt5640: Move 'Platform Clock' routes to the maps for the matching in-/output (git-fixes).
• ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (git-fixes).
• ASoC: Intel: Skylake: Fix passing loadable flag for module (git-fixes).
• ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic (git-fixes).
• ASoC: mediatek: mt8195: Remove unsued irqs_lock (git-fixes).
• ASoC: rockchip: Use generic dmaengine code (git-fixes).
• ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types (git-fixes).
• ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types (git-fixes).
• ASoC: SOF: loader: release_firmware() on load failure to avoid batching (git-fixes).
• ASoC: SOF: topology: do not power down primary core during topology removal (git-fixes).
• ASoC: topology: Fix stub for sndsoctplgcomponentremove() (git-fixes).
• ASoC: wm8960: Fix clock configuration on slave mode (git-fixes).
• ata: ahciplatform: fix null-ptr-deref in ahciplatformenableregulators() (git-fixes).
• ata: satadwc460ex: No need to call phyexit() befre phyinit() (git-fixes).
• ata: satamv: Fix the error handling of mvchip_id() (git-fixes).
• ath10k: fix control-message timeout (git-fixes).
• ath10k: fix division by zero in send path (git-fixes).
• ath10k: fix max antenna gain unit (git-fixes).
• ath10k: Fix missing frame timestamp for beacon/probe-resp (git-fixes).
• ath10k: sdio: Add missing BH locking around napi_schdule() (git-fixes).
• ath6kl: fix control-message timeout (git-fixes).
• ath6kl: fix division by zero in send path (git-fixes).
• ath9k: Fix potential interrupt storm on queue reset (git-fixes).
• audit: fix possible null-pointer dereference in auditfilterrules (git-fixes).
• b43: fix a lower bounds test (git-fixes).
• b43legacy: fix a lower bounds test (git-fixes).
• bfq: Remove merged request already in bfqrequestsmerged() (bsc#1191456).
• blk: Fix lock inversion between ioc lock and bfqd lock (bsc#1191456).
• blktrace: Fix uaf in blk_trace access after removing by sysfs (bsc#1191452).
• block: bfq: fix bfqsetnextiopriodata() (bsc#1191451).
• Bluetooth: btmtkuart: fix a memleak in mtkhciwmt_sync (git-fixes).
• Bluetooth: fix init and cleanup of scoconn.timeoutwork (git-fixes).
• bnxt_en: Fix TX timeout when TX ring size is set to the smallest (git-fixes).
• bnxten: make bnxtfreeskbs() safe to call after bnxtfree_mem() (jsc#SLE-16649).
• bpf: Add bpfpatchcall_args prototype to include/linux/bpf.h (git-fixes).
• bpf: Fix a typo of reuseport map in bpf.h (git-fixes).
• bpf: Fix OOB read when printing XDP link fdinfo (git-fixes).
• bpf: Fix up bpfskbadjust_room helper's skb csum setting (git-fixes).
• can: dev: can_restart: fix use after free bug (git-fixes).
• can: peakpci: peakpci_remove(): fix UAF (git-fixes).
• can: peak_usb: fix use after free bugs (git-fixes).
• can: peakusb: pcanusbfddecodestatus(): fix back to ERRORACTIVE state notification (git-fixes).
• can: rcar_can: fix suspend/resume (git-fixes).
• can: tihecc: tiheccprobe(): add missed clkdisable_unprepare() in error path (git-fixes).
• can: xilinxcan: handle failure cases of pmruntimegetsync (git-fixes).
• cb710: avoid NULL pointer subtraction (git-fixes).
• ceph: fix handling of 'meta' errors (bsc#1192041).
• ceph: skip existing superblocks that are blocklisted or shut down when mounting (bsc#1192040).
• cfg80211: correct bridge/4addr mode check (git-fixes).
• cfg80211: fix management registrations locking (git-fixes).
• cfg80211: scan: fix RCU in cfg80211addnontrans_list() (git-fixes).
• Configure mpi3mr as currently unsupported (jsc#SLE-18120)
• cpuidle: pseries: Mark pseriesidleproble() as __init (jsc#SLE-13614 bsc#1176914 ltc#186394 git-fixes).
• driver core: add a minalignmask field to struct devicedmaparameters (bsc#1191851).
• drm/amd/display: Pass PCI deviceid into DC (git-fixes).
• drm/amdgpu: correct initial cphqdquantum for gfx9 (git-fixes).
• drm/amdgpu/display: add quirk handling for stutter mode (git-fixes).
• drm/amdgpu: fix gart.bo pin_count leak (git-fixes).
• drm/amdgpu: fix warning for overflow check (git-fixes).
• drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits (git-fixes).
• drm/edid: In connectorbadedid() cap numofext by num_blocks read (git-fixes).
• drm/i915: Fix syncmap memory leak (bsc#1152489) Backporting notes: * context changes in inteltimelinefini()
• drm/msm: Avoid potential overflow in timeouttojiffies() (git-fixes).
• drm/msm/dsi: Fix an error code in msmdsimodeset_init() (git-fixes).
• drm/msm/dsi: fix off by one in dsibusclk_enable error handling (git-fixes).
• drm/msm: Fix null pointer dereference on pointer edp (git-fixes).
• drm/msm: Fix potential NULL dereference in DPU SSPP (git-fixes).
• drm/msm: potential error pointer dereference in init() (git-fixes).
• drm/msm: uninitialized variable in msmgemimport() (git-fixes).
• drm/nouveau: avoid a use-after-free when BO init fails (bsc#1152472)
• drm/nouveau/debugfs: fix file release memory leak (git-fixes).
• drm/nouveau/kms/nv50-: fix file release memory leak (git-fixes).
• drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (git-fixes).
• drm/panel: olimex-lcd-olinuxino: select CRC32 (git-fixes).
• drm/panfrost: Make sure MMU context lifetime is not bound to (bsc#1152472)
• drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (git-fixes).
• drm/sun4i: Fix macros in sun8i_csc.h (git-fixes).
• drm/ttm: stop calling ttswapin in vmaccess (git-fixes).
• drm/v3d: fix wait for TMU write combiner flush (git-fixes).
• e1000e: Drop patch to avoid regressions until real fix is available (bsc#1191663).
• e1000e: Fix packet loss on Tiger Lake and later (git-fixes).
• e100: fix buffer overrun in e100getregs (git-fixes).
• e100: fix length calculation in e100getregs_len (git-fixes).
• e100: handle eeprom as little endian (git-fixes).
• EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh (bsc#1192288).
• ext4: fix reserved space counter leakage (bsc#1191450).
• ext4: report correct st_size for encrypted symlinks (bsc#1191449).
• firmware/psci: fix application of sizeof to pointer (git-fixes).
• fscrypt: add fscryptsymlinkgetattr() for computing st_size (bsc#1191449).
• fs, mm: fix race in unlinking swapfile (bsc#1191455).
• ftrace: Fix scripts/recordmcount.pl due to new binutils (bsc#1192267).
• genirq: Provide IRQCHIPAFFINITYPRE_STARTUP (bsc#1152489).
• gpio: pca953x: Improve bias setting (git-fixes).
• gve: Avoid freeing NULL pointer (git-fixes).
• gve: Correct available tx qpl check (git-fixes).
• gve: fix gvegetstats() (git-fixes).
• gve: Properly handle errors in gveassignqpl (bsc#1176940).
• gve: report 64bit txbytes counter from gvehandlereportstats() (bsc#1176940).
• HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (git-fixes).
• HID: betop: fix slab-out-of-bounds Write in betop_probe (git-fixes).
• HID: u2fzero: ignore incomplete packets without data (git-fixes).
• HID: usbhid: free rawreport buffers in usbhidstop (git-fixes).
• HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (git-fixes).
• hso: fix bailout in error case of probe (git-fixes).
• hwmon: Fix possible memleak in _hwmondevice_register() (git-fixes).
• hwmon: (pmbus/lm25066) Add offset coefficients (git-fixes).
• hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff (git-fixes).
• hwrng: mtk - Force runtime pm ops for sleep ops (git-fixes).
• i2c: acpi: fix resource leak in reconfiguration device addition (git-fixes).
• i40e: Fix ATR queue selection (git-fixes).
• i40e: fix endless loop under rtnl (git-fixes).
• i40e: Fix freeing of uninitialized misc IRQ vector (git-fixes).
• iavf: fix double unlock of crit_lock (git-fixes).
• ibmvnic: delay complete() (bsc#1094840 ltc#167098 git-fixes).
• ice: Add missing E810 device ids (jsc#SLE-7966 bsc#1157177).
• ice: fix getting UDP tunnel entry (jsc#SLE-12878).
• ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition (bsc#1191241).
• iio: adc128s052: Fix the error handling path of 'adc128_probe()' (git-fixes).
• iio: adc: aspeed: set driver data when adc probe (git-fixes).
• iio: dac: ti-dac5571: fix an error code in probe() (git-fixes).
• iio: light: opt3001: Fixed timeout error when 0 lux (git-fixes).
• iio: mtk-auxadc: fix case IIOCHANINFO_PROCESSED (git-fixes).
• iio: sspsensors: add more range checking in sspparse_dataframe() (git-fixes).
• iio: sspsensors: fix error code in sspprintmcudebug() (git-fixes).
• Input: i8042 - Add quirk for Fujitsu Lifebook T725 (bsc#1191980).
• Input: snvs_pwrkey - add clk handling (git-fixes).
• Input: xpad - add support for another USB ID of Nacon GC-100 (git-fixes).
• ionic: do not remove netdev->dev_addr when syncing uc list (bsc#1167773).
• ipv6/netfilter: Discard first fragment not including all headers (bsc#1191241).
• IPv6: reply ICMP error if the first fragment do not include all headers (bsc#1191241).
• isdn: cpai: check ctr->cnr to avoid array index out of bound (git-fixes).
• isdn: mISDN: Fix sleeping function called from invalid context (git-fixes).
• iwlwifi: mvm: fix some kerneldoc issues (git-fixes).
• iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15 (git-fixes).
• ixgbe: Fix NULL pointer dereference in ixgbexdpsetup (git-fixes).
• kabi: block: Fix kabi of blkmqschedtryinsert_merge() (bsc#1191456).
• kABI: Fix kABI after 36950f2da1ea (bsc#1191851).
• kABI workaround for cfg80211 mgmtregistrationlock changes (git-fixes).
• kABI workaround for HD-audio probe retry changes (bsc#1190801).
• kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167).
• kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167 bsc#1191240 ltc#194716).
• kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well. Fixes: e98096d5cf85 ('rpm: Abolish scritplet templating (bsc#1189841).')
• kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229).
• KVM: PPC: Book3S HV: Fix copytofromguest routines (jsc#SLE-12936 git-fixes).
• KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live (bsc#1156395).
• KVM: PPC: Book3S HV Nested: Sanitise HENTERNESTED TM state (bsc#1156395).
• KVM: PPC: Book3S HV: Save host FSCR in the P7/8 path (bsc#1065729).
• KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (bsc#1156395).
• KVM: PPC: Fix clearing never mapped TCEs in realmode (bsc#1156395).
• KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak (bsc#1156395).
• KVM: s390: extend kvms390shadow_fault to return entry pointer (bsc#1133021).
• KVM: s390: index kvm->arch.idlemask by vcpuidx (bsc#1133021).
• KVM: s390: split kvms390logicaltoeffective (bsc#1133021).
• KVM: s390: VSIE: correctly handle MVPG when in VSIE (bsc#1133021).
• lan78xx: select CRC32 (git-fixes).
• libata: Add ATAHORKAGENONCQON_ATI for Samsung 860 and 870 SSD (git-fixes).
• libertas: Fix possible memory leak in probe and disconnect (git-fixes).
• libertas_tf: Fix possible memory leak in probe and disconnect (git-fixes).
• mac80211: check return value of rhashtable_init (git-fixes).
• mac80211: Drop frames from invalid MAC address in ad-hoc mode (git-fixes).
• media: cedrus: Fix SUNXI tile size calculation (git-fixes).
• media: cx23885: Fix sndcardfree call on null card pointer (git-fixes).
• media: cxd2880-spi: Fix a null pointer dereference on error handling path (git-fixes).
• media: dvb-frontends: mn88443x: Handle errors of clkprepareenable() (git-fixes).
• media: dvb-usb: fix ununit-value in az6027rcquery (git-fixes).
• media: em28xx: add missing em28xxcloseextension (git-fixes).
• media: em28xx: Do not use ops->suspend if it is NULL (git-fixes).
• media: i2c: ths8200 needs V4L2_ASYNC (git-fixes).
• media: ite-cir: IR receiver stop working after receive overflow (git-fixes).
• media: mtk-vpu: Fix a resource leak in the error handling path of 'mtkvpuprobe()' (git-fixes).
• media: mxl111sf: change mutex_init() location (git-fixes).
• media: radio-wl1273: Avoid card name truncation (git-fixes).
• media: si470x: Avoid card name truncation (git-fixes).
• media: staging/intel-ipu3: css: Fix wrong size comparison imgucssfw_init (git-fixes).
• media: TDA1997x: handle short reads of hdmi info frame (git-fixes).
• media: tm6000: Avoid card name truncation (git-fixes).
• media: v4l2-ioctl: Fix checkextctrls (git-fixes).
• media: v4l2-ioctl: S_CTRL output the right value (git-fixes).
• mei: me: add Ice Lake-N device id (git-fixes).
• memory: fslifc: fix leak of irq and nandirq in fslifcctrl_probe (git-fixes).
• memstick: avoid out-of-range warning (git-fixes).
• memstick: jmb38xms: use appropriate free function in jmb38xmsallochost() (git-fixes).
• mlx5: count all link events (git-fixes).
• mlxsw: thermal: Fix out-of-bounds memory accesses (git-fixes).
• mmc: dw_mmc: exynos: fix the finding clock sample value (git-fixes).
• mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (git-fixes).
• mmc: mxs-mmc: disable regulator on error and in the remove function (git-fixes).
• mmc: sdhci: Map more voltage level to SDHCIPOWER330 (git-fixes).
• mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (git-fixes).
• mmc: vub300: fix control-message timeouts (git-fixes).
• mt76: mt7615: fix endianness warning in mt7615macwrite_txwi (git-fixes).
• mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (git-fixes).
• mt76: mt7915: fix muaridx in mt7915mcuallocsta_req() (git-fixes).
• mt76: mt7915: fix possible infinite loop release semaphore (git-fixes).
• mt76: mt7915: fix starecwtbl tag len (git-fixes).
• mwifiex: fix division by zero in fw download path (git-fixes).
• mwifiex: Send DELBA requests according to spec (git-fixes).
• net/afunix: fix a data-race in unixdgram_poll (bsc#1154353).
• net: batman-adv: fix error handling (git-fixes).
• net: bridge: use nlatotalsize64bit() in brgetlinkxstatssize() (git-fixes).
• net: can: emsusb: fix use-after-free in emsusb_disconnect() (git-fixes).
• net: cdc_eem: fix tx fixup skb leak (git-fixes).
• net: cdcncm: correct overhead in delayedndp_size (git-fixes).
• netfilter: conntrack: collect all entries in one cycle (bsc#1173604).
• netfilter: Drop fragmented ndisc packets assembled in netfilter (git-fixes).
• netfilter: xtIDLETIMER: fix panic that occurs when timertype has garbage value (bsc#1176447).
• net: hns3: check queue id range before using (jsc#SLE-14777).
• net: hns3: fix vf reset workqueue cannot exit (bsc#1154353).
• net: hso: add failure handler for addnetdevice (git-fixes).
• net: hso: fix NULL-deref on disconnect regression (git-fixes).
• net: hso: fix null-ptr-deref during tty device unregistration (git-fixes).
• net: ipv6: Discard next-hop MTU less than minimum link MTU (bsc#1191241).
• net: lan78xx: fix division by zero in send path (git-fixes).
• net: mana: Fix error handling in manacreaterxq() (git-fixes, bsc#1191800).
• net/mlx4_en: Do not allow aRFS for encapsulated packets (git-fixes).
• net/mlx4_en: Resolve bad operstate value (git-fixes).
• net/mlx5e: IPSEC RX, enable checksum complete (jsc#SLE-15172).
• net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (git-fixes).
• net/mlx5e: RX, Avoid possible data corruption when relaxed ordering and LRO combined (jsc#SLE-15172).
• net/mlx5: E-Switch, Fix double allocation of acl flow counter (jsc#SLE-15172).
• net/mlx5: Fix unpublish devlink parameters (jsc#SLE-8464).
• net/mlx5: FWTrace, cancel work on alloc pd error flow (git-fixes).
• net/sched: ets: fix crash when flipping from 'strict' to 'quantum' (bsc#1176774).
• net: usb: Fix uninit-was-stored issue in asixreadphy_addr() (git-fixes).
• NFC: digital: fix possible memory leak in digitalinsendsddreq() (git-fixes).
• NFC: digital: fix possible memory leak in digitaltglisten_mdaa() (git-fixes).
• nfc: fix error handling of nfcprotoregister() (git-fixes).
• nfc: port100: fix using -ERRNO as command type mask (git-fixes).
• nfs: dir_cookie is a pointer to the cookie in older kernels, not the cookie itself. (bsc#1191628 bsc#1192549).
• NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628).
• nvme: add command id quirk for apple controllers (git-fixes).
• nvme-fc: avoid race between time out and tear down (bsc#1185762).
• nvme-fc: remove freeze/unfreeze around updatenrhw_queues (bsc#1185762).
• nvme-fc: update hardware queues before using them (bsc#1185762).
• nvme-pci: Fix abort command id (git-fixes).
• nvme-pci: fix error unwind in nvmemapdata (bsc#1191934).
• nvme-pci: refactor nvmeunmapdata (bsc#1191934).
• nvme-pci: set minalignmask (bsc#1191851).
• ocfs2: fix data corruption after conversion from inline format (bsc#1190795).
• pata_legacy: fix a couple uninitialized variable bugs (git-fixes).
• PCI: Fix pcihostbridge struct device release/free handling (git-fixes).
• phy: mdio: fix memory leak (git-fixes).
• platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (git-fixes).
• platform/mellanox: mlxreg-io: Fix read access of n-bytes size attributes (git-fixes).
• platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from runsmbioscall (git-fixes).
• platform/x86: intelscuipc: Fix busy loop expiry time (git-fixes).
• platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (git-fixes).
• PM / devfreq: rk3399dmc: Add missing ofnode_put() (git-fixes).
• PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails (git-fixes).
• PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent (git-fixes).
• PM / devfreq: rk3399_dmc: Fix spelling typo (git-fixes).
• PM / devfreq: rk3399_dmc: Remove unneeded semicolon (git-fixes).
• PM: sleep: Do not let 'syscore' devices runtime-suspend during system transitions (git-fixes).
• powerpc/64s: Fix entry flush patching w/strict RWX & hash (jsc#SLE-13847 git-fixes).
• powerpc/64s: Fix stf mitigation patching w/strict RWX & hash (jsc#SLE-13847 git-fixes).
• powerpc/64s: Remove irq mask workaround in accumulatestolentime() (jsc#SLE-9246 git-fixes).
• powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1065729).
• powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1065729).
• powerpc/bpf: Use bctrl for making function calls (bsc#1065729).
• powerpc: Do not dereference code as 'struct ppc_inst' (uprobe, code-patching, feature-fixups) (jsc#SLE-13847 git-fixes).
• powerpc: Do not use 'struct ppc_inst' to reference instruction location (jsc#SLE-13847 git-fixes).
• powerpc/lib/code-patching: Do not use struct 'ppc_inst' for runnable code in tests (jsc#SLE-13847 git-fixes).
• powerpc/lib/code-patching: Make instrisbranchtoaddr() static (jsc#SLE-13847 git-fixes).
• powerpc/lib: Fix emulate_step() std test (bsc#1065729).
• powerpc: Move archcpuidle_dead() into smp.c (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/numa: Update cpucpumap on CPU online/offline (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/pseries: Fix build error when NUMA=n (bsc#1190620 ltc#194498 git-fixes).
• powerpc/smp: Cache CPU to chip lookup (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Enable CACHE domain for shared processor (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Fix a crash while booting kvm guest with nr_cpus=2 (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Fold cpu_die() into its only caller (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Set numa node before updating mask (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/smp: Update cpucoremap on all PowerPc systems (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).
• powerpc/uprobes: Validation for prefixed instruction (jsc#SLE-13847 git-fixes).
• powerpc/xive: Discard disabled interrupts in getirqchipstate() (bsc#1085030 git-fixes).
• pseries/eeh: Fix the kdump kernel crash during eehpseriesinit (git-fixes).
• ptp_pch: Load module automatically if ID matches (git-fixes).
• ptp_pch: Restore dependency on PCI (git-fixes).
• qed: Fix missing error code in qedslowpathstart() (git-fixes).
• qed: Handle management FW error (git-fixes).
• qed: rdma - do not wait for resources under hw error recovery flow (git-fixes).
• RDMA/cma: Do not change route.addr.srcaddr.ssfamily (bsc#1181147).
• RDMA/cma: Fix listener leak in rdmacmalistenonall() failure (bsc#1181147).
• regmap: Fix possible double-free in regcacherbtreeexit() (git-fixes).
• regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (git-fixes).
• regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (git-fixes).
• rpm: fix kmp install path
• rpm: use _rpmmacrodir (boo#1191384)
• rsi: fix control-message timeout (git-fixes).
• rsi: Fix module devopermode parameter description (git-fixes).
• rsi: stop thread firstly in rsi91xinit() error handling (git-fixes).
• rtl8187: fix control-message timeouts (git-fixes).
• scsi: ibmvfc: Fix up duplicate response detection (bsc#1191867 ltc#194757).
• scsi: iscsi: Fix deadlock on recovery path during GFP_IO reclaim (git-fixes).
• scsi: lpfc: Allow fabric node recovery if recovery is in progress before devloss (bsc#1192145).
• scsi: lpfc: Allow PLOGI retry if previous PLOGI was aborted (bsc#1192145).
• scsi: lpfc: Correct sysfs reporting of loop support after SFP status change (bsc#1192145).
• scsi: lpfc: Fix link down processing to address NULL pointer dereference (bsc#1192145).
• scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (bsc#1191349).
• scsi: lpfc: Fix use-after-free in lpfcunregrpi() routine (bsc#1192145).
• scsi: lpfc: Revert LOGTRACEEVENT back to LOGINIT prior to driverresource_setup() (bsc#1192145).
• scsi: lpfc: Update lpfc version to 14.0.0.3 (bsc#1192145).
• scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset (bsc#1192145).
• scsi: mpi3mr: Add bios_param SCSI host template hook (jsc#SLE-18120).
• scsi: mpi3mr: Add change queue depth support (jsc#SLE-18120).
• scsi: mpi3mr: Add EEDP DIF DIX support (jsc#SLE-18120).
• scsi: mpi3mr: Add event handling debug prints (jsc#SLE-18120).
• scsi: mpi3mr: Additional event handling (jsc#SLE-18120).
• scsi: mpi3mr: Add mpi30 Rev-R headers and Kconfig (jsc#SLE-18120).
• scsi: mpi3mr: Add support for device add/remove event handling (jsc#SLE-18120).
• scsi: mpi3mr: Add support for DSN secure firmware check (jsc#SLE-18120).
• scsi: mpi3mr: Add support for internal watchdog thread (jsc#SLE-18120).
• scsi: mpi3mr: Add support for PCIe device event handling (jsc#SLE-18120).
• scsi: mpi3mr: Add support for PM suspend and resume (jsc#SLE-18120).
• scsi: mpi3mr: Add support for queue command processing (jsc#SLE-18120).
• scsi: mpi3mr: Add support for recovering controller (jsc#SLE-18120).
• scsi: mpi3mr: Add support for threaded ISR (jsc#SLE-18120).
• scsi: mpi3mr: Add support for timestamp sync with firmware (jsc#SLE-18120).
• scsi: mpi3mr: Allow certain commands during pci-remove hook (jsc#SLE-18120).
• scsi: mpi3mr: Base driver code (jsc#SLE-18120).
• scsi: mpi3mr: Complete support for soft reset (jsc#SLE-18120).
• scsi: mpi3mr: Create operational request and reply queue pair (jsc#SLE-18120).
• scsi: mpi3mr: Fix error handling in mpi3mrsetupisr() (git-fixes).
• scsi: mpi3mr: Fix missing unlock on error (git-fixes).
• scsi: mpi3mr: Hardware workaround for UNMAP commands to NVMe drives (jsc#SLE-18120).
• scsi: mpi3mr: Implement SCSI error handler hooks (jsc#SLE-18120).
• scsi: mpi3mr: Print IOC info for debugging (jsc#SLE-18120).
• scsi: mpi3mr: Print pending host I/Os for debugging (jsc#SLE-18120).
• scsi: mpi3mr: Set up IRQs in resume path (jsc#SLE-18120).
• scsi: mpi3mr: Use scsicmdtorq() instead of scsicmnd.request (jsc#SLE-18120).
• scsi: mpi3mr: Use the proper SCSI midlayer interfaces for PI (jsc#SLE-18120).
• scsi: mpi3mr: Wait for pending I/O completions upon detection of VD I/O timeout (jsc#SLE-18120).
• scsi: qla2xxx: Add debug print of 64G link speed (bsc#1190941).
• scsi: qla2xxx: Add host attribute to trigger MPI hang (bsc#1190941).
• scsi: qla2xxx: Add support for mailbox passthru (bsc#1190941).
• scsi: qla2xxx: Adjust request/response queue size for 28xx (bsc#1190941).
• scsi: qla2xxx: Call processresponsequeue() in Tx path (bsc#1190941).
• scsi: qla2xxx: Changes to support FCP2 Target (bsc#1190941).
• scsi: qla2xxx: Changes to support kdump kernel (bsc#1190941).
• scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS (bsc#1190941).
• scsi: qla2xxx: Check for firmware capability before creating QPair (bsc#1190941).
• scsi: qla2xxx: Display 16G only as supported speeds for 3830c card (bsc#1190941).
• scsi: qla2xxx: Do not call fcblockscsi_eh() during bus reset (bsc#1190941).
• scsi: qla2xxx: edif: Add N2N support for EDIF (bsc#1190941).
• scsi: qla2xxx: edif: Do secure PLOGI when auth app is present (bsc#1190941).
• scsi: qla2xxx: edif: Fix EDIF enable flag (bsc#1190941).
• scsi: qla2xxx: edif: Fix returnvar.cocci warnings (bsc#1190941).
• scsi: qla2xxx: edif: Fix stale session (bsc#1190941).
• scsi: qla2xxx: edif: Reject AUTH ELS on session down (bsc#1190941).
• scsi: qla2xxx: edif: Use link event to wake up app (bsc#1190941).
• scsi: qla2xxx: Fix crash in NVMe abort path (bsc#1190941).
• scsi: qla2xxx: Fix excessive messages during device logout (bsc#1190941).
• scsi: qla2xxx: Fix hang during NVMe session tear down (bsc#1190941).
• scsi: qla2xxx: Fix hang on NVMe command timeouts (bsc#1190941).
• scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (bsc#1190941).
• scsi: qla2xxx: Fix NPIV create erroneous error (bsc#1190941).
• scsi: qla2xxx: Fix NVMe | FCP personality change (bsc#1190941).
• scsi: qla2xxx: Fix NVMe retry (bsc#1190941).
• scsi: qla2xxx: Fix NVMe session down detection (bsc#1190941).
• scsi: qla2xxx: Fix port type info (bsc#1190941).
• scsi: qla2xxx: Fix unsafe removal from linked list (bsc#1190941).
• scsi: qla2xxx: Fix use after free in eh_abort path (bsc#1190941).
• scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue (bsc#1190941).
• scsi: qla2xxx: Open-code qla2xxxehdevice_reset() (bsc#1190941).
• scsi: qla2xxx: Open-code qla2xxxehtarget_reset() (bsc#1190941).
• scsi: qla2xxx: Remove redundant initialization of pointer req (bsc#1190941).
• scsi: qla2xxx: Restore initiator in dual mode (bsc#1190941).
• scsi: qla2xxx: Show OS name and version in FDMI-1 (bsc#1190941).
• scsi: qla2xxx: Suppress unnecessary log messages during login (bsc#1190941).
• scsi: qla2xxx: Sync queue idx with queuepairmap idx (bsc#1190941).
• scsi: qla2xxx: Update version to 10.02.06.100-k (bsc#1190941).
• scsi: qla2xxx: Update version to 10.02.06.200-k (bsc#1190941).
• scsi: qla2xxx: Update version to 10.02.07.100-k (bsc#1190941).
• scsi: qla2xxx: Use scsicmdtorq() instead of scsicmnd.request (bsc#1190941).
• scsi: target: Fix the pgr/aluasupportstore functions (git-fixes).
• sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351).
• soc: qcom: mdtloader: Drop PTLOAD check on hash segment (git-fixes).
• spi: spi-nxp-fspi: do not depend on a specific node name erratum workaround (git-fixes).
• swiotlb: add a IOTLBSIZE define (bsc#1191851).
• swiotlb: clean up swiotlbtblunmap_single (bsc#1191851).
• swiotlb: do not modify origaddr in swiotlbtblsyncsingle (bsc#1191851).
• swiotlb: factor out an iotlboffset helper (bsc#1191851).
• swiotlb: factor out a nr_slots helper (bsc#1191851).
• swiotlb: refactor swiotlbtblmap_single (bsc#1191851).
• swiotlb: respect minalignmask (bsc#1191851).
• swiotlb: Split size parameter to map/unmap APIs (bsc#1191851).
• tpm: Check for integer overflow in tpm2mapresponse_body() (git-fixes).
• tpm: ibmvtpm: Avoid error message when process gets signal while waiting (bsc#1065729).
• Update patch reference for AMDGPU fix (bsc#1180749)
• USB: cdc-acm: clean up probe error labels (git-fixes).
• USB: cdc-acm: fix minor-number release (git-fixes).
• usb: chipidea: cihdrcimx: Also search for 'phys' phandle (git-fixes).
• usb: hso: fix error handling code of hsocreatenet_device (git-fixes).
• usb: hso: remove the bailout parameter (git-fixes).
• usb: musb: dsps: Fix the probe error path (git-fixes).
• usbnet: fix error return code in usbnet_probe() (git-fixes).
• usbnet: sanity check for maxpacket (git-fixes).
• USB: serial: option: add prod. id for Quectel EG91 (git-fixes).
• USB: serial: option: add Quectel EC200S-CN module support (git-fixes).
• USB: serial: option: add Telit LE910Cx composition 0x1204 (git-fixes).
• USB: serial: qcserial: add EM9191 QDL support (git-fixes).
• USB: xhci: dbc: fix tty registration race (git-fixes).
• video: fbdev: gbefb: Only instantiate device when built for IP32 (git-fixes).
• virtio-gpu: fix possible memory allocation failure (git-fixes).
• virtio: write back FVERSION1 before validate (git-fixes).
• watchdog: orion: use 0 for unset heartbeat (git-fixes).
• wcn36xx: Add ability for wcn36xxsmddumpcmdreq to pass two's complement (git-fixes).
• wcn36xx: add proper DMA memory barriers in rx path (git-fixes).
• wcn36xx: Fix HT40 capability for 2Ghz band (git-fixes).
• x86/ioapic: Force affinity setup before startup (bsc#1152489).
• x86/msi: Force affinity setup before startup (bsc#1152489).
• x86/pat: Pass valid address to sanitize_phys() (bsc#1152489).
• x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions (bsc#1152489).
• x86/resctrl: Free the ctrlval arrays when domainsetupmon_state() fails (bsc#1152489).
• x86/sev: Return an error on a returned non-zero SW_EXITINFO1[31:0] (bsc#1178134).
• xen: fix setting of maxpfn in sharedinfo (git-fixes).
• xen: reset legacy rtc flag for PV domU (git-fixes).
• xfs: do not allow log writes if the data device is readonly (bsc#1192229).
• xfs: ensure that the inode uid/gid match values match the icdinode ones (bsc#1190006).
• xfs: Fixed non-directory creation in SGID directories introduced by CVE-2018-13405 patch (bsc#1190006).
• xfs: fix I_DONTCACHE (bsc#1192074).
• xfs: fix log intent recovery ENOSPC shutdowns when inactivating inodes (bsc#1190642).
• xfs: merge the projid fields in struct xfs_icdinode (bsc#1190006).
• xfs: remove the icdinode diuid/digid members (bsc#1190006).
• xhci: Enable trust tx length quirk for Fresco FL11 USB controller (git-fixes).
• xhci: Fix command ring pointer corruption while aborting a command (git-fixes).
• xhci: guard accesses to epstate in xhciendpoint_reset() (git-fixes).