SUSE-SU-2022:2376-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2022/suse-su-20222376-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2376-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2022:2376-1

Related

Published

2022-07-12T16:22:59Z

Modified

2022-07-12T16:22:59Z

Summary

Security update for the Linux Kernel

Details

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
CVE-2022-34918: Fixed a buffer overflow with nftsetelem_init() that could be used by a local attacker to escalate privileges (bnc#1201171).
CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).
CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages (bsc#1199487).
CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
CVE-2022-20154: Fixed a use after free due to a race condition in locksocknested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).

The following non-security bugs were fixed:

ALSA: hda/conexant: Fix missing beep setup (git-fixes).
ALSA: hda/realtek - Add HW8326 support (git-fixes).
ALSA: hda/realtek: Add quirk for Clevo PD70PNT (git-fixes).
ALSA: hda/realtek - ALC897 headset MIC no sound (git-fixes).
ALSA: hda/via: Fix missing beep setup (git-fixes).
arm64: ftrace: fix branch range checks (git-fixes)
ASoC: cs35l36: Update digital volume TLV (git-fixes).
ASoC: cs42l52: Correct TLV for Bypass Volume (git-fixes).
ASoC: cs42l52: Fix TLV scales for mixer controls (git-fixes).
ASoC: cs42l56: Correct typo in minimum level for SX volume controls (git-fixes).
ASoC: cs53l30: Correct number of volume levels on SX controls (git-fixes).
ASoC: es8328: Fix event generation for deemphasis control (git-fixes).
ASoC: nau8822: Add operation for internal PLL off and on (git-fixes).
ASoC: wm8962: Fix suspend while playing music (git-fixes).
ASoC: wmadsp: Fix event generation for wmadspfwput() (git-fixes).
ata: libata: add qc->flags in ataqccomplete_template tracepoint (git-fixes).
ata: libata-core: fix NULL pointer deref in atahostalloc_pinfo() (git-fixes).
bcache: avoid journal no-space deadlock by reserving 1 journal bucket (git-fixes).
bcache: avoid unnecessary soft lockup in kworker updatewritebackrate() (bsc#1197362).
bcache: fixup multiple threads crash (git-fixes).
bcache: improve multithreaded bchbtreecheck() (git-fixes).
bcache: improve multithreaded bchsectorsdirty_init() (git-fixes).
bcache: memset on stack variables in bchbtreecheck() and bchsectorsdirty_init() (git-fixes).
bcache: remove incremental dirty sector counting for bchsectorsdirty_init() (git-fixes).
bio: fix page leak bioaddhw_page failure (git-fixes).
blk-cgroup: fix a hdstruct leak in blkcgfillrootiostats (git-fixes).
blk-iolatency: Fix inflight count imbalances and IO hangs on offline (bsc#1200825).
blk-mq: clear activequeues before clearing BLKMQFTAGQUEUESHARED (bsc#1200263).
blk-mq: do not update io_ticks with passthrough requests (bsc#1200816).
blk-mq: drop workarounds for cpu hotplug queue management (bsc#1185762)
blk-mq: update hctx->dispatch_busy in case of real scheduler (git-fixes).
block: advance ioviter on bioaddhwpage failure (git-fixes).
block: do not merge across cgroup boundaries if blkcg is enabled (bsc#1198020).
block: Fix handling of offline queues in blkmqallocrequesthctx() (bsc#1185762).
block: Fix kABI in blk-merge.c (bsc#1198020).
block/keyslot-manager: prevent crash when num_slots=1 (git-fixes).
bus: fsl-mc-bus: fix KASAN use-after-free in fslmcbus_remove() (git-fixes).
caifvirtio: fix race between virtiodeviceready() and ndoopen() (git-fixes).
ceph: add some lockdep assertions around snaprealm handling (bsc#1201147).
ceph: clean up locking annotation for cephgetsnaprealm and _lookupsnaprealm (bsc#1201149).
cifs: add WARNON for when chancount goes below minimum (bsc#1200217).
cifs: adjust DebugData to use chansneedreconnect for conn status (bsc#1200217).
cifs: allocpathwithtreeprefix: do not append sep. if the path is empty (bsc#1200217).
cifs: avoid parallel session setups on same channel (bsc#1200217).
cifs: avoid race during socket reconnect between send and recv (bsc#1200217).
cifs: call cifs_reconnect when a connection is marked (bsc#1200217).
cifs: call helper functions for marking channels for reconnect (bsc#1200217).
cifs: change smb2queryinfo_compound to use a cached fid, if available (bsc#1200217).
cifs: check for smb1 in opencacheddir() (bsc#1200217).
cifs: check reconnects for channels of active tcons too (bsc#1200217).
cifs: Check the IOCBDIRECT flag, not ODIRECT (bsc#1200217).
cifs: cifssesmarkforreconnect should also update reconnect bits (bsc#1200217).
cifs: clean up an inconsistent indenting (bsc#1200217).
cifs: destage any unwritten data to the server before calling copychunk_write (bsc#1200217).
cifs: do not build smb1ops if legacy support is disabled (bsc#1200217).
cifs: do not call cifsdfsqueryinfononascii_quirk() if nodfs was set (bsc#1200217).
cifs: do not use tcpStatus after negotiate completes (bsc#1200217).
cifs: do not use uninitialized data in the owner/group sid (bsc#1200217).
cifs: fix confusing unneeded warning message on smb2.1 and earlier (bsc#1200217).
cifs: fix double free race when mount fails in cifsgetroot() (bsc#1200217).
cifs: fix FILEBOTHDIRECTORY_INFO definition (bsc#1200217).
cifs: fix handlecache and multiuser (bsc#1200217).
cifs: fix hang on cifsgetnext_mid() (bsc#1200217).
cifs: fix incorrect use of list iterator after the loop (bsc#1200217).
cifs: fix minor compile warning (bsc#1200217).
cifs: fix missed refcounting of ipc tcon (bsc#1200217).
cifs: fix ntlmssp auth when there is no key exchange (bsc#1200217).
cifs: fix NULL ptr dereference in refresh_mounts() (bsc#1200217).
cifs: fix potential deadlock in direct reclaim (bsc#1200217).
cifs: fix potential double free during failed mount (bsc#1200217).
cifs: fix potential race with cifsd thread (bsc#1200217).
cifs: fix set of group SID via NTSD xattrs (bsc#1200217).
cifs: fix signed integer overflow when flend is OFFSETMAX (bsc#1200217).
cifs: Fix smb311updatepreauth_hash() kernel-doc comment (bsc#1200217).
cifs: fix the cifs_reconnect path for DFS (bsc#1200217).
cifs: fix the connection state transitions with multichannel (bsc#1200217).
cifs: fix uninitialized pointer in error case in dfscachegettgtshare (bsc#1200217).
cifs: fix workstation_name for multiuser mounts (bsc#1200217).
cifs: force new session setup and tcon for dfs (bsc#1200217).
cifs: free ntlmsspblob allocated in negotiate (bsc#1200217).
cifs: ignore resource_id while getting fscache super cookie (bsc#1200217).
cifs: maintain a state machine for tcp/smb/tcon sessions (bsc#1200217).
cifs: make status checks in version independent callers (bsc#1200217).
cifs: mark sessions for reconnection in helper function (bsc#1200217).
cifs: modefromsids must add an ACE for authenticated users (bsc#1200217).
cifs: move definition of cifs_fattr earlier in cifsglob.h (bsc#1200217).
cifs: move superblock magic defitions to magic.h (bsc#1200217).
cifs: potential buffer overflow in handling symlinks (bsc#1200217).
cifs: print TIDs as hex (bsc#1200217).
cifs: protect all accesses to chan* with chanlock (bsc#1200217).
cifs: quirk for STATUSOBJECTNAME_INVALID returned for non-ASCII dfs refs (bsc#1200217).
cifs: reconnect only the connection and not smb session where possible (bsc#1200217).
cifs: release cached dentries only if mount is complete (bsc#1200217).
cifs: remove check of list iterator against head past the loop body (bsc#1200217).
cifs: remove redundant assignment to pointer p (bsc#1200217).
cifs: remove repeated debug message on cifsputsmb_ses() (bsc#1200217).
cifs: remove repeated state change in dfs tree connect (bsc#1200217).
cifs: remove unused variable ses_selected (bsc#1200217).
cifs: return ENOENT for DFS lookupcacheentry() (bsc#1200217).
cifs: return the more nuanced writeback error on close() (bsc#1200217).
cifs: sanitize multiple delimiters in prepath (bsc#1200217).
cifs: serialize all mount attempts (bsc#1200217).
cifs: set the CREATENOTFILE when opening the directory in usecacheddir() (bsc#1200217).
cifs: skip trailing separators of prefix paths (bsc#1200217).
cifs: smbd: fix typo in comment (bsc#1200217).
cifs: Split the smb3addcredits tracepoint (bsc#1200217).
cifs: take cifstcpses_lock for status checks (bsc#1200217).
cifs: track individual channel status using chansneedreconnect (bsc#1200217).
cifs: unlock chanlock before calling cifsputtcpsession (bsc#1200217).
cifs: update internal module number (bsc#1193629).
cifs: update internal module number (bsc#1200217).
cifs: update tcpStatus during negotiate and sess setup (bsc#1200217).
cifs: use a different reconnect helper for non-cifsd threads (bsc#1200217).
cifs: use correct lock type in cifs_reconnect() (bsc#1200217).
cifs: Use kzalloc instead of kmalloc/memset (bsc#1200217).
cifs: use new enum for ses_status (bsc#1200217).
cifs: use the chansneedreconnect bitmap for reconnect status (bsc#1200217).
cifs: verify that tcon is valid before dereference in cifskillsb (bsc#1200217).
cifs: version operations for smb20 unneeded when legacy support disabled (bsc#1200217).
cifs: wait for tcon resource_id before getting fscache super (bsc#1200217).
cifs: we do not need a spinlock around the tree access during umount (bsc#1200217).
cifs: when extending a file with falloc we should make files not-sparse (bsc#1200217).
drivers: cpufreq: Add missing ofnodeput() in qoriq-cpufreq.c (git-fixes).
drm/msm: Fix double pmruntimedisable() call (git-fixes).
drm/msm/mdp4: Fix refcount leak in mdp4modesetinit_intf (git-fixes).
drm/sun4i: Fix crash during suspend after component bind failure (git-fixes).
exec: Force single empty string when argv is empty (bsc#1200571).
ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1197754).
ext4: fix bugon ext4mbuseinode_pa (bsc#1200810).
ext4: fix bugon in _estreesearch (bsc#1200809).
ext4: fix race condition between ext4write and ext4convertinlinedata (bsc#1200807).
ext4: limit length to bitmapmaxbytes - blocksize in punchhole (bsc#1200806).
ext4: make variable 'count' signed (bsc#1200820).
fuse: annotate lock in fusereverseinval_entry() (bsc#1201143).
gpio: winbond: Fix error code in winbondgpioget() (git-fixes).
gtp: use icmpndosend helper (git-fixes).
hwmon: (ibmaem) do not call platformdevicedel() if platformdeviceadd() fails (git-fixes).
i2c: designware: Use standard optional ref clock implementation (git-fixes).
ibmvnic: Properly dispose of all skbs during a failover (bsc#1200925).
iio:accel:bma180: rearrange iio trigger get and register (git-fixes).
iio: accel: mma8452: ignore the return value of reset operation (git-fixes).
iio: adc: axp288: Override TS pin bias current for some models (git-fixes).
iio: adc: vf610: fix conversion mode sysfs node name (git-fixes).
iio:chemical:ccs811: rearrange iio trigger get and register (git-fixes).
iio: gyro: mpu3050: Fix the error handling in mpu3050powerup() (git-fixes).
iio: trigger: sysfs: fix use-after-free on remove (git-fixes).
init: Initialize noopbackingdev_info early (bsc#1200822).
inotify: show inotify mask flags in proc fdinfo (bsc#1200600).
iomap: iomapwritefailed fix (bsc#1200829).
ipvs: add sysctlrunestimation to support disable estimation (bsc#1195504).
jfs: fix divide error in dbNextAG (bsc#1200828).
kABI fix of sysctlrunestimation (git-fixes).
kabi: nvme workaround header include (bsc#1201193).
kabi/severities: ignore KABI for NVMe target (bsc#1192761)
linux/dim: Fix divide by 0 in RDMA DIM (git-fixes).
md: fix update super 1.0 on rdev size change (git-fixes).
move devm_allocate to end of structure for kABI (git-fixes).
mtd: rawnand: gpmi: Fix setting busy timeout setting (git-fixes).
net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
net: ieee802154: ca8210: Stop leaking skb's (git-fixes).
net: lantiq: Add locking for TX DMA channel (git-fixes).
net: rose: fix UAF bugs caused by timer handler (git-fixes).
net: stmmac: reset Tx desc base address before restarting Tx (git-fixes).
net: usb: ax88179_178a: Fix packet receiving (git-fixes).
nfc: nfcmrvl: Fix irqofparseandmap() return value (git-fixes).
nfc: nfcmrvl: Fix memory leak in nfcmrvlplaydeferred (git-fixes).
NFC: nxp-nci: Do not issue a zero length i2cmasterread() (git-fixes).
NFS: Do not report EINTR/ERESTARTSYS as mapping errors (git-fixes).
NFS: Do not report errors from nfspageiocomplete() more than once (git-fixes).
NFS: Do not report flush errors in nfswriteend() (git-fixes).
NFS: Further fixes to the writeback error handling (git-fixes).
NFS: Memory allocation failures are not server fatal errors (git-fixes).
NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout (git-fixes).
nvdimm: Fix firmware activation deadlock scenarios (git-fixes).
nvdimm/region: Fix default alignment for small regions (git-fixes).
nvme: add CNTRLTYPE definitions for 'identify controller' (bsc#1192761).
nvme: Add connect option 'discovery' (bsc#1192761).
nvme: add new discovery log page entry definitions (bsc#1192761).
nvme: display correct subsystem NQN (bsc#1192761).
nvme: expose subsystem type in sysfs attribute 'subsystype' (bsc#1192761).
nvme: kabi fix nvme subsystype change (bsc#1192761)
nvmet: add nvmetisdisc_subsys() helper (bsc#1192761).
nvmet: add nvmetreqsubsys() helper (bsc#1192761).
nvme-tcp: fix H2CData PDU send accounting (again) (git-fixes).
nvmet: do not check iosqes,iocqes for discovery controllers (bsc#1192761).
nvmet: fix freeing unallocated p2pmem (git-fixes).
nvmet: make discovery NQN configurable (bsc#1192761).
nvmet-rdma: Fix NULL deref when SEND is completed with error (git-fixes).
nvmet-rdma: Fix NULL deref when setting pienable and traddr INADDRANY (git-fixes).
nvmet: register discovery subsystem as 'current' (bsc#1192761).
nvmet: set 'CNTRLTYPE' in the identify controller data (bsc#1192761).
nvmet: switch check for subsystem type (bsc#1192761).
pahole 1.22 required for full BTF features. also recommend pahole for kernel-source to make the kernel buildable with standard config
phy: aquantia: Fix AN when higher speeds than 1G are not advertised (git-fixes).
pNFS: Do not keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE (git-fixes).
powerpc/idle: Fix return value of __setup() handler (bsc#1065729).
powerpc/perf: Fix the threshold compare group constraint for power9 (bsc#1065729).
regmap-irq: Fix a bug in regmapirqenable() for typeinmask chips (git-fixes).
Revert 'block: Fix a lockdep complaint triggered by request queue flushing' (git-fixes).
scsi: core: Show SCMD_LAST in text form (git-fixes).
scsi: ibmvfc: Allocate/free queue resource only during probe/remove (jsc#SLE-15442 bsc#1180814 ltc#187461 git-fixes).
scsi: ibmvfc: Store vhost pointer during subcrq allocation (jsc#SLE-15442 bsc#1180814 ltc#187461 git-fixes).
scsi: lpfc: Add more logging of cmd and cqe information for aborted NVMe cmds (bsc#1201193).
scsi: lpfc: Address NULL pointer dereference after stargettorport() (bsc#1201193).
scsi: lpfc: Add support for ATTO Fibre Channel devices (bsc#1201193).
scsi: lpfc: Add support for VMID tagging of NVMe I/Os (bsc#1201193).
scsi: lpfc: Allow reduced polling rate for nvmeadminasync_event cmd completion (bsc#1201193).
scsi: lpfc: Commonize VMID code location (bsc#1201193).
scsi: lpfc: Correct BDE type for XMITSEQ64WQE in lpfcctreject_event() (bsc#1201193).
scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology (bsc#1201193).
scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted (bsc#1201193).
scsi: lpfc: Resolve some cleanup issues following abort path refactoring (bsc#1201193).
scsi: lpfc: Resolve some cleanup issues following SLI path refactoring (bsc#1201193).
scsi: lpfc: Rework lpfcvmidget_appid() to be protocol independent (bsc#1201193).
scsi: lpfc: Update lpfc version to 14.2.0.4 (bsc#1201193).
scsi: nvme: Added a new sysfs attribute appid_store (bsc#1201193).
scsi: nvme-fc: Add new routine nvmefcio_getuuid() (bsc#1201193).
scsi: qla2xxx: Add a new v2 dport diagnostic feature (bsc#1201160).
scsi: qla2xxx: Add debug prints in the device remove path (bsc#1201160).
scsi: qla2xxx: edif: Add bsg interface to read doorbell events (bsc#1201160).
scsi: qla2xxx: edif: Add retry for ELS passthrough (bsc#1201160).
scsi: qla2xxx: edif: bsg refactor (bsc#1201160).
scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription (bsc#1201160).
scsi: qla2xxx: edif: Fix n2n discovery issue with secure target (bsc#1201160).
scsi: qla2xxx: edif: Fix n2n login retry for secure device (bsc#1201160).
scsi: qla2xxx: edif: Fix no login after app start (bsc#1201160).
scsi: qla2xxx: edif: Fix no logout on delete for N2N (bsc#1201160).
scsi: qla2xxx: edif: Fix potential stuck session in sa update (bsc#1201160).
scsi: qla2xxx: edif: Fix session thrash (bsc#1201160).
scsi: qla2xxx: edif: Fix slow session teardown (bsc#1201160).
scsi: qla2xxx: edif: Reduce disruption due to multiple app start (bsc#1201160).
scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing (bsc#1201160).
scsi: qla2xxx: edif: Reduce N2N thrashing at app_start time (bsc#1201160).
scsi: qla2xxx: edif: Remove old doorbell interface (bsc#1201160).
scsi: qla2xxx: edif: Send LOGO for unexpected IKE message (bsc#1201160).
scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application (bsc#1201160).
scsi: qla2xxx: edif: Tear down session if keys have been removed (bsc#1201160).
scsi: qla2xxx: edif: Wait for app to ack on sess down (bsc#1201160).
scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (bsc#1201160).
scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (bsc#1201160).
scsi: qla2xxx: Fix excessive I/O error messages by default (bsc#1201160).
scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests (bsc#1201160).
scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os (bsc#1201160).
scsi: qla2xxx: Fix losing target when it reappears during delete (bsc#1201160).
scsi: qla2xxx: Remove setting of 'req' and 'rsp' parameters (bsc#1201160).
scsi: qla2xxx: Remove unused 'qldmtgtexpct' parameter (bsc#1201160).
scsi: qla2xxx: Turn off multi-queue for 8G adapters (bsc#1201160).
scsi: qla2xxx: Update version to 10.02.07.500-k (bsc#1201160).
scsi: qla2xxx: Update version to 10.02.07.600-k (bsc#1201160).
scsi: qla2xxx: Update version to 10.02.07.700-k (bsc#1201160).
scsi: qla2xxx: Wind down adapter after PCIe error (bsc#1201160).
scsi: sd: sdzbc: Do not pass GFPNOIO to kvcalloc (git-fixes).
scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks (git-fixes).
scsi: sd: sd_zbc: Fix ZBC disk initialization (git-fixes).
scsi: sd: Signal drive managed SMR disks (git-fixes).
scsi: sdzbc: Do not limit maxzone_append sectors to (git-fixes).
scsi: sdzbc: Ensure buffer size is aligned to SECTORSIZE (git-fixes).
scsi: sd_zbc: Improve zone revalidation (git-fixes).
scsi: sd_zbc: Remove unused inline functions (git-fixes).
scsi: sd_zbc: Support disks with more than 2**32 logical (git-fixes).
scsi: smartpqi: create module parameters for LUN reset (bsc#1179195 bsc#1200622).
smb3: add mount parm nosparse (bsc#1200217).
smb3: add trace point for lease not found issue (bsc#1200217).
smb3: add trace point for oplock not found (bsc#1200217).
smb3: check for null tcon (bsc#1200217).
smb3: cleanup and clarify status of tree connections (bsc#1200217).
smb3: do not set rc when used and unneeded in queryinfocompound (bsc#1200217).
SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2compoundop (bsc#1200217).
smb3: fix incorrect session setup check for multiuser mounts (bsc#1200217).
smb3: fix ksmbd bigendian bug in oplock break, and move its struct to smbfs_common (bsc#1200217).
smb3: fix snapshot mount option (bsc#1200217).
smb3 improve error message when mount options conflict with posix (bsc#1200217).
smb3: move defines for ioctl protocol header and SMB2 sizes to smbfs_common (bsc#1200217).
smb3: move defines for query info and query fsinfo to smbfs_common (bsc#1200217).
smb3 move more common protocol header definitions to smbfs_common (bsc#1200217).
smb3: send NTLMSSP version information (bsc#1200217).
soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstbpmprobe (git-fixes).
spi: Fix use-after-free with devmspialloc_* (git-fixes).
SUNRPC: Fix the calculation of xdr->end in xdrgetnextencodebuffer() (git-fixes).
sunvnet: use icmpndosend helper (git-fixes).
tty: goldfish: Fix free_irq() on remove (git-fixes).
usb: chipidea: udc: check request status before setting device address (git-fixes).
usb: dwc2: Fix memory leak in dwc2hcdinit (git-fixes).
usb: gadget: lpc32xxudc: Fix refcount leak in lpc32xxudc_probe (git-fixes).
usb: gadget: u_ether: fix regression in setting fixed MAC address (git-fixes).
usbnet: fix memory allocation in helpers (git-fixes).
USB: serial: io_ti: add Agilent E5805A support (git-fixes).
USB: serial: option: add Quectel EM05-G modem (git-fixes).
USB: serial: option: add Quectel RM500K module support (git-fixes).
USB: serial: option: add support for Cinterion MV31 with new baseline (git-fixes).
USB: serial: option: add Telit LE910Cx 0x1250 composition (git-fixes).
usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC (git-fixes).
veth: fix races around rq->rxnotifymasked (git-fixes).
virtio-mmio: fix missing putdevice() when vmcmdline_parent registration failed (git-fixes).
virtio-net: fix race between ndoopen() and virtiodevice_ready() (git-fixes).
virtionet: fix xdprxq_info bug after suspend/resume (git-fixes).
virtio-pci: Remove wrong address verification in vpdelvqs() (git-fixes).
vmxnet3: fix minimum vectors alloc issue (bsc#1199489).
writeback: Avoid skipping inode writeback (bsc#1200813).
writeback: Fix inode->iiolist not be protected by inode->i_lock error (bsc#1200821).
xhci: Add reset resume quirk for AMD xhci controller (git-fixes).

References

Affected packages

SUSE:Linux Enterprise Module for Public Cloud 15 SP3 / kernel-azure

Package

Name: kernel-azure
Purl: pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.38.69.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-devel": "5.3.18-150300.38.69.1",
            "kernel-devel-azure": "5.3.18-150300.38.69.1",
            "kernel-syms-azure": "5.3.18-150300.38.69.1",
            "kernel-source-azure": "5.3.18-150300.38.69.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP3 / kernel-source-azure

Package

Name: kernel-source-azure
Purl: pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.38.69.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-devel": "5.3.18-150300.38.69.1",
            "kernel-devel-azure": "5.3.18-150300.38.69.1",
            "kernel-syms-azure": "5.3.18-150300.38.69.1",
            "kernel-source-azure": "5.3.18-150300.38.69.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP3 / kernel-syms-azure

Package

Name: kernel-syms-azure
Purl: pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.38.69.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-devel": "5.3.18-150300.38.69.1",
            "kernel-devel-azure": "5.3.18-150300.38.69.1",
            "kernel-syms-azure": "5.3.18-150300.38.69.1",
            "kernel-source-azure": "5.3.18-150300.38.69.1"
        }
    ]
}

openSUSE:Leap 15.3 / kernel-azure

Package

Name: kernel-azure
Purl: pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.38.69.1

Ecosystem specific

{
    "binaries": [
        {
            "reiserfs-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-devel-azure": "5.3.18-150300.38.69.1",
            "dlm-kmp-azure": "5.3.18-150300.38.69.1",
            "cluster-md-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-extra": "5.3.18-150300.38.69.1",
            "gfs2-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-optional": "5.3.18-150300.38.69.1",
            "kernel-azure-devel": "5.3.18-150300.38.69.1",
            "kernel-azure": "5.3.18-150300.38.69.1",
            "kselftests-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-syms-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-livepatch-devel": "5.3.18-150300.38.69.1",
            "ocfs2-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-source-azure": "5.3.18-150300.38.69.1"
        }
    ]
}

openSUSE:Leap 15.3 / kernel-source-azure

Package

Name: kernel-source-azure
Purl: pkg:rpm/opensuse/kernel-source-azure&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.38.69.1

Ecosystem specific

{
    "binaries": [
        {
            "reiserfs-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-devel-azure": "5.3.18-150300.38.69.1",
            "dlm-kmp-azure": "5.3.18-150300.38.69.1",
            "cluster-md-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-extra": "5.3.18-150300.38.69.1",
            "gfs2-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-optional": "5.3.18-150300.38.69.1",
            "kernel-azure-devel": "5.3.18-150300.38.69.1",
            "kernel-azure": "5.3.18-150300.38.69.1",
            "kselftests-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-syms-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-livepatch-devel": "5.3.18-150300.38.69.1",
            "ocfs2-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-source-azure": "5.3.18-150300.38.69.1"
        }
    ]
}

openSUSE:Leap 15.3 / kernel-syms-azure

Package

Name: kernel-syms-azure
Purl: pkg:rpm/opensuse/kernel-syms-azure&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.38.69.1

Ecosystem specific

{
    "binaries": [
        {
            "reiserfs-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-devel-azure": "5.3.18-150300.38.69.1",
            "dlm-kmp-azure": "5.3.18-150300.38.69.1",
            "cluster-md-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-extra": "5.3.18-150300.38.69.1",
            "gfs2-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-optional": "5.3.18-150300.38.69.1",
            "kernel-azure-devel": "5.3.18-150300.38.69.1",
            "kernel-azure": "5.3.18-150300.38.69.1",
            "kselftests-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-syms-azure": "5.3.18-150300.38.69.1",
            "kernel-azure-livepatch-devel": "5.3.18-150300.38.69.1",
            "ocfs2-kmp-azure": "5.3.18-150300.38.69.1",
            "kernel-source-azure": "5.3.18-150300.38.69.1"
        }
    ]
}