SUSE-SU-2022:3897-1

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bnc#1198702).
• CVE-2022-2153: Fixed vulnerability in KVM that could allow an unprivileged local attacker on the host to cause DoS (bnc#1200788).
• CVE-2022-2964, CVE-2022-28748: Fixed memory corruption issues in ax88179_178a devices (bnc#1202686 bsc#1196018).
• CVE-2022-2978: Fixed use-after-free in the NILFS file system that could lead to local privilege escalation or DoS (bnc#1202700).
• CVE-2022-3169: Fixed a denial of service flaw which occurs when consecutive requests to NVMEIOCTLRESET and the NVMEIOCTLSUBSYS_RESET are sent (bnc#1203290).
• CVE-2022-3176: Fixed use-after-free in io_uring when using POLLFREE (bnc#1203391).
• CVE-2022-3424: Fixed use-after-free in grusetcontextoption(), grufault() and gruhandleusercallos() that could lead to kernel panic (bsc#1204166).
• CVE-2022-3521: Fixed race condition in kcmtxwork() in net/kcm/kcmsock.c (bnc#1204355).
• CVE-2022-3524: Fixed memory leak in ipv6renewoptions() in the IPv6 handler (bnc#1204354).
• CVE-2022-3535: Fixed memory leak in mvpp2dbgfsportinit() in drivers/net/ethernet/marvell/mvpp2/mvpp2debugfs.c (bnc#1204417).
• CVE-2022-3542: Fixed memory leak in bnx2xtpastop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bnc#1204402).
• CVE-2022-3545: Fixed use-after-free in areacacheget() in drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bnc#1204415).
• CVE-2022-3565: Fixed use-after-free in deltimer() in drivers/isdn/mISDN/l1oipcore.c (bnc#1204431).
• CVE-2022-3577: Fixed out-of-bounds memory write flaw in bigben device driver that could lead to local privilege escalation or DoS (bnc#1204470).
• CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bnc#1204439).
• CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bnc#1204479).
• CVE-2022-3621: Fixed null pointer dereference in nilfsbmaplookupatlevel() in fs/nilfs2/inode.c (bnc#1204574).
• CVE-2022-3623: Fixed race condition in followpagepte() (mm/gup.c) (bsc#1204575).
• CVE-2022-3625: Fixed use-after-free in devlinkparamset()/devlinkparamget() in net/core/devlink.c (bnc#1204637).
• CVE-2022-3629: Fixed memory leak in vsockconnect() in net/vmwvsock/af_vsock.c (bnc#1204635).
• CVE-2022-3640: Fixed use-after-free in l2capconndel() in net/bluetooth/l2cap_core.c (bnc#1204619).
• CVE-2022-3646: Fixed memory leak in nilfsattachlog_writer() in fs/nilfs2/segment.c (bnc#1204646).
• CVE-2022-3649: Fixed use-after-free in nilfsnewinode() in fs/nilfs2/inode.c (bnc#1204647).
• CVE-2022-39189: Fixed a flaw in the x86 KVM subsystem that could allow unprivileged guest users to compromise the guest kernel via TLB flush operations on preempted vCPU (bnc#1203066).
• CVE-2022-40768: Fixed information disclosure in stexqueuecommandlck (bnc#1203514).
• CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770).
• CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).
• CVE-2022-42719: Fixed MBSSID parsing use-after-free. (bsc#1204051)
• CVE-2022-42720: Fixed BSS refcounting bugs. (bsc#1204059)
• CVE-2022-42721: Avoid nontransmitted BSS list corruption. (bsc#1204060)
• CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125)
• CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bnc#1204653).

The following non-security bugs were fixed:

• acpi: APEI: do not add task_work to kernel thread to avoid memory leak (git-fixes).
• acpi: HMAT: Release platform device in case of platformdeviceadd_data() fails (git-fixes).
• acpi: extlog: Handle multiple records (git-fixes).
• acpi: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (bnc#1203802).
• acpi: video: Add Toshiba Satellite/Portege Z830 quirk (git-fixes).
• alsa: Use deltimersync( before freeing timer (git-fixes).
• alsa: ac97: fix possible memory leak in sndac97dev_register() (git-fixes).
• alsa: aoa: Fix I2S device accounting (git-fixes).
• alsa: aoa: i2sbus: fix possible memory leak in i2sbusadddev() (git-fixes).
• alsa: asihpi - Remove useless code in hpimeterget_peak() (git-fixes).
• alsa: au88x0: use explicitly signed char (git-fixes).
• alsa: dmaengine: increment buffer pointer atomically (git-fixes).
• alsa: hda/hdmi: Do not skip notification handling during PM operation (git-fixes).
• alsa: hda/realtek: Add Intel Reference SSID to support headset keys (git-fixes).
• alsa: hda/realtek: Add pincfg for ASUS G513 HP jack (git-fixes).
• alsa: hda/realtek: Add pincfg for ASUS G533Z HP jack (git-fixes).
• alsa: hda/realtek: Add quirk for ASUS GA503R laptop (git-fixes).
• alsa: hda/realtek: Add quirk for ASUS GV601R laptop (git-fixes).
• alsa: hda/realtek: Add quirk for Huawei WRT-WX9 (git-fixes).
• alsa: hda/realtek: Correct pin configs for ASUS G533Z (git-fixes).
• alsa: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop (git-fixes).
• alsa: hda/realtek: remove ALC289FIXUPDUAL_SPK for Dell 5530 (git-fixes).
• alsa: hda/sigmatel: Fix unused variable warning for beep power change (git-fixes).
• alsa: hda/sigmatel: Keep power up while beep is enabled (git-fixes).
• alsa: hda/tegra: Align BDL entry to 4KB boundary (git-fixes).
• alsa: hda: Fix position reporting on Poulsbo (git-fixes).
• alsa: hda: add Intel 5 Series / 3400 PCI DID (git-fixes).
• alsa: oss: Fix potential deadlock at unregistration (git-fixes).
• alsa: rawmidi: Drop registermutex in sndrawmidi_free() (git-fixes).
• alsa: rme9652: use explicitly signed char (git-fixes).
• alsa: usb-audio: Fix NULL dererence at error path (git-fixes).
• alsa: usb-audio: Fix potential memory leaks (git-fixes).
• arm64: assembler: add cond_yield macro (git-fixes)
• asoc: eureka-tlv320: Hold reference returned from offindxxx API (git-fixes).
• asoc: fsl_sai: Remove unnecessary FIFO reset in ISR (git-fixes).
• asoc: mt6660: Fix PM disable depth imbalance in mt6660i2cprobe (git-fixes).
• asoc: nau8824: Fix semaphore unbalance at error paths (git-fixes).
• asoc: rsnd: Add check for rsndmodpower_on (git-fixes).
• asoc: tas2770: Reinit regcache on reset (git-fixes).
• asoc: wcd9335: fix order of Slimbus unprepare/disable (git-fixes).
• asoc: wcd934x: fix order of Slimbus unprepare/disable (git-fixes).
• asoc: wm5102: Fix PM disable depth imbalance in wm5102_probe (git-fixes).
• asoc: wm5110: Fix PM disable depth imbalance in wm5110_probe (git-fixes).
• asoc: wm8997: Fix PM disable depth imbalance in wm8997_probe (git-fixes).
• ata: fix ataidhas_devslp() (git-fixes).
• ata: fix ataidhas_dipm() (git-fixes).
• ata: fix ataidhasncqautosense() (git-fixes).
• ata: fix ataidsensereportingenabled() and ataidhassensereporting() (git-fixes).
• ata: libahci_platform: Sanity check the DT child nodes number (git-fixes).
• bluetooth: L2CAP: Fix user-after-free (git-fixes).
• bluetooth: L2CAP: initialize delayed works at l2capchancreate() (git-fixes).
• bluetooth: hci_core: Fix not handling link timeouts propertly (git-fixes).
• bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times (git-fixes).
• can: bcm: check the result of cansend() in bcmcan_tx() (git-fixes).
• can: gsusb: gscan_open(): fix race dev->can.state condition (git-fixes).
• can: kvaserusb: Fix possible completions during initcompletion (git-fixes).
• can: kvaser_usb: Fix use of uninitialized completion (git-fixes).
• can: kvaserusbleaf: Fix CAN state after restart (git-fixes).
• can: kvaserusbleaf: Fix TX queue out of sync after restart (git-fixes).
• can: mscan: mpc5xxx: mpc5xxxcanprobe(): add missing put_clock() in error path (git-fixes).
• cgroup/cpuset: Enable updatetaskscpumask() on top_cpuset (bsc#1204753).
• clk: bcm2835: Make peripheral PLLC critical (git-fixes).
• clk: bcm2835: fix bcm2835clockratefromdivisor declaration (git-fixes).
• clk: berlin: Add ofnodeput() for ofgetparent() (git-fixes).
• clk: imx: imx6sx: remove the SETRATEPARENT flag for QSPI clocks (git-fixes).
• clk: iproc: Do not rely on node name for correct PLL setup (git-fixes).
• clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (git-fixes).
• clk: oxnas: Hold reference returned by ofgetparent() (git-fixes).
• clk: qcom: gcc-msm8916: use ARRAYSIZE instead of specifying numparents (git-fixes).
• clk: qoriq: Hold reference returned by ofgetparent() (git-fixes).
• clk: tegra20: Fix refcount leak in tegra20clockinit (git-fixes).
• clk: tegra: Fix refcount leak in tegra114clockinit (git-fixes).
• clk: tegra: Fix refcount leak in tegra210clockinit (git-fixes).
• clk: ti: dra7-atl: Fix reference leak in ofdra7atlclkprobe (git-fixes).
• clk: zynqmp: Fix stack-out-of-bounds in strncpy` (git-fixes).
• clk: zynqmp: pll: rectify rate rounding in zynqmppllround_rate (git-fixes).
• crypto: akcipher - default implementation for setting a private key (git-fixes).
• crypto: arm64/sha - fix function types (git-fixes)
• crypto: arm64/sha1-ce - simplify NEON yield (git-fixes)
• crypto: arm64/sha2-ce - simplify NEON yield (git-fixes)
• crypto: arm64/sha3-ce - simplify NEON yield (git-fixes)
• crypto: arm64/sha512-ce - simplify NEON yield (git-fixes)
• crypto: cavium - prevent integer overflow loading firmware (git-fixes).
• crypto: ccp - Release dma channels before dmaengine unrgister (git-fixes).
• crypto: hisilicon/zip - fix mismatch in get/set sglsgenr (git-fixes).
• device property: Fix documentation for *matchstring() APIs (git-fixes).
• dmaengine: ioat: stop modtimer from resurrecting deleted timer in _cleanup() (git-fixes).
• dmaengine: xilinxdma: Report error in case of dmasetmaskand_coherent API failure (git-fixes).
• dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (git-fixes).
• docs: update mediator information in CoC docs (git-fixes).
• drivers: serial: jsm: fix some leaks in probe (git-fixes).
• drm/amd/display: Limit user regamma to a valid value (git-fixes).
• drm/amdgpu: do not register a dirty callback for non-atomic (git-fixes).
• drm/amdgpu: fix initial connector audio value (git-fixes).
• drm/amdgpu: use dirty framebuffer helper (git-fixes).
• drm/bridge: Avoid uninitialized variable warning (git-fixes).
• drm/bridge: megachips: Fix a null pointer dereference bug (git-fixes).
• drm/bridge: parade-ps8640: Fix regulator supply order (git-fixes).
• drm/i915/gvt: fix a memory leak in intelgvtinitvgputypes (git-fixes).
• drm/mipi-dsi: Detach devices when removing the host (git-fixes).
• drm/msm/dpu: Fix comment typo (git-fixes).
• drm/msm/dpu: index dpukms->hwvbif using vbif_idx (git-fixes).
• drm/msm/dsi: fix memory corruption with too many bridges (git-fixes).
• drm/msm/hdmi: fix memory corruption with too many bridges (git-fixes).
• drm/msm: Fix return type of mdp4lvdsconnectormodevalid (git-fixes).
• drm/msm: Make .remove and .shutdown HW shutdown consistent (git-fixes).
• drm/nouveau/nouveaubo: fix potential memory leak in nouveaubo_alloc() (git-fixes).
• drm/nouveau: fix a use-after-free in nouveaugemprimeimportsg_table() (git-fixes).
• drm/omap: dss: Fix refcount leak bugs (git-fixes).
• drm/rockchip: Fix return type of cdndpconnectormodevalid (git-fixes).
• drm/scheduler: quieten kernel-doc warnings (git-fixes).
• drm/udl: Restore display mode on resume (git-fixes).
• drm: Prevent drmcopyfield() to attempt copying a NULL pointer (git-fixes).
• drm: Use sizet type for len variable in drmcopy_field() (git-fixes).
• drm: bridge: adv7511: fix CEC power down control register offset (git-fixes).
• drm: fix drmmipidbi build errors (git-fixes).
• drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (git-fixes).
• drm:pl111: Add ofnodeput() when breaking out of foreachavailablechildof_node() (git-fixes).
• dyndbg: fix module.dyndbg handling (git-fixes).
• dyndbg: let query-modname override actual module name (git-fixes).
• efi: Correct Macmini DMI match in uefi cert quirk (git-fixes).
• efi: libstub: drop pointless getmemorymap() call (git-fixes).
• exfat: Return ENAMETOOLONG consistently for oversized paths (bsc#1204053 bsc#1201725).
• fbdev: cyber2000fb: fix missing pcidisabledevice() (git-fixes).
• fbdev: da8xx-fb: Fix error handling in .remove() (git-fixes).
• firmware: arm_scmi: Add SCMI PM driver remove routine (git-fixes).
• firmware: google: Test spinlock on panic path to avoid lockups (git-fixes).
• fpga: prevent integer overflow in dflfeatureioctlsetirq() (git-fixes).
• gpio: rockchip: request GPIO mux to pinctrl when setting direction (git-fixes).
• hid: hid-logitech-hidpp: avoid unnecessary assignments in hidppconnectevent (git-fixes).
• hid: hidraw: fix memory leak in hidraw_release() (git-fixes).
• hid: magicmouse: Do not set BTN_MOUSE on double report (git-fixes).
• hid: multitouch: Add memory barriers (git-fixes).
• hid: roccat: Fix use-after-free in roccat_read() (git-fixes).
• hsi: omapssi: Fix refcount leak in ssiprobe (git-fixes).
• hsi: omapssiport: Fix dmamapsg error check (git-fixes).
• hwmon/coretemp: Handle large core ID value (git-fixes).
• ib/cm: Cancel mad on the DREQ event when the state is MRAREPRCVD (git-fixes)
• ib/cma: Allow XRC INI QPs to set their local ACK timeout (git-fixes)
• ib/core: Only update PKEY and GID caches on respective events (git-fixes)
• ib/hfi1: Adjust pkey entry in index 0 (git-fixes)
• ib/hfi1: Fix abba locking issue with sc_disable() (git-fixes)
• ib/hfi1: Fix possible null-pointer dereference in extendsdmatxdescs() (git-fixes)
• ib/mlx4: Add support for REJ due to timeout (git-fixes)
• ib/mlx4: Use port iterator and validation APIs (git-fixes)
• ib/qib: Protect from buffer overflow in struct qibusersdma_pkt fields (git-fixes)
• ib/rdmavt: Add init/exit annotations to module init/exit funcs (git-fixes)
• ib/srpt: Remove redundant assignment to ret (git-fixes)
• iio: ABI: Fix wrong format of differential capacitance channel ABI (git-fixes).
• iio: adc: ad7923: fix channel readings for some variants (git-fixes).
• iio: adc: at91-sama5d2_adc: check return status for pressure and touch (git-fixes).
• iio: adc: at91-sama5d2adc: fix AT91SAMA5D2MRTRACKTIM_MAX (git-fixes).
• iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (git-fixes).
• iio: adc: mcp3911: use correct id bits (git-fixes).
• iio: dac: ad5593r: Fix i2c read protocol requirements (git-fixes).
• iio: inkern: only release the device node when done with it (git-fixes).
• iio: light: tsl2583: Fix module unloading (git-fixes).
• iio: pressure: dps310: Refactor startup procedure (git-fixes).
• iio: pressure: dps310: Reset chip after timeout (git-fixes).
• input: i8042 - fix refount leak on sparc (git-fixes).
• input: xpad - add supported devices as contributed on github (git-fixes).
• input: xpad - fix wireless 360 controller breaking after suspend (git-fixes).
• irqchip/ls-extirq: Fix invalid wait context by avoiding to use regmap (git-fixes).
• kABI: arm64/crypto/sha512 Preserve function signature (git-fixes).
• kbuild: Add skipencodingbtf_enum64 option to pahole (git-fixes).
• kbuild: remove the target in signal traps when interrupted (git-fixes).
• kbuild: sink stdout from cmd for silent build (git-fixes).
• kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21 (jsc#SLE-24559).
• kthread: Extract KTHREADISPER_CPU (bsc#1204753).
• kvm: nVMX: Unconditionally purge queued/injected events on nested 'exit' (git-fixes).
• kvm: s390: Clarify SIGP orders versus STOP/RESTART (git-fixes).
• kvm: s390: VSIE: fix MVPG handling for prefixing and MSO (git-fixes).
• kvm: s390: clear kicked_mask before sleeping again (git-fixes).
• kvm: s390: preserve deliverablemask in _airqskicksingle_vcpu (git-fixes).
• kvm: s390: pv: do not present the ecall interrupt twice (git-fixes).
• kvm: s390: split kvms390realtoabs (git-fixes).
• kvm: s390x: fix SCK locking (git-fixes)
• kvm: x86/emulator: Fix handing of POP SS to correctly set interruptibility (git-fixes).
• lib/sgpool: change moduleinit(sgpoolinit) to subsys_initcall (git-fixes).
• libata: add ATAHORKAGENOLPM for Pioneer BDR-207M and BDR-205 (git-fixes).
• locking/csdlock: Change csdlockdebug from earlyparam to _setup (git-fixes).
• mISDN: fix use-after-free bugs in l1oip timer handlers (git-fixes).
• mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (git-fixes).
• mac802154: Fix LQI recording (git-fixes).
• mailbox: bcm-ferxrm-mailbox: Fix error check for dmamapsg (git-fixes).
• media: aspeed-video: ignore interrupts that are not enabled (git-fixes).
• media: cedrus: Set the platform driver data earlier (git-fixes).
• media: coda: Add more H264 levels for CODA960 (git-fixes).
• media: coda: Fix reported H264 profile (git-fixes).
• media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (git-fixes).
• media: dvb_vb2: fix possible out of bound access (git-fixes).
• media: v4l2-dv-timings: add sanity checks for blanking values (git-fixes).
• media: videodev2.h: V4L2DVBTBLANKINGHEIGHT should check 'interlaced' (git-fixes).
• media: xilinx: vipp: Fix refcount leak in xvipgraphdma_init (git-fixes).
• memory: of: Fix refcount leak bug in ofgetddr_timings() (git-fixes).
• memory: pl353-smc: Fix refcount leak bug in pl353smcprobe() (git-fixes).
• mfd: fsl-imx25: Fix an error handling path in mx25tsadcsetup_irq() (git-fixes).
• mfd: intelsocpmic: Fix an error handling path in intelsocpmici2cprobe() (git-fixes).
• mfd: lp8788: Fix an error handling path in lp8788irqinit() and lp8788irqinit() (git-fixes).
• mfd: lp8788: Fix an error handling path in lp8788_probe() (git-fixes).
• mfd: sm501: Add check for platformdriverregister() (git-fixes).
• misc: ocxl: fix possible refcount leak in afu_ioctl() (git-fixes).
• mm, memcg: avoid stale protection values when cgroup is above protection (bsc#1204754).
• mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (bsc#1204575).
• mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim (bsc#1204754).
• mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (git-fixes).
• mmc: core: Fix kernel panic when remove non-standard SDIO card (git-fixes).
• mmc: core: Replace with already defined values for readability (git-fixes).
• mmc: core: Terminate infinite loop in SD-UHS voltage switch (git-fixes).
• mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (git-fixes).
• mmc: sdhci-msm: add compatible string check for sdm670 (git-fixes).
• mmc: sdhci-sprd: Fix minimum clock limit (git-fixes).
• mmc: wmt-sdmmc: Fix an error handling path in wmtmciprobe() (git-fixes).
• mtd: devices: docg3: check the return value of devm_ioremap() in the probe (git-fixes).
• mtd: rawnand: atmel: Unmap streaming DMA mappings (git-fixes).
• mtd: rawnand: marvell: Use correct logic for nand-keep-config (git-fixes).
• mtd: rawnand: meson: fix bit map use in mesonnfcecc_correct() (git-fixes).
• net/ieee802154: fix uninit value bug in dgram_sendmsg (git-fixes).
• net: ieee802154: return -EINVAL for unknown addr type (git-fixes).
• net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (git-fixes).
• net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (git-fixes).
• net: usb: qmi_wwan: add Quectel RM520N (git-fixes).
• openvswitch: Fix double reporting of drops in dropwatch (git-fixes).
• openvswitch: Fix overreporting of drops in dropwatch (git-fixes).
• openvswitch: switch from WARN to pr_warn (git-fixes).
• padata: introduce internal padataget/putpd() helpers (bsc#1202638).
• padata: make padatafreeshell() to respect pd's ->refcnt (bsc#1202638).
• parisc/sticon: fix reverse colors (bsc#1152489) Backporting notes: * context changes
• parisc: parisc-agp requires SBA IOMMU driver (bsc#1152489)
• pci: Dynamically map ECAM regions (bsc#1204382).
• pci: Fix usedbuses calculation in pciscanchildbus_extend() (git-fixes).
• pci: Sanitise firmware BAR assignments behind a PCI-PCI bridge (git-fixes).
• phy: qualcomm: call clkdisableunprepare in the error handling (git-fixes).
• pinctrl: armada-37xx: Add missing GPIO-only pins (git-fixes).
• pinctrl: armada-37xx: Checks for errors in gpiorequestenable callback (git-fixes).
• pinctrl: armada-37xx: Fix definitions for MPP pins 20-22 (git-fixes).
• pinctrl: rockchip: add pinmuxops.gpioset_direction callback (git-fixes).
• platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (git-fixes).
• platform/x86: msi-laptop: Fix old-ec check for backlight registering (git-fixes).
• platform/x86: msi-laptop: Fix resource cleanup (git-fixes).
• pm: domains: Fix handling of unavailable/disabled idle states (git-fixes).
• pm: hibernate: Allow hybrid sleep to work with s2idle (git-fixes).
• power: supply: adp5061: fix out-of-bounds read in adp5061getchg_type() (git-fixes).
• powerpc/64: Remove unused SYSCALLTABLE symbol (jsc#SLE-9246 git-fixes).
• powerpc/fadump: align destination address to pagesize (bsc#1204728 ltc#200074).
• powerpc/kprobes: Fix null pointer reference in archpreparekprobe() (jsc#SLE-13847 git-fixes).
• powerpc/mm/64s: Drop pgd_huge() (bsc#1065729).
• powerpc/mm: remove pmdhuge/pudhuge stubs and include hugetlb.h (bsc#1065729).
• powerpc/pcidn: Add missing ofnode_put() (bsc#1065729).
• powerpc/powernv: add missing ofnodeput() in opalexportattrs() (bsc#1065729).
• powerpc/pseries: Interface to represent PAPR firmware attributes (bsc#1200465 ltc#197256 jsc#PED-1931).
• quota: widen timestamps for the fsdiskquota structure (bsc#1203387).
• rdma/bnxt_re: Add missing spin lock initialization (git-fixes)
• rdma/bnxt_re: Fix query SRQ failure (git-fixes)
• rdma/cm: Fix memory leak in ibcminsert_listen (git-fixes)
• rdma/cma: Ensure rdmaaddrcancel() happens before issuing more requests (git-fixes)
• rdma/cma: Fix arguments order in net device validation (git-fixes)
• rdma/core: Sanitize WQ state received from the userspace (git-fixes)
• rdma/cxgb4: Remove MW support (git-fixes)
• rdma/efa: Free IRQ vectors on error flow (git-fixes)
• rdma/efa: Remove double QP type assignment (git-fixes)
• rdma/efa: Use ibumemnumdmapages() (git-fixes)
• rdma/hfi1: Fix potential integer multiplication overflow errors (git-fixes)
• rdma/hns: Remove unnecessary check for the sgid_attr when modifying QP (git-fixes)
• rdma/i40iw: Use ibumemnumdmapages() (git-fixes)
• rdma/iwcm: Release resources if iw_cm module initialization fails (git-fixes)
• rdma/mlx4: Return missed an error if device does not support steering (git-fixes)
• rdma/mlx5: Add missing check for return value in get namespace flow (git-fixes)
• rdma/mlx5: Block FDB rules when not in switchdev mode (git-fixes)
• rdma/mlx5: Fix memory leak in error flow for subscribe event routine (git-fixes)
• rdma/mlx5: Make mkeys always owned by the kernel's PD when not enabled (git-fixes)
• rdma/mlx5: Set user priority for DCT (git-fixes)
• rdma/mlx5: Use setmkcaccesspdaddrfields() in regcreate() (git-fixes)
• rdma/mthca: Work around -Wenum-conversion warning (git-fixes)
• rdma/qedr: Fix NULL deref for query_qp on the GSI QP (git-fixes)
• rdma/qedr: Fix potential memory leak in _qedralloc_mr() (git-fixes)
• rdma/qedr: Fix reporting QP timeout attribute (git-fixes)
• rdma/qib: Remove superfluous fallthrough statements (git-fixes)
• rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes)
• rdma/rxe: Do not overwrite errno from ibumemget() (git-fixes)
• rdma/rxe: Fix 'kernel NULL pointer dereference' error (git-fixes)
• rdma/rxe: Fix error unwind in rxecreateqp() (git-fixes)
• rdma/rxe: Fix extra copies in buildrdmanetwork_hdr (git-fixes)
• rdma/rxe: Fix extra copy in prepareackpacket (git-fixes)
• rdma/rxe: Fix failure during driver load (git-fixes)
• rdma/rxe: Fix over copying in getsrqwqe (git-fixes)
• rdma/rxe: Fix redundant call to ipsendcheck (git-fixes)
• rdma/rxe: Fix redundant skbputzero (git-fixes)
• rdma/rxe: Fix rnr retry behavior (git-fixes)
• rdma/rxe: Fix the error caused by qp->sk (git-fixes)
• rdma/rxe: Fix wrong portcapflags (git-fixes)
• rdma/rxe: Generate a completion for unsupported/invalid opcode (git-fixes)
• rdma/rxe: Remove unused pkt->offset (git-fixes)
• rdma/rxe: Return CQE error if invalid lkey was supplied (git-fixes)
• rdma/saquery: Use strscpypad instead of memcpy to copy a string (git-fixes)
• rdma/siw: Always consume all skbuf data in skdataready() upcall. (git-fixes)
• rdma/siw: Fix a condition race issue in MPA request processing (git-fixes)
• rdma/siw: Fix duplicated reported IWCMEVENTCONNECTREPLY event (git-fixes)
• rdma/siw: Pass a pointer to virttopage() (git-fixes)
• rdma/usnic: fix set-but-not-unused variable 'flags' warning (git-fixes)
• rdma: Verify port when creating flow rule (git-fixes)
• rdma: remove useless condition in siwcreatecq() (git-fixes)
• regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100regulatorprobe() (git-fixes).
• regulator: qcom_rpm: Fix circular deferral regression (git-fixes).
• reset: imx7: Fix the iMX8MP PCIe PHY PERST support (git-fixes).
• revert 'drivers/video/backlight/platform_lcd.c: add support for (bsc#1152489)
• revert 'drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time' (git-fixes).
• revert 'usb: add quirks for Lenovo OneLink+ Dock' (git-fixes).
• revert 'usb: storage: Add quirk for Samsung Fit flash' (git-fixes).
• revert 'usb: storage: Add quirk for Samsung Fit flash' (git-fixes).
• rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (git-fixes).
• rtc: stmp3xxx: Add failure handling for stmp3xxxwdtregister() (git-fixes).
• s390/hypfs: avoid error message under KVM (bsc#1032323).
• sbitmap: Avoid leaving waitqueue in invalid state in _sbqwake_up() (git-fixes).
• sbitmap: fix possible io hung due to lost wakeup (git-fixes).
• scsi: libsas: Fix use-after-free bug in smpexecutetask_sg() (git-fixes).
• scsi: mpt3sas: Fix return value check of dmagetrequired_mask() (git-fixes).
• scsi: qla2xxx: Fix disk failure to rediscover (git-fixes).
• selftest/powerpc: Add PAPR sysfs attributes sniff test (bsc#1200465 ltc#197256 jsc#PED-1931).
• selftests/powerpc: Skip energyscaleinfo test on older firmware (git-fixes).
• serial: Create uartxmitadvance() (git-fixes).
• serial: tegra-tcu: Use uartxmitadvance(), fixes icount.tx accounting (git-fixes).
• serial: tegra: Use uartxmitadvance(), fixes icount.tx accounting (git-fixes).
• soc: qcom: smemstate: Add refcounting for the 'state->ofnode' (git-fixes).
• soc: qcom: smsm: Fix refcount leak bugs in qcomsmsmprobe() (git-fixes).
• soc: sunxi: sram: Actually claim SRAM regions (git-fixes).
• soc: sunxi: sram: Fix debugfs info for A64 SRAM C (git-fixes).
• soc: sunxi: sram: Prevent the driver from being unbound (git-fixes).
• soc: sunxisram: Make use of the helper function devmplatformioremapresource() (git-fixes).
• spi/omap100k:Fix PM disable depth imbalance in omap1spi100kprobe (git-fixes).
• spi: mt7621: Fix an error message in mt7621spiprobe() (git-fixes).
• spi: qup: add missing clkdisableunprepare on error in spiquppmresumeruntime() (git-fixes).
• spi: qup: add missing clkdisableunprepare on error in spiqupresume() (git-fixes).
• spi: s3c64xx: Fix large transfers with DMA (git-fixes).
• staging: rtl8723bs: fix a potential memory leak in rtwinitcmd_priv() (git-fixes).
• staging: vt6655: fix potential memory leak (git-fixes).
• staging: vt6655: fix some erroneous memory clean-up loops (git-fixes).
• struct pciconfigwindow kABI workaround (bsc#1204382).
• thermal: intelpowerclamp: Use first online CPU as controlcpu (git-fixes).
• thermal: intelpowerclamp: Use getcpu() instead of smpprocessorid() to avoid crash (git-fixes).
• tty/serial: atmel: RS485 & ISO7816: wait for TXRDY before sending data (git-fixes).
• tty: serial: fsllpuart: disable dma rx/tx use flags in lpuartdma_shutdown (git-fixes).
• tty: xilinxuartps: Fix the ignorestatus (git-fixes).
• uas: add no-uas quirk for Hiksemi usb_disk (git-fixes).
• uas: ignore UAS for Thinkplus chips (git-fixes).
• usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (git-fixes).
• usb: add quirks for Lenovo OneLink+ Dock (git-fixes).
• usb: add quirks for Lenovo OneLink+ Dock (git-fixes).
• usb: bdc: change state when port disconnected (git-fixes).
• usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind (git-fixes).
• usb: dwc3: gadget: Do not set IMI for no_interrupt (git-fixes).
• usb: dwc3: gadget: Prevent repeat pullup() (git-fixes).
• usb: dwc3: gadget: Stop processing more requests on IMI (git-fixes).
• usb: gadget: function: fix dangling pnpstring in fprinter.c (git-fixes).
• usb: host: xhci: Fix potential memory leak in xhciallocstream_info() (git-fixes).
• usb: idmouse: fix an uninit-value in idmouse_open (git-fixes).
• usb: mon: make mmapped memory read only (git-fixes).
• usb: musb: Fix musb_gadget.c rxstate overflow bug (git-fixes).
• usb: serial: console: move mutexunlock() before usbserial_put() (git-fixes).
• usb: serial: ftdi_sio: fix 300 bps rate for SIO (git-fixes).
• usb: serial: option: add Quectel BG95 0x0203 composition (git-fixes).
• usb: serial: option: add Quectel BG95 0x0203 composition (git-fixes).
• usb: serial: option: add Quectel RM520N (git-fixes).
• usb: serial: option: add Quectel RM520N (git-fixes).
• usb: serial: qcserial: add new usb-id for Dell branded EM7455 (git-fixes).
• usb: serial: qcserial: add new usb-id for Dell branded EM7455 (git-fixes).
• usb: typec: ucsi: Remove incorrect warning (git-fixes).
• usb: xhci-mtk: add a function to (un)load bandwidth info (git-fixes).
• usb: xhci-mtk: add only one extra CS for FS/LS INTR (git-fixes).
• usb: xhci-mtk: add some schedule error number (git-fixes).
• usb: xhci-mtk: fix issue of out-of-bounds array access (git-fixes).
• usb: xhci-mtk: get the microframe boundary for ESIT (git-fixes).
• usb: xhci-mtk: use @sch_tt to check whether need do TT schedule (git-fixes).
• vhost/vsock: Use kvmalloc/kvfree for larger packets (git-fixes).
• video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xxgcuwrite (git-fixes).
• watchdog: armada37xxwdt: Fix .set_timeout callback (git-fixes).
• watchdog: ftwdt010wdt: fix test for platformget_irq() failure (git-fixes).
• wifi: ath10k: add peer map clean up for peer delete in ath10kstastate() (git-fixes).
• wifi: ath9k: avoid uninit memory read in ath9khtcrx_msg() (git-fixes).
• wifi: brcmfmac: fix invalid address access when enabling SCAN log level (git-fixes).
• wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstart_xmit() (git-fixes).
• wifi: cfg80211: update hidden BSSes to avoid WARN_ON (git-fixes).
• wifi: iwlwifi: mvm: fix double listadd at iwlmvmmacwaketxqueue (other cases) (git-fixes).
• wifi: mac80211: Fix UAF in ieee80211scanrx() (git-fixes).
• wifi: mac80211: allow bw change during channel switch in mesh (git-fixes).
• wifi: mac80211: do not drop packets smaller than the LLC-SNAP header on fast-rx (git-fixes).
• wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (git-fixes).
• wifi: rt2x00: correctly set BBP register 86 for MT7620 (git-fixes).
• wifi: rt2x00: do not run Rt5592 IQ calibration on MT7620 (git-fixes).
• wifi: rt2x00: set SoC wmac clock register (git-fixes).
• wifi: rt2x00: set VGC gain for both chains of MT7620 (git-fixes).
• wifi: rt2x00: set correct TXSWCFG1 MAC register for MT7620 (git-fixes).
• wifi: rtl8xxxu: Fix AIFS written to REGEDCA*_PARAM (git-fixes).
• wifi: rtl8xxxu: Fix skb misuse in TX queue selection (git-fixes).
• wifi: rtl8xxxu: Improve rtl8xxxuqueueselect (git-fixes).
• wifi: rtl8xxxu: Remove copy-paste leftover in gen2updaterate_mask (git-fixes).
• wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (git-fixes).
• wifi: rtl8xxxu: tighten bounds checking in rtl8xxxureadefuse() (git-fixes).
• xfs: add missing assert in xfsfsmapownerfromrmap (git-fixes).
• xfs: enable big timestamps (bsc#1203387).
• xfs: enable new inode btree counters feature (bsc#1203387).
• xfs: explicitly define inode timestamp range (bsc#1203387).
• xfs: fix memory corruption during remote attr value buffer invalidation (git-fixes).
• xfs: fix s_maxbytes computation on 32-bit kernels (git-fixes).
• xfs: hoist out xfsresizefsinitnewags() (git-fixes).
• xfs: move incore structures out of xfsdaformat.h (git-fixes).
• xfs: quota: move to time64_t interfaces (bsc#1203387).
• xfs: redefine xfsictimestampt (bsc#1203387). Refresh patches.suse/xfs-repair-malformed-inode-items-during-log-recovery.patch.
• xfs: redefine xfstimestampt (bsc#1203387).
• xfs: refactor remote attr value buffer invalidation (git-fixes).
• xfs: remove obsolete AGF counter debugging (git-fixes).
• xfs: rename new' todelta' in xfsgrowfsdata_private() (git-fixes).
• xfs: reserve data and rt quota at the same time (bsc#1203496).
• xfs: slightly tweak an assert in xfsfsmap_blocks (git-fixes).
• xfs: store inode btree block counts in AGI header (bsc#1203387).
• xfs: streamline xfsattr3leaf_inactive (git-fixes).
• xfs: use a struct timespec64 for the in-core crtime (bsc#1203387).
• xfs: use the finobt block counts to speed up mount times (bsc#1203387).
• xfs: widen ondisk inode timestamps to deal with y2038+ (bsc#1203387).
• xfs: widen ondisk quota expiration timestamps to handle y2038+ (bsc#1203387).
• xhci: Do not show warning for reinit on known broken suspend (git-fixes).