SUSE-SU-2022:4566-1

Source
https://www.suse.com/support/update/announcement/2022/suse-su-20224566-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4566-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2022:4566-1
Related
Published
2022-12-19T12:50:20Z
Modified
2022-12-19T12:50:20Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2022-4378: Fixed stack overflow in _doproc_dointvec (bsc#1206207).
  • CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
  • CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
  • CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
  • CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
  • CVE-2022-41850: Fixed a race condition in roccatreportevent() in drivers/hid/hid-roccat.c (bsc#1203960).
  • CVE-2022-45934: Fixed a integer wraparound via L2CAPCONFREQ packets in l2capconfigreq in net/bluetooth/l2cap_core.c (bsc#1205796).
  • CVE-2022-3628: Fixed potential buffer overflow in brcmffwehevent_worker() in wifi/brcmfmac (bsc#1204868).
  • CVE-2022-3567: Fixed a to race condition in inet6streamops()/inet6dgramops() (bsc#1204414).
  • CVE-2022-41858: Fixed a denial of service in sltxtimeout() in drivers/net/slip (bsc#1205671).
  • CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
  • CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
  • CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
  • CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2capcore.c's l2capparseconfreq() which can be used to leak kernel pointers remotely (bsc#1205705).
  • CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2capcore.c's l2capconnect() and l2capleconnect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).

The following non-security bugs were fixed:

  • Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
  • Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening (bsc#1204017, bsc#1205617).
  • Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1204017).
  • Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (bsc#1204017).
  • Drivers: hv: vmbus: Fix potential crash on module unload (git-fixes).
  • Drivers: hv: vmbus: Introduce vmbusrequestaddr_match() (bsc#1204017, bsc#1205617).
  • Drivers: hv: vmbus: Introduce vmbussendpacketgetid() (bsc#1204017, bsc#1205617).
  • Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (bsc#1204017, bsc#1205617).
  • Drivers: hv: vmbus: Move _vmbusopen() (bsc#1204017).
  • Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (git-fixes).
  • Drivers: hv: vmbus: fix double free in the error path of vmbusaddchannel_work() (git-fixes).
  • Drivers: hv: vmbus: fix possible memory leak in vmbusdeviceregister() (git-fixes).
  • FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (git-fixes).
  • FDDI: defxx: Make MMIO the configuration default except for EISA (git-fixes).
  • KVM: s390: Add a routine for setting userspace CPU state (git-fixes).
  • KVM: s390: Clarify SIGP orders versus STOP/RESTART (git-fixes).
  • KVM: s390: Fix handle_sske page fault handling (git-fixes).
  • KVM: s390: Simplify SIGP Set Arch handling (git-fixes).
  • KVM: s390: fix memory slot handling for KVMSETUSERMEMORYREGION (git-fixes).
  • KVM: s390: reduce number of IO pins to 1 (git-fixes).
  • KVM: s390: split kvms390logicaltoeffective (git-fixes).
  • KVM: s390: split kvms390realtoabs (git-fixes).
  • KVM: s390x: fix SCK locking (git-fixes).
  • NIU: fix incorrect error return, missed in previous revert (git-fixes).
  • PCI: hv: Add check for hypervinitialized in inithvpcidrv() (bsc#1204446).
  • PCI: hv: Add validation for untrusted Hyper-V values (bsc#1204017).
  • PCI: hv: Drop msi_controller structure (bsc#1204446).
  • PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).
  • PCI: hv: Fix a race condition when removing the device (bsc#1204446).
  • PCI: hv: Fix hvarchirq_unmask() for multi-MSI (bsc#1200845).
  • PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
  • PCI: hv: Fix multi-MSI to allow more than one MSI vector (bsc#1200845).
  • PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (bsc#1204446).
  • PCI: hv: Fix synchronization between channel callback and hvcomposemsi_msg() (bsc#1204017, bsc#1203860, bsc#1205617).
  • PCI: hv: Fix synchronization between channel callback and hvpcibus_exit() (bsc#1204017, bsc#1205617).
  • PCI: hv: Fix the definition of vector in hvcomposemsi_msg() (bsc#1200845).
  • PCI: hv: Make the code arch neutral by adding arch specific interfaces (bsc#1200845).
  • PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (bsc#1200845).
  • PCI: hv: Remove bus device removal unused refcount/functions (bsc#1204446).
  • PCI: hv: Remove unnecessary use of %hx (bsc#1204446).
  • PCI: hv: Reuse existing IRTE allocation in composemsimsg() (bsc#1200845).
  • PCI: hv: Support for create interrupt v3 (git-fixes).
  • PCI: hv: Use struct_size() helper (bsc#1204446).
  • PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (bsc#1204017).
  • PM: hibernate: fix sparse warnings (git-fixes).
  • Xen/gntdev: do not ignore kernel unmapping error (git-fixes).
  • add missing bug reference to a hv_netvsc patch file (bsc#1204850).
  • always clear the X2APIC_ENABLE bit for PV guest (git-fixes).
  • arm/xen: Do not probe xenbus as part of an early initcall (git-fixes).
  • ath5k: fix OOB in ath5keepromreadpcalinfo_5111 (git-fixes).
  • bfq: Update cgroup information before merging bio (git-fixes).
  • blk-mq: add callback of .cleanup_rq (git-fixes).
  • blktrace: Trace remapped requests correctly (git-fixes).
  • block/bfq: fix ifdef for CONFIGBFQGROUP_IOSCHED=y (git-fixes).
  • block: Add a helper to validate the block size (git-fixes).
  • block: blkqueueenter() / _bioqueue_enter() must return -EAGAIN for nowait (git-fixes).
  • block: do not delete queue kobject before its children (git-fixes).
  • block: respect queue limit of max discard segment (git-fixes).
  • block: rsxx: select CONFIG_CRC32 (git-fixes).
  • block: use 'unsigned long' for blkvalidateblock_size() (git-fixes).
  • bnxt_en: Clean up completion ring page arrays completely (git-fixes).
  • bnxt_en: Do not use static arrays for completion ring pages (git-fixes).
  • bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S (git-fixes).
  • bnxt_en: Fix TX timeout when TX ring size is set to the smallest (git-fixes).
  • bnxt_en: Free context memory after disabling PCI in probe error path (git-fixes).
  • bnxt_en: Increase maximum RX ring size if jumbo ring is not used (git-fixes).
  • brd: re-enable _GFPHIGHMEM in brdinsertpage() (git-fixes).
  • can: peakpci: peakpci_remove(): fix UAF (git-fixes).
  • can: peakusb: pcanusbfddecodestatus(): fix back to ERRORACTIVE state notification (git-fixes).
  • can: rcar_can: fix suspend/resume (git-fixes).
  • ceph: check availability of mds cluster on mount after wait timeout (bsc#1205903).
  • ceph: do not skip updating wanted caps when cap is stale (bsc#1205905).
  • ceph: fix fscache invalidation (bsc#1205907).
  • ceph: fix potential race in cephcheckcaps (bsc#1205906).
  • ceph: lockdep annotations for trynonblockinginvalidate (bsc#1205908).
  • ceph: return -EINVAL if given fsc mount option on kernel w/o support (bsc#1205902).
  • ceph: return -ERANGE if virtual xattr value didn't fit in buffer (bsc#1205901).
  • ceph: return cephmdscdorequest() errors from _get_parent() (bsc#1205904).
  • cuse: prevent clone (bsc#1206120).
  • cxgb4: dont touch blocked freelist bitmap after free (git-fixes).
  • dm era: commit metadata in postsuspend after worker stops (git-fixes).
  • dm mirror log: clear log bits up to BITSPERLONG boundary (git-fixes).
  • dm mpath: remove harmful bio-based optimization (git-fixes).
  • dm raid: fix accesses beyond end of raid member array (git-fixes).
  • dm raid: fix address sanitizer warning in raid_resume (git-fixes).
  • dm raid: fix address sanitizer warning in raid_status (git-fixes).
  • dm thin: fix use-after-free crash in dmsmregisterthresholdcallback (git-fixes).
  • dm: return early from dmprcall() if DM device is suspended (git-fixes).
  • e100: fix buffer overrun in e100getregs (git-fixes).
  • e100: fix length calculation in e100getregs_len (git-fixes).
  • floppy: Fix hang in watchdog when disk is ejected (git-fixes).
  • ftrace: Fix char print issue in printipins() (git-fixes).
  • ftrace: Fix the possible incorrect kernel message (git-fixes).
  • ftrace: Fix use-after-free for dynamic ftrace_ops (git-fixes).
  • ftrace: Optimize the allocation for mcount entries (git-fixes).
  • fuse: do not check refcount after stealing page (bsc#1206119).
  • fuse: retrieve: cap requested size to negotiated max_write (bsc#1206118).
  • fuse: use READONCE on congestionthreshold and max_background (bsc#1206117).
  • gianfar: Disable EEE autoneg by default (git-fixes).
  • hvnetvsc: Add check for kvmallocarray (git-fixes).
  • hv_netvsc: Add error handling while switching data path (bsc#1204850).
  • hv_netvsc: Add validation for untrusted Hyper-V values (bsc#1204017).
  • hv_netvsc: Cache the current data path to avoid duplicate call and message (bsc#1204017).
  • hv_netvsc: Check VF datapath when sending traffic to VF (bsc#1204017).
  • hvnetvsc: Fix error handling in netvscset_features() (git-fixes).
  • hv_netvsc: Fix race between VF offering and VF association message from host (git-fixes).
  • hvnetvsc: Print value of invalid ID in netvscsend{completion,txcomplete}() (bsc#1204017).
  • hvnetvsc: Process NETDEVGOING_DOWN on VF hot remove (bsc#1204850).
  • hvnetvsc: Remove unnecessary roundup for recvcompletioncnt (bsc#1204017).
  • hvnetvsc: Reset the RSC count if NVSPSTATFAIL in netvscreceive() (bsc#1204017).
  • hv_netvsc: Sync offloading features to VF NIC (git-fixes).
  • hvnetvsc: Use vmbusrequestor to generate transaction IDs for VMBus hardening (bsc#1204017).
  • hvnetvsc: Wait for completion on request SWITCHDATA_PATH (bsc#1204017).
  • hvnetvsc: use netifisbondmaster() instead of open code (git-fixes).
  • i40e: Fix kernel crash during module removal (git-fixes).
  • i40e: Fix reset path while removing the driver (git-fixes).
  • i40e: fix endless loop under rtnl (git-fixes).
  • ibmvnic: Free rwi on reset success (bsc#1184350 ltc#191533 git-fixes).
  • ice: Increase control queue timeout (git-fixes).
  • igb: Fix position of assignment to *ring (git-fixes).
  • igc: Fix use-after-free error during reset (git-fixes).
  • igc: change default return of igcreadphy_reg() (git-fixes).
  • ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
  • ixgbe: Fix packet corruption due to missing DMA sync (git-fixes).
  • kexec: turn all kexec_mutex acquisitions into trylocks (git-fixes).
  • kprobes/x86/xen: blacklist non-attachable xen interrupt functions (git-fixes).
  • livepatch: Add a missing newline character in klpmodulecoming() (bsc#1071995).
  • livepatch: fix race between fork and KLP transition (bsc#1071995).
  • macsec: check return value of skbtosgvec always (git-fixes).
  • macsec: fix memory leaks when skbtosgvec fails (git-fixes).
  • md/raid5: Ensure stripe_fill happens on non-read IO with journal (git-fixes).
  • md: Replace snprintf with scnprintf (git-fixes, bsc#1164051).
  • media: em28xx-input: fix refcount bug in em28xxusbdisconnect (git-fixes).
  • media: ite-cir: IR receiver stop working after receive overflow (git-fixes).
  • media: mceusb: RX -EPIPE (urb status = -32) lockup failure fix (git-fixes).
  • media: mceusb: TX -EPIPE (urb status = -32) lockup fix (git-fixes).
  • media: mceusb: do not read data parameters unless required (git-fixes).
  • media: mceusb: fix inaccurate debug buffer dumps, and misleading debug messages (git-fixes).
  • media: mceusb: sanity check for prescaler value (git-fixes).
  • media: mceusb: sporadic RX truncation corruption fix (git-fixes).
  • mm, swap, frontswap: fix THP swap if frontswap enabled (git-fixes).
  • module: change to print useful messages from elfvaliditycheck() (git-fixes).
  • module: fix [eshstrndx].shsize=0 OOB access (git-fixes).
  • module: harden ELF info handling (git-fixes).
  • natsemi: sonic: stop calling netdevbootsetup_check (git-fixes).
  • nbd: do not update block size after device is started (git-fixes).
  • net/mlx5: E-Switch, Hold mutex when querying drop counter in legacy mode (git-fixes).
  • net/mlx5: Fix flow table chaining (git-fixes).
  • net/mlx5e: Fix endianness handling in pedit mask (git-fixes).
  • net/mlx5e: Fix nullptr in mlx5ehairpinget_mdev() (git-fixes).
  • net: aquantia: Fix actual speed capabilities reporting (git-fixes).
  • net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (git-fixes).
  • net: ethernet: arc: fix error handling in emacrockchipprobe (git-fixes).
  • net: ethernet: ti: ale: fix seeing unreg mcast packets with promisc and allmulti disabled (git-fixes).
  • net: ethernet: xilinx: Mark XILINXLLTEMAC broken on 64-bit (git-fixes).
  • net: hns3: add limit ets dwrr bandwidth cannot be 0 (git-fixes).
  • net: hns3: check vlan id before using it (git-fixes).
  • net: hns3: disable sriov before unload hclge layer (git-fixes).
  • net: hns3: do not allow call hns3nicnet_open repeatedly (git-fixes).
  • net: hns3: fix change RSS 'hfunc' ineffective issue (git-fixes).
  • net: hns3: fix kernel crash when unload VF while it is being reset (git-fixes).
  • net: hns3: reset DWRR of unused tc to zero (git-fixes).
  • net: hyperv: remove use of bpfopt (git-fixes).
  • net: ieee802154: adf7242: Fix bug if defined DEBUG (git-fixes).
  • net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
  • net: ieee802154: ca8210: Stop leaking skb's (git-fixes).
  • net: mdiobus: Fix memory leak in _mdiobusregister (git-fixes).
  • net: moxa: fix UAF in moxartmacprobe (git-fixes).
  • net: natsemi: Fix missing pcidisabledevice() in probe and remove (git-fixes).
  • net: netvsc: remove break after return (git-fixes).
  • net: nxp: lpc_eth.c: avoid hang when bringing interface down (git-fixes).
  • net: qcom/emac: fix UAF in emac_remove (git-fixes).
  • net: smsc911x: Fix unload crash when link is up (git-fixes).
  • net: ti: fix UAF in tlanremoveone (git-fixes).
  • net: xen-netback: fix return type of ndostartxmit function (git-fixes).
  • nfsd: set the server_scope during service startup (bsc#1203746).
  • nullblk: Fix the nulladd_dev() error path (git-fixes).
  • nullblk: fix ida error handling in nulladd_dev() (git-fixes).
  • nullblk: fix passing of REQFUA flag in nullhandlerq (git-fixes).
  • panic, kexec: make _crashkexec() NMI safe (git-fixes).
  • phy: mdio: fix memory leak (git-fixes).
  • ptp: dp83640: do not define PAGE0 (git-fixes).
  • qed: Fix missing error code in qedslowpathstart() (git-fixes).
  • rbd: fix possible memory leak in rbdsysfsinit() (git-fixes).
  • ring-buffer: Add ringbufferwake_waiters() (git-fixes).
  • ring-buffer: Allow splice to read previous partially read pages (git-fixes).
  • ring-buffer: Check for NULL cpubuffer in ringbufferwakewaiters() (git-fixes).
  • ring-buffer: Check pending waiters when doing wake ups as well (git-fixes).
  • ring-buffer: Fix race between reset page and reading page (git-fixes).
  • ring_buffer: Do not deactivate non-existant pages (git-fixes).
  • s390/boot: fix absolute zero lowcore corruption on boot (git-fixes).
  • s390/cio: Fix the 'type' field in s390ciotpi tracepoint (git-fixes).
  • s390/cio: dont call csswaitforslowpath() inside a lock (git-fixes).
  • s390/cpcmd: fix inline assembly register clobbering (git-fixes).
  • s390/crash: fix incorrect number of bytes to copy to user space (git-fixes).
  • s390/crash: make copyoldmempage() return number of bytes copied (git-fixes).
  • s390/crypto: fix scatterwalk_unmap() callers in AES-GCM (git-fixes).
  • s390/ctcm: fix potential memory leak (git-fixes).
  • s390/ctcm: fix variable dereferenced before check (git-fixes).
  • s390/dasd: fix Oops in dasdaliasgetstartdev due to missing pavgroup (git-fixes).
  • s390/futex: add missing EXTABLE entry to _futexatomicop() (git-fixes).
  • s390/lcs: fix variable dereferenced before check (git-fixes).
  • s390/mcck: fix invalid KVM guest condition check (git-fixes).
  • s390/mcck: isolate SIE instruction when setting CIFMCCKGUEST flag (git-fixes).
  • s390/mm: use non-quiescing sske for KVM switch to keyed guest (git-fixes).
  • s390/module: fix loading modules with a lot of relocations (git-fixes).
  • s390/nmi: handle guarded storage validity failures for KVM guests (git-fixes).
  • s390/nmi: handle vector validity failures for KVM guests (git-fixes).
  • s390/pci: add missing EXTABLE entries to pcistgmioinuser()/pcilgmio_inuser() (git-fixes).
  • s390/pkey: fix paes selftest failure with paes and pkey static build (git-fixes).
  • s390/pv: fix the forcing of the swiotlb (git-fixes).
  • s390/qdio: cancel the ESTABLISH ccw after timeout (git-fixes).
  • s390/qdio: fix roll-back after timeout on ESTABLISH ccw (git-fixes).
  • s390/qeth: Fix deadlock in remove_discipline (bsc#1206213 LTC#200742).
  • s390/qeth: Fix error handling during VNICC initialization (git-fixes).
  • s390/qeth: Fix initialization of vnicc cmd masks during set online (git-fixes).
  • s390/qeth: Fix vniccisinuse if rxbcast not set (git-fixes).
  • s390/qeth: do not defer close_dev work during recovery (bsc#1206213 LTC#200742).
  • s390/qeth: fix NULL deref in qethclearworkingpoollist() (git-fixes).
  • s390/qeth: fix deadlock during failing recovery (bsc#1206213 LTC#200742).
  • s390/qeth: fix false reporting of VNIC CHAR config failure (git-fixes).
  • s390/qeth: fix memory leak after failed TX Buffer allocation (git-fixes).
  • s390/qeth: fix notification for pending buffers during teardown (git-fixes).
  • s390/qeth: remove driver-wide workqueue (bsc#1206213 LTC#200742).
  • s390/qeth: vnicc Fix EOPNOTSUPP precedence (git-fixes).
  • s390/qeth: vnicc Fix init to default (git-fixes).
  • s390/uaccess: add missing EXTABLE entries to _clearuser(), copyinusermvcos(), copyinusermvc(), clearuserxc() and _strnlen_user() (git-fixes).
  • s390/zcore: fix race when reading from hardware system area (git-fixes).
  • s390: Remove archhasrandom, archhasrandom_seed (git-fixes).
  • s390: appldata depends on PROC_SYSCTL (git-fixes).
  • s390: define get_cycles macro for arch-override (git-fixes).
  • s390: fix nospec table alignments (git-fixes).
  • sbitmap: fix possible io hung due to lost wakeup (git-fixes).
  • scsi: bsg: Remove support for SCSIIOCTLSEND_COMMAND (git-fixes).
  • scsi: ibmvfc: Avoid path failures during live migration (bsc#1065729).
  • scsi: ibmvscsis: Increase INITIALSRPLIMIT to 1024 (bsc#1156395).
  • scsi: libsas: Fix use-after-free bug in smpexecutetask_sg() (git-fixes).
  • scsi: lpfc: Rework MIB Rx Monitor debug info logic (git-fixes).
  • scsi: lpfc: Update the obsolete adapter list (bsc#1204142).
  • scsi: qla2xxx: Fix serialization of DCBX TLV data request (bsc#1204963).
  • scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (bsc#1204963).
  • scsi: storvsc: Drop DIDTARGETFAILURE use (git-fixes).
  • scsi: storvsc: Fix maxoutstandingreqperchannel for Win8 and newer (bsc#1204017).
  • scsi: storvsc: Fix validation for unsolicited incoming packets (bsc#1204017).
  • scsi: storvsc: Remove WQMEMRECLAIM from storvscerrorwq (git-fixes).
  • scsi: storvsc: Resolve data race in storvsc_probe() (bsc#1204017).
  • scsi: storvsc: Use blkmqunique_tag() to generate requestIDs (bsc#1204017).
  • scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
  • scsi: storvsc: Validate length of incoming packet in storvsconchannel_callback() (bsc#1204017).
  • scsi: zfcp: Fix double free of FSF request when qdio send fails (git-fixes).
  • scsi: zfcp: Fix missing auto port scan and thus missing target ports (git-fixes).
  • selftests/livepatch: better synchronize testklpcallbacks_busy (bsc#1071995).
  • sfp: fix RX_LOS signal handling (git-fixes).
  • sis900: Fix missing pcidisabledevice() in probe and remove (git-fixes).
  • sunrpc: Re-purpose tracesvcprocess (bsc#1205006).
  • tracing: Add ioctl() to force ring buffer waiters to wake up (git-fixes).
  • tracing: Disable interrupt or preemption before acquiring archspinlockt (git-fixes).
  • tracing: Do not free snapshot if tracer is on cmdline (git-fixes).
  • tracing: Simplify conditional compilation code in tracingsettracer() (git-fixes).
  • tracing: Wake up ring buffer waiters on closing of the file (git-fixes).
  • tracing: Wake up waiters when tracing is disabled (git-fixes).
  • tulip: windbond-840: Fix missing pcidisabledevice() in probe and remove (git-fixes).
  • usb: chipidea: udc: check request status before setting device address (git-fixes).
  • usb: musb: Fix suspend with devices connected for a64 (git-fixes).
  • vfio/ccw: Do not change FSM state in subchannel event (git-fixes).
  • vfio: ccw: fix error return in vfioccwsch_event (git-fixes).
  • virtio-blk: Use blkvalidateblock_size() to validate block size (git-fixes).
  • virtio/s390: implement virtio-ccw revision 2 correctly (git-fixes).
  • virtioblk: eliminate anonymous moduleinit & module_exit (git-fixes).
  • virtio_net: move tx vq operation under tx queue lock (git-fixes).
  • vxlan: add missing rcureadlock() in neigh_reduce() (git-fixes).
  • x86/bugs: Make sure MSRSPECCTRL is updated properly upon resume from S3 (bsc#1206037).
  • x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
  • x86/hyperv: Output host build info as normal Windows version number (git-fixes).
  • x86/hyperv: Set pv_info.name to 'Hyper-V' (git-fixes).
  • x86/microcode/AMD: Apply the patch early on every logical thread (bsc#1205264).
  • x86/xen: Distribute switch variables for initialization (git-fixes).
  • x86/xen: Return from panic notifier (git-fixes).
  • x86/xen: do not unbind uninitialized lockkickerirq (git-fixes).
  • xen-blkback: prevent premature module unload (git-fixes).
  • xen-netback: correct success/error reporting for the SKB-with-fraglist case (git-fixes).
  • xen-netfront: remove warning when unloading module (git-fixes).
  • xen/balloon: fix balloon initialization for PVH Dom0 (git-fixes).
  • xen/balloon: fix balloon kthread freezing (git-fixes).
  • xen/balloon: fix ballooned page accounting without hotplug enabled (git-fixes).
  • xen/balloon: fix cancelled balloon action (git-fixes).
  • xen/balloon: use a kernel thread instead a workqueue (git-fixes).
  • xen/blkback: fix memory leaks (git-fixes).
  • xen/efi: Set nonblocking callbacks (git-fixes).
  • xen/gntdev: Avoid blocking in unmapgrantpages() (git-fixes).
  • xen/gntdev: Fix off-by-one error when unmapping with holes (git-fixes).
  • xen/gntdev: Fix partial gntdev_mmap() cleanup (git-fixes).
  • xen/gntdev: Ignore failure to unmap INVALIDGRANTHANDLE (git-fixes).
  • xen/gntdev: Prevent leaking grants (git-fixes).
  • xen/grant-table: Use putpage instead of freepage (git-fixes).
  • xen/pciback: Check dev_data before using it (git-fixes).
  • xen/pciback: remove set but not used variable 'old_state' (git-fixes).
  • xen/pcpu: fix possible memory leak in register_pcpu() (git-fixes).
  • xen/scsiback: add error handling for xenbus_printf (git-fixes).
  • xen/xenbus: Fix granting of vmalloc'd memory (git-fixes).
  • xen/xenbus: ensure xenbusmapring_valloc() returns proper grant status (git-fixes).
  • xen: Fix XenStore initialisation for XS_LOCAL (git-fixes).
  • xen: Fix event channel callback via INTX/GSI (git-fixes).
  • xen: XENACPIPROCESSOR is Dom0-only (git-fixes).
  • xen: add error handling for xenbus_printf (git-fixes).
  • xen: avoid crash in disablehotplugcpu (bsc#1106594).
  • xen: fix GCC warning and remove duplicate EVTCHNROW/EVTCHNCOL usage (git-fixes).
  • xen: xenbus: use put_device() instead of kfree() (git-fixes).
  • xenbus: req->body should be updated before req->state (git-fixes).
  • xenbus: req->err should be updated before req->state (git-fixes).
References

Affected packages

SUSE:Linux Enterprise High Availability Extension 12 SP5 / kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "dlm-kmp-default": "4.12.14-122.144.1",
            "gfs2-kmp-default": "4.12.14-122.144.1",
            "ocfs2-kmp-default": "4.12.14-122.144.1",
            "cluster-md-kmp-default": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP5 / kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_12_14-122_144-default": "1-8.5.1",
            "kernel-default-kgraft": "4.12.14-122.144.1",
            "kernel-default-kgraft-devel": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP5 / kgraft-patch-SLE12-SP5_Update_38

Package

Name
kgraft-patch-SLE12-SP5_Update_38
Purl
pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_38&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1-8.5.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_12_14-122_144-default": "1-8.5.1",
            "kernel-default-kgraft": "4.12.14-122.144.1",
            "kernel-default-kgraft-devel": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP5 / kernel-docs

Package

Name
kernel-docs
Purl
pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-122.144.1",
            "kernel-obs-build": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP5 / kernel-obs-build

Package

Name
kernel-obs-build
Purl
pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "4.12.14-122.144.1",
            "kernel-obs-build": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP5 / kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.144.1",
            "kernel-devel": "4.12.14-122.144.1",
            "kernel-default-base": "4.12.14-122.144.1",
            "kernel-default-man": "4.12.14-122.144.1",
            "kernel-default": "4.12.14-122.144.1",
            "kernel-source": "4.12.14-122.144.1",
            "kernel-syms": "4.12.14-122.144.1",
            "kernel-default-devel": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP5 / kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.144.1",
            "kernel-devel": "4.12.14-122.144.1",
            "kernel-default-base": "4.12.14-122.144.1",
            "kernel-default-man": "4.12.14-122.144.1",
            "kernel-default": "4.12.14-122.144.1",
            "kernel-source": "4.12.14-122.144.1",
            "kernel-syms": "4.12.14-122.144.1",
            "kernel-default-devel": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP5 / kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.144.1",
            "kernel-devel": "4.12.14-122.144.1",
            "kernel-default-base": "4.12.14-122.144.1",
            "kernel-default-man": "4.12.14-122.144.1",
            "kernel-default": "4.12.14-122.144.1",
            "kernel-source": "4.12.14-122.144.1",
            "kernel-syms": "4.12.14-122.144.1",
            "kernel-default-devel": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.144.1",
            "kernel-devel": "4.12.14-122.144.1",
            "kernel-default-base": "4.12.14-122.144.1",
            "kernel-default-man": "4.12.14-122.144.1",
            "kernel-default": "4.12.14-122.144.1",
            "kernel-source": "4.12.14-122.144.1",
            "kernel-syms": "4.12.14-122.144.1",
            "kernel-default-devel": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.144.1",
            "kernel-devel": "4.12.14-122.144.1",
            "kernel-default-base": "4.12.14-122.144.1",
            "kernel-default-man": "4.12.14-122.144.1",
            "kernel-default": "4.12.14-122.144.1",
            "kernel-source": "4.12.14-122.144.1",
            "kernel-syms": "4.12.14-122.144.1",
            "kernel-default-devel": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "4.12.14-122.144.1",
            "kernel-devel": "4.12.14-122.144.1",
            "kernel-default-base": "4.12.14-122.144.1",
            "kernel-default-man": "4.12.14-122.144.1",
            "kernel-default": "4.12.14-122.144.1",
            "kernel-source": "4.12.14-122.144.1",
            "kernel-syms": "4.12.14-122.144.1",
            "kernel-default-devel": "4.12.14-122.144.1"
        }
    ]
}

SUSE:Linux Enterprise Workstation Extension 12 SP5 / kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.12.14-122.144.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-extra": "4.12.14-122.144.1"
        }
    ]
}