SUSE-SU-2023:1992-1

Source
https://www.suse.com/support/update/announcement/2023/suse-su-20231992-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:1992-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2023:1992-1
Related
Published
2023-04-25T11:38:05Z
Modified
2023-04-25T11:38:05Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
  • CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
  • CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
  • CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).
  • CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
  • CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
  • CVE-2023-1582: Fixed soft lockup in _pagemapcount (bsc#1209636).
  • CVE-2023-1611: Fixed an use-after-free flaw in btrfssearchslot (bsc#1209687).
  • CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779, bsc#1198400).
  • CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4sscsetup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
  • CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203).
  • CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829).
  • CVE-2023-28327: Fixed DoS in inskb in unixdiaggetexact() (bsc#1209290).
  • CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hciconncleanup in net/bluetooth/hci_conn.c (bsc#1209052).
  • CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in dotlsgetsockopt in net/tls/tls_main.c (bsc#1209366).

The following non-security bugs were fixed:

  • ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes).
  • ALSA: asihpi: check pao in control_message() (git-fixes).
  • ALSA: hda/ca0132: fixup buffer overrun at tuningctlset() (git-fixes).
  • ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes).
  • ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
  • ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes).
  • ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes).
  • ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes).
  • ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes).
  • ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
  • ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
  • ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes).
  • ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes).
  • ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes).
  • ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes).
  • ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes).
  • ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes).
  • ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes).
  • Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes).
  • Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes).
  • Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes).
  • Fix error path in pci-hyperv to unlock the mutex state_lock
  • HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes).
  • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes).
  • Input: alps - fix compatibility with -funsigned-char (bsc#1209805).
  • Input: focaltech - use explicitly signed char type (git-fixes).
  • Input: goodix - add Lenovo Yoga Book X90F to ninebytesreport DMI table (git-fixes).
  • KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi).
  • KVM: x86: fix sending PV IPI (git-fixes).
  • NFS: Fix an Oops in nfsdautomount() (git-fixes).
  • NFS: fix disabling of swap (git-fixes).
  • NFSD: Protect against filesystem freezing (git-fixes).
  • NFSD: fix leaked reference count of nfsd4sscumount_item (git-fixes).
  • NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes).
  • NFSD: fix use-after-free in nfsd4sscsetup_dul() (git-fixes).
  • NFSd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes).
  • NFSd: fix race to check ls_layouts (git-fixes).
  • NFSd: shut down the NFSv4 state objects before the filecache (git-fixes).
  • NFSd: under NFSv4.1, fix double svcxprtput on rpc_create failure (git-fixes).
  • NFSd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes).
  • NFSv4.1 provide mount option to toggle trunking discovery (git-fixes).
  • NFSv4.2: Fix initialisation of struct nfs4_label (git-fixes).
  • NFSv4.x: Fail client initialisation if state manager thread can't run (git-fixes).
  • NFSv4: Fix a credential leak in nfs4discover_trunking() (git-fixes).
  • NFSv4: Fix a deadlock between nfs4openrecover_helper() and delegreturn (git-fixes).
  • NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes).
  • NFSv4: fix state manager flag printing (git-fixes).
  • NFSv4: keep state manager thread active if swap is enabled (git-fixes).
  • PCI/DPC: Await readiness of secondary bus after reset (git-fixes).
  • PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
  • PCI: hv: Fix a race condition in hvirqunmask() that can cause panic (bsc#1207185).
  • PCI: hv: Remove the useless hvpcichildstate from struct hvpcidev (bsc#1207185).
  • PCI: hv: Use async probing to reduce boot time (bsc#1207185).
  • PCI: hv: fix a race condition bug in hvpciquery_relations() (bsc#1207185).
  • SUNRPC: Fix a server shutdown leak (git-fixes).
  • SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes).
  • SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes).
  • USB: cdns3: Fix issue with using incorrect PCI device function (git-fixes).
  • USB: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
  • USB: cdnsp: Fixes issue with redundant Status Stage (git-fixes).
  • USB: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes).
  • USB: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes).
  • USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes).
  • USB: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes).
  • USB: dwc3: Fix a typo in field name (git-fixes).
  • USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes).
  • USB: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes).
  • USB: fix memory leak with using debugfs_lookup() (git-fixes).
  • USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes).
  • USB: gadget: bcm63xxudc: fix memory leak with using debugfslookup() (git-fixes).
  • USB: gadget: grudc: fix memory leak with using debugfslookup() (git-fixes).
  • USB: gadget: lpc32xxudc: fix memory leak with using debugfslookup() (git-fixes).
  • USB: gadget: pxa25xudc: fix memory leak with using debugfslookup() (git-fixes).
  • USB: gadget: pxa27xudc: fix memory leak with using debugfslookup() (git-fixes).
  • USB: gadget: u_audio: do not let userspace block driver unbind (git-fixes).
  • USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes).
  • USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes).
  • USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes).
  • USB: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes).
  • USB: typec: tcpm: fix warning when handle discover_identity message (git-fixes).
  • USB: ucsi: Fix NULL pointer deref in ucsiconnectorchange() (git-fixes).
  • USB: ucsi: Fix ucsi->connector race (git-fixes).
  • USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes).
  • USB: xhci: tegra: fix sleep in atomic call (git-fixes).
  • alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes)
  • arch: fix broken BuildID for arm64 and riscv (bsc#1209798).
  • arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes)
  • arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes)
  • arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes).
  • arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes).
  • arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes)
  • arm64: dts: imx8mp: correct usb clocks (git-fixes)
  • arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes)
  • arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes)
  • arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes).
  • atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes).
  • ca8210: Fix unsigned maclen comparison with zero in ca8210skb_tx() (git-fixes).
  • ca8210: fix mac_len negative array access (git-fixes).
  • can: bcm: bcmtxsetup(): fix KMSAN uninit-value in vfs_write (git-fixes).
  • can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes).
  • can: j1939: j1939tptxdatnew(): fix out-of-bounds memory access (git-fixes).
  • cifs: Fix smb2setpath_size() (git-fixes).
  • cifs: Move the insend statistic to _smbsendrqst() (git-fixes).
  • cifs: append path to open_enter trace event (bsc#1193629).
  • cifs: avoid race conditions with parallel reconnects (bsc#1193629).
  • cifs: avoid races in parallel reconnects in smb1 (bsc#1193629).
  • cifs: check only tcon status on tcon related functions (bsc#1193629).
  • cifs: do not poll server interfaces too regularly (bsc#1193629).
  • cifs: double lock in cifsreconnecttcon() (git-fixes).
  • cifs: dump pending mids for all channels in DebugData (bsc#1193629).
  • cifs: empty interface list when server does not support query interfaces (bsc#1193629).
  • cifs: fix DFS traversal oops without CONFIGCIFSDFS_UPCALL (bsc#1193629).
  • cifs: fix dentry lookups in directory handle cache (bsc#1193629).
  • cifs: fix missing unloadnls() in smb2reconnect() (bsc#1193629).
  • cifs: fix use-after-free bug in refreshcacheworker() (bsc#1193629).
  • cifs: generate signkey for the channel that's reconnecting (bsc#1193629).
  • cifs: get rid of dead check in smb2_reconnect() (bsc#1193629).
  • cifs: lock chanlock outside matchsession (bsc#1193629).
  • cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629).
  • cifs: print session id while listing open files (bsc#1193629).
  • cifs: return DFS root session id in DebugData (bsc#1193629).
  • cifs: set DFS root session in cifsgetsmb_ses() (bsc#1193629).
  • cifs: use DFS root session instead of tcon ses (bsc#1193629).
  • clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes).
  • debugfs: add debugfslookupand_remove() (git-fixes).
  • drivers/base: Fix unsigned comparison to -1 in CPUMAPFILEMAX_BYTES (bsc#1208815).
  • drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815).
  • drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes).
  • drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes).
  • drm/amdkfd: Fix an illegal memory access (git-fixes).
  • drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes).
  • drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes).
  • drm/i915/active: Fix missing debug object activation (git-fixes).
  • drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes).
  • drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes).
  • drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes).
  • drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes).
  • drm/i915/display: clean up comments (git-fixes).
  • drm/i915/gt: perform uc late init after probe error injection (git-fixes).
  • drm/i915/psr: Use calculated io and fast wake lines (git-fixes).
  • drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes).
  • drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
  • drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes).
  • drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes).
  • drm/i915: Remove unused bits of i915_vma/active api (git-fixes).
  • drm/panfrost: Fix the panfrostmmumapfaultaddr() error path (git-fixes).
  • dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes).
  • efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes).
  • fbdev: au1200fb: Fix potential divide by zero (git-fixes).
  • fbdev: intelfb: Fix potential divide by zero (git-fixes).
  • fbdev: lxfb: Fix potential divide by zero (git-fixes).
  • fbdev: nvidia: Fix potential divide by zero (git-fixes).
  • fbdev: stifb: Provide valid pixelclock and add fbcheckvar() checks (git-fixes).
  • fbdev: tgafb: Fix potential divide by zero (git-fixes).
  • firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes).
  • fotg210-udc: Add missing completion handler (git-fixes).
  • ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes).
  • ftrace: Fix issue that 'direct->addr' not restored in modifyftracedirect() (git-fixes).
  • ftrace: Mark getlockparentip() _always_inline (git-fixes).
  • gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes).
  • gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
  • hwmon: fix potential sensor registration fail if of_node is missing (git-fixes).
  • i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes).
  • i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes).
  • i2c: xgene-slimpro: Fix out-of-bounds bug in xgeneslimproi2c_xfer() (git-fixes).
  • iio: adc: ad7791: fix IRQ flags (git-fixes).
  • iio: adc: ti-ads7950: Set can_sleep flag for GPIO chip (git-fixes).
  • iio: adis16480: select CONFIG_CRC32 (git-fixes).
  • iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes).
  • iio: light: cm32181: Unregister second I2C client if present (git-fixes).
  • kABI workaround for xhci (git-fixes).
  • kABI: x86/msr: Remove .fixup usage (kabi).
  • kconfig: Update config changed flag before calling callback (git-fixes).
  • keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes).
  • lan78xx: Add missing return code checks (git-fixes).
  • lan78xx: Fix exception on link speed change (git-fixes).
  • lan78xx: Fix memory allocation bug (git-fixes).
  • lan78xx: Fix partial packet errors on suspend/resume (git-fixes).
  • lan78xx: Fix race condition in disconnect handling (git-fixes).
  • lan78xx: Fix race conditions in suspend/resume handling (git-fixes).
  • lan78xx: Fix white space and style issues (git-fixes).
  • lan78xx: Remove unused pause frame queue (git-fixes).
  • lan78xx: Remove unused timer (git-fixes).
  • lan78xx: Set flow control threshold to prevent packet loss (git-fixes).
  • lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes).
  • locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552).
  • mm: memcg: fix swapcached stat accounting (bsc#1209804).
  • mm: mmap: remove newline at the end of the trace (git-fixes).
  • mmc: atmel-mci: fix race between stop command and start of next command (git-fixes).
  • mtd: rawnand: meson: fix bitmask for length in command word (git-fixes).
  • mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes).
  • mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes).
  • mtd: rawnand: stm32fmc2: use timings.mode instead of checking tRCmin (git-fixes).
  • mtdblock: tolerate corrected bit-flips (git-fixes).
  • net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes).
  • net: mdio: thunder: Add missing fwnodehandleput() (git-fixes).
  • net: phy: Ensure state transitions are processed from phy_stop() (git-fixes).
  • net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes).
  • net: phy: nxp-c45-tja11xx: fix MIIBASICCONFIG_REV bit (git-fixes).
  • net: phy: smsc: bail out in lan87xxreadstatus if genphyreadstatus fails (git-fixes).
  • net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes).
  • net: usb: asix: remove redundant assignment to variable reg (git-fixes).
  • net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes).
  • net: usb: lan78xx: Limit packet length to skb->len (git-fixes).
  • net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes).
  • net: usb: smsc75xx: Limit packet length to skb->len (git-fixes).
  • net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes).
  • net: usb: smsc95xx: Limit packet length to skb->len (git-fixes).
  • net: usb: use ethhwaddr_set() (git-fixes).
  • nilfs2: fix kernel-infoleak in nilfsioctlwrap_copy() (git-fixes).
  • nilfs2: fix sysfs interface lifetime (git-fixes).
  • nvme-tcp: always fail a request when sending it failed (bsc#1208902).
  • pNFS/filelayout: Fix coalescing test for single DS (git-fixes).
  • pinctrl: amd: Disable and mask interrupts on resume (git-fixes).
  • pinctrl: at91-pio4: fix domain name assignment (git-fixes).
  • pinctrl: ocelot: Fix alt mode for ocelot (git-fixes).
  • platform/chrome: crosecchardev: fix kernel data leak from ioctl (git-fixes).
  • platform/x86/intel/pmc: Alder Lake PCH slps0residency fix (git-fixes).
  • platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes).
  • platform/x86: think-lmi: Certificate authentication support (bsc#1210050).
  • platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes).
  • platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes).
  • platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes).
  • platform/x86: think-lmi: Move kobjectinit() call into tlmicreate_auth() (bsc#1210050).
  • platform/x86: think-lmi: Opcode support (bsc#1210050).
  • platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050).
  • platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050).
  • platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050).
  • platform/x86: think-lmi: add debug_cmd (bsc#1210050).
  • platform/x86: think-lmi: add missing type attribute (git-fixes).
  • platform/x86: think-lmi: certificate support clean ups (bsc#1210050).
  • platform/x86: think-lmi: only display possible_values if available (git-fixes).
  • platform/x86: think-lmi: use correct possible_values delimiters (git-fixes).
  • platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050).
  • platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050).
  • platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050).
  • platform/x86: thinkpadacpi: Accept ibminit_struct.init() returning -ENODEV (bsc#1210050).
  • platform/x86: thinkpadacpi: Add LEDRETAINATSHUTDOWN to ledclassdevs (bsc#1210050).
  • platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050).
  • platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050).
  • platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050).
  • platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050).
  • platform/x86: thinkpadacpi: Add hotkeynotifyextendedhotkey() helper (bsc#1210050).
  • platform/x86: thinkpadacpi: Add lidlogo_dot to the list of safe LEDs (bsc#1210050).
  • platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050).
  • platform/x86: thinkpadacpi: Cleanup dytcprofile_available (bsc#1210050).
  • platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050).
  • platform/x86: thinkpadacpi: Convert platform driver to use devgroups (bsc#1210050).
  • platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050).
  • platform/x86: thinkpadacpi: Do not use testbit on an integer (bsc#1210050).
  • platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050).
  • platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050).
  • platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050).
  • platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050).
  • platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050).
  • platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050).
  • platform/x86: thinkpadacpi: Fix maxbrightness of thinklight (bsc#1210050).
  • platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050).
  • platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050).
  • platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050).
  • platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050).
  • platform/x86: thinkpadacpi: Fix thermaltempinputattr sorting (bsc#1210050).
  • platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050).
  • platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050).
  • platform/x86: thinkpadacpi: Make *init() functions return -ENODEV instead of 1 (bsc#1210050).
  • platform/x86: thinkpadacpi: Properly indent code in tpacpidytcprofileinit() (bsc#1210050).
  • platform/x86: thinkpadacpi: Register tpacpipdriver after subdriver init (bsc#1210050).
  • platform/x86: thinkpadacpi: Remove 'goto errexit' from hotkey_init() (bsc#1210050).
  • platform/x86: thinkpadacpi: Remove unused sensorspdevattrsregistered flag (bsc#1210050).
  • platform/x86: thinkpadacpi: Restore missing hotkeytabletmode and hotkeyradio_sw sysfs-attr (bsc#1210050).
  • platform/x86: thinkpadacpi: Simplify dytcversion handling (bsc#1210050).
  • platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050).
  • platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050).
  • platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050).
  • platform/x86: thinkpadacpi: consistently check fanget_status return (bsc#1210050).
  • platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050).
  • platform/x86: thinkpadacpi: tpacpiattr_group contains driver attributes not device attrs (bsc#1210050).
  • platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050).
  • power: supply: da9150: Fix use after free bug in da9150chargerremove due to race condition (git-fixes).
  • powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869).
  • powerpc/btext: add missing ofnodeput (bsc#1065729).
  • powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869).
  • powerpc/iommu: Add missing ofnodeput in iommuinitearly_dart (bsc#1194869).
  • powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869).
  • powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869).
  • powerpc/kexec_file: fix implicit decl error (bsc#1194869).
  • powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729).
  • powerpc/powernv: fix missing ofnodeput in uv_init() (bsc#1194869).
  • powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes).
  • powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729).
  • powerpc/rtas: ensure 4KB alignment for rtasdatabuf (bsc#1065729).
  • powerpc/vmlinux.lds: Define RUNTIMEDISCARDEXIT (bsc#1194869).
  • powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869).
  • powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869).
  • powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869).
  • powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869).
  • ppc64le: HWPOISON_INJECT=m (bsc#1209572).
  • pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes).
  • pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
  • r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes).
  • rcu: Fix rcutortureread ftrace event (git-fixes).
  • ring-buffer: Fix race while reader and writer are on the same page (git-fixes).
  • ring-buffer: Handle race between rbmovetail and rbcheckpages (git-fixes).
  • ring-buffer: remove obsolete comment for freebufferpage() (git-fixes).
  • s390/boot: simplify and fix kernel memory layout setup (bsc#1209600).
  • s390/dasd: fix no record found for rawtrackaccess (bsc#1207574).
  • s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes).
  • sbitmap: Avoid lockups when waker gets preempted (bsc#1209118).
  • sched/psi: Fix use-after-free in epremovewait_queue() (bsc#1209799).
  • scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556).
  • sctp: sctpsockfilter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes).
  • serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes).
  • serial: 8250: SERIAL8250ASPEEDVUART should depend on ARCHASPEED (git-fixes).
  • serial: fsl_lpuart: Fix comment typo (git-fixes).
  • smb3: fix unusable share after force unmount failure (bsc#1193629).
  • smb3: lower default deferred close timeout to address perf regression (bsc#1193629).
  • struct dwc3: mask new member (git-fixes).
  • thunderbolt: Add missing UNSETINBOUNDSBTX for retimer access (git-fixes).
  • thunderbolt: Call tbcheckquirks() after initializing adapters (git-fixes).
  • thunderbolt: Disable interrupt auto clear for rings (git-fixes).
  • thunderbolt: Rename shadowed variables bit to interruptbit and autoclear_bit (git-fixes).
  • thunderbolt: Use const qualifier for ring_interrupt_index (git-fixes).
  • thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes).
  • timers: Prevent union confusion from unexpected (git-fixes)
  • trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes).
  • trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes).
  • trace/hwlat: make use of the helper function kthreadrunon_cpu() (git-fixes).
  • tracing: Add tracearrayputs() to write into instance (git-fixes).
  • tracing: Fix wrong return in kprobeeventgen_test.c (git-fixes).
  • tracing: Free error logs of tracing instances (git-fixes).
  • tracing: Have tracingsnapshotinstance_cond() write errors to the appropriate instance (git-fixes).
  • tty: serial: fsllpuart: avoid checking for transfer complete when UARTCTRLSBK is asserted in lpuart32txempty (git-fixes).
  • tty: serial: fsllpuart: skip waiting for transmission complete when UARTCTRLSBK is asserted (git-fixes).
  • tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
  • tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes).
  • uas: Add USFLNOREPORTOPCODES for JMicron JMS583Gen 2 (git-fixes).
  • vdpasim: set lastusedidx as lastavailidx in vdpasimqueue_ready (git-fixes).
  • wifi: mac80211: fix invalid drvstaprercuremove calls for non-uploaded sta (git-fixes).
  • wifi: mac80211: fix qos on mesh interfaces (git-fixes).
  • wireguard: ratelimiter: use hrtimer in selftest (git-fixes)
  • x86/bug: Merge annotatereachable() into _BUGFLAGS() asm (git-fixes).
  • x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
  • x86/fpu/xstate: Fix the ARCHREQXCOMP_PERM implementation (git-fixes).
  • x86/fpu: Cache xfeature flags from CPUID (git-fixes).
  • x86/fpu: Remove unused supervisor only offsets (git-fixes).
  • x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
  • x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
  • x86/mce: Allow instrumentation during task work queueing (git-fixes).
  • x86/mce: Mark mce_end() noinstr (git-fixes).
  • x86/mce: Mark mce_panic() noinstr (git-fixes).
  • x86/mce: Mark mcereadaux() noinstr (git-fixes).
  • x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
  • x86/msr: Remove .fixup usage (git-fixes).
  • x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
  • x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
  • x86/uaccess: Move variable into switch case statement (git-fixes).
  • x86: Annotate callonstack() (git-fixes).
  • x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
  • xfs: convert ptag flags to unsigned (git-fixes).
  • xfs: do not assert fail on perag references on teardown (git-fixes).
  • xfs: do not leak btree cursor when insrec fails after a split (git-fixes).
  • xfs: pass the correct cursor to xfsiomapprealloc_size (git-fixes).
  • xfs: remove xfssetattrtime() declaration (git-fixes).
  • xfs: zero inode fork buffer at allocation (git-fixes).
  • xhci: Free the command allocated for setting LPM if we return early (git-fixes).
  • xhci: also avoid the XHCIZERO64B_REGS quirk with a passthrough iommu (git-fixes).
  • xirc2pscs: Fix use after free bug in xirc2psdetach (git-fixes).
  • xprtrdma: Fix regbuf data not freed in rpcrdmareqcreate() (git-fixes).
References

Affected packages

SUSE:Linux Enterprise Micro 5.3 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.4 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 SP4 / kernel-livepatch-SLE15-SP4-RT_Update_6

Package

Name
kernel-livepatch-SLE15-SP4-RT_Update_6
Purl
pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_6&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1-150400.1.3.3

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-5_14_21-150400_15_23-rt": "1-150400.1.3.3"
        }
    ]
}

SUSE:Real Time Module 15 SP4 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-devel-rt": "5.14.21-150400.15.23.1",
            "dlm-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug": "5.14.21-150400.15.23.1",
            "kernel-rt-devel": "5.14.21-150400.15.23.1",
            "cluster-md-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug-devel": "5.14.21-150400.15.23.1",
            "kernel-source-rt": "5.14.21-150400.15.23.1",
            "kernel-rt": "5.14.21-150400.15.23.1",
            "ocfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "gfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-syms-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

SUSE:Real Time Module 15 SP4 / kernel-rt_debug

Package

Name
kernel-rt_debug
Purl
pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-devel-rt": "5.14.21-150400.15.23.1",
            "dlm-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug": "5.14.21-150400.15.23.1",
            "kernel-rt-devel": "5.14.21-150400.15.23.1",
            "cluster-md-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug-devel": "5.14.21-150400.15.23.1",
            "kernel-source-rt": "5.14.21-150400.15.23.1",
            "kernel-rt": "5.14.21-150400.15.23.1",
            "ocfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "gfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-syms-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

SUSE:Real Time Module 15 SP4 / kernel-source-rt

Package

Name
kernel-source-rt
Purl
pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-devel-rt": "5.14.21-150400.15.23.1",
            "dlm-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug": "5.14.21-150400.15.23.1",
            "kernel-rt-devel": "5.14.21-150400.15.23.1",
            "cluster-md-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug-devel": "5.14.21-150400.15.23.1",
            "kernel-source-rt": "5.14.21-150400.15.23.1",
            "kernel-rt": "5.14.21-150400.15.23.1",
            "ocfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "gfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-syms-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

SUSE:Real Time Module 15 SP4 / kernel-syms-rt

Package

Name
kernel-syms-rt
Purl
pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-devel-rt": "5.14.21-150400.15.23.1",
            "dlm-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug": "5.14.21-150400.15.23.1",
            "kernel-rt-devel": "5.14.21-150400.15.23.1",
            "cluster-md-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug-devel": "5.14.21-150400.15.23.1",
            "kernel-source-rt": "5.14.21-150400.15.23.1",
            "kernel-rt": "5.14.21-150400.15.23.1",
            "ocfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "gfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-syms-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

openSUSE:Leap Micro 5.3 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

openSUSE:Leap 15.4 / kernel-rt

Package

Name
kernel-rt
Purl
pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-devel-rt": "5.14.21-150400.15.23.1",
            "dlm-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug": "5.14.21-150400.15.23.1",
            "kernel-rt-devel": "5.14.21-150400.15.23.1",
            "cluster-md-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug-devel": "5.14.21-150400.15.23.1",
            "kernel-source-rt": "5.14.21-150400.15.23.1",
            "kernel-rt": "5.14.21-150400.15.23.1",
            "ocfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "gfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-syms-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

openSUSE:Leap 15.4 / kernel-rt_debug

Package

Name
kernel-rt_debug
Purl
pkg:rpm/opensuse/kernel-rt_debug&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-devel-rt": "5.14.21-150400.15.23.1",
            "dlm-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug": "5.14.21-150400.15.23.1",
            "kernel-rt-devel": "5.14.21-150400.15.23.1",
            "cluster-md-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug-devel": "5.14.21-150400.15.23.1",
            "kernel-source-rt": "5.14.21-150400.15.23.1",
            "kernel-rt": "5.14.21-150400.15.23.1",
            "ocfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "gfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-syms-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

openSUSE:Leap 15.4 / kernel-source-rt

Package

Name
kernel-source-rt
Purl
pkg:rpm/opensuse/kernel-source-rt&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-devel-rt": "5.14.21-150400.15.23.1",
            "dlm-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug": "5.14.21-150400.15.23.1",
            "kernel-rt-devel": "5.14.21-150400.15.23.1",
            "cluster-md-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug-devel": "5.14.21-150400.15.23.1",
            "kernel-source-rt": "5.14.21-150400.15.23.1",
            "kernel-rt": "5.14.21-150400.15.23.1",
            "ocfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "gfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-syms-rt": "5.14.21-150400.15.23.1"
        }
    ]
}

openSUSE:Leap 15.4 / kernel-syms-rt

Package

Name
kernel-syms-rt
Purl
pkg:rpm/opensuse/kernel-syms-rt&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.15.23.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-devel-rt": "5.14.21-150400.15.23.1",
            "dlm-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug": "5.14.21-150400.15.23.1",
            "kernel-rt-devel": "5.14.21-150400.15.23.1",
            "cluster-md-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-rt_debug-devel": "5.14.21-150400.15.23.1",
            "kernel-source-rt": "5.14.21-150400.15.23.1",
            "kernel-rt": "5.14.21-150400.15.23.1",
            "ocfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "gfs2-kmp-rt": "5.14.21-150400.15.23.1",
            "kernel-syms-rt": "5.14.21-150400.15.23.1"
        }
    ]
}