SUSE-SU-2023:3182-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3182-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2023:3182-1
Related
Published
2023-08-03T19:41:42Z
Modified
2023-08-03T19:41:42Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2023-3609: Fixed an use-after-free vulnerability in net/sched (bsc#1213586).
  • CVE-2023-3611: Fixed an out-of-bounds write vulnerability in net/sched (bsc#1213585).
  • CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
  • CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
  • CVE-2023-31248: Fixed an use-after-free vulnerability in nftchainlookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).
  • CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nftablesapi.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).
  • CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAPNETADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).
  • CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
  • CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplusputsuper in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).

The following non-security bugs were fixed:

  • Add MODULEFIRMWARE() for FIRMWARETG357766 (git-fixes).
  • Drop patch that caused issues with k3s (bsc#1213705).
  • Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758)
  • Fix documentation of paniconwarn (git-fixes).
  • Fixed launch issue on 15-SP5 (git-fixes, bsc#1210853).
  • Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes)
  • Revert 'drm/amd/display: edp do not add non-edid timings' (git-fixes).
  • acpi: utils: Fix acpievaluatedsm_typed() redefinition error (git-fixes).
  • alsa: fireface: make read-only const array for model names static (git-fixes).
  • alsa: hda/realtek - remove 3k pull low procedure (git-fixes).
  • alsa: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
  • alsa: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
  • alsa: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
  • alsa: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
  • alsa: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
  • alsa: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
  • alsa: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (git-fixes).
  • alsa: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes).
  • alsa: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes).
  • alsa: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes).
  • alsa: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes).
  • alsa: hda/realtek: Whitespace fix (git-fixes).
  • alsa: hda: fix a possible null-pointer dereference due to data race in sndhdacregmap_sync() (git-fixes).
  • alsa: oxfw: make read-only const array models static (git-fixes).
  • alsa: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes).
  • apparmor: fix missing error check for rhashtableinsertfast (git-fixes).
  • arm64/mm: mark private VMFAULTX defines as vmfaultt (git-fixes)
  • arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes)
  • arm64: vdso: Pass (void *) to virttopage() (git-fixes)
  • arm64: xor-neon: mark xorarm64neon_*() static (git-fixes)
  • asoc: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes).
  • asoc: codecs: wcd934x: fix resource leaks on component remove (git-fixes).
  • asoc: codecs: wcd938x: fix codec initialisation race (git-fixes).
  • asoc: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes).
  • asoc: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes).
  • asoc: codecs: wcd938x: fix soundwire initialisation race (git-fixes).
  • asoc: tegra: Fix ADX byte map (git-fixes).
  • asoc: tegra: Fix AMX byte map (git-fixes).
  • can: bcm: Fix UAF in bcmprocshow() (git-fixes).
  • cifs: add a warning when the in-flight count goes negative (bsc#1193629).
  • cifs: address unused variable warning (bsc#1193629).
  • cifs: do all necessary checks for credits within or before locking (bsc#1193629).
  • cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).
  • cifs: fix max_credits implementation (bsc#1193629).
  • cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).
  • cifs: fix session state check in smb2findsmb_ses (bsc#1193629).
  • cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).
  • cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).
  • cifs: fix status checks in cifstreeconnect (bsc#1193629).
  • cifs: log session id when a matching ses is not found (bsc#1193629).
  • cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).
  • cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).
  • cifs: print all credit counters in DebugData (bsc#1193629).
  • cifs: print client_guid in DebugData (bsc#1193629).
  • cifs: print more detail when invalidateinodemapping fails (bsc#1193629).
  • cifs: print nosharesock value while dumping mount options (bsc#1193629).
  • clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes).
  • clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes).
  • codel: fix kernel-doc notation warnings (git-fixes).
  • crypto: kpp - Add helper to set reqsize (git-fixes).
  • crypto: qat - Use helper to set reqsize (git-fixes).
  • devlink: fix kernel-doc notation warnings (git-fixes).
  • docs: networking: Update codeaurora references for rmnet (git-fixes).
  • documentation: bonding: fix the doc of peernotifdelay (git-fixes).
  • documentation: timers: hrtimers: Make hybrid union historical (git-fixes).
  • drm/amd/display: Correct DMUB_FW_VERSION macro (git-fixes).
  • drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
  • drm/amdgpu: Validate VM ioctl flags (git-fixes).
  • drm/amdgpu: avoid restore process run into dead loop (git-fixes).
  • drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes).
  • drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes).
  • drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes).
  • drm/bridge: tc358768: Add atomicgetinputbusfmts() implementation (git-fixes).
  • drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
  • drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
  • drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
  • drm/client: Fix memory leak in drmclienttarget_cloned (git-fixes).
  • drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes).
  • drm/i915: Fix one wrong caching mode enum usage (git-fixes).
  • drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).
  • drm/msm/dpu: Set DPUDATAHCTLEN for in INTFSC7180_MASK (git-fixes).
  • drm/panel: simple: Add Powertip PH800480T013 drmdisplaymode flags (git-fixes).
  • drm/panel: simple: Add connectortype for innoluxat043tn24 (git-fixes).
  • drm/ttm: Do not leak a resource on swapout move error (git-fixes).
  • dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes).
  • ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020).
  • ext4: add EAINODE checking to ext4iget() (bsc#1213106).
  • ext4: add ext4sbblockvalid() refactored out of ext4inodeblockvalid() (bsc#1213088).
  • ext4: add lockdep annotations for idatasem for ea_inode's (bsc#1213109).
  • ext4: add strict range checks while freeing blocks (bsc#1213089).
  • ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016).
  • ext4: bail out of ext4xattribody_get() fails for any reason (bsc#1213018).
  • ext4: block range must be validated before use in ext4mbclear_bb() (bsc#1213090).
  • ext4: check iomap type only if ext4iomapbegin() does not fail (bsc#1213103).
  • ext4: disallow ea_inodes with extended attributes (bsc#1213108).
  • ext4: fail ext4_iget if special inode unallocated (bsc#1213010).
  • ext4: fix WARNING in ext4updateinline_data (bsc#1213012).
  • ext4: fix WARNING in mbfindextent (bsc#1213099).
  • ext4: fix bugon in _estreesearch caused by bad quota inode (bsc#1213111).
  • ext4: fix data races when using cached status extents (bsc#1213102).
  • ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105).
  • ext4: fix idisksize exceeding isize problem in paritally written case (bsc#1213015).
  • ext4: fix lockdep warning when enabling MMP (bsc#1213100).
  • ext4: fix task hung in ext4xattrdelete_inode (bsc#1213096).
  • ext4: fix to check return value of freezebdev() in ext4shutdown() (bsc#1213021).
  • ext4: fix use-after-free read in ext4findextent for bigalloc + inline (bsc#1213098).
  • ext4: improve error handling from ext4_dirhash() (bsc#1213104).
  • ext4: improve error recovery code paths in _ext4remount() (bsc#1213017).
  • ext4: move where set the MAYINLINEDATA flag is set (bsc#1213011).
  • ext4: only update ireserveddata_blocks on successful block allocation (bsc#1213019).
  • ext4: refactor ext4freeblocks() to pull out ext4mbclear_bb() (bsc#1213087).
  • ext4: refuse to create ea block when umounted (bsc#1213093).
  • ext4: set lockdep subclass for the eainode in ext4xattrinodecache_find() (bsc#1213107).
  • ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110).
  • ext4: update sjournalinum if it changes after journal replay (bsc#1213094).
  • ext4: use ext4fctl_mem in fast-commit replay path (bsc#1213092).
  • ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013).
  • fbdev: au1200fb: Fix missing IRQ check in au1200fbdrvprobe (git-fixes).
  • fbdev: imxfb: warn about invalid left/right margin (git-fixes).
  • fuse: ioctl: translate ENOSYS in outarg (bsc#1213524).
  • fuse: revalidate: do not invalidate if interrupted (bsc#1213523).
  • hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
  • hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
  • hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861).
  • hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861).
  • hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861).
  • hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
  • hwmon: (adm1275) Allow setting sample averaging (git-fixes).
  • hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes).
  • i2c: xiic: Defer xiicwakeup() and _xiicstartxfer() in xiic_process() (git-fixes).
  • i2c: xiic: Do not try to handle more interrupt events after error (git-fixes).
  • ib/hfi1: Use bitmap_zalloc() when applicable (git-fixes)
  • inotify: Avoid reporting event with invalid wd (bsc#1213025).
  • jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095).
  • jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014).
  • kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).
  • kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers
  • kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes).
  • leds: trigger: netdev: Recheck NETDEVLEDMODE_LINKUP on dev rename (git-fixes).
  • media: atomisp: gminplatform: fix outlen in gmingetconfigdsmvar() (git-fixes).
  • media: cec: i2c: ch7322: also select REGMAP (git-fixes).
  • media: i2c: Correct format propagation for st-mipid02 (git-fixes).
  • media: usb: Check az6007_read() return value (git-fixes).
  • media: usb: siano: Fix warning due to null workfunct function pointer (git-fixes).
  • media: venus: helpers: Fix ALIGN() of non power of two (git-fixes).
  • media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes).
  • memcg: drop kmem.limitinbytes (bsc#1208788, bsc#1212905).
  • mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).
  • mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes).
  • net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
  • net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585).
  • net: mana: Add support for vlan tagging (bsc#1212301).
  • net: phy: prevent stale pointer dereference in phy_init() (git-fixes).
  • ntb: amd: Fix error handling in amdntbpcidriverinit() (git-fixes).
  • ntb: idt: Fix error handling in idtpcidriver_init() (git-fixes).
  • ntb: intel: Fix error handling in intelntbpcidriverinit() (git-fixes).
  • ntb: ntbtool: Add check for devmkcalloc (git-fixes).
  • ntb: ntbtransport: fix possible memory leak while deviceregister() fails (git-fixes).
  • nvme-multipath: support io stats on the mpath device (bsc#1210565).
  • nvme: introduce nvmestartrequest (bsc#1210565).
  • ocfs2: Switch to securityinodeinit_security() (git-fixes).
  • ocfs2: check new file size on fallocate call (git-fixes).
  • ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).
  • opp: Fix use-after-free in lazyopptables after probe deferral (git-fixes).
  • pci/pm: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes).
  • pci: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes).
  • phy: Revert 'phy: Remove SOCEXYNOS4212 dep. from PHYEXYNOS4X12_USB' (git-fixes).
  • phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes).
  • phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes).
  • pie: fix kernel-doc notation warning (git-fixes).
  • pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes).
  • pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes).
  • pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes).
  • powerpc/64: Only WARN if pa()/va() called with bad addresses (bsc#1194869).
  • powerpc/64s: Fix VAS mm use after free (bsc#1194869).
  • powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869).
  • powerpc/bpf: Fix use of userptregs in uapi (bsc#1194869).
  • powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869).
  • powerpc/interrupt: Do not read MSR from interruptexitkernel_prepare() (bsc#1194869).
  • powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).
  • powerpc/mm: Switch obsolete dssall to .long (bsc#1194869).
  • powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).
  • powerpc/powernv/vas: Assign real address to rxfifo in vasrxwinattr (bsc#1194869).
  • powerpc/prom_init: Fix kernel config grep (bsc#1194869).
  • powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).
  • powerpc/xics: fix refcount leak in icpopalinit() (bsc#1194869).
  • powerpc: clean vdso32 and vdso64 directories (bsc#1194869).
  • powerpc: define get_cycles macro for arch-override (bsc#1194869).
  • powerpc: update ppcsaveregs to save current r1 in pt_regs (bsc#1194869).
  • pwm: ab8500: Fix error code in probe() (git-fixes).
  • pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes).
  • pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes).
  • rdma/rxe: Fix access checks in rxecheckbind_mw (git-fixes)
  • rpm/check-for-config-changes: ignore also RISCVISA* and DYNAMICSIGFRAME They depend on CONFIGTOOLCHAINHAS*.
  • rsi: remove kernel-doc comment marker (git-fixes).
  • s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).
  • s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).
  • s390/debug: add ASMS390_ prefix to header guard (git-fixes bsc#1213263).
  • s390/percpu: add READONCE() to archthiscputoopsimple() (git-fixes bsc#1213252).
  • s390: define RUNTIMEDISCARDEXIT to fix link error with GNU ld < 2.36 (git-fixes bsc#1213264).
  • s390: discard .interp section (git-fixes bsc#1213247).
  • sched/debug: fix dentry leak in updatescheddomain_debugfs (git-fixes)
  • sched: Fix DEBUG && !SCHEDSTATS warn (git-fixes)
  • security: keys: Modify mismatched function name (git-fixes).
  • selftests: mptcp: depend on SYN_COOKIES (git-fixes).
  • selftests: mptcp: sockopt: return error if wrong mark (git-fixes).
  • selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes).
  • selftests: tc: add 'ct' action kconfig dep (git-fixes).
  • selftests: tc: add ConnTrack procfs kconfig (git-fixes).
  • selftests: tc: set timeout to 15 minutes (git-fixes).
  • signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869).
  • signal: Replace forcesigsegv(SIGSEGV) with forcefatal_sig(SIGSEGV) (bsc#1194869).
  • smb3: do not reserve too many oplock credits (bsc#1193629).
  • smb3: missing null check in SMB2changenotify (bsc#1193629).
  • smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).
  • smb: client: fix missed ses refcounting (git-fixes).
  • smb: client: fix parsing of source mount option (bsc#1193629).
  • smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629).
  • smb: client: fix warning in CIFSFindFirst() (bsc#1193629).
  • smb: client: fix warning in CIFSFindNext() (bsc#1193629).
  • smb: client: fix warning in cifsmatchsuper() (bsc#1193629).
  • smb: client: fix warning in cifssmb3do_mount() (bsc#1193629).
  • smb: client: fix warning in genericipconnect() (bsc#1193629).
  • smb: client: improve DFS mount check (bsc#1193629).
  • smb: client: remove redundant pointer 'server' (bsc#1193629).
  • smb: delete an unnecessary statement (bsc#1193629).
  • smb: move client and server files to common directory fs/smb (bsc#1193629).
  • smb: remove obsolete comment (bsc#1193629).
  • soundwire: qcom: fix storing port config out-of-bounds (git-fixes).
  • spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes).
  • spi: bcm63xx: fix max prepend length (git-fixes).
  • tpm: tpmvtpmproxy: fix a race condition in /dev/vtpmx creation (git-fixes).
  • tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes).
  • ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
  • ubi: ensure that VID header offset + VID header size <= alloc, size (bsc#1210584).
  • udf: Avoid double brelse() in udf_rename() (bsc#1213032).
  • udf: Define EFSCORRUPTED error code (bsc#1213038).
  • udf: Detect system inodes linked into directory hierarchy (bsc#1213114).
  • udf: Discard preallocation before extending file with a hole (bsc#1213036).
  • udf: Do not bother looking for prealloc extents if ilenExtents matches isize (bsc#1213035).
  • udf: Do not bother merging very long extents (bsc#1213040).
  • udf: Do not update file length for failed writes to inline files (bsc#1213041).
  • udf: Fix error handling in udfnewinode() (bsc#1213112).
  • udf: Fix extending file within last block (bsc#1213037).
  • udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034).
  • udf: Preserve link count of system files (bsc#1213113).
  • udf: Truncate added extents on failed expansion (bsc#1213039).
  • usb: dwc2: Fix some error handling paths (git-fixes).
  • usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes).
  • usb: gadget: udc: core: Offload usbudcvbus_handler processing (git-fixes).
  • usb: gadget: udc: core: Prevent softconnectstore() race (git-fixes).
  • usb: serial: option: add LARA-R6 01B PIDs (git-fixes).
  • wifi: airo: avoid uninitialized warning in airogetrate() (git-fixes).
  • wifi: raycs: Drop useless status variable in parseaddr() (git-fixes).
  • wifi: raycs: Utilize strnlen() in parseaddr() (git-fixes).
  • wifi: rtw89: debug: fix error code in rtw89debugprivsendh2c_set() (git-fixes).
  • wl3501cs: use ethhwaddrset() (git-fixes).
  • writeback: fix call of incorrect macro (bsc#1213024).
  • x86: Fix .brk attribute in linker script (git-fixes).
  • xfs: AIL needs asynchronous CIL forcing (bsc#1211811).
  • xfs: CIL work is serialised, not pipelined (bsc#1211811).
  • xfs: XLOGSTATEIOERROR must die (bsc#1211811).
  • xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811).
  • xfs: attach iclog callbacks in xlogcilsetctxwrite_state() (bsc#1211811).
  • xfs: clean up the rtbitmap fsmap backend (git-fixes).
  • xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).
  • xfs: do not reverse order of items in bulk AIL insertion (git-fixes).
  • xfs: do not run shutdown callbacks on active iclogs (bsc#1211811).
  • xfs: drop async cache flushes from CIL commits (bsc#1211811).
  • xfs: factor out log write ordering from xlogcilpush_work() (bsc#1211811).
  • xfs: fix getfsmap reporting past the last rt extent (git-fixes).
  • xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).
  • xfs: fix interval filtering in multi-step fsmap queries (git-fixes).
  • xfs: fix logdev fsmap query result filtering (git-fixes).
  • xfs: fix off-by-one error when the last rt extent is in use (git-fixes).
  • xfs: fix uninitialized variable access (git-fixes).
  • xfs: make fsmap backend function key parameters const (git-fixes).
  • xfs: make the record pointer passed to query_range functions const (git-fixes).
  • xfs: move the CIL workqueue to the CIL (bsc#1211811).
  • xfs: move xlogcommitrecord to xfslogcil.c (bsc#1211811).
  • xfs: order CIL checkpoint start records (bsc#1211811).
  • xfs: pass a CIL context to xlog_write() (bsc#1211811).
  • xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).
  • xfs: rework xlogstatedo_callback() (bsc#1211811).
  • xfs: run callbacks before waking waiters in xlogstateshutdown_callbacks (bsc#1211811).
  • xfs: separate out log shutdown callback processing (bsc#1211811).
  • xfs: wait iclog complete before tearing down AIL (bsc#1211811).
  • xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).
  • xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).
  • xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).
References

Affected packages

SUSE:Linux Enterprise Module for Public Cloud 15 SP4 / kernel-azure

Package

Name
kernel-azure
Purl
purl:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.14.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-devel": "5.14.21-150400.14.60.1",
            "kernel-devel-azure": "5.14.21-150400.14.60.1",
            "kernel-syms-azure": "5.14.21-150400.14.60.1",
            "kernel-source-azure": "5.14.21-150400.14.60.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP4 / kernel-source-azure

Package

Name
kernel-source-azure
Purl
purl:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.14.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-devel": "5.14.21-150400.14.60.1",
            "kernel-devel-azure": "5.14.21-150400.14.60.1",
            "kernel-syms-azure": "5.14.21-150400.14.60.1",
            "kernel-source-azure": "5.14.21-150400.14.60.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP4 / kernel-syms-azure

Package

Name
kernel-syms-azure
Purl
purl:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.14.60.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-devel": "5.14.21-150400.14.60.1",
            "kernel-devel-azure": "5.14.21-150400.14.60.1",
            "kernel-syms-azure": "5.14.21-150400.14.60.1",
            "kernel-source-azure": "5.14.21-150400.14.60.1"
        }
    ]
}

openSUSE:Leap 15.4 / kernel-azure

Package

Name
kernel-azure
Purl
purl:rpm/suse/kernel-azure&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.14.60.1

Ecosystem specific

{
    "binaries": [
        {
            "reiserfs-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-devel-azure": "5.14.21-150400.14.60.1",
            "dlm-kmp-azure": "5.14.21-150400.14.60.1",
            "cluster-md-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-extra": "5.14.21-150400.14.60.1",
            "gfs2-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-optional": "5.14.21-150400.14.60.1",
            "kernel-azure-devel": "5.14.21-150400.14.60.1",
            "kernel-azure": "5.14.21-150400.14.60.1",
            "kselftests-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-syms-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-livepatch-devel": "5.14.21-150400.14.60.1",
            "ocfs2-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-source-azure": "5.14.21-150400.14.60.1"
        }
    ]
}

openSUSE:Leap 15.4 / kernel-source-azure

Package

Name
kernel-source-azure
Purl
purl:rpm/suse/kernel-source-azure&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.14.60.1

Ecosystem specific

{
    "binaries": [
        {
            "reiserfs-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-devel-azure": "5.14.21-150400.14.60.1",
            "dlm-kmp-azure": "5.14.21-150400.14.60.1",
            "cluster-md-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-extra": "5.14.21-150400.14.60.1",
            "gfs2-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-optional": "5.14.21-150400.14.60.1",
            "kernel-azure-devel": "5.14.21-150400.14.60.1",
            "kernel-azure": "5.14.21-150400.14.60.1",
            "kselftests-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-syms-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-livepatch-devel": "5.14.21-150400.14.60.1",
            "ocfs2-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-source-azure": "5.14.21-150400.14.60.1"
        }
    ]
}

openSUSE:Leap 15.4 / kernel-syms-azure

Package

Name
kernel-syms-azure
Purl
purl:rpm/suse/kernel-syms-azure&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.14.21-150400.14.60.1

Ecosystem specific

{
    "binaries": [
        {
            "reiserfs-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-devel-azure": "5.14.21-150400.14.60.1",
            "dlm-kmp-azure": "5.14.21-150400.14.60.1",
            "cluster-md-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-extra": "5.14.21-150400.14.60.1",
            "gfs2-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-optional": "5.14.21-150400.14.60.1",
            "kernel-azure-devel": "5.14.21-150400.14.60.1",
            "kernel-azure": "5.14.21-150400.14.60.1",
            "kselftests-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-syms-azure": "5.14.21-150400.14.60.1",
            "kernel-azure-livepatch-devel": "5.14.21-150400.14.60.1",
            "ocfs2-kmp-azure": "5.14.21-150400.14.60.1",
            "kernel-source-azure": "5.14.21-150400.14.60.1"
        }
    ]
}