openSUSE-SU-2020:0543-1

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-11669: An issue was discovered on the powerpc platform. arch/powerpc/kernel/idlebook3s.S did not have save/restore functionality for PNVPOWERSAVEAMR, PNVPOWERSAVEUAMOR, and PNVPOWERSAVE_AMOR, aka CID-53a712bae5dd (bnc#1169390).
• CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppc{save,restore}tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 ('KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures') 87a11bb6a7f7 ('KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode') (bnc#1168276).
• CVE-2020-11494: An issue was discovered in slcbump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized canframe data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIGINITSTACK_ALL, aka CID-b9258a2cece4 (bnc#1168424).
• CVE-2019-9458: In the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1168295).
• CVE-2019-3701: An issue was discovered in cancangwrcv in net/can/gw.c. The CAN frame modification rules allow bitwise logical operations that can be also applied to the candlc field. The privileged user 'root' with CAPNETADMIN can create a CAN frame modification rule that made the data length code a higher value than the available CAN frame data size. In combination with a configured checksum calculation where the result is stored relatively to the end of the data (e.g. cgwcsumxorrel) the tail of the skb (e.g. fraglist pointer in skbsharedinfo) can be rewritten which finally can cause a system crash. Because of a missing check, the CAN drivers may write arbitrary content beyond the data registers in the CAN controller's I/O memory when processing can-gw manipulated outgoing frames (bnc#1120386).
• CVE-2020-10942: In getrawsocket in drivers/vhost/net.c lacked validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
• CVE-2019-19770: A use-after-free in the debugfs_remove function in fs/debugfs/inode.c was fixed. (bnc#1159198).

The following non-security bugs were fixed:

• ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
• ACPICA: Introduce ACPIACCESSBYTE_WIDTH() macro (bsc#1051510).
• ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
• ALSA: core: Add snddeviceget_state() helper (bsc#1051510).
• ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
• ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
• ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
• ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
• ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
• ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
• ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
• ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
• ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
• ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
• ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
• ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
• ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
• ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
• ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
• ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
• ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
• ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
• ALSA: info: remove redundant assignment to variable c (bsc#1051510).
• ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
• ALSA: line6: Fix endless MIDI read loop (git-fixes).
• ALSA: pcm.h: add foreachpcm_streams() (bsc#1051510).
• ALSA: pcm: Fix superfluous snprintf() usage (bsc#1051510).
• ALSA: pcm: Use a macro for parameter masks to reduce the needed cast (bsc#1051510).
• ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
• ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
• ALSA: pcm: oss: Remove WARNING from sndpcmplug_alloc() checks (git-fixes).
• ALSA: pcm: oss: Unlock mutex temporarily for sleeping at read/write (bsc#1051510).
• ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
• ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
• ALSA: usb-audio: Add delayed_register option (bsc#1051510).
• ALSA: usb-audio: Add support for MOTU MicroBook IIc (bsc#1051510).
• ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
• ALSA: usb-audio: Do not create a mixer element with bogus volume range (bsc#1051510).
• ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor (bsc#1051510).
• ALSA: usb-audio: Fix mixer controls' USB interface for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
• ALSA: usb-audio: Inform devices that need delayed registration (bsc#1051510).
• ALSA: usb-audio: Parse source ID of UAC2 effect unit (bsc#1051510).
• ALSA: usb-audio: Rewrite registration quirk handling (bsc#1051510).
• ALSA: usb-midi: Replace zero-length array with flexible-array member (bsc#1051510).
• ALSA: usx2y: use foreachpcm_streams() macro (bsc#1051510).
• ALSA: via82xx: Fix endianness annotations (bsc#1051510).
• ASoC: Intel: atom: Take the drv->lock mutex before calling sstsendslot_map() (bsc#1051510).
• ASoC: Intel: mrfld: fix incorrect check on p->sink (bsc#1051510).
• ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).
• ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).
• ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).
• Bluetooth: RFCOMM: fix ODEBUG bug in rfcommdevioctl (bsc#1051510).
• Btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).
• Btrfs: do not reset bio->bi_ops while writing bio (bsc#1168273).
• Btrfs: fix missing delayed iputs on unmount (bsc#1165949).
• Btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).
• Btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).
• Btrfs: fix unwritten extent buffers and hangs on future writeback attempts (bsc#1168273).
• Btrfs: make plug in writing meta blocks really work (bsc#1168273).
• Btrfs: only check delayed ref usage in shouldendtransaction (bsc#1165949).
• Btrfs: remove bio_flags which indicates a meta block of log-tree (bsc#1168273).
• Crypto: chelsio - Fixes a deadlock between rtnllock and uldmutex (bsc#1111666).
• Crypto: chelsio - Fixes a hang issue during driver registration (bsc#1111666).
• Deprecate NRUNSTABLENFS, use NR_WRITEBACK (bsc#1163403).
• HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).
• IB/hfi1: convert to debugfsfileget() and -put() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
• Input: add safety guards to inputsetkeycode() (bsc#1168075).
• Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).
• Input: raydiumi2cts - fix error codes in raydiumi2cboot_trigger() (bsc#1051510).
• Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).
• MM: replace PFLESSTHROTTLE with PFLOCALTHROTTLE (bsc#1163403).
• NFC: fdp: Fix a signedness bug in fdpncisend_patch() (bsc#1051510).
• NFS: send state management on a single connection (bsc#1167005).
• OMAP: DSS2: remove non-zero check on variable r (bsc#1114279)
• PCI/AER: Factor message prefixes with dev_fmt() (bsc#1161561).
• PCI/AER: Log which device prevents error recovery (bsc#1161561).
• PCI/AER: Remove ERRFATAL code from ERRNONFATAL path (bsc#1161561).
• PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).
• PCI/ERR: Always report current recovery status for udev (bsc#1161561).
• PCI/ERR: Handle fatal error recovery (bsc#1161561).
• PCI/ERR: Remove duplicated include from err.c (bsc#1161561).
• PCI/ERR: Simplify broadcast callouts (bsc#1161561).
• PCI/portdrv: Remove pcieportbus_type link order dependency (bsc#1161561).
• PCI/switchtec: Fix initcompletion race condition with pollwait() (bsc#1051510).
• PCI: Simplify disconnected marking (bsc#1161561).
• PCI: Unify device inaccessible (bsc#1161561).
• PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).
• PCI: pciehp: Fix MSI interrupt race (bsc#1159037).
• PCI: portdrv: Initialize service drivers directly (bsc#1161561).
• PM: core: Fix handling of devices deleted during system-wide resume (git-fixes).
• SUNRPC: defer slow parts of rpcfreeclient() to a workqueue (bsc#1168202).
• USB: Disable LPM on WD19's Realtek Hub (git-fixes).
• USB: Fix novation SourceControl XL after suspend (git-fixes).
• USB: cdc-acm: fix rounding error in TIOCSSERIAL (git-fixes).
• USB: hub: Do not record a connect-change event during reset-resume (git-fixes).
• USB: misc: iowarrior: add support for 2 OEMed devices (git-fixes).
• USB: misc: iowarrior: add support for the 100 device (git-fixes).
• USB: misc: iowarrior: add support for the 28 and 28L devices (git-fixes).
• USB: serial: ioedgeport: fix slab-out-of-bounds read in edgeinterrupt_callback (bsc#1051510).
• USB: serial: option: add ME910G1 ECM composition 0x110b (git-fixes).
• USB: serial: pl2303: add device-id for HP LD381 (git-fixes).
• ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
• apei/ghes: Do not delay GHES polling (bsc#1166982).
• ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).
• batman-adv: Avoid spurious warnings from batv neighcmp implementation (bsc#1051510).
• batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).
• batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).
• binfmtelf: Do not move brk for INTERP-less ETEXEC (bsc#1169013).
• binfmt_elf: move brk out of mmap when doing direct loader exec (bsc#1169013).
• blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).
• block, bfq: fix use-after-free in bfqidleslicetimerbody (bsc#1168760).
• block: keep bdi->iopages in sync with maxsectors_kb for stacked devices (bsc#1168762).
• bnxt_en: Support all variants of the 5750X chip family (bsc#1167216).
• bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).
• bpf: Explicitly memset the bpf_attr structure (bsc#1083647).
• brcmfmac: abort and release host after error (bsc#1111666).
• btrfs: Account for transblockrsv in maycommittransaction (bsc#1165949).
• btrfs: Add enospcdebug printing in metadatareserve_bytes (bsc#1165949).
• btrfs: Do mandatory tree block check before submitting bio (bsc#1168273).
• btrfs: Improve global reserve stealing logic (bsc#1165949).
• btrfs: Output ENOSPC debug info in incblockgroup_ro (bsc#1165949).
• btrfs: Remove btrfsinode::delayediput_count (bsc#1165949).
• btrfs: Remove fsinfo from dochunk_alloc (bsc#1165949).
• btrfs: Remove redundant argument of flush_space (bsc#1165949).
• btrfs: Remove redundant mirror_num arg (bsc#1168273).
• btrfs: Rename binsearch -> btrfsbin_search (bsc#1168273).
• btrfs: add a flush step for delayed iputs (bsc#1165949).
• btrfs: add assertions for releasing trans handle reservations (bsc#1165949).
• btrfs: add btrfsdeleteref_head helper (bsc#1165949).
• btrfs: add enospc debug messages for ticket failure (bsc#1165949).
• btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).
• btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).
• btrfs: adjust dirtymetadatabytes after writeback failure of extent buffer (bsc#1168273).
• btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).
• btrfs: always reserve our entire size for the global reserve (bsc#1165949).
• btrfs: assert on non-empty delayed iputs (bsc##1165949).
• btrfs: be more explicit about allowed flush states (bsc#1165949).
• btrfs: call btrfscreatependingblockgroups unconditionally (bsc#1165949).
• btrfs: catch cow on deleting snapshots (bsc#1165949).
• btrfs: change the minimum global reserve size (bsc#1165949).
• btrfs: check if there are free block groups for commit (bsc#1165949).
• btrfs: cleanup extent_op handling (bsc#1165949).
• btrfs: cleanup root usage by btrfsgetalloc_profile (bsc#1165949).
• btrfs: cleanup the target logic in _btrfsblockrsvrelease (bsc#1165949).
• btrfs: clear space cache inode generation always (bsc#1165949).
• btrfs: delayed-ref: pass delayedrefs directly to btrfsdelayedreflock (bsc#1165949).
• btrfs: do not account global reserve in can_overcommit (bsc#1165949).
• btrfs: do not allow reservations if we have pending tickets (bsc#1165949).
• btrfs: do not call btrfsstartdelalloc_roots in flushoncommit (bsc#1165949).
• btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).
• btrfs: do not enospc all tickets on flush failure (bsc#1165949).
• btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).
• btrfs: do not run delayed_iputs in commit (bsc##1165949).
• btrfs: do not use ctl->freespace for maxextent_size (bsc##1165949).
• btrfs: do not use global reserve for chunk allocation (bsc#1165949).
• btrfs: drop getextent from extentpage_data (bsc#1168273).
• btrfs: drop minsize from evictrefillandjoin (bsc##1165949).
• btrfs: drop unused spaceinfo parameter from createspace_info (bsc#1165949).
• btrfs: dump block_rsv details when dumping space info (bsc#1165949).
• btrfs: export _btrfsblockrsvrelease (bsc#1165949).
• btrfs: export block group accounting helpers (bsc#1165949).
• btrfs: export blockrsvuse_bytes (bsc#1165949).
• btrfs: export btrfsblockrsvaddbytes (bsc#1165949).
• btrfs: export spaceinfoadd*bytes (bsc#1165949).
• btrfs: export the block group caching helpers (bsc#1165949).
• btrfs: export the caching control helpers (bsc#1165949).
• btrfs: export the excluded extents helpers (bsc#1165949).
• btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).
• btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).
• btrfs: extent-tree: Detect bytesmayuse underflow earlier (bsc#1165949).
• btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).
• btrfs: extentio: Handle errors better in btreewritecachepages() (bsc#1168273).
• btrfs: extentio: Handle errors better in extentwritefullpage() (bsc#1168273).
• btrfs: extentio: Handle errors better in extentwritelockedrange() (bsc#1168273).
• btrfs: extentio: Handle errors better in extentwritepages() (bsc#1168273).
• btrfs: extentio: Kill dead condition in extentwritecachepages() (bsc#1168273).
• btrfs: extentio: Kill the forward declaration of flushwrite_bio (bsc#1168273).
• btrfs: extentio: Move the BUGON() in flushwritebio() one level up (bsc#1168273).
• btrfs: extentio: add proper error handling to lockextentbufferfor_io() (bsc#1168273).
• btrfs: factor our read/write stage off csumtreeblock into its callers (bsc#1168273).
• btrfs: factor out the ticket flush handling (bsc#1165949).
• btrfs: fix insert_reserved error handling (bsc##1165949).
• btrfs: fix maycommittransaction to deal with no partial filling (bsc#1165949).
• btrfs: fix truncate throttling (bsc#1165949).
• btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).
• btrfs: introduce an evict flushing state (bsc#1165949).
• btrfs: introduce delayedrefsrsv (bsc#1165949).
• btrfs: loop in inodersvrefill (bsc#1165949).
• btrfs: make btrfsdestroydelayedrefs use btrfsdelayedreflock (bsc#1165949).
• btrfs: make btrfsdestroydelayedrefs use btrfsdeleterefhead (bsc#1165949).
• btrfs: make cachingthread use btrfsfindnextkey (bsc#1165949).
• btrfs: merge two flushwritebio helpers (bsc#1168273).
• btrfs: migrate btrfstransreleasechunkmetadata (bsc#1165949).
• btrfs: migrate inc/decblockgroup_ro code (bsc#1165949).
• btrfs: migrate nocow and reservation helpers (bsc#1165949).
• btrfs: migrate the alloc_profile helpers (bsc#1165949).
• btrfs: migrate the block group caching code (bsc#1165949).
• btrfs: migrate the block group cleanup code (bsc#1165949).
• btrfs: migrate the block group lookup code (bsc#1165949).
• btrfs: migrate the block group read/creation code (bsc#1165949).
• btrfs: migrate the block group ref counting stuff (bsc#1165949).
• btrfs: migrate the block group removal code (bsc#1165949).
• btrfs: migrate the block group space accounting helpers (bsc#1165949).
• btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).
• btrfs: migrate the chunk allocation code (bsc#1165949).
• btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).
• btrfs: migrate the delayed refs rsv code (bsc#1165949).
• btrfs: migrate the dirty bg writeout code (bsc#1165949).
• btrfs: migrate the globalblockrsv helpers to block-rsv.c (bsc#1165949).
• btrfs: move and export can_overcommit (bsc#1165949).
• btrfs: move basic block_group definitions to their own header (bsc#1165949).
• btrfs: move btrfsaddfree_space out of a header file (bsc#1165949).
• btrfs: move btrfsblockrsv definitions into it's own header (bsc#1165949).
• btrfs: move btrfsraidgroup values to btrfsraidattr table (bsc#1165949).
• btrfs: move btrfsspaceinfoadd*_bytes to space-info.c (bsc#1165949).
• btrfs: move dumpspaceinfo to space-info.c (bsc#1165949).
• btrfs: move reservemetadatabytes and supporting code to space-info.c (bsc#1165949).
• btrfs: move space_info to space-info.h (bsc#1165949).
• btrfs: move the space info update macro to space-info.h (bsc#1165949).
• btrfs: move the space_info handling code to space-info.c (bsc#1165949).
• btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).
• btrfs: only check priority tickets for priority flushing (bsc#1165949).
• btrfs: only free reserved extent if we didn't insert it (bsc##1165949).
• btrfs: only reserve metadata_size for inodes (bsc#1165949).
• btrfs: only track refheads in delayedref_updates (bsc#1165949).
• btrfs: pass root to various extent ref mod functions (bsc#1165949).
• btrfs: qgroup: Do not hold qgroupioctllock in btrfsqgroupinherit() (bsc#1165823).
• btrfs: qgroup: Mark qgroup inconsistent if we're inherting snapshot to a new qgroup (bsc#1165823).
• btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).
• btrfs: refactor priorityreclaimmetadata_space (bsc#1165949).
• btrfs: refactor the ticket wakeup code (bsc#1165949).
• btrfs: release metadata before running delayed refs (bsc##1165949).
• btrfs: remove origbytes from reserveticket (bsc#1165949).
• btrfs: rename btrfsspaceinfoaddold_bytes (bsc#1165949).
• btrfs: rename dochunkalloc to btrfschunkalloc (bsc#1165949).
• btrfs: rename the btrfscalc*metadatasize helpers (bsc#1165949).
• btrfs: replace cleanerdelayediput_mutex with a waitqueue (bsc#1165949).
• btrfs: reserve delalloc metadata differently (bsc#1165949).
• btrfs: reserve extra space during evict (bsc#1165949).
• btrfs: reset maxextentsize on clear in a bitmap (bsc##1165949).
• btrfs: reset maxextentsize properly (bsc##1165949).
• btrfs: rework btrfscheckspacefordelayed_refs (bsc#1165949).
• btrfs: rework wakealltickets (bsc#1165949).
• btrfs: roll tracepoint into btrfsspaceinfo_update helper (bsc#1165949).
• btrfs: run btrfstrygranting_tickets if a priority ticket fails (bsc#1165949).
• btrfs: run delayed iput at unlink time (bsc#1165949).
• btrfs: run delayed iputs before committing (bsc#1165949).
• btrfs: set maxextentsize properly (bsc##1165949).
• btrfs: sink extentwritefull_page tree argument (bsc#1168273).
• btrfs: sink extentwritelocked_range tree parameter (bsc#1168273).
• btrfs: sink flushfn to extentwritecachepages (bsc#1168273).
• btrfs: sink getextent parameter to extentwritefullpage (bsc#1168273).
• btrfs: sink getextent parameter to extentwritelockedrange (bsc#1168273).
• btrfs: sink getextent parameter to extentfiemap (bsc#1168273).
• btrfs: sink getextent parameter to extentreadpages (bsc#1168273).
• btrfs: sink getextent parameter to extentwritepages (bsc#1168273).
• btrfs: sink getextent parameter to getextentskipholes (bsc#1168273).
• btrfs: sink writepage parameter to extentwritecache_pages (bsc#1168273).
• btrfs: stop partially refilling tickets when releasing space (bsc#1165949).
• btrfs: stop using blockrsvrelease_bytes everywhere (bsc#1165949).
• btrfs: switch to on-stack csum buffer in csumtreeblock (bsc#1168273).
• btrfs: temporarily export btrfsgetrestripe_target (bsc#1165949).
• btrfs: temporarily export fragmentfreespace (bsc#1165949).
• btrfs: temporarily export incblockgroup_ro (bsc#1165949).
• btrfs: track DIO bytes in flight (bsc#1165949).
• btrfs: tree-checker: Remove comprehensive root owner check (bsc#1168273).
• btrfs: unexport can_overcommit (bsc#1165949).
• btrfs: unexport the temporary exported functions (bsc#1165949).
• btrfs: unify error handling for ticket flushing (bsc#1165949).
• btrfs: unify extentpagedata type passed as void (bsc#1168273).
• btrfs: update maycommittransaction to use the delayed refs rsv (bsc#1165949).
• btrfs: use btrfstrygrantingtickets in updateglobal_rsv (bsc#1165949).
• btrfs: wait on caching when putting the bg cache (bsc#1165949).
• btrfs: wait on ordered extents on abort cleanup (bsc#1165949).
• btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).
• ceph: canonicalize server path in place (bsc#1168443).
• ceph: check POOLFLAGFULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL (bsc#1169307).
• ceph: remove the extra slashes in the server path (bsc#1168443).
• cfg80211: check regrule for NULL in handlechannel_custom() (bsc#1051510).
• cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).
• cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).
• cifs: ignore cached share root handle closing errors (bsc#1166780).
• clk: imx: Align imx sc clock msg structs to 4 (bsc#1111666).
• clk: imx: Align imx sc clock msg structs to 4 (git-fixes).
• clk: qcom: rcg: Return failure for RCG update (bsc#1051510).
• configfs: Fix bool initialization/comparison (bsc#1051510).
• cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).
• cpuidle: Do not unset the driver if it is there already (bsc#1051510).
• crypto: arm64/sha-ce - implement export/import (bsc#1051510).
• crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).
• crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).
• debugfs: add support for more elaborate ->d_fsdata (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
• debugfs: call debugfsrealfops() only after debugfsfileget() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
• debugfs: call debugfsrealfops() only after debugfsfileget() (bsc#1159198). Prerequisite for bsc#1159198.
• debugfs: convert to debugfsfileget() and -put() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
• debugfs: debugfsrealfops(): drop _musthold sparse annotation (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
• debugfs: debugfsusestart/finish do not exist anymore (bsc#1159198). Prerequisite for bsc#1159198.
• debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
• debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198). Prerequisite for bsc#1159198.
• debugfs: fix debugfsrealfops() build error (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
• debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
• debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
• debugfs: simplify _debugfsremove_file() (bsc#1159198). Prerequisite for bsc#1159198.
• dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).
• drm/amd/amdgpu: Fix GPR read from debugfs (v2) (bsc#1113956)
• drm/amd/display: Add link_rate quirk for Apple 15' MBP 2017 (bsc#1111666).
• drm/amd/display: Fix wrongly passed static prefix (bsc#1111666).
• drm/amd/display: remove duplicated assignment to grphobjtype (bsc#1051510).
• drm/amdgpu: fix typo for vcn1 idle check (bsc#1111666).
• drm/bochs: downgrade pcirequestregion failure from error to warning (bsc#1051510).
• drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).
• drm/drmdpmst:remove set but not used variable 'origlen' (bsc#1051510).
• drm/exynos: dsi: fix workaround for the legacy clock name (bsc#1111666).
• drm/exynos: dsi: propagate error value and silence meaningless warning (bsc#1111666).
• drm/lease: fix WARNING in idr_destroy (bsc#1113956)
• drm/msm: Set dma maximum segment size for mdss (bsc#1051510).
• drm/msm: Use the correct dma_sync calls harder (bsc#1051510).
• drm/msm: Use the correct dmasync calls in msmgem (bsc#1051510).
• drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).
• drm/sun4i: dsi: Use NULL to signify 'no panel' (bsc#1111666).
• drm/v3d: Replace wait_for macros to remove use of msleep (bsc#1111666).
• drm/vc4: Fix HDMI mode validation (git-fixes).
• drmdpmsttopology: fix broken drmdpsidebandparseremotedpcd_read() (bsc#1051510).
• dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).
• efi: Do not attempt to map RCI2 config table if it does not exist (jsc#ECO-366, bsc#1168367).
• efi: Export Runtime Configuration Interface table to sysfs (jsc#ECO-366, bsc#1168367).
• efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).
• efi: x86: move efiistable_address() into arch/x86 (jsc#ECO-366, bsc#1168367).
• ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).
• ext4: Check for non-zero journal inum in ext4calculateoverhead (bsc#1167288).
• ext4: add condresched() to _ext4findentry() (bsc#1166862).
• ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).
• ext4: fix a data race in EXT4I(inode)->idisksize (bsc#1166861).
• ext4: fix incorrect group count in ext4fillsuper error message (bsc#1168765).
• ext4: fix incorrect inodes per group in error message (bsc#1168764).
• ext4: fix potential race between online resizing and write operations (bsc#1166864).
• ext4: fix potential race between sflexgroups online resizing and access (bsc#1166867).
• ext4: fix potential race between sgroupinfo online resizing and access (bsc#1166866).
• ext4: fix race between writepages and enabling EXT4EXTENTSFL (bsc#1166870).
• ext4: fix support for inode sizes > 1024 bytes (bsc#1164284).
• ext4: potential crash on allocation error in ext4allocflexbgarray() (bsc#1166940).
• ext4: rename sjournalflagrwsem to swritepages_rwsem (bsc#1166868).
• ext4: validate the debugwantextra_isize mount option at parse time (bsc#1163897).
• fat: fix uninit-memory access for partial initialized inode (bsc#1051510).
• fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).
• fbdev/g364fb: Fix build failure (bsc#1051510).
• fbdev: potential information leak in dofbioctl() (bsc#1114279)
• fbmem: Adjust indentation in fbpreparelogo and fb_blank (bsc#1114279)
• firmware: arm_sdei: fix double-lock on hibernate with shared events (bsc#1111666).
• firmware: arm_sdei: fix possible double-lock on hibernate error path (bsc#1111666).
• ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).
• i2c: hix5hd2: add missed clkdisableunprepare in remove (bsc#1051510).
• i2c: jz4780: silence log flood on txabrt (bsc#1051510).
• ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).
• iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).
• iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).
• iio: imu: adis16480: check ret val for non-zero vs less-than-zero (bsc#1051510).
• iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).
• iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).
• iio: potentiostat: lmp9100: fix iiotriggeredbuffer_{predisable,postenable} positions (bsc#1051510).
• intel_th: Fix user-visible error codes (bsc#1051510).
• intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).
• iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).
• ipmi: fix hung processes in _getguid() (bsc#1111666).
• ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).
• ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).
• irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).
• irqdomain: Fix a memory leak in irqdomainpush_irq() (bsc#1051510).
• kABI workaround for pcieportbus_type change (bsc#1161561).
• kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).
• kABI: restore debugfsremoverecursive() (bsc#1159198).
• kabi fix for (bsc#1168202).
• libceph: fix allocmsgwithpagevector() memory leaks (bsc#1169308).
• libfs: fix infoleak in simpleattrread() (bsc#1168881).
• lpfc: add support for translating an RSCN rcv into a discovery rescan (bsc#1164777 bsc#1164780 bsc#1165211).
• lpfc: add support to generate RSCN events for nport (bsc#1164777 bsc#1164780 bsc#1165211).
• mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).
• mac80211: consider more elements in parsing CRC (bsc#1051510).
• mac80211: free peer keys before vif down in mesh (bsc#1051510).
• mac80211: mesh: fix RCU warning (bsc#1051510).
• mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).
• mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).
• macsec: add missing attribute validation for port (bsc#1051510).
• macsec: fix refcnt leak in module exit routine (bsc#1051510).
• media: dib0700: fix rc endpoint lookup (bsc#1051510).
• media: flexcop-usb: fix endpoint sanity check (git-fixes).
• media: go7007: Fix URB type for interrupt handling (bsc#1051510).
• media: ov519: add missing endpoint sanity checks (bsc#1168829).
• media: ov6650: Fix .getfmt() V4L2SUBDEVFORMATTRY support (bsc#1051510).
• media: ov6650: Fix some format attributes not under control (bsc#1051510).
• media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).
• media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).
• media: stv06xx: add missing descriptor sanity checks (bsc#1168854).
• media: tda10071: fix unsigned sign extension overflow (bsc#1051510).
• media: usbtv: fix control-message timeouts (bsc#1051510).
• media: v4l2-core: fix entity initialization in deviceregistersubdev (bsc#1051510).
• media: vsp1: tidyup VI6HGTLBn_H() macro (bsc#1051510).
• media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).
• mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).
• misc: pciendpointtest: Fix to support > 10 pci-endpoint-test devices (bsc#1051510).
• mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).
• mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).
• mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).
• mwifiex: set neededheadroom, not hardheader_len (bsc#1051510).
• net/nfc: Avoid stalls when nfcallocsend_skb() returned NULL (bsc#1051510).
• net/sched: flower: add missing validation of TCAFLOWERFLAGS (networking-stable-200219).
• net/sched: matchall: add missing validation of TCAMATCHALLFLAGS (networking-stable-200219).
• net/smc: fix leak of kernel memory to user space (networking-stable-200219).
• net: dsa: tagqca: Make sure there is headroom for tag (networking-stable-2002_19).
• net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).
• net: nfc: fix bounds checking bugs on 'pipe' (bsc#1051510).
• net: phy: micrel: kszphyresume(): add delay after genphyresume() before accessing PHY registers (bsc#1051510).
• netsched: keep allochash updated after hash allocation (git-fixes).
• netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).
• nvme-multipath: also check for a disabled path if there is a single sibling (bsc#1158983).
• nvme-multipath: do not select namespaces which are about to be removed (bsc#1158983).
• nvme-multipath: factor out a nvmepathis_disabled helper (bsc#1158983).
• nvme-multipath: fix crash in nvmempathclearctrlpaths (bsc#1158983).
• nvme-multipath: fix possible I/O hang when paths are updated (bsc#1158983).
• nvme-multipath: fix possible io hang after ctrl reconnect (bsc#1158983).
• nvme-multipath: remove unused groups_only mode in ana log (bsc#1158983).
• nvme-multipath: round-robin I/O policy (bsc#1158983).
• nvme: fix a possible deadlock when passthru commands sent to a multipath device (bsc#1158983).
• nvme: fix controller removal race with scan work (bsc#1158983).
• objtool: Add isstaticjump() helper (bsc#1169514).
• objtool: Add relocation check for alternative sections (bsc#1169514).
• partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).
• perf/amd/uncore: Replace manual sampling check with CAPNOINTERRUPT flag (bsc#1114279).
• perf: qcom_l2: fix column exclusion check (git-fixes).
• pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).
• platform/x86: pmcatom: Add Lex 2I385SW to critclksystems DMI table (bsc#1051510).
• powerpc/64/tm: Do not let userspace set regs->trap via sigreturn (bsc#1118338 ltc#173734).
• powerpc/64: mark startheremultiplatform as __ref (bsc#1148868).
• powerpc/64s: Fix section mismatch warnings from boot code (bsc#1148868).
• powerpc/hash64/devmap: Use HPAGETHP_HUGE when setting up huge devmap PTE entries (bsc#1065729).
• powerpc/kprobes: Ignore traps that happened in real mode (bsc#1065729).
• powerpc/mm: Fix section mismatch warning in stopmachinechange_mapping() (bsc#1148868).
• powerpc/pseries/ddw: Extend upper limit for huge DMA window for persistent memory (bsc#1142685 ltc#179509).
• powerpc/pseries/iommu: Fix set but not used values (bsc#1142685 ltc#179509).
• powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation (bsc#1142685 ltc#179509).
• powerpc/vmlinux.lds: Explicitly retain .gnu.hash (bsc#1148868).
• powerpc/xive: Replace msleep(x) with msleep(OPALBUSYDELAY_MS) (bsc#1085030).
• powerpc/xive: Use XIVEBADIRQ instead of zero to catch non configured IPIs (bsc#1085030).
• pwm: bcm2835: Dynamically allocate base (bsc#1051510).
• pwm: meson: Fix confusing indentation (bsc#1051510).
• pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).
• pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).
• pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).
• pxa168fb: fix release function mismatch in probe failure (bsc#1051510).
• qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).
• rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (git-fixes).
• s390/mm: fix dynamic pagetable upgrade for hugetlbfs (bsc#1165182 LTC#184102).
• s390/qeth: fix potential deadlock on workqueue flush (bsc#1165185 LTC#184108).
• scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).
• scsi: core: kABI fix offline_already (bsc#1145929).
• scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).
• scsi: lpfc: Change default SCSI LUN QD to 64 (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654).
• scsi: lpfc: Clean up hba maxlunqueue_depth checks (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Copyright updates for 12.6.0.4 patches (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix Fabric hostname registration if system hostname changes (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix MDS Latency Diagnostics Err-drop rates (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix broken Credit Recovery after driver load (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix compiler warning on frame size (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix coverity errors in fmdi attribute handling (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix crash after handling a pci error (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix crash in target side cable pulls hitting WAITFORUNREG (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix disablement of FC-AL on lpe35000 models (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix driver nvme rescan logging (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix improper flag check for IO type (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix incomplete NVME discovery when target (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfcunreglogin (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix lockdep error - register non-static key (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix lpfc overwrite of sgcnt field in nvmefctgtfcpreq (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix lpfciobuf resource leak in lpfcgetscsibufs4 error path (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix memory leak on lpfcbsgwriteebufset func (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix missing check for CSF in Write Object Mbox Rsp (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix ras_log via debugfs (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix registration of ELS type support in fdmi (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix release of hwq to clear the eq relationship (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix scsi host template for SLI3 vports (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix unmap of dpp bars affecting next driver load (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix update of wq consumer index in lpfcsli4wq_release (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Fix: Rework setting of fdmi symbolic node name registration (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Make lpfcdeferacc_rsp static (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Update lpfc version to 12.6.0.3 (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Update lpfc version to 12.6.0.4 (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: Update lpfc version to 12.8.0.0 (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: add RDF registration and Link Integrity FPIN logging (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: fix spelling mistake 'Notication' -> 'Notification' (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: lpfc: fix spelling mistakes of asynchronous (bsc#1164777 bsc#1164780 bsc#1165211).
• scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (bsc#1157424).
• serdev: ttyport: restore client ops on deregistration (bsc#1051510).
• staging: ccree: use signal safe completion wait (git-fixes).
• staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).
• staging: vt6656: fix sign of rxdbm to bbpreedrssi (bsc#1051510).
• staging: wlan-ng: fix ODEBUG bug in prism2stadisconnectusb (bsc#1051510).
• staging: wlan-ng: fix use-after-free Read in hfa384xusbincallback (bsc#1051510).
• swiotlb: do not panic on mapping failures (bsc#1162171).
• swiotlb: remove the overflow buffer (bsc#1162171).
• thermal: devfreqcooling: inline all stubs for CONFIGDEVFREQ_THERMAL=n (bsc#1051510).
• tpm: ibmvtpm: Wait for buffer to be set before proceeding (bsc#1065729).
• tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).
• tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).
• tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).
• usb: audio-v2: Add uac2effectunit_descriptor definition (bsc#1051510).
• usb: core: hub: do error out if usbautopmget_interface() fails (git-fixes).
• usb: core: port: do error out if usbautopmget_interface() fails (git-fixes).
• usb: dwc2: Fix in ISOC request length checking (git-fixes).
• usb: gadget: composite: Fix bMaxPower for SuperSpeedPlus (git-fixes).
• usb: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).
• usb: host: xhci-plat: add a shutdown (git-fixes).
• usb: musb: Disable pullup at init (git-fixes).
• usb: musb: fix crash with highmen PIO and usbmon (bsc#1051510).
• usb: quirks: add NO_LPM quirk for Logitech Screen Share (git-fixes).
• usb: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters (git-fixes).
• usb: storage: Add quirk for Samsung Fit flash (git-fixes).
• usb: uas: fix a plug & unplug racing (git-fixes).
• usb: xhci: apply XHCISUSPENDDELAY to AMD XHCI controller 1022:145c (git-fixes).
• virtio-blk: improve virtqueue error to BLK_STS (bsc#1167627).
• virtio_ring: fix unmap of indirect descriptors (bsc#1162171).
• x86/mce: Fix logic and comments around MSRPPINCTL (bsc#1114279).
• x86/pkeys: Manually set X86FEATUREOSPKE to preserve existing changes (bsc#1114279).
• xen/blkfront: fix memory allocation flags in blkfrontsetupindirect() (bsc#1168486).
• xhci: Do not open code _printsymbolic() in xhci trace events (git-fixes).
• xhci: apply XHCIPMESTUCK_QUIRK to Intel Comet Lake platforms (git-fixes).