openSUSE-SU-2021:1076-1

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2021-22555: A heap out-of-bounds write affecting Linux was discovered in net/netfilter/x_tables.c (bnc#1188116).
• CVE-2021-33909: fs/seq_file.c did not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05 (bnc#1188062).
• CVE-2021-3609: A use-after-free in can/bcm could have led to privilege escalation (bsc#1187215).
• CVE-2021-3612: An out-of-bounds memory write flaw was found in the joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allowed a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability (bnc#1187585 ).
• CVE-2021-35039: kernel/module.c in the Linux kernel mishandled Signature Verification, aka CID-0c18f29aae7c. Without CONFIGMODULESIG, verification that a kernel module is signed, for loading via initmodule, did not occur for a module.sigenforce=1 command-line argument (bnc#1188080).

The following non-security bugs were fixed:

• ACPI: APEI: fix synchronous external aborts in user-mode (git-fixes).
• ACPI: bus: Call kobjectput() in acpiinit() error path (git-fixes).
• ACPICA: Fix memory leak caused by _CID repair function (git-fixes).
• ACPI: EC: Make more Asus laptops use ECDT _GPE (git-fixes).
• ACPI: processor idle: Fix up C-state latency if not ordered (git-fixes).
• ACPI: property: Constify stubs for CONFIG_ACPI=n case (git-fixes).
• ACPI: resources: Add checks for ACPI IRQ override (git-fixes).
• ACPI: sysfs: Fix a buffer overrun problem with description_show() (git-fixes).
• ALSA: hda/realtek: Add another ALC236 variant support (git-fixes).
• ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D (git-fixes).
• ALSA: intel8x0: Fix breakage at ac97 clock measurement (git-fixes).
• ALSA: isa: Fix error return code in sndcmi8330probe() (git-fixes).
• ALSA: usb-audio: fix rate on Ozone Z90 USB headset (git-fixes).
• ALSA: usb-audio: scarlett2: Fix wrong resume call (git-fixes).
• ALSA: usb-audio: scarlett2: Read mixer volumes at init time (git-fixes).
• ALSA: usb-audio: scarlett2: Read mux at init time (git-fixes).
• amdgpu: fix GEM obj leak in amdgpudisplayuserframebuffercreate (bsc#1152472)
• ARM: ensure the signal page contains defined contents (bsc#1188445).
• ASoC: atmel-i2s: Fix usage of capture and playback at the same time (git-fixes).
• ASoC: cs42l42: Correct definition of CS42L42ADCPDN_MASK (git-fixes).
• ASoC: hisilicon: fix missing clkdisableunprepare() on error in hi6210i2sstartup() (git-fixes).
• ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 'mtkbtcvsdsnd_probe()' (git-fixes).
• ASoC: rsnd: tidyup loop on rsndadgclk_query() (git-fixes).
• ASoC: tegra: Set driver_name=tegra for all machine drivers (git-fixes).
• ata: ahci_sunxi: Disable DIPM (git-fixes).
• ath10k: add missing error return code in ath10kpciprobe() (git-fixes).
• ath10k: Fix an error code in ath10kaddinterface() (git-fixes).
• ath10k: go to path err_unsupported when chip id is not supported (git-fixes).
• ath10k: remove unused more_frags variable (git-fixes).
• ath9k: Fix kernel NULL pointer dereference during athresetinternal() (git-fixes).
• backlight: lm3630a_bl: Put fwnode in error case during ->probe() (git-fixes).
• blk-mq: Add blkmqdelayrunhw_queues() API call (bsc#1180092).
• blk-mq: In blkmqdispatchrqlist() 'no budget' is a reason to kick (bsc#1180092).
• blk-mq: insert flush request to the front of dispatch queue (bsc#1180092).
• blk-mq: insert passthrough request into hctx->dispatch directly (bsc#1180092).
• blk-mq: Put driver tag in blkmqdispatchrqlist() when no budget (bsc#1180092).
• blk-mq: Rerun dispatching in the case of budget contention (bsc#1180092).
• Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc (git-fixes).
• Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip (git-fixes).
• Bluetooth: Fix handling of HCILEAdvertisingSetTerminated event (git-fixes).
• Bluetooth: Fix the HCI to MGMT status conversion table (git-fixes).
• Bluetooth: mgmt: Fix slab-out-of-bounds in tlvdatais_valid (git-fixes).
• Bluetooth: Shutdown controller after workqueues are flushed or cancelled (git-fixes).
• bpftool: Properly close valist 'ap' by vaend() on error (bsc#1155518).
• brcmfmac: correctly report average RSSI in station info (git-fixes).
• brcmfmac: fix setting of station info chains bitmask (git-fixes).
• brcmsmac: mac80211_if: Fix a resource leak in an error handling path (git-fixes).
• can: gw: synchronize rcu operations before removing gw job entry (git-fixes).
• can: hi311x: hi3110canprobe(): silence clang warning (git-fixes).
• can: peakpciefd: pucanhandle_status(): fix a potential starvation issue in TX path (git-fixes).
• cfg80211: call cfg80211leaveocb when switching away from OCB (git-fixes).
• char: pcmcia: error out if 'numbytesread' is greater than 4 in set_protocol() (git-fixes).
• clk: actions: Fix bispfactortable based clocks on Owl S500 SoC (git-fixes).
• clk: actions: Fix SD clocks factor table on Owl S500 SoC (git-fixes).
• clk: actions: Fix UART clock dividers on Owl S500 SoC (git-fixes).
• clk: meson: g12a: fix gp0 and hifi ranges (git-fixes).
• clk: renesas: r8a77995: Add ZA2 clock (git-fixes).
• clk: renesas: rcar-gen3: Update Z clock rate formula in comments (git-fixes).
• clk: si5341: Avoid divide errors due to bogus register contents (git-fixes).
• clk: si5341: Update initialization magic (git-fixes).
• clk: tegra: Ensure that PLLU configuration is applied properly (git-fixes).
• clk: zynqmp: pll: Remove some dead code (git-fixes).
• clocksource/armarchtimer: Improve Allwinner A64 timer workaround (git-fixes).
• clocksource: Retry clock read if long delays detected (git-fixes).
• cpufreq: sc520_freq: add 'fallthrough' to one case (git-fixes).
• cpu/hotplug: Cure the cpusets trainwreck (git fixes (sched/hotplug)).
• crypto: ccp - Fix a resource leak in an error handling path (git-fixes).
• crypto: ixp4xx - dma_unmap the correct address (git-fixes).
• crypto: nitrox - fix unchecked variable in nitroxregisterinterrupts (git-fixes).
• crypto: nx - add missing MODULEDEVICETABLE (git-fixes).
• crypto: omap-sham - Fix PM reference leak in omap sham ops (git-fixes).
• crypto: qat - check return code of qathalrdrelreg() (git-fixes).
• crypto: qat - remove unused macro in FW loader (git-fixes).
• crypto: sun4i-ss - checking sg length is not sufficient (git-fixes).
• crypto: sun4i-ss - initialize need_fallback (git-fixes).
• crypto: sun4i-ss - IV register does not work on A10 and A13 (git-fixes).
• crypto: ux500 - Fix error return code in hashhwfinal() (git-fixes).
• crypto: virtio: Fix dest length calculation in _virtiocryptoskcipherdo_req() (git-fixes).
• crypto: virtio: Fix src/dst scatterlist calculation in _virtiocryptoskcipherdo_req() (git-fixes).
• cw1200: add missing MODULEDEVICETABLE (git-fixes).
• dma-buf/sync_file: Do not leak fences on merge failure (git-fixes).
• dmaengine: mediatek: do not issue a new desc if one is still current (git-fixes).
• dmaengine: mediatek: free the proper desc in desc_free handler (git-fixes).
• dmaengine: mediatek: use GFPNOWAIT instead of GFPATOMIC in prep_dma (git-fixes).
• dmaengine: rcar-dmac: Fix PM reference leak in rcardmacprobe() (git-fixes).
• dmaengine: zynqmpdma: Fix PM reference leak in zynqmpdmaallocchan_resourc() (git-fixes).
• docs: admin-guide: update description for kernel.hotplug sysctl (git-fixes).
• dpaa2-eth: fix memory leak in XDP_REDIRECT (git-fixes).
• drm/amd/amdgpu/sriov disable all ip hw status by default (git-fixes).
• drm/amd/display: fix incorrrect valid irq check (git-fixes).
• drm/amd/display: fix usemaxlb flag for 420 pixel formats (git-fixes).
• drm/amd/display: Set DISPCLKMAXERRDET_CYCLES to 7 (git-fixes).
• drm/amd/display: Update scaling settings on modeset (git-fixes).
• drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpudmatomic_check (git-fixes).
• drm/amdgpu: Do not query CE and UE errors (bsc#1152472)
• drm/amdgpu: Update NV SIMD-per-CU to 2 (git-fixes).
• drm/amdkfd: Walk through list with dqm lock hold (git-fixes).
• drm/arm/malidp: Always list modifiers (git-fixes).
• drm/bridge: cdns: Fix PM reference leak in cdnsdsitransfer() (git-fixes).
• drm: bridge/panel: Cleanup connector on bridge detach (bsc#1152489)
• drm/mcde/panel: Inverse misunderstood flag (bsc#1152472)
• drm/mediatek: Fix PM reference leak in mtkcrtcddphwinit() (git-fixes).
• drm/msm/dpu: Fix error return code in dpumdssinit() (git-fixes).
• drm/msm/mdp4: Fix modifier support enabling (git-fixes).
• drm/msm: Small msmgempurge() fix (bsc#1152489)
• drm/mxsfb: Do not select DRMKMSFB_HELPER (git-fixes).
• drm/nouveau: wait for moving fence after pinning v2 (git-fixes).
• drm: qxl: ensure surf.data is ininitialized (git-fixes).
• drm/radeon: Add the missed drmgemobjectput() in radeonuserframebuffercreate() (git-fixes).
• drm/radeon: Fix a missing check bug in radeondpmst_detect() (bsc#1152489)
• drm/radeon: wait for moving fence after pinning (git-fixes).
• drm/rockchip: cdn-dp-core: add missing clkdisableunprepare() on error in cdndpgrf_write() (git-fixes).
• drm/rockchip: dsi: move all lane config except LCDC mux to bind() (git-fixes).
• drm/rockchip: dsi: remove extra component_del() call (git-fixes).
• drm/sched: Avoid data corruptions (git-fixes).
• drm/stm: Fix bus_flags handling (bsc#1152472)
• drm/tegra: Do not set allowfbmodifiers explicitly (git-fixes).
• drm/vc4: fix argument ordering in vc4crtcget_margins() (git-fixes).
• drm/vc4: hdmi: Make sure the controller is powered in detect (bsc#1152489)
• drm/virtio: Fix double free on probe failure (git-fixes).
• drm/zte: Do not select DRMKMSFB_HELPER (git-fixes).
• extcon: extcon-max8997: Fix IRQ freeing at error path (git-fixes).
• extcon: intel-mrfld: Sync hardware and software state on init (git-fixes).
• extcon: max8997: Add missing modalias string (git-fixes).
• extcon: sm5502: Drop invalid register write in sm5502regdata (git-fixes).
• fbmem: add margin check to fbcheckcaps() (git-fixes).
• fbmem: Do not delete the mode that is still in use (git-fixes).
• firmware: tegra: Fix error return code in tegra210bpmpinit() (git-fixes).
• Fix meta data in lpfc-decouple-porttemplate-and-vporttemplate.patch
• fm10k: Fix an error handling path in 'fm10k_probe()' (git-fixes).
• fpga: machxo2-spi: Address warning about unused variable (git-fixes).
• fpga: stratix10-soc: Add missing fpgamgrfree() call (git-fixes).
• fuse: check connected before queueing on fpq->io (bsc#1188267).
• fuse: ignore PG_workingset after stealing (bsc#1188268).
• fuse: reject internal errno (bsc#1188269).
• gpio: AMD8111 and TQMX86 require HASIOPORTMAP (git-fixes).
• gve: Add dqo descriptors (bsc#1176940).
• gve: Add DQO fields for core data structures (bsc#1176940).
• gve: Add Gvnic stats AQ command and ethtool show/set-priv-flags (bsc#1176940).
• gve: Add stats for gve (bsc#1176940).
• gve: Add support for DQO RX PTYPE map (bsc#1176940).
• gve: Add support for raw addressing device option (bsc#1176940).
• gve: Add support for raw addressing in the tx path (bsc#1176940).
• gve: Add support for raw addressing to the rx path (bsc#1176940).
• gve: adminq: DQO specific device descriptor logic (bsc#1176940).
• gve: Batch AQ commands for creating and destroying queues (bsc#1176940).
• gve: Check TX QPL was actually assigned (bsc#1176940).
• gve: DQO: Add core netdev features (bsc#1176940).
• gve: DQO: Add ring allocation and initialization (bsc#1176940).
• gve: DQO: Add RX path (bsc#1176940).
• gve: DQO: Add TX path (bsc#1176940).
• gve: DQO: Configure interrupts on device up (bsc#1176940).
• gve: DQO: Fix off by one in gverxdqo() (bsc#1176940).
• gve: DQO: Remove incorrect prefetch (bsc#1176940).
• gve: Enable Link Speed Reporting in the driver (bsc#1176940).
• gve: Fix an error handling path in 'gve_probe()' (git-fixes).
• gve: Fix swapped vars when fetching max queues (git-fixes).
• gve: Fix warnings reported for DQO patchset (bsc#1176940).
• gve: Get and set Rx copybreak via ethtool (bsc#1176940).
• gve: gverxcopy: Move padding to an argument (bsc#1176940).
• gve: Introduce a new model for device options (bsc#1176940).
• gve: Introduce per netdev enum gve_queue_format (bsc#1176940).
• gve: Make gverxslotpageinfo.page_offset an absolute offset (bsc#1176940).
• gve: Move some static functions to a common file (bsc#1176940).
• gve: NIC stats for report-stats and for ethtool (bsc#1176940).
• gve: Propagate error codes to caller (bsc#1176940).
• gve: Replace zero-length array with flexible-array member (bsc#1176940).
• gve: Rx Buffer Recycling (bsc#1176940).
• gve: Simplify code and axe the use of a deprecated API (bsc#1176940).
• gve: Update adminq commands to support DQO queues (bsc#1176940).
• gve: Use devinfo/err instead of netifinfo/err (bsc#1176940).
• gve: Use link status register to report link status (bsc#1176940).
• HID: do not use down_interruptible() when unbinding devices (git-fixes).
• HID: wacom: Correct base usage for capacitive ExpressKey status bits (git-fixes).
• hwmon: (max31722) Remove non-standard ACPI device IDs (git-fixes).
• hwmon: (max31790) Fix fan speed reporting for fan7..12 (git-fixes).
• hwmon: (max31790) Fix pwmX_enable attributes (git-fixes).
• hwmon: (max31790) Report correct current pwm duty cycles (git-fixes).
• hwrng: exynos - Fix runtime PM imbalance on error (git-fixes).
• i2c: dev: Add __user annotation (git-fixes).
• i2c: robotfuzz-osif: fix control-request directions (git-fixes).
• ibmvnic: account for bufs already saved in indir_buf (jsc#SLE-17268 jsc#SLE-17043 bsc#1179243 ltc#189290).
• ibmvnic: Allow device probe if the device is not ready at boot (bsc#1184114 ltc#192237).
• ibmvnic: clean pending indirect buffs during reset (jsc#SLE-17268 jsc#SLE-17043 bsc#1179243 ltc#189290).
• ibmvnic: fix kernel build warning (bsc#1184114 ltc#192237).
• ibmvnic: fix kernel build warning in strncpy (bsc#1184114 ltc#192237).
• ibmvnic: fix kernel build warnings in buildhdrdescs_arr (bsc#1184114 ltc#192237).
• ibmvnic: fix sendrequestmap incompatible argument (bsc#1184114 ltc#192237).
• ibmvnic: free txpool if tsopool alloc fails (bsc#1085224 ltc#164363).
• ibmvnic: parenthesize a check (bsc#1184114 ltc#192237 bsc#1183871 ltc#192139 git-fixes).
• ibmvnic: set ltb->buff to NULL after freeing (bsc#1094840 ltc#167098).
• ibmvnic: Use listforeach_entry() to simplify code in ibmvnic.c (bsc#1184114 ltc#192237).
• ibmvnic: Use 'skbfragaddress()' instead of hand coding it (bsc#1184114 ltc#192237).
• ibmvnic: Use strscpy() instead of strncpy() (bsc#1184114 ltc#192237).
• iio: accel: bma180: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: accel: bma220: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: accel: hid: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: accel: kxcjk-1013: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio:accel:mxc4005: Drop unnecessary explicit casts in regmapbulkread calls (git-fixes).
• iio: accel: mxc4005: Fix overread of data and alignment issue (git-fixes).
• iio: accel: stk8312: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: accel: stk8ba50: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: adc: at91-sama5d2: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: adc: hx711: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: adc: mxs-lradc: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: adc: ti-ads1015: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: adc: ti-ads8688: Fix alignment of buffer in iiopushtobufferswith_timestamp() (git-fixes).
• iio: adc: vf610: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: adis16400: do not return ints in irq handlers (git-fixes).
• iio: adis_buffer: do not return ints in irq handlers (git-fixes).
• iio: at91-sama5d2adc: remove usage of iioprivtodev() helper (git-fixes).
• iio: gyro: bmg160: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: humidity: am2315: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: light: isl29125: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: light: tcs3414: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: light: tcs3472: do not free unallocated IRQ (git-fixes).
• iio: light: tcs3472: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: light: vcnl4035: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: ltr501: ltr501readps(): add missing endianness conversion (git-fixes).
• iio: ltr501: ltr559: fix initialization of LTR501ALSCONTR (git-fixes).
• iio: ltr501: mark register holding upper 8 bits of ALSDATA{0,1} and PSDATA as volatile, too (git-fixes).
• iio: magn: bmc150: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: magn: hmc5843: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: magn: rm3100: Fix alignment of buffer in iiopushtobufferswith_timestamp() (git-fixes).
• iio: potentiostat: lmp91000: Fix alignment of buffer in iiopushtobufferswith_timestamp() (git-fixes).
• iio: prox: as3935: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: prox: isl29501: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: prox: pulsed-light: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: prox: srf08: Fix buffer alignment in iiopushtobufferswith_timestamp() (git-fixes).
• iio: si1133: fix format string warnings (git-fixes).
• Input: hilkbd - fix error return code in hildev_connect() (git-fixes).
• Input: usbtouchscreen - fix control-request directions (git-fixes).
• iwlwifi: mvm: do not change band on bound PHY contexts (git-fixes).
• iwlwifi: pcie: free IML DMA memory allocation (git-fixes).
• kABI: restore struct tcpc_config definition (git-fixes).
• kABI workaround for pci/quirks.c (git-fixes).
• kernel-binary.spec: Exctract s390 decompression code (jsc#SLE-17042).
• kernel-binary.spec: Fix up usrmerge for non-modular kernels.
• kprobes: Do not expose probe addresses to non-CAP_SYSLOG (git-fixes).
• kprobes: Fix compiler warning for !CONFIGKPROBESON_FTRACE (git-fixes).
• kprobes: fix kill kprobe which has been marked as gone (git-fixes).
• kprobes: Fix NULL pointer dereference at kprobeftracehandler (git-fixes).
• kprobes: Fix to check probe enabled before disarmkprobeftrace() (git-fixes).
• leds: as3645a: Fix error return code in as3645aparsenode() (git-fixes).
• leds: ktd2692: Fix an error handling path (git-fixes).
• leds: lm3532: select regmap I2C API (git-fixes).
• libbpf: Fixes incorrect rxringsetup_done (bsc#1155518).
• lib/decompressors: remove set but not used variabled 'level' (git-fixes).
• lib: vsprintf: Fix handling of number field widths in vsscanf (git-fixes).
• mac80211_hwsim: drop pending frames on stop (git-fixes).
• mac80211: remove iwlwifi specific workaround NDPs of null_response (git-fixes).
• mac80211: remove iwlwifi specific workaround that broke sta NDP tx (git-fixes).
• mac80211: remove warning in ieee80211getsband() (git-fixes).
• math: Export mulu64u64divu64 (git-fixes).
• media: au0828: fix a NULL vs IS_ERR() check (git-fixes).
• media, bpf: Do not copy more entries than user space requested (git-fixes).
• media: bt8xx: Fix a missing check bug in bt878_probe (git-fixes).
• media: cobalt: fix race condition in setting HPD (git-fixes).
• media: cpia2: fix memory leak in cpia2usbprobe (git-fixes).
• media: dtv5100: fix control-request directions (git-fixes).
• media: dvb_net: avoid speculation from net slot (git-fixes).
• media: dvb-usb: fix wrong definition (git-fixes).
• media: dvdusb: memory leak in cinergyt2fe_attach (git-fixes).
• media: em28xx: Fix possible memory leak of em28xx struct (git-fixes).
• media: exynos4-is: Fix a use after free in ispvideorelease (git-fixes).
• media: exynos-gsc: fix pmruntimeget_sync() usage count (git-fixes).
• media: Fix Media Controller API config checks (git-fixes).
• media: gspca/gl860: fix zero-length control requests (git-fixes).
• media: gspca/sq905: fix control-request direction (git-fixes).
• media: gspca/sunplus: fix zero-length control requests (git-fixes).
• media: I2C: change 'RST' to 'RSET' to fix multiple build errors (git-fixes).
• media: imx-csi: Skip first few frames from a BT.656 source (git-fixes).
• media: imx: imx7mipicsis: Fix logging of only error event counters (git-fixes).
• media: mdk-mdp: fix pmruntimeget_sync() usage count (git-fixes).
• media: mtk-vcodec: fix PM runtime get logic (git-fixes).
• media: pvrusb2: fix warning in pvr2i2ccore_done (git-fixes).
• media: rc: i2c: Fix an error message (git-fixes).
• media: rtl28xxu: fix zero-length control request (git-fixes).
• media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx (git-fixes).
• media: s5p-jpeg: fix pmruntimeget_sync() usage count (git-fixes).
• media: shvou: fix pmruntimegetsync() usage count (git-fixes).
• media: siano: fix device register error path (git-fixes).
• media: siano: Fix out-of-bounds warnings in smscoreloadfirmware_family2() (git-fixes).
• media: st-hva: Fix potential NULL pointer dereferences (git-fixes).
• media: sti/bdisp: fix pmruntimeget_sync() usage count (git-fixes).
• media: sti: fix obj-$(config) targets (git-fixes).
• media: tc358743: Fix error return code in tc358743probeof() (git-fixes).
• media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (git-fixes).
• media: v4l2-async: Fix trivial documentation typo (git-fixes).
• media: v4l2-core: Avoid the dangling pointer in v4l2fhrelease (git-fixes).
• media: zr364xx: fix memory leak in zr364xxstartreadpipe (git-fixes).
• memory: atmel-ebi: add missing ofnodeput for loop iteration (git-fixes).
• memory: fsl_ifc: fix leak of IO mapping on probe failure (git-fixes).
• memory: fsl_ifc: fix leak of IO mapping on probe failure (git-fixes).
• memory: fsl_ifc: fix leak of private memory on probe failure (git-fixes).
• memory: fsl_ifc: fix leak of private memory on probe failure (git-fixes).
• memory: pl353: Fix error return code in pl353smcprobe() (git-fixes).
• memstick: rtsxusbms: fix UAF (git-fixes).
• mISDN: fix possible use-after-free in HFC_cleanup() (git-fixes).
• mmc: block: Disable CMDQ on the ioctl path (git-fixes).
• mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (git-fixes).
• mmc: core: clear flags before allowing to retune (git-fixes).
• mmc: sdhci-esdhc-imx: remove unused isimx6qusdhc (git-fixes).
• mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (git-fixes).
• mmc: sdhci-sprd: use sdhcisprdwritew (git-fixes).
• mmc: usdhi6rol0: fix error return code in usdhi6_probe() (git-fixes).
• mmc: via-sdmmc: add a check against NULL pointer dereference (git-fixes).
• mmc: vub3000: fix control-request direction (git-fixes).
• mm, futex: fix shared futex pgoff on shmem huge page (git fixes (kernel/futex)).
• mt76: fix possible NULL pointer dereference in mt76_tx (git-fixes).
• mtd: partitions: redboot: seek fis-index-block in the right node (git-fixes).
• mtd: rawnand: marvell: add missing clkdisableunprepare() on error in marvellnfcresume() (git-fixes).
• mwifiex: re-fix for unaligned accesses (git-fixes).
• net: gve: convert strlcpy to strscpy (bsc#1176940).
• net: gve: remove duplicated allowed (bsc#1176940).
• nvme-rdma: fix in-casule data send for chained sgls (git-fixes).
• nvme-rdma: introduce nvmerdmasgl structure (git-fixes).
• nvme-tcp: rerun iowork if reqlist is not empty (git-fixes).
• nvme: verify MNAN value if ANA is enabled (bsc#1185791).
• PCI: aardvark: Fix checking for PIO Non-posted Request (git-fixes).
• PCI: aardvark: Implement workaround for the readback value of VEND_ID (git-fixes).
• PCI: aardvark: Implement workaround for the readback value of VEND_ID (git-fixes).
• PCI: Add AMD RS690 quirk to enable 64-bit DMA (git-fixes).
• PCI: iproc: Fix multi-MSI base vector number allocation (git-fixes).
• PCI: iproc: Fix multi-MSI base vector number allocation (git-fixes).
• PCI: iproc: Support multi-MSI only on uniprocessor kernel (git-fixes).
• PCI: Leave Apple Thunderbolt controllers on for s2idle or standby (git-fixes).
• PCI: Leave Apple Thunderbolt controllers on for s2idle or standby (git-fixes).
• PCI: quirks: fix false kABI positive (git-fixes).
• PCI/sysfs: Fix dsmlabelutf16stoutf8s() buffer overrun (git-fixes).
• pinctrl/amd: Add device HID for new AMD GPIO controller (git-fixes).
• pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq() (git-fixes).
• pinctrl: mcp23s08: fix race condition in irq handler (git-fixes).
• pinctrl: stm32: fix the reported number of GPIO lines per bank (git-fixes).
• platform/x86: toshibaacpi: Fix missing error code in toshibaacpisetupkeyboard() (git-fixes).
• ptpqoriq: fix overflow in ptpqoriq_adjfine() u64 calcalation (git-fixes).
• qemufwcfg: Make fwcfgrevattr a proper kobjattribute (git-fixes).
• r8152: Avoid memcpy() over-reading of ETHSSSTATS (git-fixes).
• r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM (git-fixes).
• r8169: Avoid memcpy() over-reading of ETHSSSTATS (git-fixes).
• random32: Fix implicit truncation warning in prandomseedstate() (git-fixes).
• regulator: da9052: Ensure enough delay time for .setvoltagetime_sel (git-fixes).
• regulator: hi655x: Fix pass wrong pointer to config.driver_data (git-fixes).
• regulator: uniphier: Add missing MODULEDEVICETABLE (git-fixes).
• reset: a10sr: add missing ofmatchtable reference (git-fixes).
• reset: bail if trymoduleget() fails (git-fixes).
• reset: brcmstb: Add missing MODULEDEVICETABLE (git-fixes).
• Revert 'ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro' (git-fixes).
• Revert 'ibmvnic: remove duplicate napi_schedule call in open function' (bsc#1065729).
• rpm/kernel-binary.spec.in: Do not install usrmerged kernel on Leap (boo#1184804).
• rpm/kernel-binary.spec.in: Remove zdebug define used only once.
• rsi: Assign beacon rate settings to the correct rate_info descriptor field (git-fixes).
• rtc: fix snprintf() checking in isrtchctosys() (git-fixes).
• rtc: stm32: Fix unbalanced clkdisableunprepare() on probe error path (git-fixes).
• rtl8xxxu: Fix device info for RTL8192EU devices (git-fixes).
• scsi: qedf: Do not put host in qedfvportcreate() unconditionally (bsc#1170511).
• serial: 8250: Actually allow UPFMAGICMULTIPLIER baud rates (git-fixes).
• serial_cs: Add Option International GSM-Ready 56K/ISDN modem (git-fixes).
• serial_cs: remove wrong GLOBETROTTER.cis entry (git-fixes).
• serial: mvebu-uart: correctly calculate minimal possible baudrate (git-fixes).
• serial: mvebu-uart: do not allow changing baudrate when uartclk is not available (git-fixes).
• serial: mvebu-uart: fix calculation of clock divisor (git-fixes).
• serial: tegra-tcu: Reorder channel initialization (git-fixes).
• soc: fsl: qbman: Delete useless kfree code (bsc#1188176).
• soc: fsl: qbman: Ensure device cleanup is run for kexec (bsc#1188176).
• soundwire: stream: Fix test for DP prepare complete (git-fixes).
• spi: fspi: dynamically alloc AHB memory (bsc#1188121).
• spi: Make ofregisterspi_device also set the fwnode (git-fixes).
• spi: nxp-fspi: Use devm API to fix missed unregistration of controller (bsc#1188121).
• spi: omap-100k: Fix the length judgment problem (git-fixes).
• spi: spi-loopback-test: Fix 'txbuf' might be 'rxbuf' (git-fixes).
• spi: spi-nxp-fspi: Add ACPI support (bsc#1188121).
• spi: spi-nxp-fspi: Add support for IP read only (bsc#1188121).
• spi: spi-nxp-fspi: Enable the Octal Mode in MCR0 (bsc#1188121).
• spi: spi-nxp-fspi: Fix a NULL vs IS_ERR() check in probe (bsc#1188121).
• spi: spi-nxp-fspi: Implement errata workaround for LS1028A (bsc#1188121).
• spi: spi-sun6i: Fix chipselect/clock bug (git-fixes).
• spi: spi-topcliff-pch: Fix potential double free in pchspiprocess_messages() (git-fixes).
• spi: stm32-qspi: Remove unused qspi field of struct stm32qspiflash (git-fixes).
• spi: tegra114: Fix an error message (git-fixes).
• ssb: Fix error return code in ssbbusscan() (git-fixes).
• ssb: sdio: Do not overwrite const buffer if block_write fails (git-fixes).
• staging: gdm724x: check for buffer overflow in gdmltemultisdupkt() (git-fixes).
• staging: gdm724x: check for overflow in gdmltenetif_rx() (git-fixes).
• staging: rtl8712: fix memory leak in rtl871xloadfw_cb (git-fixes).
• staging: rtl8712: remove redundant check in r871xudrvinit (git-fixes).
• thermal/drivers/rcargen3thermal: Fix coefficient calculations (git-fixes).
• tpm: efi: Use local variable for calculating final log size (git-fixes).
• tpm, tpmtis: Decorate tpmgettimeouts() with requestlocality() (bsc#1188036).
• tpm, tpmtis: Decorate tpmtisgeninterrupt() with request_locality() (bsc#1188036).
• tpm, tpmtis: Extend locality handling to TPM2 in tpmtisgeninterrupt() (bsc#1188036).
• tpm, tpmtis: Reserve locality in tpmtis_resume() (bsc#1188036).
• tracepoint: Add tracepointproberegistermayexist() for BPF tracing (git-fixes).
• tracing/histograms: Fix parsing of 'sym-offset' modifier (git-fixes).
• tracing: Resize tgidmap to pidmax, not PIDMAXDEFAULT (git-fixes).
• tracing: Simplify & fix saved_tgids logic (git-fixes).
• tty: nozomi: Fix a resource leak in an error handling function (git-fixes).
• tty: nozomi: Fix the error handling path of 'nozomicardinit()' (git-fixes).
• USB: cdc-acm: blacklist Heimann USB Appset device (git-fixes).
• usb: dwc2: Do not reset the core after setting turnaround time (git-fixes).
• usb: dwc3: Fix debugfs creation flow (git-fixes).
• usb: gadget: eem: fix echo command packet response issue (git-fixes).
• usb: gadget: f_fs: Fix setting of device and driver data cross-references (git-fixes).
• usb: typec: Add the missed altmodeidremove() in typecregisteraltmode() (git-fixes).
• usb: typec: fusb302: Always provide fwnode for the port (git-fixes).
• usb: typec: fusb302: fix 'op-sink-microwatt' default that was in mW (git-fixes).
• usb: typec: tcpm: Error handling for tcpmregisterpartner_altmodes (git-fixes).
• usb: typec: tcpm: Move moddelayedwork(&port->vdmstatemachine) call into tcpmqueuevdm() (git-fixes).
• usb: typec: tcpm: move to SNK_UNATTACHED if sink removed for DRP (git-fixes).
• usb: typec: tcpm: Refactor tcpmhandlevdm_request (git-fixes).
• usb: typec: tcpm: Refactor tcpmhandlevdm_request payload handling (git-fixes).
• usb: typec: tcpm: Remove tcpc_config configuration mechanism (git-fixes).
• usb: typec: tcpm: set correct data role for non-DRD (git-fixes).
• usb: typec: tcpm: Switch to use fwnodepropertycount_uXX() (git-fixes).
• usb: typec: tcpm: update power supply once partner accepts (git-fixes).
• usb: typec: ucsi: Hold con->lock for the entire duration of ucsiregisterport() (git-fixes).
• usb: typec: ucsi: Put fwnode in any case during ->probe() (git-fixes).
• usb: typec: wcove: Fx wrong kernel doc format (git-fixes).
• vfio/pci: Handle concurrent vma faults (git-fixes).
• vfs: Convert functionfs to use the new mount API (git -fixes).
• video: fbdev: imxfb: Fix an error message (git-fixes).
• visorbus: fix error return code in visorchipset_init() (git-fixes).
• vmxnet3: fix cksum offload issues for tunnels with non-default udp ports (git-fixes).
• watchdog: aspeed: fix hardware timeout calculation (git-fixes).
• watchdog: sp805: Fix kernel doc description (git-fixes).
• wcn36xx: Move halbuf allocation to devmkmalloc in probe (git-fixes).
• wireless: carl9170: fix LEDS build errors & warnings (git-fixes).
• wireless: wext-spy: Fix out-of-bounds warning (git-fixes).
• wl1251: Fix possible buffer overflow in wl1251cmdscan (git-fixes).
• wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (git-fixes).
• x86/kvm: Disable all PV features on crash (bsc#1185308).
• x86/kvm: Disable kvmclock on all CPUs on shutdown (bsc#1185308).
• x86/kvm: Fix pr_info() for async PF setup/teardown (bsc#1185308).
• x86/kvm: Teardown PV features on boot CPU as well (bsc#1185308).
• x86/kvm: Unify kvmpvguestcpureboot() with kvmguestcpu_offline() (bsc#1185308).
• [xarray] ioviterfaultinreadable() should do nothing in xarray case (git-fixes).
• xhci: solve a double free problem while doing s4 (git-fixes).