SUSE-SU-2021:0094-1: moderate: Security update for the Linux Kernel

sle-security-updates at lists.suse.com sle-security-updates at lists.suse.com
Tue Jan 12 16:54:34 MST 2021


   SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________

Announcement ID:    SUSE-SU-2021:0094-1
Rating:             moderate
References:         #1040855 #1044120 #1044767 #1055117 #1065729 
                    #1094840 #1109695 #1112178 #1114648 #1115431 
                    #1138374 #1152457 #1164780 #1171078 #1172538 
                    #1172694 #1174784 #1178401 #1178762 #1179014 
                    #1179015 #1179045 #1179082 #1179107 #1179142 
                    #1179419 #1179444 #1179670 #1179671 #1179672 
                    #1179673 #1179711 #1179713 #1179714 #1179715 
                    #1179716 #1179722 #1179723 #1179724 #1179745 
                    #1179810 #1179888 #1179895 #1179896 #1179960 
                    #1179963 #1180027 #1180029 #1180031 #1180052 
                    #1180086 #1180117 #1180258 #1180506 
Cross-References:   CVE-2020-0444 CVE-2020-0465 CVE-2020-0466
                    CVE-2020-27068 CVE-2020-27777 CVE-2020-27825
                    CVE-2020-29660 CVE-2020-29661
Affected Products:
                    SUSE Linux Enterprise Real Time Extension 12-SP5
______________________________________________________________________________

   An update that solves 8 vulnerabilities and has 46 fixes is
   now available.

Description:


   The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various
   security and bugfixes.


   The following security bugs were fixed:

   - CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls
     (bsc#1179960).
   - CVE-2020-0466: Fixed a use-after-free due to a logic error in
     do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
   - CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds
     check in the nl80211_policy policy of nl80211.c (bnc#1180086).
   - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c
     that could have led to local privilege escalation (bnc#1180029).
   - CVE-2020-0444: Fixed a bad kfree due to a logic error in
     audit_data_to_entry (bnc#1180027).
   - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that
     may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
   - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed
     a use-after-free attack against TIOCSPGRP (bsc#1179745).
   - CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction
     Services (RTAS) interface, affecting guests running on top of PowerVM or
     KVM hypervisors (bnc#1179107).

   The following non-security bugs were fixed:

   - ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
   - ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
   - ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
   - ASoC: arizona: Fix a wrong free in wm8997_probe (git-fixes).
   - ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams
     (git-fixes).
   - ASoC: jz4740-i2s: add missed checks for clk_get() (git-fixes).
   - ASoC: pcm: DRAIN support reactivation (git-fixes).
   - ASoC: wm8998: Fix PM disable depth imbalance on error (git-fixes).
   - ASoC: wm_adsp: remove "ctl" from list on error in
     wm_adsp_create_control() (git-fixes).
   - ath10k: Fix an error handling path (git-fixes).
   - ath10k: Release some resources in an error handling path (git-fixes).
   - ath10k: Remove msdu from idr when management pkt send fails (git-fixes).
   - ath6kl: fix enum-conversion warning (git-fixes).
   - Bluetooth: btusb: Fix detection of some fake CSR controllers with a
     bcdDevice val of 0x0134 (git-fixes).
   - Bluetooth: Fix null pointer dereference in hci_event_packet()
     (git-fixes).
   - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
     (git-fixes).
   - btmrvl: Fix firmware filename for sd8997 chipset (bsc#1172694).
   - btrfs: fix use-after-free on readahead extent after failure to create it
     (bsc#1179963).
   - btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
   - bus: fsl-mc: fix error return code in fsl_mc_object_allocate()
     (git-fixes).
   - can: mcp251x: add error check when wq alloc failed (git-fixes).
   - can: softing: softing_netdev_open(): fix error handling (git-fixes).
   - cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
   - cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code
     (git-fixes).
   - cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (git-fixes).
   - cpufreq: loongson1: Add missing MODULE_ALIAS (git-fixes).
   - cpufreq: scpi: Add missing MODULE_ALIAS (git-fixes).
   - cpufreq: st: Add missing MODULE_DEVICE_TABLE (git-fixes).
   - crypto: af_alg - avoid undefined behavior accessing salg_name
     (git-fixes).
   - crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
     (git-fixes).
   - crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (git-fixes).
   - crypto: talitos - Fix return type of current_desc_hdr() (git-fixes).
   - cw1200: fix missing destroy_workqueue() on error in cw1200_init_common
     (git-fixes).
   - drivers: soc: ti: knav_qmss_queue: Fix error return code in
     knav_queue_probe (git-fixes).
   - drm/amd/display: remove useless if/else (git-fixes).
   - drm/amdgpu: fix build_coefficients() argument (git-fixes).
   - drm/dp_aux_dev: check aux_dev before use in
     drm_dp_aux_dev_get_by_minor() (git-fixes).
   - drm/gma500: fix double free of gma_connector (git-fixes).
   - drm/meson: dw-hdmi: Register a callback to disable the regulator
     (git-fixes).
   - drm/msm/dpu: Add newline to printks (git-fixes).
   - drm/msm/dsi_phy_10nm: implement PHY disabling (git-fixes).
   - drm/omap: dmm_tiler: fix return error code in omap_dmm_probe()
     (git-fixes).
   - drm/rockchip: Avoid uninitialized use of endpoint id in LVDS (git-fixes).
   - EDAC/i10nm: Use readl() to access MMIO registers (12sp5).
   - epoll: Keep a reference on files added to the check list (bsc#1180031).
   - ext4: correctly report "not supported" for {usr,grp}jquota when
     !CONFIG_QUOTA (bsc#1179672).
   - ext4: fix bogus warning in ext4_update_dx_flag() (bsc#1179716).
   - ext4: fix error handling code in add_new_gdb (bsc#1179722).
   - ext4: fix invalid inode checksum (bsc#1179723).
   - ext4: fix leaking sysfs kobject after failed mount (bsc#1179670).
   - ext4: limit entries returned when counting fsmap records (bsc#1179671).
   - ext4: unlock xattr_sem properly in ext4_inline_data_truncate()
     (bsc#1179673).
   - extcon: max77693: Fix modalias string (git-fixes).
   - fix regression in "epoll: Keep a reference on files added to the check
     list" (bsc#1180031, git-fixes).
   - forcedeth: use per cpu to collect xmit/recv statistics (git-fixes).
   - fs: Do not invalidate page buffers in block_write_full_page()
     (bsc#1179711).
   - genirq/irqdomain: Add an irq_create_mapping_affinity() function
     (bsc#1065729).
   - HID: Add another Primax PIXART OEM mouse quirk (git-fixes).
   - HID: Fix slab-out-of-bounds read in hid_field_extract (bsc#1180052).
   - HSI: omap_ssi: Do not jump to free ID in ssi_add_controller()
     (git-fixes).
   - ibmvnic: add some debugs (bsc#1179896 ltc#190255).
   - ibmvnic: avoid memset null scrq msgs (bsc#1044767 ltc#155231 git-fixes).
   - ibmvnic: continue fatal error reset after passive init (bsc#1171078
     ltc#184239 git-fixes).
   - ibmvnic: delay next reset if hard reset fails (bsc#1094840 ltc#167098
     git-fixes).
   - ibmvnic: enhance resetting status check during module exit (bsc#1065729).
   - ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1115431
     ltc#171853 git-fixes).
   - ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues
     (bsc#1040855 ltc#155067 git-fixes).
   - ibmvnic: fix: NULL pointer dereference (bsc#1044767 ltc#155231
     git-fixes).
   - ibmvnic: notify peers when failover and migration happen (bsc#1044120
     ltc#155423 git-fixes).
   - ibmvnic: restore adapter state on failed reset (bsc#1152457 ltc#174432
     git-fixes).
   - iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error
     in rockchip_saradc_resume (git-fixes).
   - iio:pressure:mpl3115: Force alignment of buffer (git-fixes).
   - inet_ecn: Fix endianness of checksum update when setting ECT(1)
     (git-fixes).
   - Input: ads7846 - fix integer overflow on Rt calculation (git-fixes).
   - Input: ads7846 - fix race that causes missing releases (git-fixes).
   - Input: ads7846 - fix unaligned access on 7845 (git-fixes).
   - Input: cyapa_gen6 - fix out-of-bounds stack access (git-fixes).
   - Input: i8042 - add ByteSpeed touchpad to noloop table (git-fixes).
   - Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists
     (git-fixes).
   - Input: omap4-keypad - fix runtime PM error handling (git-fixes).
   - Input: trackpoint - add new trackpoint variant IDs (git-fixes).
   - Input: trackpoint - enable Synaptics trackpoints (git-fixes).
   - Input: xpad - support Ardwiino Controllers (git-fixes).
   - kABI fix for g2d (git-fixes).
   - kABI workaround for dsa/b53 changes (git-fixes).
   - kABI workaround for net/ipvlan changes (git-fixes).
   - kABI: ath10k: move a new structure member to the end (git-fixes).
   - kABI: genirq: add back irq_create_mapping (bsc#1065729).
   - kernel-source.spec: Fix build with rpm 4.16 (boo#1179015).
     RPM_BUILD_ROOT is cleared before %%install. Do the unpack into
     RPM_BUILD_ROOT in %%install
   - kernel-{binary,source}.spec.in: do not create loop symlinks (bsc#1179082)
   - kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling
     (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).
   - kgdb: Fix spurious true from in_dbg_master() (git-fixes).
   - KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits
     (bsc#1112178).
   - mac80211: do not set set TDLS STA bandwidth wider than possible
     (git-fixes).
   - mac80211: mesh: fix mesh_pathtbl_init() error path (git-fixes).
   - matroxfb: avoid -Warray-bounds warning (git-fixes).
   - md/raid5: fix oops during stripe resizing (git-fixes).
   - media: mtk-mdp: Fix a refcounting bug on error in init (git-fixes).
   - media: mtk-vcodec: add missing put_device() call in
     mtk_vcodec_release_dec_pm() (git-fixes).
   - media: s5p-g2d: Fix a memory leak in an error handling path in
     'g2d_probe()' (git-fixes).
   - media: saa7146: fix array overflow in vidioc_s_audio() (git-fixes).
   - media: siano: fix memory leak of debugfs members in smsdvb_hotplug
     (git-fixes).
   - media: solo6x10: fix missing snd_card_free in error handling case
     (git-fixes).
   - media: uvcvideo: Set media controller entity functions (git-fixes).
   - media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
   - media: v4l2-async: Fix trivial documentation typo (git-fixes).
   - memstick: fix a double-free bug in memstick_check (git-fixes).
   - memstick: r592: Fix error return in r592_probe() (git-fixes).
   - mfd: rt5033: Fix errorneous defines (git-fixes).
   - mm,memory_failure: always pin the page in madvise_inject_error
     (bsc#1180258).
   - Move upstreamed bt fixes into sorted section
   - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (git-fixes).
   - net: aquantia: Fix aq_vec_isr_legacy() return value (git-fixes).
   - net: aquantia: fix LRO with FCS error (git-fixes).
   - net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan()
     (git-fixes).
   - net: dsa: b53: Ensure the default VID is untagged (git-fixes).
   - net: dsa: b53: Fix default VLAN ID (git-fixes).
   - net: dsa: b53: Properly account for VLAN filtering (git-fixes).
   - net: dsa: bcm_sf2: Do not assume DSA master supports WoL (git-fixes).
   - net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend()
     (git-fixes).
   - net: dsa: qca8k: remove leftover phy accessors (git-fixes).
   - net: ethernet: ti: cpsw: fix runtime_pm while add/kill vlan (git-fixes).
   - net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() (git-fixes).
   - net: macb: add missing barriers when reading descriptors (git-fixes).
   - net: macb: fix dropped RX frames due to a race (git-fixes).
   - net: macb: fix error format in dev_err() (git-fixes).
   - net: macb: fix random memory corruption on RX with 64-bit DMA
     (git-fixes).
   - net: pasemi: fix an use-after-free in pasemi_mac_phy_init() (git-fixes).
   - net: seeq: Fix the function used to release some memory in an error
     handling path (git-fixes).
   - net: sh_eth: fix a missing check of of_get_phy_mode (git-fixes).
   - net: sonic: replace dev_kfree_skb in sonic_send_packet (git-fixes).
   - net: sonic: return NETDEV_TX_OK if failed to map buffer (git-fixes).
   - net: stmmac: fix csr_clk can't be zero issue (git-fixes).
   - net: stmmac: Fix reception of Broadcom switches tags (git-fixes).
   - net:ethernet:aquantia: Extra spinlocks removed (git-fixes).
   - nfc: s3fwrn5: Release the nfc firmware (git-fixes).
   - NFS: fix nfs_path in case of a rename retry (git-fixes).
   - NFSD: Add missing NFSv2 .pc_func methods (git-fixes).
   - NFSv4.2: fix client's attribute cache management for copy_file_range
     (git-fixes).
   - NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag
     (git-fixes).
   - ocfs2: fix unbalanced locking (bsc#1180506).
   - ocfs2: initialize ip_next_orphan (bsc#1179724).
   - orinoco: Move context allocation after processing the skb (git-fixes).
   - PCI: Fix pci_slot_release() NULL pointer dereference (git-fixes).
   - phy: Revert toggling reset changes (git-fixes).
   - pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe()
     (git-fixes).
   - platform/x86: dell-smbios-base: Fix error return code in
     dell_smbios_init (git-fixes).
   - platform/x86: mlx-platform: Fix item counter assignment for MSN2700,
     MSN24xx systems (git-fixes).
   - platform/x86: mlx-platform: remove an unused variable (git-fixes).
   - platform/x86: mlx-platform: Remove PSU EEPROM from default platform
     configuration (git-fixes).
   - platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform
     configuration (git-fixes).
   - pNFS/flexfiles: Fix list corruption if the mirror count changes
     (git-fixes).
   - power: supply: bq24190_charger: fix reference leak (git-fixes).
   - powerpc/64: Set up a kernel stack for secondaries before cpu_restore()
     (bsc#1065729).
   - powerpc/64s/pseries: Fix hash tlbiel_all_isa300 for guest kernels
     (bsc#1179888 ltc#190253).
   - powerpc/64s: Fix hash ISA v3.0 TLBIEL instruction generation
     (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).
   - powerpc/64s: Trim offlined CPUs from mm_cpumasks (bsc#1055117 ltc#159753
     git-fixes bsc#1179888 ltc#190253).
   - powerpc/pseries/hibernation: remove redundant cacheinfo update
     (bsc#1138374 ltc#178199 git-fixes).
   - powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1065729).
   - powerpc/smp: Add __init to init_big_cores() (bsc#1109695 ltc#171067
     git-fixes).
   - powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
   - powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at
     (bsc#1065729).
   - ppp: remove the PPPIOCDETACH ioctl (git-fixes).
   - pwm: lp3943: Dynamically allocate PWM chip base (git-fixes).
   - quota: clear padding in v2r1_mem2diskdqb() (bsc#1179714).
   - ravb: Fix use-after-free ravb_tstamp_skb (git-fixes).
   - regmap: Remove duplicate `type` field from regmap `regcache_sync` trace
     event (git-fixes).
   - reiserfs: Fix oops during mount (bsc#1179715).
   - reiserfs: Initialize inode keys properly (bsc#1179713).
   - rtc: hym8563: enable wakeup when applicable (git-fixes).
   - scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
   - scsi: lpfc: Add FDMI Vendor MIB support (bsc#1164780).
   - scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers
     (bsc#1164780).
   - scsi: lpfc: Convert SCSI I/O completions to SLI-3 and SLI-4 handlers
     (bsc#1164780).
   - scsi: lpfc: Convert SCSI path to use common I/O submission path
     (bsc#1164780).
   - scsi: lpfc: Correct null ndlp reference on routine exit (bsc#1164780).
   - scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req()
     (bsc#1164780).
   - scsi: lpfc: Enable common send_io interface for SCSI and NVMe
     (bsc#1164780).
   - scsi: lpfc: Enable common wqe_template support for both SCSI and NVMe
     (bsc#1164780).
   - scsi: lpfc: Enlarge max_sectors in scsi host templates (bsc#1164780).
   - scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional
     events (bsc#1164780).
   - scsi: lpfc: Fix duplicate wq_create_version check (bsc#1164780).
   - scsi: lpfc: Fix fall-through warnings for Clang (bsc#1164780).
   - scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery
     (bsc#1164780).
   - scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc()
     (bsc#1164780).
   - scsi: lpfc: Fix memory leak on lcb_context (bsc#1164780).
   - scsi: lpfc: Fix missing prototype for lpfc_nvmet_prep_abort_wqe()
     (bsc#1164780).
   - scsi: lpfc: Fix missing prototype warning for lpfc_fdmi_vendor_attr_mi()
     (bsc#1164780).
   - scsi: lpfc: Fix NPIV discovery and Fabric Node detection (bsc#1164780).
   - scsi: lpfc: Fix NPIV Fabric Node reference counting (bsc#1164780).
   - scsi: lpfc: Fix pointer defereference before it is null checked issue
     (bsc#1164780).
   - scsi: lpfc: Fix refcounting around SCSI and NVMe transport APIs
     (bsc#1164780).
   - scsi: lpfc: Fix removal of SCSI transport device get and put on dev
     structure (bsc#1164780).
   - scsi: lpfc: Fix scheduling call while in softirq context in
     lpfc_unreg_rpi (bsc#1164780).
   - scsi: lpfc: Fix set but not used warnings from Rework remote port lock
     handling (bsc#1164780).
   - scsi: lpfc: Fix set but unused variables in lpfc_dev_loss_tmo_handler()
     (bsc#1164780).
   - scsi: lpfc: Fix spelling mistake "Cant" -> "Can't" (bsc#1164780).
   - scsi: lpfc: Fix variable 'vport' set but not used in
     lpfc_sli4_abts_err_handler() (bsc#1164780).
   - scsi: lpfc: lpfc_attr: Demote kernel-doc format for redefined functions
     (bsc#1164780).
   - scsi: lpfc: lpfc_attr: Fix-up a bunch of kernel-doc misdemeanours
     (bsc#1164780).
   - scsi: lpfc: lpfc_debugfs: Fix a couple of function documentation issues
     (bsc#1164780).
   - scsi: lpfc: lpfc_scsi: Fix a whole host of kernel-doc issues
     (bsc#1164780).
   - scsi: lpfc: Refactor WQE structure definitions for common use
     (bsc#1164780).
   - scsi: lpfc: Reject CT request for MIB commands (bsc#1164780).
   - scsi: lpfc: Remove dead code on second !ndlp check (bsc#1164780).
   - scsi: lpfc: Remove ndlp when a PLOGI/ADISC/PRLI/REG_RPI ultimately fails
     (bsc#1164780).
   - scsi: lpfc: Remove set but not used 'qp' (bsc#1164780).
   - scsi: lpfc: Remove unneeded variable 'status' in
     lpfc_fcp_cpu_map_store() (bsc#1164780).
   - scsi: lpfc: Removed unused macros in lpfc_attr.c (bsc#1164780).
   - scsi: lpfc: Rework locations of ndlp reference taking (bsc#1164780).
   - scsi: lpfc: Rework remote port lock handling (bsc#1164780).
   - scsi: lpfc: Rework remote port ref counting and node freeing
     (bsc#1164780).
   - scsi: lpfc: Unsolicited ELS leaves node in incorrect state while
     dropping it (bsc#1164780).
   - scsi: lpfc: Update changed file copyrights for 2020 (bsc#1164780).
   - scsi: lpfc: Update lpfc version to 12.8.0.4 (bsc#1164780).
   - scsi: lpfc: Update lpfc version to 12.8.0.5 (bsc#1164780).
   - scsi: lpfc: Update lpfc version to 12.8.0.6 (bsc#1164780).
   - scsi: lpfc: Use generic power management (bsc#1164780).
   - scsi: qla2xxx: Change post del message from debug level to log level
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1172538 bsc#1179142
     bsc#1179810).
   - scsi: qla2xxx: Do not check for fw_started while posting NVMe command
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Do not consume srb greedily (bsc#1172538 bsc#1179142
     bsc#1179810).
   - scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix crash during driver load on big endian machines
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix FW initialization error on big endian machines
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Handle aborts correctly for port undergoing deletion
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1172538 bsc#1179142
     bsc#1179810).
   - scsi: qla2xxx: Remove trailing semicolon in macro definition
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1172538 bsc#1179142
     bsc#1179810).
   - scsi: qla2xxx: Tear down session if FW say it is down (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Update version to 10.02.00.104-k (bsc#1172538 bsc#1179142
     bsc#1179810).
   - scsi: qla2xxx: Use constant when it is known (bsc#1172538 bsc#1179142
     bsc#1179810).
   - scsi: Remove unneeded break statements (bsc#1164780).
   - scsi: storvsc: Fix error return in storvsc_probe() (git-fixes).
   - scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1172538
     bsc#1179142 bsc#1179810).
   - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access
     (git-fixes).
   - soc/tegra: fuse: Fix index bug in get_process_id (git-fixes).
   - soc: mediatek: Check if power domains can be powered on at boot time
     (git-fixes).
   - soc: qcom: smp2p: Safely acquire spinlock without IRQs (git-fixes).
   - soc: ti: Fix reference imbalance in knav_dma_probe (git-fixes).
   - soc: ti: knav_qmss: fix reference leak in knav_queue_probe (git-fixes).
   - spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in
     bcm63xx_hsspi_resume (git-fixes).
   - spi: davinci: Fix use-after-free on unbind (git-fixes).
   - spi: img-spfi: fix reference leak in img_spfi_resume (git-fixes).
   - spi: pic32: Do not leak DMA channels in probe error path (git-fixes).
   - spi: spi-mem: Fix passing zero to 'PTR_ERR' warning (git-fixes).
   - spi: spi-mem: fix reference leak in spi_mem_access_start (git-fixes).
   - spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (git-fixes).
   - spi: tegra114: fix reference leak in tegra spi ops (git-fixes).
   - spi: tegra20-sflash: fix reference leak in tegra_sflash_resume
     (git-fixes).
   - spi: tegra20-slink: fix reference leak in slink ops of tegra20
     (git-fixes).
   - staging: comedi: mf6x4: Fix AI end-of-conversion detection (git-fixes).
   - staging: olpc_dcon: add a missing dependency (git-fixes).
   - staging: olpc_dcon: Do not call platform_device_unregister() in
     dcon_probe() (git-fixes).
   - sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes).
   - SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
     (git-fixes).
   - SUNRPC: The RDMA back channel mustn't disappear while requests are
     outstanding (git-fixes).
   - timer: Fix wheel index calculation on last level (git fixes)
   - timer: Prevent base->clk from moving backward (git-fixes)
   - uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define (git-fixes).
   - uapi/if_ether.h: prevent redefinition of struct ethhdr (git-fixes).
   - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul
     (git-fixes).
   - usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe
     (git-fixes).
   - usb: gadget: f_fs: Use local copy of descriptors for userspace copy
     (git-fixes).
   - usb: oxu210hp-hcd: Fix memory leak in oxu_create (git-fixes).
   - usb: serial: ch341: add new Product ID for CH341A (git-fixes).
   - usb: serial: ch341: sort device-id entries (git-fixes).
   - usb: serial: digi_acceleport: clean up modem-control handling
     (git-fixes).
   - usb: serial: digi_acceleport: clean up set_termios (git-fixes).
   - usb: serial: digi_acceleport: fix write-wakeup deadlocks (git-fixes).
   - usb: serial: digi_acceleport: remove in_interrupt() usage.
   - usb: serial: digi_acceleport: remove redundant assignment to pointer
     priv (git-fixes).
   - usb: serial: digi_acceleport: rename tty flag variable (git-fixes).
   - usb: serial: digi_acceleport: use irqsave() in USB's complete callback
     (git-fixes).
   - usb: serial: keyspan_pda: fix dropped unthrottle interrupts (git-fixes).
   - usb: serial: keyspan_pda: fix stalled writes (git-fixes).
   - usb: serial: keyspan_pda: fix tx-unthrottle use-after-free (git-fixes).
   - usb: serial: keyspan_pda: fix write deadlock (git-fixes).
   - usb: serial: keyspan_pda: fix write unthrottling (git-fixes).
   - usb: serial: keyspan_pda: fix write-wakeup use-after-free (git-fixes).
   - usb: serial: mos7720: fix parallel-port state restore (git-fixes).
   - usb: serial: option: add Fibocom NL668 variants (git-fixes).
   - usb: serial: option: add interface-number sanity check to flag handling
     (git-fixes).
   - usb: serial: option: add support for Thales Cinterion EXS82 (git-fixes).
   - usbnet: ipheth: fix connectivity with iOS 14 (git-fixes).
   - wimax: fix duplicate initializer warning (git-fixes).
   - x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz
     (bsc#1112178).
   - x86/insn-eval: Use new for_each_insn_prefix() macro to loop over
     prefixes bytes (bsc#1112178).
   - x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1112178).
   - x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (bsc#1112178).
   - x86/resctrl: Fix AMD L3 QOS CDP enable/disable (bsc#1114648).
   - x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled
     (bsc#1112178).
   - x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1112178).
   - x86/tracing: Introduce a static key for exception tracing (bsc#1179895).
   - x86/traps: Simplify pagefault tracing logic (bsc#1179895).
   - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
     (bsc#1112178).
   - xprtrdma: fix incorrect header size calculations (git-fixes).


Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Real Time Extension 12-SP5:

      zypper in -t patch SUSE-SLE-RT-12-SP5-2021-94=1



Package List:

   - SUSE Linux Enterprise Real Time Extension 12-SP5 (x86_64):

      cluster-md-kmp-rt-4.12.14-10.28.3
      cluster-md-kmp-rt-debuginfo-4.12.14-10.28.3
      dlm-kmp-rt-4.12.14-10.28.3
      dlm-kmp-rt-debuginfo-4.12.14-10.28.3
      gfs2-kmp-rt-4.12.14-10.28.3
      gfs2-kmp-rt-debuginfo-4.12.14-10.28.3
      kernel-rt-4.12.14-10.28.3
      kernel-rt-base-4.12.14-10.28.3
      kernel-rt-base-debuginfo-4.12.14-10.28.3
      kernel-rt-debuginfo-4.12.14-10.28.3
      kernel-rt-debugsource-4.12.14-10.28.3
      kernel-rt-devel-4.12.14-10.28.3
      kernel-rt-devel-debuginfo-4.12.14-10.28.3
      kernel-rt_debug-4.12.14-10.28.3
      kernel-rt_debug-debuginfo-4.12.14-10.28.3
      kernel-rt_debug-debugsource-4.12.14-10.28.3
      kernel-rt_debug-devel-4.12.14-10.28.3
      kernel-rt_debug-devel-debuginfo-4.12.14-10.28.3
      kernel-syms-rt-4.12.14-10.28.3
      ocfs2-kmp-rt-4.12.14-10.28.3
      ocfs2-kmp-rt-debuginfo-4.12.14-10.28.3

   - SUSE Linux Enterprise Real Time Extension 12-SP5 (noarch):

      kernel-devel-rt-4.12.14-10.28.3
      kernel-source-rt-4.12.14-10.28.3


References:

   https://www.suse.com/security/cve/CVE-2020-0444.html
   https://www.suse.com/security/cve/CVE-2020-0465.html
   https://www.suse.com/security/cve/CVE-2020-0466.html
   https://www.suse.com/security/cve/CVE-2020-27068.html
   https://www.suse.com/security/cve/CVE-2020-27777.html
   https://www.suse.com/security/cve/CVE-2020-27825.html
   https://www.suse.com/security/cve/CVE-2020-29660.html
   https://www.suse.com/security/cve/CVE-2020-29661.html
   https://bugzilla.suse.com/1040855
   https://bugzilla.suse.com/1044120
   https://bugzilla.suse.com/1044767
   https://bugzilla.suse.com/1055117
   https://bugzilla.suse.com/1065729
   https://bugzilla.suse.com/1094840
   https://bugzilla.suse.com/1109695
   https://bugzilla.suse.com/1112178
   https://bugzilla.suse.com/1114648
   https://bugzilla.suse.com/1115431
   https://bugzilla.suse.com/1138374
   https://bugzilla.suse.com/1152457
   https://bugzilla.suse.com/1164780
   https://bugzilla.suse.com/1171078
   https://bugzilla.suse.com/1172538
   https://bugzilla.suse.com/1172694
   https://bugzilla.suse.com/1174784
   https://bugzilla.suse.com/1178401
   https://bugzilla.suse.com/1178762
   https://bugzilla.suse.com/1179014
   https://bugzilla.suse.com/1179015
   https://bugzilla.suse.com/1179045
   https://bugzilla.suse.com/1179082
   https://bugzilla.suse.com/1179107
   https://bugzilla.suse.com/1179142
   https://bugzilla.suse.com/1179419
   https://bugzilla.suse.com/1179444
   https://bugzilla.suse.com/1179670
   https://bugzilla.suse.com/1179671
   https://bugzilla.suse.com/1179672
   https://bugzilla.suse.com/1179673
   https://bugzilla.suse.com/1179711
   https://bugzilla.suse.com/1179713
   https://bugzilla.suse.com/1179714
   https://bugzilla.suse.com/1179715
   https://bugzilla.suse.com/1179716
   https://bugzilla.suse.com/1179722
   https://bugzilla.suse.com/1179723
   https://bugzilla.suse.com/1179724
   https://bugzilla.suse.com/1179745
   https://bugzilla.suse.com/1179810
   https://bugzilla.suse.com/1179888
   https://bugzilla.suse.com/1179895
   https://bugzilla.suse.com/1179896
   https://bugzilla.suse.com/1179960
   https://bugzilla.suse.com/1179963
   https://bugzilla.suse.com/1180027
   https://bugzilla.suse.com/1180029
   https://bugzilla.suse.com/1180031
   https://bugzilla.suse.com/1180052
   https://bugzilla.suse.com/1180086
   https://bugzilla.suse.com/1180117
   https://bugzilla.suse.com/1180258
   https://bugzilla.suse.com/1180506



More information about the sle-security-updates mailing list