SUSE-SU-2021:0118-1: important: Security update for the Linux Kernel

sle-security-updates at sle-security-updates at
Thu Jan 14 01:28:44 MST 2021

   SUSE Security Update: Security update for the Linux Kernel

Announcement ID:    SUSE-SU-2021:0118-1
Rating:             important
References:         #1040855 #1044120 #1044767 #1050242 #1050536 
                    #1050545 #1055117 #1056653 #1056657 #1056787 
                    #1064802 #1065729 #1066129 #1094840 #1103990 
                    #1103992 #1104389 #1104393 #1109695 #1109837 
                    #1110096 #1112178 #1112374 #1115431 #1118657 
                    #1129770 #1136460 #1136461 #1138374 #1139944 
                    #1144912 #1152457 #1163727 #1164780 #1171078 
                    #1172145 #1172538 #1172694 #1174784 #1174852 
                    #1176558 #1176559 #1176956 #1178270 #1178372 
                    #1178401 #1178590 #1178634 #1178762 #1179014 
                    #1179015 #1179045 #1179082 #1179107 #1179142 
                    #1179204 #1179419 #1179444 #1179520 #1179578 
                    #1179601 #1179663 #1179666 #1179670 #1179671 
                    #1179672 #1179673 #1179711 #1179713 #1179714 
                    #1179715 #1179716 #1179722 #1179723 #1179724 
                    #1179745 #1179810 #1179888 #1179895 #1179896 
                    #1179960 #1179963 #1180027 #1180029 #1180031 
                    #1180052 #1180086 #1180117 #1180258 #1180506 
Cross-References:   CVE-2018-20669 CVE-2019-20934 CVE-2020-0444
                    CVE-2020-0465 CVE-2020-0466 CVE-2020-27068
                    CVE-2020-27777 CVE-2020-27786 CVE-2020-27825
                    CVE-2020-28374 CVE-2020-29660 CVE-2020-29661
                    CVE-2020-36158 CVE-2020-4788
Affected Products:
                    SUSE Linux Enterprise Workstation Extension 15-SP1
                    SUSE Linux Enterprise Module for Live Patching 15-SP1
                    SUSE Linux Enterprise Module for Legacy Software 15-SP1
                    SUSE Linux Enterprise Module for Development Tools 15-SP1
                    SUSE Linux Enterprise Module for Basesystem 15-SP1
                    SUSE Linux Enterprise High Availability 15-SP1

   An update that solves 14 vulnerabilities and has 77 fixes
   is now available.


   The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various
   security and bugfixes.

   The following security bugs were fixed:

   - CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).
   - CVE-2020-36158: Fixed a potential remote code execution in the Marvell
     mwifiex driver (bsc#1180559).
   - CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls
   - CVE-2020-0466: Fixed a use-after-free due to a logic error in
     do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
   - CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds
     check in the nl80211_policy policy of nl80211.c (bnc#1180086).
   - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c
     that could have led to local privilege escalation (bnc#1180029).
   - CVE-2020-0444: Fixed a bad kfree due to a logic error in
     audit_data_to_entry (bnc#1180027).
   - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that
     may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
   - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed
     a use-after-free attack against TIOCSPGRP (bsc#1179745).
   - CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction
     Services (RTAS) interface, affecting guests running on top of PowerVM or
     KVM hypervisors (bnc#1179107).
   - CVE-2019-20934: Fixed a use-after-free in show_numa_stats() because NUMA
     fault statistics were inappropriately freed, aka CID-16d51a590a8c
   - CVE-2020-27786: Fixed a use after free in kernel midi subsystem
     snd_rawmidi_kernel_read1() (bsc#1179601).

   The following non-security bugs were fixed:

   - ACPI: PNP: compare the string length in the matching_id() (git-fixes).
   - ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1
   - ACPICA: Do not increment operation_region reference counts for field
     units (git-fixes).
   - ALSA: ca0106: fix error code handling (git-fixes).
   - ALSA: ctl: allow TLV read operation for callback type of element in
     locked case (git-fixes).
   - ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A
     PRO (git-fixes).
   - ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
   - ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
   - ALSA: hda/generic: Add option to enforce preferred_dacs pairs
   - ALSA: hda/hdmi: always check pin power status in i915 pin fixup
   - ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
   - ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
   - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255
   - ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model
   - ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220)
   - ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation
     P520 (git-fixes).
   - ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294
   - ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table
   - ALSA: hda: Fix potential race in unsol event handler (git-fixes).
   - ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
   - ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
   - ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).
   - ALSA: line6: Perform sanity check for each URB creation (git-fixes).
   - ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
   - ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
   - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
   - ALSA: timer: Limit max amount of slave instances (git-fixes).
   - ALSA: usb-audio: Add delay quirk for all Logitech USB devices
   - ALSA: usb-audio: Add delay quirk for H570e USB headsets (git-fixes).
   - ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
   - ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
   - ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
   - ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes).
   - ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes).
   - ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha
     S (git-fixes).
   - ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight
     S (git-fixes).
   - ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices
   - ALSA: usb-audio: Disable sample read check if firmware does not give
     back (git-fixes).
   - ALSA: usb-audio: Fix control 'access overflow' errors from chmap
   - ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes).
   - ALSA: usb-audio: Fix potential out-of-bounds shift (git-fixes).
   - ALSA: usb-audio: Fix race against the error recovery URB submission
   - ALSA: usb-audio: US16x08: fix value count for level meters (git-fixes).
   - ASoC: arizona: Fix a wrong free in wm8997_probe (git-fixes).
   - ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams
   - ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed
   - ASoC: jz4740-i2s: add missed checks for clk_get() (git-fixes).
   - ASoC: pcm3168a: The codec does not support S32_LE (git-fixes).
   - ASoC: pcm: DRAIN support reactivation (git-fixes).
   - ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile (git-fixes).
   - ASoC: sti: fix possible sleep-in-atomic (git-fixes).
   - ASoC: wm8904: fix regcache handling (git-fixes).
   - ASoC: wm8998: Fix PM disable depth imbalance on error (git-fixes).
   - ASoC: wm_adsp: Do not generate kcontrols without READ flags (git-fixes).
   - ASoC: wm_adsp: remove "ctl" from list on error in
     wm_adsp_create_control() (git-fixes).
   - ata/libata: Fix usage of page address by page_address in
     ata_scsi_mode_select_xlat function (git-fixes).
   - ath10k: Fix an error handling path (git-fixes).
   - ath10k: fix backtrace on coredump (git-fixes).
   - ath10k: fix get invalid tx rate for Mesh metric (git-fixes).
   - ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq
   - ath10k: Release some resources in an error handling path (git-fixes).
   - ath10k: Remove msdu from idr when management pkt send fails (git-fixes).
   - ath6kl: fix enum-conversion warning (git-fixes).
   - ath9k_htc: Discard undersized packets (git-fixes).
   - ath9k_htc: Modify byte order for an error message (git-fixes).
   - ath9k_htc: Silence undersized packet warnings (git-fixes).
   - ath9k_htc: Use appropriate rs_datalen type (git-fixes).
   - Avoid a GCC warning about "/*" within a comment.
   - backlight: lp855x: Ensure regulators are disabled on probe failure
   - Bluetooth: add a mutex lock to avoid UAF in do_enale_set (git-fixes).
   - Bluetooth: btusb: Fix detection of some fake CSR controllers with a
     bcdDevice val of 0x0134 (git-fixes).
   - Bluetooth: Fix advertising duplicated flags (git-fixes).
   - Bluetooth: Fix null pointer dereference in hci_event_packet()
   - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
   - bnxt_en: Fix race when modifying pause settings (bsc#1050242 ).
   - bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex
   - btmrvl: Fix firmware filename for sd8997 chipset (bsc#1172694).
   - btrfs: fix use-after-free on readahead extent after failure to create it
   - btrfs: qgroup: do not commit transaction when we already hold the handle
   - btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
   - bus: fsl-mc: fix error return code in fsl_mc_object_allocate()
   - can: mcp251x: add error check when wq alloc failed (git-fixes).
   - can: softing: softing_netdev_open(): fix error handling (git-fixes).
   - cfg80211: initialize rekey_data (git-fixes).
   - cfg80211: regulatory: Fix inconsistent format argument (git-fixes).
   - cifs: add NULL check for ses->tcon_ipc (bsc#1178270).
   - cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956).
   - cifs: fix check of tcon dfs in smb1 (bsc#1178270).
   - cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944).
   - cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
   - cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code
   - clk: at91: usb: continue if clk_hw_round_rate() return zero (git-fixes).
   - clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (git-fixes).
   - clk: qcom: Allow constant ratio freq tables for rcg (git-fixes).
   - clk: qcom: msm8916: Fix the address location of pll->config_reg
   - clk: s2mps11: Fix a resource leak in error handling paths in the probe
     function (git-fixes).
   - clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1
   - clk: sunxi-ng: Make sure divider tables have sentinel (git-fixes).
   - clk: tegra: Fix duplicated SE clock entry (git-fixes).
   - clk: tegra: Fix Tegra PMC clock out parents (git-fixes).
   - clk: ti: composite: fix memory leak (git-fixes).
   - clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call (git-fixes).
   - clk: ti: Fix memleak in ti_fapll_synth_setup (git-fixes).
   - clocksource/drivers/asm9260: Add a check for of_clk_get (git-fixes).
   - coredump: fix core_pattern parse error (git-fixes).
   - cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (git-fixes).
   - cpufreq: loongson1: Add missing MODULE_ALIAS (git-fixes).
   - cpufreq: scpi: Add missing MODULE_ALIAS (git-fixes).
   - cpufreq: st: Add missing MODULE_DEVICE_TABLE (git-fixes).
   - crypto: af_alg - avoid undefined behavior accessing salg_name
   - crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
   - crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (git-fixes).
   - crypto: talitos - Fix return type of current_desc_hdr() (git-fixes).
   - cw1200: fix missing destroy_workqueue() on error in cw1200_init_common
   - cxgb4: Fix offset when clearing filter byte counters (bsc#1064802
   - drivers: base: Fix NULL pointer exception in __platform_driver_probe()
     if a driver developer is foolish (git-fixes).
   - drivers: soc: ti: knav_qmss_queue: Fix error return code in
     knav_queue_probe (git-fixes).
   - drm/amd/display: remove useless if/else (git-fixes).
   - drm/amdgpu: fix build_coefficients() argument (git-fixes).
   - drm/dp_aux_dev: check aux_dev before use in
     drm_dp_aux_dev_get_by_minor() (git-fixes).
   - drm/gma500: fix double free of gma_connector (git-fixes).
   - drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[]
   - drm/meson: dw-hdmi: Register a callback to disable the regulator
   - drm/msm/dpu: Add newline to printks (git-fixes).
   - drm/msm/dsi_phy_10nm: implement PHY disabling (git-fixes).
   - drm/omap: dmm_tiler: fix return error code in omap_dmm_probe()
   - drm/rockchip: Avoid uninitialized use of endpoint id in LVDS (git-fixes).
   - epoll: Keep a reference on files added to the check list (bsc#1180031).
   - ext4: correctly report "not supported" for {usr,grp}jquota when
     !CONFIG_QUOTA (bsc#1179672).
   - ext4: fix bogus warning in ext4_update_dx_flag() (bsc#1179716).
   - ext4: fix error handling code in add_new_gdb (bsc#1179722).
   - ext4: fix invalid inode checksum (bsc#1179723).
   - ext4: fix leaking sysfs kobject after failed mount (bsc#1179670).
   - ext4: limit entries returned when counting fsmap records (bsc#1179671).
   - ext4: unlock xattr_sem properly in ext4_inline_data_truncate()
   - extcon: max77693: Fix modalias string (git-fixes).
   - fbcon: Fix user font detection test at fbcon_resize(). (bsc#1112178)
     Backporting changes: 	* updated path drivers/video/fbcon/core to
   - fbcon: Remove the superfluous break (bsc#1129770) Backporting changes:
     * updated path drivers/video/fbcon/core to drivers/video/console 	*
     context changes
   - firmware: qcom: scm: Ensure 'a0' status code is treated as signed
   - fix regression in "epoll: Keep a reference on files added to the check
     list" (bsc#1180031, git-fixes).
   - forcedeth: use per cpu to collect xmit/recv statistics (git-fixes).
   - fs: Do not invalidate page buffers in block_write_full_page()
   - geneve: change from tx_error to tx_dropped on missing metadata
   - genirq/irqdomain: Add an irq_create_mapping_affinity() function
   - gpio: arizona: handle pm_runtime_get_sync failure case (git-fixes).
   - gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in
     grgpio_irq_map/unmap() (git-fixes).
   - gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP (git-fixes).
   - gpio: max77620: Fixup debounce delays (git-fixes).
   - gpio: max77620: Use correct unit for debounce times (git-fixes).
   - gpio: mpc8xxx: Add platform device to gpiochip->parent (git-fixes).
   - gpio: mvebu: fix potential user-after-free on probe (git-fixes).
   - gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
   - gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288
     model (git-fixes).
   - gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288
     model (git-fixes).
   - gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk
   - gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option
   - gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
   - gpiolib: fix up emulated open drain outputs (git-fixes).
   - HID: Add another Primax PIXART OEM mouse quirk (git-fixes).
   - HID: apple: Disable Fn-key key-re-mapping on clone keyboards (git-fixes).
   - HID: core: check whether Usage Page item is after Usage ID items
   - HID: core: Correctly handle ReportSize being zero (git-fixes).
   - HID: cypress: Support Varmilo Keyboards' media hotkeys (git-fixes).
   - HID: Fix slab-out-of-bounds read in hid_field_extract (bsc#1180052).
   - HID: hid-sensor-hub: Fix issue with devices with no report ID
   - HID: Improve Windows Precision Touchpad detection (git-fixes).
   - HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring()
   - HID: logitech-hidpp: Silence intermittent get_battery_capacity errors
   - HSI: omap_ssi: Do not jump to free ID in ssi_add_controller()
   - hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow (git-fixes).
   - hwmon: (jc42) Fix name to have no illegal characters (git-fixes).
   - i2c: algo: pca: Reapply i2c bus settings after reset (git-fixes).
   - i2c: i801: Fix resume bug (git-fixes).
   - i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets
   - i2c: pxa: clear all master action bits in i2c_pxa_stop_message()
   - i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes).
   - i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc()
   - ibmvnic: add some debugs (bsc#1179896 ltc#190255).
   - ibmvnic: avoid memset null scrq msgs (bsc#1044767 ltc#155231 git-fixes).
   - ibmvnic: continue fatal error reset after passive init (bsc#1171078
     ltc#184239 git-fixes).
   - ibmvnic: delay next reset if hard reset fails (bsc#1094840 ltc#167098
   - ibmvnic: enhance resetting status check during module exit (bsc#1065729).
   - ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1115431
     ltc#171853 git-fixes).
   - ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues
     (bsc#1040855 ltc#155067 git-fixes).
   - ibmvnic: fix: NULL pointer dereference (bsc#1044767 ltc#155231
   - ibmvnic: notify peers when failover and migration happen (bsc#1044120
     ltc#155423 git-fixes).
   - ibmvnic: restore adapter state on failed reset (bsc#1152457 ltc#174432
   - igc: Fix returning wrong statistics (bsc#1118657).
   - iio: adc: max1027: Reset the device at probe time (git-fixes).
   - iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error
     in rockchip_saradc_resume (git-fixes).
   - iio: bmp280: fix compensation of humidity (git-fixes).
   - iio: buffer: Fix demux update (git-fixes).
   - iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw()
   - iio: fix center temperature of bmc150-accel-core (git-fixes).
   - iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting
   - iio: light: bh1750: Resolve compiler warning and make code more readable
   - iio: srf04: fix wrong limitation in distance measuring (git-fixes).
   - iio:imu:bmi160: Fix too large a buffer (git-fixes).
   - iio:pressure:mpl3115: Force alignment of buffer (git-fixes).
   - inet_ecn: Fix endianness of checksum update when setting ECT(1)
   - Input: ads7846 - fix integer overflow on Rt calculation (git-fixes).
   - Input: ads7846 - fix race that causes missing releases (git-fixes).
   - Input: ads7846 - fix unaligned access on 7845 (git-fixes).
   - Input: atmel_mxt_ts - disable IRQ across suspend (git-fixes).
   - Input: cm109 - do not stomp on control URB (git-fixes).
   - Input: cros_ec_keyb - send 'scancodes' in addition to key events
   - Input: cyapa_gen6 - fix out-of-bounds stack access (git-fixes).
   - Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
   - Input: i8042 - add Acer laptops to the i8042 reset list (git-fixes).
   - Input: i8042 - add ByteSpeed touchpad to noloop table (git-fixes).
   - Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists
   - Input: i8042 - allow insmod to succeed on devices without an i8042
     controller (git-fixes).
   - Input: i8042 - fix error return code in i8042_setup_aux() (git-fixes).
   - Input: omap4-keypad - fix runtime PM error handling (git-fixes).
   - Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen
   - Input: trackpoint - add new trackpoint variant IDs (git-fixes).
   - Input: trackpoint - enable Synaptics trackpoints (git-fixes).
   - Input: xpad - support Ardwiino Controllers (git-fixes).
   - ipw2x00: Fix -Wcast-function-type (git-fixes).
   - irqchip/alpine-msi: Fix freeing of interrupts on allocation error path
   - iwlwifi: mvm: fix kernel panic in case of assert during CSA (git-fixes).
   - iwlwifi: mvm: fix unaligned read of rx_pkt_status (git-fixes).
   - iwlwifi: pcie: limit memory read spin time (git-fixes).
   - kABI fix for g2d (git-fixes).
   - kABI workaround for dsa/b53 changes (git-fixes).
   - kABI workaround for HD-audio generic parser (git-fixes).
   - kABI workaround for net/ipvlan changes (git-fixes).
   - kABI: ath10k: move a new structure member to the end (git-fixes).
   - kABI: genirq: add back irq_create_mapping (bsc#1065729).
   - kernel-source.spec: Fix build with rpm 4.16 (boo#1179015).
     RPM_BUILD_ROOT is cleared before %%install. Do the unpack into
     RPM_BUILD_ROOT in %%install
   - kernel-{binary,source} do not create loop symlinks (bsc#1179082)
   - kgdb: Fix spurious true from in_dbg_master() (git-fixes).
   - KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits
   - mac80211: allow rx of mesh eapol frames with default rx key (git-fixes).
   - mac80211: Check port authorization in the ieee80211_tx_dequeue() case
   - mac80211: do not set set TDLS STA bandwidth wider than possible
   - mac80211: fix authentication with iwlwifi/mvm (git-fixes).
   - mac80211: fix use of skb payload instead of header (git-fixes).
   - mac80211: mesh: fix mesh_pathtbl_init() error path (git-fixes).
   - matroxfb: avoid -Warray-bounds warning (git-fixes).
   - md-cluster: fix rmmod issue when md_cluster convert bitmap to none
   - md-cluster: fix safemode_delay value when converting to clustered bitmap
   - md-cluster: fix wild pointer of unlock_all_bitmaps() (bsc#1163727).
   - md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
   - md/bitmap: md_bitmap_get_counter returns wrong blocks (bsc#1163727).
   - md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks (bsc#1163727).
   - md/cluster: block reshape with remote resync job (bsc#1163727).
   - md/cluster: fix deadlock when node is doing resync job (bsc#1163727).
   - md/raid5: fix oops during stripe resizing (git-fixes).
   - media: am437x-vpfe: Setting STD to current value is not an error
   - media: cec-funcs.h: add status_req checks (git-fixes).
   - media: cx88: Fix some error handling path in 'cx8800_initdev()'
   - media: gspca: Fix memory leak in probe (git-fixes).
   - media: i2c: mt9v032: fix enum mbus codes and frame sizes (git-fixes).
   - media: i2c: ov2659: Fix missing 720p register config (git-fixes).
   - media: i2c: ov2659: fix s_stream return value (git-fixes).
   - media: msi2500: assign SPI bus number dynamically (git-fixes).
   - media: mtk-mdp: Fix a refcounting bug on error in init (git-fixes).
   - media: mtk-vcodec: add missing put_device() call in
     mtk_vcodec_release_dec_pm() (git-fixes).
   - media: platform: add missing put_device() call in mtk_jpeg_probe() and
     mtk_jpeg_remove() (git-patches).
   - media: pvrusb2: Fix oops on tear-down when radio support is not present
   - media: s5p-g2d: Fix a memory leak in an error handling path in
     'g2d_probe()' (git-fixes).
   - media: saa7146: fix array overflow in vidioc_s_audio() (git-fixes).
   - media: si470x-i2c: add missed operations in remove (git-fixes).
   - media: siano: fix memory leak of debugfs members in smsdvb_hotplug
   - media: solo6x10: fix missing snd_card_free in error handling case
   - media: sti: bdisp: fix a possible sleep-in-atomic-context bug in
     bdisp_device_run() (git-fixes).
   - media: sunxi-cir: ensure IR is handled when it is continuous (git-fixes).
   - media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort
     cases (git-fixes).
   - media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence
     number (git-fixes).
   - media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid
     sizeimage (git-fixes).
   - media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic
   - media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel
     format (git-fixes).
   - media: ti-vpe: vpe: Make sure YUYV is set as default format (git-fixes).
   - media: uvcvideo: Set media controller entity functions (git-fixes).
   - media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
   - media: v4l2-async: Fix trivial documentation typo (git-fixes).
   - media: v4l2-core: fix touch support in v4l_g_fmt (git-fixes).
   - media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in
     v4l2_device macros (git-fixes).
   - mei: bus: do not clean driver pointer (git-fixes).
   - mei: protect mei_cl_mtu from null dereference (git-fixes).
   - memstick: fix a double-free bug in memstick_check (git-fixes).
   - memstick: r592: Fix error return in r592_probe() (git-fixes).
   - mfd: rt5033: Fix errorneous defines (git-fixes).
   - mfd: wm8994: Fix driver operation if loaded as modules (git-fixes).
   - mlxsw: core: Fix memory leak on module removal (bsc#1112374).
   - mm,memory_failure: always pin the page in madvise_inject_error
   - mm/userfaultfd: do not access vma->vm_mm after calling
     handle_userfault() (bsc#1179204).
   - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (git-fixes).
   - net/smc: fix valid DMBE buffer sizes (git-fixes).
   - net/tls: Fix kmap usage (bsc#1109837).
   - net/tls: missing received data after fast remote close (bsc#1109837).
   - net/x25: prevent a couple of overflows (bsc#1178590).
   - net: aquantia: Fix aq_vec_isr_legacy() return value (git-fixes).
   - net: aquantia: fix LRO with FCS error (git-fixes).
   - net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (bsc#1103990 ).
   - net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan()
   - net: dsa: b53: Ensure the default VID is untagged (git-fixes).
   - net: dsa: b53: Fix default VLAN ID (git-fixes).
   - net: dsa: b53: Properly account for VLAN filtering (git-fixes).
   - net: dsa: bcm_sf2: Do not assume DSA master supports WoL (git-fixes).
   - net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend()
   - net: dsa: qca8k: remove leftover phy accessors (git-fixes).
   - net: ena: fix packet's addresses for rx_offset feature (bsc#1174852).
   - net: ena: handle bad request id in ena_netdev (git-fixes).
   - net: ethernet: ti: cpsw: fix runtime_pm while add/kill vlan (git-fixes).
   - net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() (git-fixes).
   - net: macb: add missing barriers when reading descriptors (git-fixes).
   - net: macb: fix dropped RX frames due to a race (git-fixes).
   - net: macb: fix error format in dev_err() (git-fixes).
   - net: macb: fix random memory corruption on RX with 64-bit DMA
   - net: pasemi: fix an use-after-free in pasemi_mac_phy_init() (git-fixes).
   - net: phy: Avoid multiple suspends (git-fixes).
   - net: qed: fix "maybe uninitialized" warning (bsc#1136460 jsc#SLE-4691
     bsc#1136461 jsc#SLE-4692).
   - net: qed: fix async event callbacks unregistering (bsc#1104393
   - net: qede: fix PTP initialization on recovery (bsc#1136460 jsc#SLE-4691
     bsc#1136461 jsc#SLE-4692).
   - net: qede: fix use-after-free on recovery and AER handling (bsc#1136460
     jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
   - net: seeq: Fix the function used to release some memory in an error
     handling path (git-fixes).
   - net: sh_eth: fix a missing check of of_get_phy_mode (git-fixes).
   - net: sonic: replace dev_kfree_skb in sonic_send_packet (git-fixes).
   - net: sonic: return NETDEV_TX_OK if failed to map buffer (git-fixes).
   - net: stmmac: fix csr_clk can't be zero issue (git-fixes).
   - net: stmmac: Fix reception of Broadcom switches tags (git-fixes).
   - net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task()
   - net: usb: sr9800: fix uninitialized local variable (git-fixes).
   - net:ethernet:aquantia: Extra spinlocks removed (git-fixes).
   - net_sched: fix a memory leak in atm_tc_init() (bsc#1056657 bsc#1056653
   - nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame
   - nfc: s3fwrn5: Release the nfc firmware (git-fixes).
   - nfc: st95hf: Fix memleak in st95hf_in_send_cmd (git-fixes).
   - nfp: use correct define to return NONE fec (bsc#1109837).
   - NFS: fix nfs_path in case of a rename retry (git-fixes).
   - NFSD: Add missing NFSv2 .pc_func methods (git-fixes).
   - NFSv4.2: fix client's attribute cache management for copy_file_range
   - ocfs2: fix unbalanced locking (bsc#1180506).
   - ocfs2: initialize ip_next_orphan (bsc#1179724).
   - orinoco: Move context allocation after processing the skb (git-fixes).
   - parport: load lowlevel driver if ports not found (git-fixes).
   - PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes).
   - PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge
   - PCI: Do not disable decoding when mmio_always_on is set (git-fixes).
   - PCI: Fix pci_slot_release() NULL pointer dereference (git-fixes).
   - phy: Revert toggling reset changes (git-fixes).
   - pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler()
   - pinctrl: amd: fix npins for uart0 in kerncz_groups (git-fixes).
   - pinctrl: amd: remove debounce filter setting in IRQ type setting
   - pinctrl: baytrail: Avoid clearing debounce value when turning it off
   - pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe()
   - pinctrl: merrifield: Set default bias in case no particular value given
   - pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B (git-fixes).
   - platform/x86: acer-wmi: add automatic keyboard background light toggle
     key as KEY_LIGHTS_TOGGLE (git-fixes).
   - platform/x86: dell-smbios-base: Fix error return code in
     dell_smbios_init (git-fixes).
   - platform/x86: mlx-platform: Fix item counter assignment for MSN2700,
     MSN24xx systems (git-fixes).
   - platform/x86: mlx-platform: remove an unused variable (git-fixes).
   - platform/x86: mlx-platform: Remove PSU EEPROM from default platform
     configuration (git-fixes).
   - platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform
     configuration (git-fixes).
   - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
   - PM: ACPI: Output correct message on target power state (git-fixes).
   - PM: hibernate: Freeze kernel threads in software_resume() (git-fixes).
   - PM: hibernate: remove the bogus call to get_gendisk() in
     software_resume() (git-fixes).
   - pNFS/flexfiles: Fix list corruption if the mirror count changes
   - power: supply: bq24190_charger: fix reference leak (git-fixes).
   - power: supply: bq27xxx_battery: Silence deferred-probe error (git-fixes).
   - powerpc/64: Set up a kernel stack for secondaries before cpu_restore()
   - powerpc/64s/pseries: Fix hash tlbiel_all_isa300 for guest kernels
     (bsc#1179888 ltc#190253).
   - powerpc/64s: Fix hash ISA v3.0 TLBIEL instruction generation
     (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).
   - powerpc/pci: Fix broken INTx configuration via OF (bsc#1172145
   - powerpc/pci: Remove legacy debug code (bsc#1172145 ltc#184630 git-fixes).
   - powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
   - powerpc/pci: Use of_irq_parse_and_map_pci() helper (bsc#1172145
   - powerpc/perf: Fix crash with is_sier_available when pmu is not set
     (bsc#1179578 ltc#189313).
   - powerpc/pseries/hibernation: remove redundant cacheinfo update
     (bsc#1138374 ltc#178199 git-fixes).
   - powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1065729).
   - powerpc/smp: Add __init to init_big_cores() (bsc#1109695 ltc#171067
   - powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
   - powerpc: Convert to using %pOF instead of full_name (bsc#1172145
   - powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at
   - ppp: remove the PPPIOCDETACH ioctl (git-fixes).
   - pwm: lp3943: Dynamically allocate PWM chip base (git-fixes).
   - qed: fix error return code in qed_iwarp_ll2_start() (bsc#1050536
   - qed: suppress "do not support RoCE & iWARP" flooding on HW init
     (bsc#1050536 bsc#1050545).
   - qed: suppress false-positives interrupt error messages on HW init
     (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
   - quota: clear padding in v2r1_mem2diskdqb() (bsc#1179714).
   - radeon: insert 10ms sleep in dce5_crtc_load_lut (git-fixes).
   - ravb: Fix use-after-free ravb_tstamp_skb (git-fixes).
   - RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532
   - RDMA/qedr: Fix memory leak in iWARP CM (bsc#1050545 ).
   - regmap: debugfs: check count when read regmap file (git-fixes).
   - regmap: dev_get_regmap_match(): fix string comparison (git-fixes).
   - regmap: Remove duplicate `type` field from regmap `regcache_sync` trace
     event (git-fixes).
   - regulator: max8907: Fix the usage of uninitialized variable in
     max8907_regulator_probe() (git-fixes).
   - regulator: pfuze100-regulator: Variable "val" in
     pfuze100_regulator_probe() could be uninitialized (git-fixes).
   - regulator: ti-abb: Fix timeout in
     ti_abb_wait_txdone/ti_abb_clear_all_txdone (git-fixes).
   - reiserfs: Fix oops during mount (bsc#1179715).
   - reiserfs: Initialize inode keys properly (bsc#1179713).
   - remoteproc: Fix wrong rvring index computation (git-fixes).
   - rfkill: Fix incorrect check to avoid NULL pointer dereference
   - rtc: 88pm860x: fix possible race condition (git-fixes).
   - rtc: hym8563: enable wakeup when applicable (git-fixes).
   - rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot
   - rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() (git-fixes).
   - s390/bpf: Fix multiple tail calls (git-fixes).
   - s390/cpuinfo: show processor physical address (git-fixes).
   - s390/cpum_sf.c: fix file permission for cpum_sfb_size (git-fixes).
   - s390/dasd: fix hanging device offline processing (bsc#1144912).
   - s390/dasd: fix null pointer dereference for ERP requests (git-fixes).
   - s390/pci: fix CPU address in MSI for directed IRQ (git-fixes).
   - s390/qeth: fix af_iucv notification race (git-fixes).
   - s390/qeth: fix tear down of async TX buffers (git-fixes).
   - s390/qeth: make af_iucv TX notification call more robust (git-fixes).
   - s390/stp: add locking to sysfs functions (git-fixes).
   - s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (git-fixes).
   - scripts/lib/SUSE/ properly close prjconf Macros: section
   - scsi: lpfc: Add FDMI Vendor MIB support (bsc#1164780).
   - scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers
   - scsi: lpfc: Convert SCSI I/O completions to SLI-3 and SLI-4 handlers
   - scsi: lpfc: Convert SCSI path to use common I/O submission path
   - scsi: lpfc: Correct null ndlp reference on routine exit (bsc#1164780).
   - scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req()
   - scsi: lpfc: Enable common send_io interface for SCSI and NVMe
   - scsi: lpfc: Enable common wqe_template support for both SCSI and NVMe
   - scsi: lpfc: Enlarge max_sectors in scsi host templates (bsc#1164780).
   - scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional
     events (bsc#1164780).
   - scsi: lpfc: Fix duplicate wq_create_version check (bsc#1164780).
   - scsi: lpfc: Fix fall-through warnings for Clang (bsc#1164780).
   - scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery
   - scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc()
   - scsi: lpfc: Fix memory leak on lcb_context (bsc#1164780).
   - scsi: lpfc: Fix missing prototype for lpfc_nvmet_prep_abort_wqe()
   - scsi: lpfc: Fix missing prototype warning for lpfc_fdmi_vendor_attr_mi()
   - scsi: lpfc: Fix NPIV discovery and Fabric Node detection (bsc#1164780).
   - scsi: lpfc: Fix NPIV Fabric Node reference counting (bsc#1164780).
   - scsi: lpfc: Fix pointer defereference before it is null checked issue
   - scsi: lpfc: Fix refcounting around SCSI and NVMe transport APIs
   - scsi: lpfc: Fix removal of SCSI transport device get and put on dev
     structure (bsc#1164780).
   - scsi: lpfc: Fix scheduling call while in softirq context in
     lpfc_unreg_rpi (bsc#1164780).
   - scsi: lpfc: Fix set but not used warnings from Rework remote port lock
     handling (bsc#1164780).
   - scsi: lpfc: Fix set but unused variables in lpfc_dev_loss_tmo_handler()
   - scsi: lpfc: Fix spelling mistake "Cant" -> "Can't" (bsc#1164780).
   - scsi: lpfc: Fix variable 'vport' set but not used in
     lpfc_sli4_abts_err_handler() (bsc#1164780).
   - scsi: lpfc: lpfc_attr: Demote kernel-doc format for redefined functions
   - scsi: lpfc: lpfc_attr: Fix-up a bunch of kernel-doc misdemeanours
   - scsi: lpfc: lpfc_debugfs: Fix a couple of function documentation issues
   - scsi: lpfc: lpfc_scsi: Fix a whole host of kernel-doc issues
   - scsi: lpfc: Refactor WQE structure definitions for common use
   - scsi: lpfc: Reject CT request for MIB commands (bsc#1164780).
   - scsi: lpfc: Remove dead code on second !ndlp check (bsc#1164780).
   - scsi: lpfc: Remove ndlp when a PLOGI/ADISC/PRLI/REG_RPI ultimately fails
   - scsi: lpfc: Remove set but not used 'qp' (bsc#1164780).
   - scsi: lpfc: Remove unneeded variable 'status' in
     lpfc_fcp_cpu_map_store() (bsc#1164780).
   - scsi: lpfc: Removed unused macros in lpfc_attr.c (bsc#1164780).
   - scsi: lpfc: Rework locations of ndlp reference taking (bsc#1164780).
   - scsi: lpfc: Rework remote port lock handling (bsc#1164780).
   - scsi: lpfc: Rework remote port ref counting and node freeing
   - scsi: lpfc: Unsolicited ELS leaves node in incorrect state while
     dropping it (bsc#1164780).
   - scsi: lpfc: Update changed file copyrights for 2020 (bsc#1164780).
   - scsi: lpfc: Update lpfc version to (bsc#1164780).
   - scsi: lpfc: Update lpfc version to (bsc#1164780).
   - scsi: lpfc: Update lpfc version to (bsc#1164780).
   - scsi: lpfc: Use generic power management (bsc#1164780).
   - scsi: qla2xxx: Change post del message from debug level to log level
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1172538 bsc#1179142
   - scsi: qla2xxx: Do not check for fw_started while posting NVMe command
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Do not consume srb greedily (bsc#1172538 bsc#1179142
   - scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix crash during driver load on big endian machines
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix FW initialization error on big endian machines
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Handle aborts correctly for port undergoing deletion
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1172538 bsc#1179142
   - scsi: qla2xxx: Remove trailing semicolon in macro definition
     (bsc#1172538 bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1172538 bsc#1179142
   - scsi: qla2xxx: Tear down session if FW say it is down (bsc#1172538
     bsc#1179142 bsc#1179810).
   - scsi: qla2xxx: Update version to (bsc#1172538 bsc#1179142
   - scsi: qla2xxx: Use constant when it is known (bsc#1172538 bsc#1179142
   - scsi: Remove unneeded break statements (bsc#1164780).
   - scsi: storvsc: Fix error return in storvsc_probe() (git-fixes).
   - scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1172538
     bsc#1179142 bsc#1179810).
   - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access
   - serial: 8250_pci: Add Realtek 816a and 816b (git-fixes).
   - serial: amba-pl011: Make sure we initialize the port.lock spinlock
   - serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE (git-fixes).
   - serial: txx9: add missing platform_driver_unregister() on error in
     serial_txx9_init (git-fixes).
   - serial_core: Check for port state when tty is in error state (git-fixes).
   - SMB3: Honor 'handletimeout' flag for multiuser mounts (bsc#1176558).
   - SMB3: Honor 'posix' flag for multiuser mounts (bsc#1176559).
   - SMB3: Honor lease disabling for multiuser mounts (git-fixes).
   - soc/tegra: fuse: Fix index bug in get_process_id (git-fixes).
   - soc: imx: gpc: fix power up sequencing (git-fixes).
   - soc: mediatek: Check if power domains can be powered on at boot time
   - soc: qcom: smp2p: Safely acquire spinlock without IRQs (git-fixes).
   - soc: ti: Fix reference imbalance in knav_dma_probe (git-fixes).
   - soc: ti: knav_qmss: fix reference leak in knav_queue_probe (git-fixes).
   - spi: Add call to spi_slave_abort() function when spidev driver is
     released (git-fixes).
   - spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in
     bcm63xx_hsspi_resume (git-fixes).
   - spi: davinci: Fix use-after-free on unbind (git-fixes).
   - spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes).
   - spi: dw: Fix Rx-only DMA transfers (git-fixes).
   - spi: dw: Return any value retrieved from the dma_transfer callback
   - spi: Fix memory leak on splited transfers (git-fixes).
   - spi: img-spfi: fix potential double release (git-fixes).
   - spi: img-spfi: fix reference leak in img_spfi_resume (git-fixes).
   - spi: pic32: Do not leak DMA channels in probe error path (git-fixes).
   - spi: pxa2xx: Add missed security checks (git-fixes).
   - spi: spi-cavium-thunderx: Add missing pci_release_regions() (git-fixes).
   - spi: spi-loopback-test: Fix out-of-bounds read (git-fixes).
   - spi: spi-mem: Fix passing zero to 'PTR_ERR' warning (git-fixes).
   - spi: spi-mem: fix reference leak in spi_mem_access_start (git-fixes).
   - spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (git-fixes).
   - spi: spidev: fix a potential use-after-free in spidev_release()
   - spi: st-ssc4: add missed pm_runtime_disable (git-fixes).
   - spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path
   - spi: tegra114: fix reference leak in tegra spi ops (git-fixes).
   - spi: tegra20-sflash: fix reference leak in tegra_sflash_resume
   - spi: tegra20-slink: add missed clk_unprepare (git-fixes).
   - spi: tegra20-slink: fix reference leak in slink ops of tegra20
   - splice: only read in as much information as there is pipe buffer space
   - staging: comedi: check validity of wMaxPacketSize of usb endpoints found
   - staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
   - staging: comedi: mf6x4: Fix AI end-of-conversion detection (git-fixes).
   - staging: olpc_dcon: add a missing dependency (git-fixes).
   - staging: olpc_dcon: Do not call platform_device_unregister() in
     dcon_probe() (git-fixes).
   - staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
   - staging: rtl8188eu: Add device id for MERCUSYS MW150US v2 (git-fixes).
   - staging: rtl8188eu: fix possible null dereference (git-fixes).
   - staging: rtl8192u: fix multiple memory leaks on error path (git-fixes).
   - staging: vt6656: set usb_set_intfdata on driver fail (git-fixes).
   - staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
   - staging: wlan-ng: properly check endpoint types (git-fixes).
   - sunrpc: fix copying of multiple pages in gss_read_proxy_verf()
   - sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes).
   - sunrpc: Properly set the @subbuf parameter of xdr_buf_subsegment()
   - sunrpc: The RDMA back channel mustn't disappear while requests are
     outstanding (git-fixes).
   - svcrdma: fix bounce buffers for unaligned offsets and multiple pages
   - svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (bsc#1103992).
   - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control
   - thunderbolt: Use 32-bit writes when writing ring producer/consumer
   - timer: Fix wheel index calculation on last level (git fixes)
   - timer: Prevent base->clk from moving backward (git-fixes)
   - tty: always relink the port (git-fixes).
   - tty: Fix ->pgrp locking in tiocspgrp() (git-fixes).
   - tty: link tty and port before configuring it as console (git-fixes).
   - tty: synclink_gt: Adjust indentation in several functions (git-fixes).
   - tty: synclinkmp: Adjust indentation in several functions (git-fixes).
   - tty:serial:mvebu-uart:fix a wrong return (git-fixes).
   - uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define (git-fixes).
   - uapi/if_ether.h: prevent redefinition of struct ethhdr (git-fixes).
   - usb: add RESET_RESUME quirk for Snapscan 1212 (git-fixes).
   - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul
   - usb: dummy-hcd: Fix uninitialized array use in init() (git-fixes).
   - usb: dwc2: Fix IN FIFO allocation (git-fixes).
   - usb: dwc3: remove the call trace of USBx_GFLADJ (git-fixes).
   - usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe
   - usb: Fix: Do not skip endpoint descriptors with maxpacket=0 (git-fixes).
   - usb: fsl: Check memory resource before releasing it (git-fixes).
   - usb: gadget: composite: Fix possible double free memory bug (git-fixes).
   - usb: gadget: configfs: fix concurrent issue between composite APIs
   - usb: gadget: configfs: Fix missing spin_lock_init() (git-fixes).
   - usb: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
   - usb: gadget: f_fs: Use local copy of descriptors for userspace copy
   - usb: gadget: f_midi: setup SuperSpeed Plus descriptors (git-fixes).
   - usb: gadget: f_rndis: fix bitrate for SuperSpeed and above (git-fixes).
   - usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags (git-fixes).
   - usb: gadget: fix wrong endpoint desc (git-fixes).
   - usb: gadget: goku_udc: fix potential crashes in probe (git-fixes).
   - usb: gadget: net2280: fix memory leak on probe error handling paths
   - usb: gadget: serial: fix Tx stall after buffer overflow (git-fixes).
   - usb: gadget: udc: fix possible sleep-in-atomic-context bugs in
     gr_probe() (git-fixes).
   - usb: gadget: udc: gr_udc: fix memleak on error handling path in
     gr_ep_init() (git-fixes).
   - usb: hso: Fix debug compile warning on sparc32 (git-fixes).
   - usb: ldusb: use unsigned size format specifiers (git-fixes).
   - usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue
   - usb: oxu210hp-hcd: Fix memory leak in oxu_create (git-fixes).
   - usb: serial: ch341: add new Product ID for CH341A (git-fixes).
   - usb: serial: ch341: sort device-id entries (git-fixes).
   - usb: serial: digi_acceleport: clean up modem-control handling
   - usb: serial: digi_acceleport: clean up set_termios (git-fixes).
   - usb: serial: digi_acceleport: fix write-wakeup deadlocks (git-fixes).
   - usb: serial: digi_acceleport: remove in_interrupt() usage.
   - usb: serial: digi_acceleport: remove redundant assignment to pointer
     priv (git-fixes).
   - usb: serial: digi_acceleport: rename tty flag variable (git-fixes).
   - usb: serial: digi_acceleport: use irqsave() in USB's complete callback
   - usb: serial: keyspan_pda: fix dropped unthrottle interrupts (git-fixes).
   - usb: serial: keyspan_pda: fix stalled writes (git-fixes).
   - usb: serial: keyspan_pda: fix tx-unthrottle use-after-free (git-fixes).
   - usb: serial: keyspan_pda: fix write deadlock (git-fixes).
   - usb: serial: keyspan_pda: fix write unthrottling (git-fixes).
   - usb: serial: keyspan_pda: fix write-wakeup use-after-free (git-fixes).
   - usb: serial: kl5kusb105: fix memleak on open (git-fixes).
   - usb: serial: mos7720: fix parallel-port state restore (git-fixes).
   - usb: serial: option: add Fibocom NL668 variants (git-fixes).
   - usb: serial: option: add interface-number sanity check to flag handling
   - usb: serial: option: add support for Thales Cinterion EXS82 (git-fixes).
   - usb: serial: option: fix Quectel BG96 matching (git-fixes).
   - usb: Skip endpoints with 0 maxpacket length (git-fixes).
   - usb: UAS: introduce a quirk to set no_write_same (git-fixes).
   - usb: usbfs: Suppress problematic bind and unbind uevents (git-fixes).
   - usblp: poison URBs upon disconnect (git-fixes).
   - usbnet: ipheth: fix connectivity with iOS 14 (git-fixes).
   - video: fbdev: neofb: fix memory leak in neo_scan_monitor() (git-fixes).
   - vt: do not hardcode the mem allocation upper bound (git-fixes).
   - vt: Reject zero-sized screen buffer size (git-fixes).
   - watchdog: coh901327: add COMMON_CLK dependency (git-fixes).
   - watchdog: da9062: do not ping the hw during stop() (git-fixes).
   - watchdog: da9062: No need to ping manually before setting timeout
   - watchdog: qcom: Avoid context switch in restart handler (git-fixes).
   - watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (git-fixes).
   - wimax: fix duplicate initializer warning (git-fixes).
   - wireless: Use linux/stddef.h instead of stddef.h (git-fixes).
   - wireless: Use offsetof instead of custom macro (git-fixes).
   - x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz
   - x86/insn-eval: Use new for_each_insn_prefix() macro to loop over
     prefixes bytes (bsc#1112178).
   - x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1112178).
   - x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (bsc#1112178).
   - x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak
   - x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled
   - x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount
     leak (bsc#1112178).
   - x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1112178).
   - x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb
   - x86/tracing: Introduce a static key for exception tracing (bsc#1179895).
   - x86/traps: Simplify pagefault tracing logic (bsc#1179895).
   - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
   - xhci: Give USB2 ports time to enter U3 in bus suspend (git-fixes).
   - xprtrdma: fix incorrect header size calculations (git-fixes).

Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Workstation Extension 15-SP1:

      zypper in -t patch SUSE-SLE-Product-WE-15-SP1-2021-118=1

   - SUSE Linux Enterprise Module for Live Patching 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2021-118=1

   - SUSE Linux Enterprise Module for Legacy Software 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Legacy-15-SP1-2021-118=1

   - SUSE Linux Enterprise Module for Development Tools 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP1-2021-118=1

   - SUSE Linux Enterprise Module for Basesystem 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2021-118=1

   - SUSE Linux Enterprise High Availability 15-SP1:

      zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2021-118=1

Package List:

   - SUSE Linux Enterprise Workstation Extension 15-SP1 (x86_64):


   - SUSE Linux Enterprise Module for Live Patching 15-SP1 (ppc64le x86_64):


   - SUSE Linux Enterprise Module for Legacy Software 15-SP1 (aarch64 ppc64le s390x x86_64):


   - SUSE Linux Enterprise Module for Development Tools 15-SP1 (aarch64 ppc64le s390x x86_64):


   - SUSE Linux Enterprise Module for Development Tools 15-SP1 (noarch):


   - SUSE Linux Enterprise Module for Basesystem 15-SP1 (aarch64 ppc64le s390x x86_64):


   - SUSE Linux Enterprise Module for Basesystem 15-SP1 (noarch):


   - SUSE Linux Enterprise Module for Basesystem 15-SP1 (s390x):


   - SUSE Linux Enterprise High Availability 15-SP1 (aarch64 ppc64le s390x x86_64):



More information about the sle-security-updates mailing list