SUSE-SU-2021:0741-1: important: Security update for the Linux Kernel

sle-security-updates at lists.suse.com sle-security-updates at lists.suse.com
Tue Mar 9 21:04:39 UTC 2021


   SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________

Announcement ID:    SUSE-SU-2021:0741-1
Rating:             important
References:         #1065600 #1065729 #1078720 #1081134 #1084610 
                    #1132477 #1151927 #1152472 #1152489 #1154353 
                    #1155518 #1156395 #1163776 #1169514 #1170442 
                    #1176248 #1176855 #1177109 #1177326 #1177440 
                    #1177529 #1178142 #1178995 #1179082 #1179137 
                    #1179243 #1179428 #1179660 #1179929 #1180058 
                    #1180846 #1180964 #1180989 #1181133 #1181259 
                    #1181544 #1181574 #1181637 #1181655 #1181671 
                    #1181674 #1181710 #1181720 #1181735 #1181736 
                    #1181738 #1181747 #1181753 #1181818 #1181843 
                    #1181854 #1181896 #1181958 #1181960 #1181985 
                    #1182047 #1182110 #1182118 #1182128 #1182140 
                    #1182171 #1182175 #1182259 #1182265 #1182266 
                    #1182267 #1182268 #1182271 #1182272 #1182273 
                    #1182275 #1182276 #1182278 #1182283 #1182341 
                    #1182374 #1182380 #1182381 #1182406 #1182430 
                    #1182439 #1182441 #1182442 #1182443 #1182444 
                    #1182445 #1182446 #1182447 #1182449 #1182454 
                    #1182455 #1182456 #1182457 #1182458 #1182459 
                    #1182460 #1182461 #1182462 #1182463 #1182464 
                    #1182465 #1182466 #1182485 #1182489 #1182490 
                    #1182507 #1182547 #1182558 #1182560 #1182561 
                    #1182571 #1182599 #1182602 #1182626 #1182650 
                    #1182672 #1182676 #1182683 #1182684 #1182686 
                    #1182770 #1182798 #1182800 #1182801 #1182854 
                    #1182856 
Cross-References:   CVE-2020-12362 CVE-2020-12363 CVE-2020-12364
                    CVE-2020-12373 CVE-2020-29368 CVE-2020-29374
                    CVE-2021-26930 CVE-2021-26931 CVE-2021-26932
                   
CVSS scores:
                    CVE-2020-12362 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2020-12362 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
                    CVE-2020-12363 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
                    CVE-2020-12363 (SUSE): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
                    CVE-2020-12364 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
                    CVE-2020-12364 (SUSE): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
                    CVE-2020-12373 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
                    CVE-2020-12373 (SUSE): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
                    CVE-2020-29368 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2020-29368 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2020-29374 (NVD) : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2020-29374 (SUSE): 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
                    CVE-2021-26930 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2021-26930 (SUSE): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
                    CVE-2021-26931 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
                    CVE-2021-26931 (SUSE): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
                    CVE-2021-26932 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
                    CVE-2021-26932 (SUSE): 5.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected Products:
                    SUSE MicroOS 5.0
                    SUSE Linux Enterprise Workstation Extension 15-SP2
                    SUSE Linux Enterprise Module for Live Patching 15-SP2
                    SUSE Linux Enterprise Module for Legacy Software 15-SP2
                    SUSE Linux Enterprise Module for Development Tools 15-SP2
                    SUSE Linux Enterprise Module for Basesystem 15-SP2
                    SUSE Linux Enterprise High Availability 15-SP2
______________________________________________________________________________

   An update that solves 9 vulnerabilities and has 117 fixes
   is now available.

Description:

   The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various
   security and bugfixes.

   The following security bugs were fixed:

   - CVE-2021-26930: Fixed an improper error handling in blkback's grant
     mapping (XSA-365 bsc#1181843).
   - CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant
     mapping errors as bugs (XSA-362 bsc#1181753).
   - CVE-2021-26932: Fixed improper error handling issues in Linux grant
     mapping (XSA-361 bsc#1181747). by remote attackers to read or write
     files via directory traversal in an XCOPY request (bsc#178372).
   - CVE-2020-12362: Fixed an integer overflow in the firmware which may have
     allowed a privileged user to potentially enable an escalation of
     privilege via local access (bsc#1181720).
   - CVE-2020-12363: Fixed an improper input validation which may have
     allowed a privileged user to potentially enable a denial of service via
     local access (bsc#1181735).
   - CVE-2020-12364: Fixed a null pointer reference which may have allowed a
     privileged user to potentially enable a denial of service via local
     access (bsc#1181736 ).
   - CVE-2020-12373: Fixed an expired pointer dereference which may have
     allowed a privileged user to potentially enable a denial of service via
     local access (bsc#1181738).
   - CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write
     implementation which could have granted unintended write access because
     of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).

   The following non-security bugs were fixed:

   - ACPI: configfs: add missing check after
     configfs_register_default_group() (git-fixes).
   - ACPI: property: Fix fwnode string properties matching (git-fixes).
   - ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).
   - ACPI: property: Satisfy kernel doc validator (part 2) (git-fixes).
   - ALSA: hda: Add another CometLake-H PCI ID (git-fixes).
   - ALSA: hda/hdmi: Drop bogus check at closing a stream (git-fixes).
   - ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).
   - ALSA: pcm: Assure sync with the pending stop operation at suspend
     (git-fixes).
   - ALSA: pcm: Call sync_stop at disconnection (git-fixes).
   - ALSA: pcm: Do not call sync_stop if it hasn't been stopped (git-fixes).
   - ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 (git-fixes).
   - ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all()
     (git-fixes).
   - ALSA: usb-audio: Do not avoid stopping the stream at disconnection
     (git-fixes).
   - ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode
     (git-fixes).
   - ALSA: usb-audio: Handle invalid running state at releasing EP
     (git-fixes).
   - ALSA: usb-audio: More strict state change in EP (git-fixes).
   - amba: Fix resource leak for drivers without .remove (git-fixes).
   - arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true
     (bsc#1182560)
   - ASoC: cpcap: fix microphone timeslot mask (git-fixes).
   - ASoC: cs42l56: fix up error handling in probe (git-fixes).
   - ASoC: simple-card-utils: Fix device module clock (git-fixes).
   - ASoC: SOF: debug: Fix a potential issue on string buffer termination
     (git-fixes).
   - ata: ahci_brcm: Add back regulators management (git-fixes).
   - ata: sata_nv: Fix retrieving of active qcs (git-fixes).
   - ath10k: Fix error handling in case of CE pipe init failure (git-fixes).
   - ath9k: fix data bus crash when setting nf_override via debugfs
     (git-fixes).
   - bcache: fix overflow in offset_to_stripe() (git-fixes).
   - blk-mq: call commit_rqs while list empty but error happen (bsc#1182442).
   - blk-mq: insert request not through ->queue_rq into sw/scheduler queue
     (bsc#1182443).
   - blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue
     (bsc#1182444).
   - block: fix inflight statistics of part0 (bsc#1182445).
   - block: respect queue limit of max discard segment (bsc#1182441).
   - block: virtio_blk: fix handling single range discard request
     (bsc#1182439).
   - Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the
     probe function (git-fixes).
   - Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv (git-fixes).
   - Bluetooth: drop HCI device reference before return (git-fixes).
   - Bluetooth: Fix initializing response id after clearing struct
     (git-fixes).
   - Bluetooth: hci_uart: Fix a race for write_work scheduling (git-fixes).
   - Bluetooth: Put HCI device if inquiry procedure interrupts (git-fixes).
   - bnxt_en: Fix accumulation of bp->net_stats_prev (git-fixes).
   - bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
   - bnxt_en: fix error return code in bnxt_init_one() (git-fixes).
   - bnxt_en: Improve stats context resource accounting with RDMA driver
     loaded (git-fixes).
   - bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
   - bnxt_en: Release PCI regions when DMA mask setup fails during probe
     (git-fixes).
   - bonding: Fix reference count leak in bond_sysfs_slave_add (git-fixes).
   - bonding: set dev->needed_headroom in bond_setup_by_slave() (git-fixes).
   - bonding: wait for sysfs kobject destruction before freeing struct slave
     (git-fixes).
   - bpf, cgroup: Fix optlen WARN_ON_ONCE toctou (bsc#1155518).
   - bpf, cgroup: Fix problematic bounds check (bsc#1155518).
   - btrfs: add assertion for empty list of transactions at late stage of
     umount (bsc#1182626).
   - btrfs: Cleanup try_flush_qgroup (bsc#1182047).
   - btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata
     (bsc#1182047).
   - btrfs: Fix race between extent freeing/allocation when using bitmaps
     (bsc#1181574).
   - btrfs: fix race between RO remount and the cleaner task (bsc#1182626).
   - btrfs: fix transaction leak and crash after cleaning up orphans on RO
     mount (bsc#1182626).
   - btrfs: fix transaction leak and crash after RO remount caused by qgroup
     rescan (bsc#1182626).
   - btrfs: Free correct amount of space in
     btrfs_delayed_inode_reserve_metadata (bsc#1182047).
   - btrfs: lift read-write mount setup from mount and remount (bsc#1182626).
   - btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata
     (bsc#1182047).
   - btrfs: run delayed iputs when remounting RO to avoid leaking them
     (bsc#1182626).
   - btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata
     (bsc#1182047).
   - btrfs: Unlock extents in btrfs_zero_range in case of errors
     (bsc#1182047).
   - caif: no need to check return value of debugfs_create functions
     (git-fixes).
   - ceph: fix flush_snap logic after putting caps (bsc#1182854).
   - cgroup: Fix memory leak when parsing multiple source parameters
     (bsc#1182683).
   - cgroup: fix psi monitor for root cgroup (bsc#1182686).
   - cgroup-v1: add disabled controller check in cgroup1_parse_param()
     (bsc#1182684).
   - chelsio/chtls: correct function return and return type (git-fixes).
   - chelsio/chtls: correct netdevice for vlan interface (git-fixes).
   - chelsio/chtls: fix a double free in chtls_setkey() (git-fixes).
   - chelsio/chtls: fix always leaking ctrl_skb (git-fixes).
   - chelsio/chtls: fix deadlock issue (git-fixes).
   - chelsio/chtls: fix memory leaks caused by a race (git-fixes).
   - chelsio/chtls: fix memory leaks in CPL handlers (git-fixes).
   - chelsio/chtls: fix panic during unload reload chtls (git-fixes).
   - chelsio/chtls: fix socket lock (git-fixes).
   - chelsio/chtls: fix tls record info to user (git-fixes).
   - Cherry-pick ibmvnic patches from SP3 (jsc#SLE-17268).
   - chtls: Added a check to avoid NULL pointer dereference (git-fixes).
   - chtls: Fix chtls resources release sequence (git-fixes).
   - chtls: Fix hardware tid leak (git-fixes).
   - chtls: Fix panic when route to peer not configured (git-fixes).
   - chtls: Remove invalid set_tcb call (git-fixes).
   - chtls: Replace skb_dequeue with skb_peek (git-fixes).
   - cifs: check all path components in resolved dfs target (bsc#1181710).
   - cifs: fix nodfs mount option (bsc#1181710).
   - cifs: introduce helper for finding referral server (bsc#1181710).
   - cifs: report error instead of invalid when revalidating a dentry fails
     (bsc#1177440).
   - cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
   - cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code
     (git-fixes).
   - clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL
     (git-fixes).
   - clk: meson: clk-pll: make "ret" a signed integer (git-fixes).
   - clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate()
     (git-fixes).
   - clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs (git-fixes).
   - clk: sunxi-ng: h6: Fix CEC clock (git-fixes).
   - clk: sunxi-ng: h6: Fix clock divider range on some clocks (git-fixes).
   - clk: sunxi-ng: mp: fix parent rate change flag check (git-fixes).
   - clocksource/drivers/ixp4xx: Select TIMER_OF when needed (git-fixes).
   - cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove()
     (git-fixes).
   - cpufreq: brcmstb-avs-cpufreq: Free resources in error path (git-fixes).
   - cpuset: fix race between hotplug work and later CPU offline
     (bsc#1182676).
   - crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()
     (git-fixes).
   - crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error)
     (git-fixes).
   - cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
   - cxgb4: fix all-mask IP address comparison (git-fixes).
   - cxgb4: fix checks for max queues to allocate (git-fixes).
   - cxgb4: fix endian conversions for L4 ports in filters (git-fixes).
   - cxgb4: fix set but unused variable when DCB is disabled (git-fixes).
   - cxgb4: fix SGE queue dump destination buffer context (git-fixes).
   - cxgb4: fix the panic caused by non smac rewrite (git-fixes).
   - cxgb4: move DCB version extern to header file (git-fixes).
   - cxgb4: move handling L2T ARP failures to caller (git-fixes).
   - cxgb4: move PTP lock and unlock to caller in Tx path (git-fixes).
   - cxgb4: parse TC-U32 key values and masks natively (git-fixes).
   - cxgb4: remove cast when saving IPv4 partial checksum (git-fixes).
   - cxgb4: set up filter action after rewrites (git-fixes).
   - cxgb4: use correct type for all-mask IP address comparison (git-fixes).
   - cxgb4: use unaligned conversion for fetching timestamp (git-fixes).
   - dmaengine: fsldma: Fix a resource leak in an error handling path of the
     probe function (git-fixes).
   - dmaengine: fsldma: Fix a resource leak in the remove function
     (git-fixes).
   - dmaengine: hsu: disable spurious interrupt (git-fixes).
   - dmaengine: owl-dma: Fix a resource leak in the remove function
     (git-fixes).
   - dm crypt: avoid truncating the logical block size (git-fixes).
   - dm: fix bio splitting and its bio completion order for regular IO
     (git-fixes).
   - dm thin: fix use-after-free in metadata_pre_commit_callback
     (bsc#1177529).
   - dm thin metadata: Avoid returning cmd->bm wild pointer on error
     (bsc#1177529).
   - dm thin metadata: fix lockdep complaint (bsc#1177529).
   - dm thin metadata: Fix use-after-free in dm_bm_set_read_only
     (bsc#1177529).
   - dm: use noio when sending kobject event (bsc#1177529).
   - docs: filesystems: vfs: correct flag name (bsc#1182856).
   - dpaa2-eth: fix return codes used in ndo_setup_tc (git-fixes).
   - drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
     (git-fixes).
   - drivers: net: davinci_mdio: fix potential NULL dereference in
     davinci_mdio_probe() (git-fixes).
   - drivers: soc: atmel: add null entry at the end of
     at91_soc_allowed_list[] (git-fixes).
   - drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs
     (git-fixes).
   - drm/amd/display: Change function decide_dp_link_settings to avoid
     infinite looping (git-fixes).
   - drm/amd/display: Decrement refcount of dc_sink before reassignment
     (git-fixes).
   - drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction
     (git-fixes).
   - drm/amd/display: Fix dc_sink kref count in emulated_link_detect
     (git-fixes).
   - drm/amd/display: Fix HDMI deep color output for DCE 6-11 (git-fixes).
   - drm/amd/display: Free atomic state after drm_atomic_commit (git-fixes).
   - drm/amd/display: Revert "Fix EDID parsing after resume from suspend"
     (git-fixes).
   - drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition
     (git-fixes).
   - drm/fb-helper: Add missed unlocks in setcmap_legacy() (git-fixes).
   - drm/gma500: Fix error return code in psb_driver_load() (git-fixes).
   - drm/meson: Unbind all connectors on module removal (bsc#1152472)
   - drm/sun4i: dw-hdmi: always set clock rate (bsc#1152472)
   - drm/sun4i: dw-hdmi: Fix max. frequency for H6 (bsc#1152472)
   - drm/sun4i: Fix H6 HDMI PHY configuration (bsc#1152472)
   - drm/sun4i: tcon: set sync polarity for tcon1 channel (bsc#1152472)
   - drm/vc4: hvs: Fix buffer overflow with the dlist handling (bsc#1152489)
   - Drop HID logitech patch that caused a regression (bsc#1182259)
   - exec: Always set cap_ambient in cap_bprm_set_creds (git-fixes).
   - exfat: Avoid allocating upcase table using kcalloc() (git-fixes).
   - ext4: do not remount read-only with errors=continue on reboot
     (bsc#1182464).
   - ext4: fix a memory leak of ext4_free_data (bsc#1182447).
   - ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1182449).
   - ext4: fix deadlock with fs freezing and EA inodes (bsc#1182463).
   - ext4: fix superblock checksum failure when setting password salt
     (bsc#1182465).
   - ext4: prevent creating duplicate encrypted filenames (bsc#1182446).
   - fgraph: Initialize tracing_graph_pause at task creation (git-fixes).
   - firmware_loader: align .builtin_fw to 8 (git-fixes).
   - fscrypt: add fscrypt_is_nokey_name() (bsc#1182446).
   - fscrypt: rename DCACHE_ENCRYPTED_NAME to DCACHE_NOKEY_NAME (bsc#1182446).
   - fs: fix lazytime expiration handling in __writeback_single_inode()
     (bsc#1182466).
   - gma500: clean up error handling in init (git-fixes).
   - gpio: pcf857x: Fix missing first interrupt (git-fixes).
   - HID: core: detect and skip invalid inputs to snto32() (git-fixes).
   - HID: make arrays usage and value to be the same (git-fixes).
   - HID: wacom: Ignore attempts to overwrite the touch_max value from HID
     (git-fixes).
   - hwrng: timeriomem - Fix cooldown period calculation (git-fixes).
   - i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (git-fixes).
   - i2c: iproc: handle only slave interrupts which are enabled (git-fixes).
   - i2c: mediatek: Move suspend and resume handling to NOIRQ phase
     (git-fixes).
   - i2c: stm32f7: fix configuration of the digital filter (git-fixes).
   - i3c: master: dw: Drop redundant disec call (git-fixes).
   - i40e: acquire VSI pointer only after VF is initialized (jsc#SLE-8025).
   - i40e: avoid premature Rx buffer reuse (git-fixes).
   - i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (git-fixes).
   - i40e: Fix MAC address setting for a VF via Host/VM (git-fixes).
   - i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
   - i40e: Revert "i40e: do not report link up for a VF who hasn't enabled
     queues" (jsc#SLE-8025).
   - iavf: fix double-release of rtnl_lock (git-fixes).
   - iavf: fix error return code in iavf_init_get_resources() (git-fixes).
   - iavf: fix speed reporting over virtchnl (git-fixes).
   - iavf: Fix updating statistics (git-fixes).
   - ibmvnic: add memory barrier to protect long term buffer (bsc#1182485
     ltc#191591).
   - ibmvnic: change IBMVNIC_MAX_IND_DESCS to 16 (bsc#1182485 ltc#191591).
   - ibmvnic: Clean up TX code and TX buffer data structure (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960
     ltc#190997).
   - ibmvnic: compare adapter->init_done_rc with more readable
     ibmvnic_rc_codes (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: Correctly re-enable interrupts in NAPI polling routine
     (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: create send_control_ip_offload (jsc#SLE-17043 bsc#1179243
     ltc#189290).
   - ibmvnic: create send_query_ip_offload (jsc#SLE-17043 bsc#1179243
     ltc#189290).
   - ibmvnic: device remove has higher precedence over reset (bsc#1065729).
   - ibmvnic: Do not replenish RX buffers after every polling loop
     (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: Ensure that CRQ entry read are correctly ordered (bsc#1182485
     ltc#191591).
   - ibmvnic: Ensure that device queue memory is cache-line aligned
     (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: Ensure that SCRQ entry reads are correctly ordered
     (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
   - ibmvnic: fix login buffer memory leak (bsc#1081134 ltc#164631).
   - ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: fix rx buffer tracking and index management in
     replenish_rx_pool partial success (bsc#1179929 ltc#189960).
   - ibmvnic: Fix TX completion error handling (jsc#SLE-17043 bsc#1179243
     ltc#189290).
   - ibmvnic: Fix use-after-free of VNIC login response buffer (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: handle inconsistent login with reset (jsc#SLE-17043 bsc#1179243
     ltc#189290).
   - ibmvnic: Harden device Command Response Queue handshake (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: improve ibmvnic_init and ibmvnic_reset_init (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: Introduce batched RX buffer descriptor transmission
     (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: Introduce indirect subordinate Command Response Queue buffer
     (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: Introduce xmit_more support using batched subCRQ hcalls
     (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: merge ibmvnic_reset_init and ibmvnic_init (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: no reset timeout for 5 seconds after reset (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: reduce wait for completion time (jsc#SLE-17043 bsc#1179243
     ltc#189290).
   - ibmvnic: remove never executed if statement (jsc#SLE-17043 bsc#1179243
     ltc#189290).
   - ibmvnic: Remove send_subcrq function (jsc#SLE-17043 bsc#1179243
     ltc#189290).
   - ibmvnic: rename ibmvnic_send_req_caps to send_request_cap (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: rename send_cap_queries to send_query_cap (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: rename send_map_query to send_query_map (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: send_login should check for crq errors (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: serialize access to work queue on remove (bsc#1065729).
   - ibmvnic: Set to CLOSED state even on error (bsc#1084610 ltc#165122
     git-fixes).
   - ibmvnic: skip send_request_unmap for timeout reset (bsc#1182485
     ltc#191591).
   - ibmvnic: skip tx timeout reset while in resetting (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - ibmvnic: stop free_all_rwi on failed reset (jsc#SLE-17043 bsc#1179243
     ltc#189290).
   - ibmvnic: store RX and TX subCRQ handle array in ibmvnic_adapter struct
     (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: track pending login (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: update MAINTAINERS (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ibmvnic: Use netdev_alloc_skb instead of alloc_skb to replenish RX
     buffers (jsc#SLE-17043 bsc#1179243 ltc#189290).
   - ice: Do not allow more channels than LAN MSI-X available (jsc#SLE-7926).
   - ice: Fix MSI-X vector fallback logic (jsc#SLE-7926).
   - igc: check return value of ret_val in igc_config_fc_after_link_up
     (git-fixes).
   - igc: fix link speed advertising (git-fixes).
   - igc: Fix returning wrong statistics (git-fixes).
   - igc: Report speed and duplex as unknown when device is runtime suspended
     (git-fixes).
   - igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr
     (git-fixes).
   - include/linux/memremap.h: remove stale comments (git-fixes).
   - Input: elo - fix an error code in elo_connect() (git-fixes).
   - Input: i8042 - unbreak Pegatron C15B (git-fixes).
   - Input: joydev - prevent potential read overflow in ioctl (git-fixes).
   - Input: sur40 - fix an error code in sur40_probe() (git-fixes).
   - Input: xpad - sync supported devices with fork on GitHub (git-fixes).
   - iwlwifi: mvm: do not send RFH_QUEUE_CONFIG_CMD with no queues
     (git-fixes).
   - iwlwifi: mvm: guard against device removal in reprobe (git-fixes).
   - iwlwifi: mvm: invalidate IDs of internal stations at mvm start
     (git-fixes).
   - iwlwifi: mvm: skip power command when unbinding vif during CSA
     (git-fixes).
   - iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() (git-fixes).
   - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap (git-fixes).
   - iwlwifi: pcie: fix context info memory leak (git-fixes).
   - iwlwifi: pcie: reschedule in long-running memory reads (git-fixes).
   - iwlwifi: pcie: use jiffies for memory read spin time limit (git-fixes).
   - ixgbe: avoid premature Rx buffer reuse (git-fixes).
   - ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (git-fixes).
   - kABI: Fix kABI after AMD SEV PCID fixes (bsc#1178995).
   - kABI: Fix kABI after modifying struct __call_single_data (bsc#1180846).
   - kABI: Fix kABI for extended APIC-ID support (bsc#1181259, jsc#ECO-3191).
   - kABI: repair, after "nVMX: Emulate MTF when performinginstruction
     emulation" kvm_x86_ops is part of kABI as it's used by LTTng. But it's
     only read and never allocated in there, so growing it (without altering
     existing members' offsets) is fine.
   - kernel-binary.spec: Add back initrd and image symlink ghosts to filelist
     (bsc#1182140). Fixes: 76a9256314c3 ("rpm/kernel-{source,binary}.spec: do
     not include ghost symlinks (boo#1179082).")
   - kernel/smp: add boot parameter for controlling CSD lock debugging
     (bsc#1180846).
   - kernel/smp: add more data to CSD lock debugging (bsc#1180846).
   - kernel/smp: prepare more CSD lock debugging (bsc#1180846).
   - kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
   - KVM: arm64: Assume write fault on S1PTW permission fault on instruction
     fetch (bsc#1181818).
   - KVM: arm64: Remove S1PTW check from kvm_vcpu_dabt_iswrite()
     (bsc#1181818).
   - KVM: nVMX: do not clear mtf_pending when nested events are blocked
     (bsc#1182489).
   - KVM: nVMX: Emulate MTF when performing instruction emulation
     (bsc#1182380).
   - KVM: nVMX: Handle pending #DB when injecting INIT VM-exit. Pulling in as
     a dependency of: "KVM: nVMX: Emulate MTF when performing instruction
     emulation" (bsc#1182380).
   - KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (bsc#1178995).
   - KVM: tracing: Fix unmatched kvm_entry and kvm_exit events (bsc#1182770).
   - KVM: VMX: Condition ENCLS-exiting enabling on CPU support for SGX1
     (bsc#1182798).
   - KVM: x86: Allocate new rmap and large page tracking when moving memslot
     (bsc#1182800).
   - KVM: x86: allow KVM_STATE_NESTED_MTF_PENDING in kvm_state flags
     (bsc#1182490).
   - KVM: x86: clear stale x86_emulate_ctxt->intercept value (bsc#1182381).
   - KVM: x86: do not notify userspace IOAPIC on edge-triggered interrupt EOI
     (bsc#1182374).
   - KVM: x86: Gracefully handle __vmalloc() failure during VM allocation
     (bsc#1182801).
   - KVM: x86: Introduce cr3_lm_rsvd_bits in kvm_vcpu_arch (bsc#1178995).
   - KVM: x86: remove stale comment from struct x86_emulate_ctxt
     (bsc#1182406).
   - libnvdimm/dimm: Avoid race between probe and available_slots_show()
     (bsc#1170442).
   - lib/vsprintf: no_hash_pointers prints all addresses as unhashed
     (bsc#1182599).
   - linux/clk.h: use correct kernel-doc notation for 2 functions (git-fixes).
   - mac80211: 160MHz with extended NSS BW in CSA (git-fixes).
   - mac80211: fix fast-rx encryption check (git-fixes).
   - mac80211: fix potential overflow when multiplying to u32 integers
     (git-fixes).
   - mac80211: pause TX while changing interface type (git-fixes).
   - macros.kernel-source: Use spec_install_pre for certificate installation
     (boo#1182672). Since rpm 4.16 files installed during build phase are
     lost.
   - MAINTAINERS: remove John Allen from ibmvnic (jsc#SLE-17043 bsc#1179243
     ltc#189290).
   - matroxfb: avoid -Warray-bounds warning (bsc#1152472)
   - media: aspeed: fix error return code in aspeed_video_setup_video()
     (git-fixes).
   - media: camss: missing error code in msm_video_register() (git-fixes).
   - media: cx25821: Fix a bug when reallocating some dma memory (git-fixes).
   - media: em28xx: Fix use-after-free in em28xx_alloc_urbs (git-fixes).
   - media: i2c: ov5670: Fix PIXEL_RATE minimum value (git-fixes).
   - media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt()
     (git-fixes).
   - media: lmedm04: Fix misuse of comma (git-fixes).
   - media: media/pci: Fix memleak in empress_init (git-fixes).
   - media: mt9v111: Remove unneeded device-managed puts (git-fixes).
   - media: pwc: Use correct device for DMA (bsc#1181133).
   - media: pxa_camera: declare variable when DEBUG is defined (git-fixes).
   - media: qm1d1c0042: fix error return code in qm1d1c0042_init()
     (git-fixes).
   - media: software_node: Fix refcounts in software_node_get_next_child()
     (git-fixes).
   - media: tm6000: Fix memleak in tm6000_start_stream (git-fixes).
   - media: vsp1: Fix an error handling path in the probe function
     (git-fixes).
   - mei: hbm: call mei_set_devstate() on hbm stop response (git-fixes).
   - memory: ti-aemif: Drop child node when jumping out loop (git-fixes).
   - mfd: bd9571mwv: Use devm_mfd_add_devices() (git-fixes).
   - mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
     (git-fixes).
   - misc: eeprom_93xx46: Add module alias to avoid breaking support for non
     device tree users (git-fixes).
   - misc: eeprom_93xx46: Fix module alias to enable module autoprobe
     (git-fixes).
   - mlxsw: core: Add validation of transceiver temperature thresholds
     (git-fixes).
   - mlxsw: core: Fix memory leak on module removal (git-fixes).
   - mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
   - mlxsw: core: Free EMAD transactions using kfree_rcu() (git-fixes).
   - mlxsw: core: Increase critical threshold for ASIC thermal zone
     (git-fixes).
   - mlxsw: core: Increase scope of RCU read-side critical section
     (git-fixes).
   - mlxsw: core: Use variable timeout for EMAD retries (git-fixes).
   - mlxsw: spectrum_acl: Fix mlxsw_sp_acl_tcam_group_add()'s error path
     (git-fixes).
   - mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case
     reload fails (git-fixes).
   - mmc: core: Limit retries when analyse of SDIO tuples fails (git-fixes).
   - mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to
     128-bytes (git-fixes).
   - mmc: sdhci-sprd: Fix some resource leaks in the remove function
     (git-fixes).
   - mmc: usdhi6rol0: Fix a resource leak in the error handling path of the
     probe (git-fixes).
   - mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage
     support is disabled (bsc#1181896 ltc#191273).
   - mm: proc: Invalidate TLB after clearing soft-dirty page state
     (bsc#1163776 ltc#183929 git-fixes).
   - mm: thp: kABI: move the added flag to the end of enum (bsc#1181896
     ltc#191273).
   - mt76: dma: fix a possible memory leak in mt76_add_fragment() (git-fixes).
   - net: ag71xx: add missed clk_disable_unprepare in error path of probe
     (git-fixes).
   - net: axienet: Fix error return code in axienet_probe() (git-fixes).
   - net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
   - net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
   - net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
   - net: bcmgenet: set Rx mode before starting netif (git-fixes).
   - net: bcmgenet: use hardware padding of runt frames (git-fixes).
   - net: broadcom CNIC: requires MMU (git-fixes).
   - net: caif: Fix debugfs on 64-bit platforms (git-fixes).
   - net/cxgb4: Check the return from t4_query_params properly (git-fixes).
   - net: cxgb4: fix return error value in t4_prep_fw (git-fixes).
   - net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
   - net: dsa: lantiq_gswip: fix and improve the unsupported interface error
     (git-fixes).
   - net: dsa: mt7530: Change the LINK bit to reflect the link status
     (git-fixes).
   - net: dsa: mt7530: set CPU port to fallback mode (git-fixes).
   - net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
   - net: ethernet: ave: Fix error returns in ave_init (git-fixes).
   - net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used
     it anymore in mlx4_en_xmit() (git-fixes).
   - net: ethernet: ti: ale: fix allmulti for nu type ale (git-fixes).
   - net: ethernet: ti: ale: fix seeing unreg mcast packets with promisc and
     allmulti disabled (git-fixes).
   - net: ethernet: ti: ale: modify vlan/mdb api for switchdev (git-fixes).
   - net: ethernet: ti: cpsw: allow untagged traffic on host port (git-fixes).
   - net: ethernet: ti: fix some return value check of cpsw_ale_create()
     (git-fixes).
   - net: gemini: Fix missing clk_disable_unprepare() in error path of
     gemini_ethernet_port_probe() (git-fixes).
   - net: gro: do not keep too many GRO packets in napi->rx_list
     (bsc#1154353).
   - net: hns3: add a check for queue_id in hclge_reset_vf_queue()
     (git-fixes).
   - net: hns3: add a missing uninit debugfs when unload driver (git-fixes).
   - net: hns3: add reset check for VF updating port based VLAN (git-fixes).
   - net: hns3: clear port base VLAN when unload PF (git-fixes).
   - net: hns3: fix aRFS FD rules leftover after add a user FD rule
     (git-fixes).
   - net: hns3: fix a TX timeout issue (git-fixes).
   - net: hns3: fix desc filling bug when skb is expanded or lineared
     (git-fixes).
   - net: hns3: fix for mishandle of asserting VF reset fail (git-fixes).
   - net: hns3: fix for VLAN config when reset failed (git-fixes).
   - net: hns3: fix RSS config lost after VF reset (git-fixes).
   - net: hns3: fix set and get link ksettings issue (git-fixes).
   - net: hns3: fix "tc qdisc del" failed issue (git-fixes).
   - net: hns3: fix the number of queues actually used by ARQ (git-fixes).
   - net: hns3: fix use-after-free when doing self test (git-fixes).
   - net: hns3: fix VF VLAN table entries inconsistent issue (git-fixes).
   - net: hns: fix return value check in __lb_other_process() (git-fixes).
   - net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
   - net: macb: fix call to pm_runtime in the suspend/resume functions
     (git-fixes).
   - net: macb: fix wakeup test in runtime suspend/resume routines
     (git-fixes).
   - net: macb: mark device wake capable when "magic-packet" property present
     (git-fixes).
   - net/mlx4_core: fix a memory leak bug (git-fixes).
   - net/mlx4_core: Fix init_hca fields offset (git-fixes).
   - net/mlx4_en: Avoid scheduling restart task if it is already running
     (bsc#1181854).
   - net/mlx4_en: Handle TX error CQE (bsc#1181854).
   - net/mlx5: Add handling of port type in rule deletion (git-fixes).
   - net/mlx5: Annotate mutex destroy for root ns (git-fixes).
   - net/mlx5: Clear LAG notifier pointer after unregister (git-fixes).
   - net/mlx5: Disable QoS when min_rates on all VFs are zero (git-fixes).
   - net/mlx5: Do not call timecounter cyc2time directly from 1PPS flow
     (git-fixes).
   - net/mlx5: Do not maintain a case of del_sw_func being null (git-fixes).
   - net/mlx5e: Correctly handle changing the number of queues when the
     interface is down (git-fixes).
   - net/mlx5e: Do not trigger IRQ multiple times on XSK wakeup to avoid WQ
     overruns (git-fixes).
   - net/mlx5e: en_accel, Add missing net/geneve.h include (git-fixes).
   - net/mlx5e: Encapsulate updating netdev queues into a function
     (git-fixes).
   - net/mlx5e: E-switch, Fix rate calculation for overflow (jsc#SLE-8464).
   - net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq
     (git-fixes).
   - net/mlx5e: Fix configuration of XPS cpumasks and netdev queues in corner
     cases (git-fixes).
   - net/mlx5e: Fix endianness handling in pedit mask (git-fixes).
   - net/mlx5e: Fix error path of device attach (git-fixes).
   - net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
   - net/mlx5e: Fix two double free cases (git-fixes).
   - net/mlx5e: Fix VLAN cleanup flow (git-fixes).
   - net/mlx5e: Fix VLAN create flow (git-fixes).
   - net/mlx5e: Get the latest values from counters in switchdev mode
     (git-fixes).
   - net/mlx5e: IPoIB, Drop multicast packets that this interface sent
     (git-fixes).
   - net/mlx5e: kTLS, Fix wrong value in record tracker enum (git-fixes).
   - net/mlx5e: Reduce tc unsupported key print level (git-fixes).
   - net/mlx5e: Rename hw_modify to preactivate (git-fixes).
   - net/mlx5e: Set of completion request bit should not clear other adjacent
     bits (git-fixes).
   - net/mlx5: E-switch, Destroy TSAR after reload interface (git-fixes).
   - net/mlx5: E-Switch, Hold mutex when querying drop counter in legacy mode
     (git-fixes).
   - net/mlx5: E-Switch, Use vport metadata matching by default (git-fixes).
   - net/mlx5: E-Switch, Use vport metadata matching only when mandatory
     (git-fixes).
   - net/mlx5e: Use preactivate hook to set the indirection table (git-fixes).
   - net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
   - net/mlx5: Fix a bug of using ptp channel index as pin index (git-fixes).
   - net/mlx5: Fix deletion of duplicate rules (git-fixes).
   - net/mlx5: Fix failing fw tracer allocation on s390 (git-fixes).
   - net/mlx5: Fix memory leak on flow table creation error flow (git-fixes).
   - net/mlx5: Fix request_irqs error flow (git-fixes).
   - net/mlx5: Fix wrong address reclaim when command interface is down
     (git-fixes).
   - net/mlx5: Query PPS pin operational status before registering it
     (git-fixes).
   - net/mlx5: Verify Hardware supports requested ptp function on a given pin
     (git-fixes).
   - net: moxa: Fix a potential double 'free_irq()' (git-fixes).
   - net: mscc: ocelot: ANA_AUTOAGE_AGE_PERIOD holds a value in seconds, not
     ms (git-fixes).
   - net: mscc: ocelot: fix address ageing time (again) (git-fixes).
   - net: mscc: ocelot: properly account for VLAN header length when setting
     MRU (git-fixes).
   - net: mvpp2: Add TCAM entry to drop flow control pause frames (git-fixes).
   - net: mvpp2: disable force link UP during port init procedure (git-fixes).
   - net: mvpp2: Fix error return code in mvpp2_open() (git-fixes).
   - net: mvpp2: Fix GoP port 3 Networking Complex Control configurations
     (git-fixes).
   - net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
   - net: mvpp2: fix pkt coalescing int-threshold configuration (git-fixes).
   - net: mvpp2: prs: fix PPPoE with ipv6 packet parse (git-fixes).
   - net: mvpp2: Remove Pause and Asym_Pause support (git-fixes).
   - net: mvpp2: TCAM entry enable should be written after SRAM data
     (git-fixes).
   - net: netsec: Correct dma sync for XDP_TX frames (git-fixes).
   - net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
   - net: octeon: mgmt: Repair filling of RX ring (git-fixes).
   - net: phy: at803x: use operating parameters from PHY-specific status
     (git-fixes).
   - net: phy: extract link partner advertisement reading (git-fixes).
   - net: phy: extract pause mode (git-fixes).
   - net: phy: marvell10g: fix null pointer dereference (git-fixes).
   - net: phy: marvell10g: fix temperature sensor on 2110 (git-fixes).
   - net: phy: read MII_CTRL1000 in genphy_read_status only if needed
     (git-fixes).
   - net: qca_spi: fix receive buffer size check (git-fixes).
   - net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
   - net: qede: fix PTP initialization on recovery (git-fixes).
   - net: qede: fix use-after-free on recovery and AER handling (git-fixes).
   - net: qede: stop adding events on an already destroyed workqueue
     (git-fixes).
   - net: qed: fix async event callbacks unregistering (git-fixes).
   - net: qed: fix excessive QM ILT lines consumption (git-fixes).
   - net: qed: fix "maybe uninitialized" warning (git-fixes).
   - net: qed: fix NVMe login fails over VFs (git-fixes).
   - net: qed: RDMA personality shouldn't fail VF load (git-fixes).
   - net: re-solve some conflicts after net -> net-next merge (bsc#1176855
     ltc#187293).
   - net: rmnet: do not allow to add multiple bridge interfaces (git-fixes).
   - net: rmnet: do not allow to change mux id if mux id is duplicated
     (git-fixes).
   - net: rmnet: fix bridge mode bugs (git-fixes).
   - net: rmnet: fix lower interface leak (git-fixes).
   - net: rmnet: fix NULL pointer dereference in rmnet_changelink()
     (git-fixes).
   - net: rmnet: fix NULL pointer dereference in rmnet_newlink() (git-fixes).
   - net: rmnet: fix packet forwarding in rmnet bridge mode (git-fixes).
   - net: rmnet: fix suspicious RCU usage (git-fixes).
   - net: rmnet: print error message when command fails (git-fixes).
   - net: rmnet: remove rcu_read_lock in rmnet_force_unassociate_device()
     (git-fixes).
   - net: rmnet: use upper/lower device infrastructure (git-fixes).
   - net, sctp, filter: remap copy_from_user failure error (bsc#1181637).
   - net: smc91x: Fix possible memory leak in smc_drv_probe() (git-fixes).
   - net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
   - net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
   - net: stmmac: Always arm TX Timer at end of transmission start
     (git-fixes).
   - net: stmmac: Do not accept invalid MTU values (git-fixes).
   - net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
   - net: stmmac: Enable 16KB buffer size (git-fixes).
   - net: stmmac: fix disabling flexible PPS output (git-fixes).
   - net: stmmac: fix length of PTP clock's name string (git-fixes).
   - net: stmmac: Fix the TX IOC in xmit path (git-fixes).
   - net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
   - net: stmmac: selftests: Flow Control test can also run with ASYM Pause
     (git-fixes).
   - net: stmmac: selftests: Needs to check the number of Multicast regs
     (git-fixes).
   - net: stmmac: xgmac: Clear previous RX buffer size (git-fixes).
   - net: sun: fix missing release regions in cas_init_one() (git-fixes).
   - net: team: fix memory leak in __team_options_register (git-fixes).
   - net: thunderx: initialize VF's mailbox mutex before first usage
     (git-fixes).
   - net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem
     family (git-fixes).
   - net: usb: qmi_wwan: Adding support for Cinterion MV31 (git-fixes).
   - nvme-hwmon: rework to avoid devm allocation (bsc#1177326).
   - nvme-multipath: Early exit if no path is available (bsc#1180964).
   - nvme: re-read ANA log on NS CHANGED AEN (bsc#1179137).
   - nvmet-tcp: Fix NULL dereference when a connect data comes in h2cdata pdu
     (bsc#1182547).
   - objtool: Do not fail on missing symbol table (bsc#1169514).
   - perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu()
     (bsc#1180989).
   - perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info()
     (bsc#1180989).
   - perf/x86/intel/uncore: Factor out uncore_pci_pmu_register()
     (bsc#1180989).
   - perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister()
     (bsc#1180989).
   - perf/x86/intel/uncore: Generic support for the PCI sub driver
     (bsc#1180989).
   - perf/x86/intel/uncore: Store the logical die id instead of the physical
     die id (bsc#1180989).
   - perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info
     (bsc#1180989).
   - phy: cpcap-usb: Fix warning for missing regulator_disable (git-fixes).
   - phy: rockchip-emmc: emmc_phy_init() always return 0 (git-fixes).
   - platform/x86: hp-wmi: Disable tablet-mode reporting by default
     (git-fixes).
   - platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron 7352
     (git-fixes).
   - platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix touchscreen
     on Estar Beauty HD tablet (git-fixes).
   - powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning
     (bsc#1182571 ltc#191345).
   - powerpc/boot: Delete unneeded .globl _zimage_start (bsc#1156395).
   - powerpc: Fix alignment bug within the init sections (bsc#1065729).
   - powerpc/fpu: Drop cvt_fd() and cvt_df() (bsc#1156395).
   - powerpc/hvcall: add token and codes for H_VASI_SIGNAL (bsc#1181674
     ltc#189159).
   - powerpc: kABI: add back suspend_disable_cpu in machdep_calls
     (bsc#1181674 ltc#189159).
   - powerpc/machdep: remove suspend_disable_cpu() (bsc#1181674 ltc#189159).
   - powerpc/mm/pkeys: Make pkey access check work on execute_only_key
     (bsc#1181544 ltc#191080 git-fixes).
   - powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477 ltc#175530).
   - powerpc/numa: make vphn_enabled, prrn_enabled flags const (bsc#1181674
     ltc#189159).
   - powerpc/numa: remove ability to enable topology updates (bsc#1181674
     ltc#189159).
   - powerpc/numa: remove arch_update_cpu_topology (bsc#1181674 ltc#189159).
   - powerpc/numa: Remove late request for home node associativity
     (bsc#1181674 ltc#189159).
   - powerpc/numa: remove prrn_is_enabled() (bsc#1181674 ltc#189159).
   - powerpc/numa: remove start/stop_topology_update() (bsc#1181674
     ltc#189159).
   - powerpc/numa: remove timed_topology_update() (bsc#1181674 ltc#189159).
   - powerpc/numa: remove unreachable topology timer code (bsc#1181674
     ltc#189159).
   - powerpc/numa: remove unreachable topology update code (bsc#1181674
     ltc#189159).
   - powerpc/numa: remove unreachable topology workqueue code (bsc#1181674
     ltc#189159).
   - powerpc/numa: remove vphn_enabled and prrn_enabled internal flags
     (bsc#1181674 ltc#189159).
   - powerpc/numa: stub out numa_update_cpu_topology() (bsc#1181674
     ltc#189159).
   - powerpc/perf: Exclude kernel samples while counting events in user space
     (bsc#1065729).
   - powerpc/perf/hv-24x7: Dont create sysfs event files for dummy events
     (bsc#1182118 ltc#190624).
   - powerpc/pkeys: Avoid using lockless page table walk (bsc#1181544
     ltc#191080).
   - powerpc/pkeys: Check vma before returning key fault error to the user
     (bsc#1181544 ltc#191080).
   - powerpc/powernv/memtrace: Do not leak kernel memory to user space
     (bsc#1156395).
   - powerpc/powernv/memtrace: Fix crashing the kernel when enabling
     concurrently (bsc#1156395).
   - powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU
     (bsc#1156395).
   - powerpc/prom: Fix "ibm,arch-vec-5-platform-support" scan (bsc#1182602
     ltc#190924).
   - powerpc/pseries/dlpar: handle ibm, configure-connector delay status
     (bsc#1181985 ltc#188074).
   - powerpc/pseries: Do not enforce MSI affinity with kdump (bsc#1181655
     ltc#190855).
   - powerpc/pseries/eeh: Make pseries_pcibios_bus_add_device() static
     (bsc#1078720, git-fixes).
   - powerpc/pseries: extract host bridge from pci_bus prior to bus removal
     (bsc#1182171 ltc#190900).
   - powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend
     ops (bsc#1181674 ltc#189159).
   - powerpc/pseries/hibernation: pass stream id via function arguments
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/hibernation: perform post-suspend fixups later
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/hibernation: remove prepare_late() callback (bsc#1181674
     ltc#189159).
   - powerpc/pseries/hibernation: remove pseries_suspend_cpu() (bsc#1181674
     ltc#189159).
   - powerpc/pseries/hibernation: switch to rtas_ibm_suspend_me()
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/mobility: add missing break to default case (bsc#1181674
     ltc#189159).
   - powerpc/pseries/mobility: Add pr_debug() for device tree changes
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/mobility: do not error on absence of ibm, update-nodes
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/mobility: error message improvements (bsc#1181674
     ltc#189159).
   - powerpc/pseries/mobility: extract VASI session polling logic
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/mobility: refactor node lookup during DT update
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/mobility: retry partition suspend after error
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/mobility: Set pr_fmt() (bsc#1181674 ltc#189159).
   - powerpc/pseries/mobility: signal suspend cancellation to platform
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/mobility: use rtas_activate_firmware() on resume
     (bsc#1181674 ltc#189159).
   - powerpc/pseries/mobility: use stop_machine for join/suspend (bsc#1181674
     ltc#189159).
   - powerpc/pseries/ras: Make init_ras_hotplug_IRQ() static (bsc#1065729.
     git-fixes).
   - powerpc/pseries: remove dlpar_cpu_readd() (bsc#1181674 ltc#189159).
   - powerpc/pseries: remove memory "re-add" implementation (bsc#1181674
     ltc#189159).
   - powerpc/pseries: remove obsolete memory hotplug DT notifier code
     (bsc#1181674 ltc#189159).
   - powerpc/pseries: remove prrn special case from DT update path
     (bsc#1181674 ltc#189159).
   - powerpc/rtas: add rtas_activate_firmware() (bsc#1181674 ltc#189159).
   - powerpc/rtas: add rtas_ibm_suspend_me() (bsc#1181674 ltc#189159).
   - powerpc/rtas: complete ibm,suspend-me status codes (bsc#1181674
     ltc#189159).
   - powerpc/rtas: dispatch partition migration requests to pseries
     (bsc#1181674 ltc#189159).
   - powerpc/rtasd: simplify handle_rtas_event(), emit message on events
     (bsc#1181674 ltc#189159).
   - powerpc/rtas: prevent suspend-related sys_rtas use on LE (bsc#1181674
     ltc#189159).
   - powerpc/rtas: remove rtas_ibm_suspend_me_unsafe() (bsc#1181674
     ltc#189159).
   - powerpc/rtas: remove rtas_suspend_cpu() (bsc#1181674 ltc#189159).
   - powerpc/rtas: remove unused rtas_suspend_last_cpu() (bsc#1181674
     ltc#189159).
   - powerpc/rtas: remove unused rtas_suspend_me_data (bsc#1181674
     ltc#189159).
   - powerpc/rtas: rtas_ibm_suspend_me -> rtas_ibm_suspend_me_unsafe
     (bsc#1181674 ltc#189159).
   - power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (git-fixes).
   - pseries/drmem: do not cache node id in drmem_lmb struct (bsc#1132477
     ltc#175530).
   - pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477
     ltc#175530).
   - qed: fix error return code in qed_iwarp_ll2_start() (git-fixes).
   - qed: Fix race condition between scheduling and destroying the slowpath
     workqueue (git-fixes).
   - qed: Populate nvm-file attributes while reading nvm config partition
     (git-fixes).
   - qed: select CONFIG_CRC32 (git-fixes).
   - qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
   - quota: Fix memory leak when handling corrupted quota file (bsc#1182650).
   - quota: Sanity-check quota file headers on load (bsc#1182461).
   - r8169: fix resuming from suspend on RTL8105e if machine runs on battery
     (git-fixes).
   - r8169: fix WoL on shutdown if CONFIG_DEBUG_SHIRQ is set (git-fixes).
   - rcu/nocb: Perform deferred wake up before last idle's (git-fixes)
   - rcu/nocb: Trigger self-IPI on late deferred wake up before (git-fixes)
   - rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers (git-fixes)
   - RDMA/efa: Add EFA 0xefa1 PCI ID (bsc#1176248).
   - RDMA/efa: Count admin commands errors (bsc#1176248).
   - RDMA/efa: Count mmap failures (bsc#1176248).
   - RDMA/efa: Do not delay freeing of DMA pages (bsc#1176248).
   - RDMA/efa: Drop double zeroing for sg_init_table() (bsc#1176248).
   - RDMA/efa: Expose maximum TX doorbell batch (bsc#1176248).
   - RDMA/efa: Expose minimum SQ size (bsc#1176248).
   - RDMA/efa: Fix setting of wrong bit in get/set_feature commands
     (bsc#1176248).
   - RDMA/efa: Properly document the interrupt mask register (bsc#1176248).
   - RDMA/efa: Remove redundant udata check from alloc ucontext response
     (bsc#1176248).
   - RDMA/efa: Report create CQ error counter (bsc#1176248).
   - RDMA/efa: Report host information to the device (bsc#1176248).
   - RDMA/efa: Unified getters/setters for device structs bitmask access
     (bsc#1176248).
   - RDMA/efa: Use in-kernel offsetofend() to check field availability
     (bsc#1176248).
   - RDMA/efa: User/kernel compatibility handshake mechanism (bsc#1176248).
   - RDMA/efa: Use the correct current and new states in modify QP
     (git-fixes).
   - regulator: axp20x: Fix reference cout leak (git-fixes).
   - regulator: core: Avoid debugfs: Directory ... already present! error
     (git-fixes).
   - regulator: core: avoid regulator_resolve_supply() race condition
     (git-fixes).
   - regulator: Fix lockdep warning resolving supplies (git-fixes).
   - regulator: s5m8767: Drop regulators OF node reference (git-fixes).
   - regulator: s5m8767: Fix reference count leak (git-fixes).
   - reiserfs: add check for an invalid ih_entry_count (bsc#1182462).
   - reset: hisilicon: correct vendor prefix (git-fixes).
   - Revert "ibmvnic: remove never executed if statement" (jsc#SLE-17043
     bsc#1179243 ltc#189290).
   - Revert "net: bcmgenet: remove unused function in bcmgenet.c" (git-fixes).
   - Revert "platform/x86: ideapad-laptop: Switch touchpad attribute to be
     RO" (git-fixes).
   - Revert "RDMA/mlx5: Fix devlink deadlock on net namespace deletion"
     (jsc#SLE-8464).
   - rpm/kernel-subpackage-build: Workaround broken bot
     (https://github.com/openSUSE/openSUSE-release-tools/issues/2439)
   - rpm/post.sh: Avoid purge-kernel for the first installed kernel
     (bsc#1180058)
   - rtc: s5m: select REGMAP_I2C (git-fixes).
   - rxrpc: Fix memory leak in rxrpc_lookup_local (bsc#1154353 bnc#1151927
     5.3.9).
   - s390/vfio-ap: clean up vfio_ap resources when KVM pointer invalidated
     (git-fixes).
   - s390/vfio-ap: No need to disable IRQ after queue reset (git-fixes).
   - sched: Reenable interrupts in do_sched_yield() (git-fixes)
   - scsi: lpfc: Fix EEH encountering oops with NVMe traffic (bsc#1181958).
   - sh_eth: check sh_eth_cpu_data::cexcr when dumping registers (git-fixes).
   - sh_eth: check sh_eth_cpu_data::no_tx_cntrs when dumping registers
     (git-fixes).
   - sh_eth: check sh_eth_cpu_data::no_xdfar when dumping registers
     (git-fixes).
   - smp: Add source and destination CPUs to __call_single_data (bsc#1180846).
   - smsc95xx: avoid memory leak in smsc95xx_bind (git-fixes).
   - smsc95xx: check return value of smsc95xx_reset (git-fixes).
   - soc: aspeed: snoop: Add clock control logic (git-fixes).
   - spi: atmel: Put allocated master before return (git-fixes).
   - spi: pxa2xx: Fix the controller numbering for Wildcat Point (git-fixes).
   - spi: spi-synquacer: fix set_cs handling (git-fixes).
   - spi: stm32: properly handle 0 byte transfer (git-fixes).
   - squashfs: add more sanity checks in id lookup (git-fixes bsc#1182266).
   - squashfs: add more sanity checks in inode lookup (git-fixes bsc#1182267).
   - squashfs: add more sanity checks in xattr id lookup (git-fixes
     bsc#1182268).
   - staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory
     rules (git-fixes).
   - target: disallow emulate_legacy_capacity with RBD object-map
     (bsc#1177109).
   - team: set dev->needed_headroom in team_setup_by_port() (git-fixes).
   - tpm: Remove tpm_dev_wq_lock (git-fixes).
   - tpm_tis: Clean up locality release (git-fixes).
   - tpm_tis: Fix check_locality for correct locality acquisition (git-fixes).
   - tracing: Check length before giving out the filter buffer (git-fixes).
   - tracing: Do not count ftrace events in top level enable output
     (git-fixes).
   - tracing/kprobe: Fix to support kretprobe events on unloaded modules
     (git-fixes).
   - tracing/kprobes: Do the notrace functions check without kprobes on
     ftrace (git-fixes).
   - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS
     (git-fixes).
   - ubifs: Fix error return code in ubifs_init_authentication()
     (bsc#1182459).
   - ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans() (bsc#1182454).
   - ubifs: prevent creating duplicate encrypted filenames (bsc#1182457).
   - ubifs: ubifs_add_orphan: Fix a memory leak bug (bsc#1182456).
   - ubifs: ubifs_jnl_write_inode: Fix a memory leak bug (bsc#1182455).
   - ubifs: wbuf: Do not leak kernel memory to flash (bsc#1182458).
   - Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86
     (bsc#1180846).
   - Update config files: Set ledtrig-default-on as builtin (bsc#1182128)
   - USB: dwc2: Abort transaction after errors with unknown reason
     (git-fixes).
   - USB: dwc2: Fix endpoint direction check in ep_from_windex (git-fixes).
   - USB: dwc2: Make "trimming xfer length" a debug message (git-fixes).
   - USB: dwc3: fix clock issue during resume in OTG mode (git-fixes).
   - USB: gadget: legacy: fix an error code in eth_bind() (git-fixes).
   - USB: gadget: u_audio: Free requests only after callback (git-fixes).
   - USB: mUSB: Fix runtime PM race in musb_queue_resume_work (git-fixes).
   - USB: quirks: add quirk to start video capture on ELMO L-12F document
     camera reliable (git-fixes).
   - USB: quirks: sort quirk entries (git-fixes).
   - USB: renesas_usbhs: Clear pipe running flag in USBhs_pkt_pop()
     (git-fixes).
   - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
     (git-fixes).
   - USB: serial: cp210x: add pid/vid for WSDA-200-USB (git-fixes).
   - USB: serial: mos7720: fix error code in mos7720_write() (git-fixes).
   - USB: serial: mos7720: improve OOM-handling in read_mos_reg() (git-fixes).
   - USB: serial: mos7840: fix error code in mos7840_write() (git-fixes).
   - USB: serial: option: Adding support for Cinterion MV31 (git-fixes).
   - USB: usblp: do not call usb_set_interface if there's a single alt
     (git-fixes).
   - veth: Adjust hard_start offset on redirect XDP frames (git-fixes).
   - vfs: Convert squashfs to use the new mount API (git-fixes bsc#1182265).
   - virtio_net: Fix error code in probe() (git-fixes).
   - virtio_net: Fix recursive call to cpus_read_lock() (git-fixes).
   - virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer
     (git-fixes).
   - virt: vbox: Do not use wait_event_interruptible when called from kernel
     context (git-fixes).
   - vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
   - vxlan: fix memleak of fdb (git-fixes).
   - wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
     (git-fixes).
   - writeback: Drop I_DIRTY_TIME_EXPIRE (bsc#1182460).
   - x86/alternatives: Sync bp_patching update for avoiding NULL pointer
     exception (bsc#1152489).
   - x86/apic: Add extra serialization for non-serializing MSRs (bsc#1152489).
   - x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available
     (bsc#1181259, jsc#ECO-3191).
   - x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181259,
     jsc#ECO-3191).
   - x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259, jsc#ECO-3191).
   - x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259 jsc#ECO-3191).
   - x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181259,
     jsc#ECO-3191).
   - xen/netback: avoid race in xenvif_rx_ring_slots_available()
     (bsc#1065600).
   - xen/netback: fix spurious event detection for common event case
     (bsc#1182175).
   - xfs: ensure inobt record walks always make forward progress (git-fixes
     bsc#1182272).
   - xfs: fix an ABBA deadlock in xfs_rename (git-fixes bsc#1182558).
   - xfs: fix parent pointer scrubber bailing out on unallocated inodes
     (git-fixes bsc#1182276).
   - xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks
     (git-fixes bsc#1182430).
   - xfs: fix the minrecs logic when dealing with inode root child blocks
     (git-fixes bsc#1182273).
   - xfs: ratelimit xfs_discard_page messages (bsc#1182283).
   - xfs: reduce quota reservation when doing a dax unwritten extent
     conversion (git-fixes bsc#1182561).
   - xfs: return corresponding errcode if xfs_initialize_perag() fail
     (git-fixes bsc#1182275).
   - xfs: scrub should mark a directory corrupt if any entries cannot be
     iget'd (git-fixes bsc#1182278).
   - xfs: strengthen rmap record flags checking (git-fixes bsc#1182271).
   - xhci: fix bounce buffer usage for non-sg list case (git-fixes).

   The kernel-default-base packaging was changed:

   - Added squashfs for kiwi installiso support (bsc#1182341)
   - Added fuse (bsc#1182507)
   - Added modules which got lost when migrating away from supported.conf
     (bsc#1182110):
     * am53c974 had a typo
     * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
   - Also added vport-* modules for Open vSwitch


Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE MicroOS 5.0:

      zypper in -t patch SUSE-SUSE-MicroOS-5.0-2021-741=1

   - SUSE Linux Enterprise Workstation Extension 15-SP2:

      zypper in -t patch SUSE-SLE-Product-WE-15-SP2-2021-741=1

   - SUSE Linux Enterprise Module for Live Patching 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2021-741=1

   - SUSE Linux Enterprise Module for Legacy Software 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Legacy-15-SP2-2021-741=1

   - SUSE Linux Enterprise Module for Development Tools 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP2-2021-741=1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2021-741=1

   - SUSE Linux Enterprise High Availability 15-SP2:

      zypper in -t patch SUSE-SLE-Product-HA-15-SP2-2021-741=1



Package List:

   - SUSE MicroOS 5.0 (aarch64 x86_64):

      kernel-default-5.3.18-24.52.1
      kernel-default-base-5.3.18-24.52.1.9.24.1
      kernel-default-debuginfo-5.3.18-24.52.1
      kernel-default-debugsource-5.3.18-24.52.1

   - SUSE Linux Enterprise Workstation Extension 15-SP2 (x86_64):

      kernel-default-debuginfo-5.3.18-24.52.1
      kernel-default-debugsource-5.3.18-24.52.1
      kernel-default-extra-5.3.18-24.52.1
      kernel-default-extra-debuginfo-5.3.18-24.52.1
      kernel-preempt-extra-5.3.18-24.52.1
      kernel-preempt-extra-debuginfo-5.3.18-24.52.1

   - SUSE Linux Enterprise Module for Live Patching 15-SP2 (ppc64le s390x x86_64):

      kernel-default-debuginfo-5.3.18-24.52.1
      kernel-default-debugsource-5.3.18-24.52.1
      kernel-default-livepatch-5.3.18-24.52.1
      kernel-default-livepatch-devel-5.3.18-24.52.1
      kernel-livepatch-5_3_18-24_52-default-1-5.3.1
      kernel-livepatch-5_3_18-24_52-default-debuginfo-1-5.3.1
      kernel-livepatch-SLE15-SP2_Update_11-debugsource-1-5.3.1

   - SUSE Linux Enterprise Module for Legacy Software 15-SP2 (aarch64 ppc64le s390x x86_64):

      kernel-default-debuginfo-5.3.18-24.52.1
      kernel-default-debugsource-5.3.18-24.52.1
      reiserfs-kmp-default-5.3.18-24.52.1
      reiserfs-kmp-default-debuginfo-5.3.18-24.52.1

   - SUSE Linux Enterprise Module for Development Tools 15-SP2 (aarch64 ppc64le s390x x86_64):

      kernel-obs-build-5.3.18-24.52.1
      kernel-obs-build-debugsource-5.3.18-24.52.1
      kernel-syms-5.3.18-24.52.1

   - SUSE Linux Enterprise Module for Development Tools 15-SP2 (aarch64 x86_64):

      kernel-preempt-debuginfo-5.3.18-24.52.1
      kernel-preempt-debugsource-5.3.18-24.52.1
      kernel-preempt-devel-5.3.18-24.52.1
      kernel-preempt-devel-debuginfo-5.3.18-24.52.1

   - SUSE Linux Enterprise Module for Development Tools 15-SP2 (noarch):

      kernel-docs-5.3.18-24.52.1
      kernel-source-5.3.18-24.52.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64):

      kernel-default-5.3.18-24.52.1
      kernel-default-base-5.3.18-24.52.1.9.24.1
      kernel-default-debuginfo-5.3.18-24.52.1
      kernel-default-debugsource-5.3.18-24.52.1
      kernel-default-devel-5.3.18-24.52.1
      kernel-default-devel-debuginfo-5.3.18-24.52.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 x86_64):

      kernel-preempt-5.3.18-24.52.1
      kernel-preempt-debuginfo-5.3.18-24.52.1
      kernel-preempt-debugsource-5.3.18-24.52.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2 (noarch):

      kernel-devel-5.3.18-24.52.1
      kernel-macros-5.3.18-24.52.1

   - SUSE Linux Enterprise High Availability 15-SP2 (aarch64 ppc64le s390x x86_64):

      cluster-md-kmp-default-5.3.18-24.52.1
      cluster-md-kmp-default-debuginfo-5.3.18-24.52.1
      dlm-kmp-default-5.3.18-24.52.1
      dlm-kmp-default-debuginfo-5.3.18-24.52.1
      gfs2-kmp-default-5.3.18-24.52.1
      gfs2-kmp-default-debuginfo-5.3.18-24.52.1
      kernel-default-debuginfo-5.3.18-24.52.1
      kernel-default-debugsource-5.3.18-24.52.1
      ocfs2-kmp-default-5.3.18-24.52.1
      ocfs2-kmp-default-debuginfo-5.3.18-24.52.1


References:

   https://www.suse.com/security/cve/CVE-2020-12362.html
   https://www.suse.com/security/cve/CVE-2020-12363.html
   https://www.suse.com/security/cve/CVE-2020-12364.html
   https://www.suse.com/security/cve/CVE-2020-12373.html
   https://www.suse.com/security/cve/CVE-2020-29368.html
   https://www.suse.com/security/cve/CVE-2020-29374.html
   https://www.suse.com/security/cve/CVE-2021-26930.html
   https://www.suse.com/security/cve/CVE-2021-26931.html
   https://www.suse.com/security/cve/CVE-2021-26932.html
   https://bugzilla.suse.com/1065600
   https://bugzilla.suse.com/1065729
   https://bugzilla.suse.com/1078720
   https://bugzilla.suse.com/1081134
   https://bugzilla.suse.com/1084610
   https://bugzilla.suse.com/1132477
   https://bugzilla.suse.com/1151927
   https://bugzilla.suse.com/1152472
   https://bugzilla.suse.com/1152489
   https://bugzilla.suse.com/1154353
   https://bugzilla.suse.com/1155518
   https://bugzilla.suse.com/1156395
   https://bugzilla.suse.com/1163776
   https://bugzilla.suse.com/1169514
   https://bugzilla.suse.com/1170442
   https://bugzilla.suse.com/1176248
   https://bugzilla.suse.com/1176855
   https://bugzilla.suse.com/1177109
   https://bugzilla.suse.com/1177326
   https://bugzilla.suse.com/1177440
   https://bugzilla.suse.com/1177529
   https://bugzilla.suse.com/1178142
   https://bugzilla.suse.com/1178995
   https://bugzilla.suse.com/1179082
   https://bugzilla.suse.com/1179137
   https://bugzilla.suse.com/1179243
   https://bugzilla.suse.com/1179428
   https://bugzilla.suse.com/1179660
   https://bugzilla.suse.com/1179929
   https://bugzilla.suse.com/1180058
   https://bugzilla.suse.com/1180846
   https://bugzilla.suse.com/1180964
   https://bugzilla.suse.com/1180989
   https://bugzilla.suse.com/1181133
   https://bugzilla.suse.com/1181259
   https://bugzilla.suse.com/1181544
   https://bugzilla.suse.com/1181574
   https://bugzilla.suse.com/1181637
   https://bugzilla.suse.com/1181655
   https://bugzilla.suse.com/1181671
   https://bugzilla.suse.com/1181674
   https://bugzilla.suse.com/1181710
   https://bugzilla.suse.com/1181720
   https://bugzilla.suse.com/1181735
   https://bugzilla.suse.com/1181736
   https://bugzilla.suse.com/1181738
   https://bugzilla.suse.com/1181747
   https://bugzilla.suse.com/1181753
   https://bugzilla.suse.com/1181818
   https://bugzilla.suse.com/1181843
   https://bugzilla.suse.com/1181854
   https://bugzilla.suse.com/1181896
   https://bugzilla.suse.com/1181958
   https://bugzilla.suse.com/1181960
   https://bugzilla.suse.com/1181985
   https://bugzilla.suse.com/1182047
   https://bugzilla.suse.com/1182110
   https://bugzilla.suse.com/1182118
   https://bugzilla.suse.com/1182128
   https://bugzilla.suse.com/1182140
   https://bugzilla.suse.com/1182171
   https://bugzilla.suse.com/1182175
   https://bugzilla.suse.com/1182259
   https://bugzilla.suse.com/1182265
   https://bugzilla.suse.com/1182266
   https://bugzilla.suse.com/1182267
   https://bugzilla.suse.com/1182268
   https://bugzilla.suse.com/1182271
   https://bugzilla.suse.com/1182272
   https://bugzilla.suse.com/1182273
   https://bugzilla.suse.com/1182275
   https://bugzilla.suse.com/1182276
   https://bugzilla.suse.com/1182278
   https://bugzilla.suse.com/1182283
   https://bugzilla.suse.com/1182341
   https://bugzilla.suse.com/1182374
   https://bugzilla.suse.com/1182380
   https://bugzilla.suse.com/1182381
   https://bugzilla.suse.com/1182406
   https://bugzilla.suse.com/1182430
   https://bugzilla.suse.com/1182439
   https://bugzilla.suse.com/1182441
   https://bugzilla.suse.com/1182442
   https://bugzilla.suse.com/1182443
   https://bugzilla.suse.com/1182444
   https://bugzilla.suse.com/1182445
   https://bugzilla.suse.com/1182446
   https://bugzilla.suse.com/1182447
   https://bugzilla.suse.com/1182449
   https://bugzilla.suse.com/1182454
   https://bugzilla.suse.com/1182455
   https://bugzilla.suse.com/1182456
   https://bugzilla.suse.com/1182457
   https://bugzilla.suse.com/1182458
   https://bugzilla.suse.com/1182459
   https://bugzilla.suse.com/1182460
   https://bugzilla.suse.com/1182461
   https://bugzilla.suse.com/1182462
   https://bugzilla.suse.com/1182463
   https://bugzilla.suse.com/1182464
   https://bugzilla.suse.com/1182465
   https://bugzilla.suse.com/1182466
   https://bugzilla.suse.com/1182485
   https://bugzilla.suse.com/1182489
   https://bugzilla.suse.com/1182490
   https://bugzilla.suse.com/1182507
   https://bugzilla.suse.com/1182547
   https://bugzilla.suse.com/1182558
   https://bugzilla.suse.com/1182560
   https://bugzilla.suse.com/1182561
   https://bugzilla.suse.com/1182571
   https://bugzilla.suse.com/1182599
   https://bugzilla.suse.com/1182602
   https://bugzilla.suse.com/1182626
   https://bugzilla.suse.com/1182650
   https://bugzilla.suse.com/1182672
   https://bugzilla.suse.com/1182676
   https://bugzilla.suse.com/1182683
   https://bugzilla.suse.com/1182684
   https://bugzilla.suse.com/1182686
   https://bugzilla.suse.com/1182770
   https://bugzilla.suse.com/1182798
   https://bugzilla.suse.com/1182800
   https://bugzilla.suse.com/1182801
   https://bugzilla.suse.com/1182854
   https://bugzilla.suse.com/1182856



More information about the sle-security-updates mailing list