The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3573: Fixed an UAF vulnerability in function that can allow attackers to corrupt kernel heaps and adopt further exploitations. - CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. - CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory via a side-channel. - CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. - CVE-2021-0129: Fixed improper access control in BlueZ that may have allowed an authenticated user to potentially enable information disclosure via adjacent access . - CVE-2020-36385: Fixed a use-after-free via the ctx_list in some ucma_migrate_id situations where ucma_close is called . - CVE-2020-26558: Fixed Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 . - CVE-2020-36386: Fixed an out-of-bounds read issue in hci_extended_inquiry_result_evt . The following non-security bugs were fixed: - acpica: Clean up context mutex during object deletion . - alsa: hda/cirrus: Set Initial DMIC volume to -26 dB . - alsa: hda: Fix for mute key LED for HP Pavilion 15-CK0xx . - alsa: timer: Fix master timer notification . - alx: Fix an error handling path in "alx_probe" . - arch: Add arch-dependent support markers in supported.conf - arch: Add the support for kernel-FLAVOR-optional subpackage - ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet . - ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet . - ASoC: max98088: fix ni clock divider calculation . - ASoC: rt5659: Fix the lost powers for the HDA header . - ASoC: sti-sas: add missing MODULE_DEVICE_TABLE . - ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd . - batman-adv: Avoid WARN_ON timing related checks . - be2net: Fix an error handling path in "be_probe" . - blk-settings: align max_sectors on logical_block_size boundary . - block: Discard page cache of zone reset target range . - block: return the correct bvec when checking for gaps . - block: return the correct bvec when checking for gaps . - bluetooth: fix the erroneous flush_work order . - bluetooth: use correct lock to prevent UAF of hdev object . - bnxt_en: Call bnxt_ethtool_free in bnxt_init_one error path . - bnxt_en: Fix TQM fastpath ring backing store computation . - bnxt_en: Rediscover PHY capabilities after firmware reset . - bpfilter: Specify the log level for the kmsg message . - brcmfmac: properly check for bus register errors . - btrfs: open device without device_list_mutex . - bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act . - can: mcba_usb: fix memory leak in mcba_usb . - ceph: must hold snap_rwsem when filling inode for async create . - cfg80211: avoid double free of PMSR request . - cfg80211: make certificate generation more robust . - cgroup1: do not allow "\n" in renaming . - char: hpet: add checks after calling ioremap . - CPU: Startup failed when SNC is enabled with 3 NIC add-on cards installed . - cxgb4: avoid accessing registers when clearing filters . - cxgb4: avoid link re-train during TC-MQPRIO configuration . - cxgb4: fix wrong shift . - dax: Add a wakeup mode parameter to put_unlocked_entry . - dax: Add an enum for specifying dax wakup mode . - dax: fix ENOMEM handling in grab_mapping_entry . - dax: Wake up all waiters after invalidating dax entry . - dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM . - dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc . - dmaengine: qcom_hidma: comment platform_driver_register call . - dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM . - dmaengine: stedma40: add missing iounmap on error in d40_probe . - drm/amd/amdgpu: fix a potential deadlock in gpu reset . - drm/amd/amdgpu: fix refcount leak . - drm/amd/display: Allow bandwidth validation for 0 streams . - drm/amd/display: Disconnect non-DP with no EDID . - drm/amdgpu: Fix a use-after-free . - drm/amdgpu: make sure we unpin the UVD BO . - drm/tegra: sor: Do not leak runtime PM reference . - drm: Fix use-after-free read in drm_getunique . - drm: Lock pointer access in drm_master_release . - dt-bindings: reset: meson8b: fix duplicate reset IDs . - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared . - efi: cper: fix snprintf use in cper_dimm_err_location . - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed . - ext4: fix check to prevent false positive report of incorrect used inodes . - ext4: fix error code in ext4_commit_super . - ext4: fix memory leak in ext4_fill_super . - FCOE: fcoe_wwn_from_mac kABI fix . - fs/nfs: Use fatal_signal_pending instead of signal_pending . - fs: fix reporting supported extra file attributes for statx . - ftrace: Do not blindly read the ip address in ftrace_bug . - ftrace: Free the trampoline when ftrace_startup fails . - fuse: BUG_ON correction in fuse_dev_splice_write . - gpio: cadence: Add missing MODULE_DEVICE_TABLE . - gpu: Enable CONFIG_PCI_PF_STUB for Nvidia Ampere vGPU support - gve: Add NULL pointer checks when freeing irqs . - gve: Correct SKB queue index validation . - gve: Upgrade memory barrier in poll routine . - HID: Add BUS_VIRTUAL to hid_connect logging . - HID: gt683r: add missing MODULE_DEVICE_TABLE . - HID: hid-input: add mapping for emoji picker key . - HID: hid-sensor-hub: Return error for hid_set_field failure . - HID: i2c-hid: fix format string mismatch . - HID: i2c-hid: Skip ELAN power-on command after reset . - HID: magicmouse: fix NULL-deref on disconnect . - HID: multitouch: require Finger field to mark Win8 reports as MT . - HID: pidff: fix error return code in hid_pidff_init . - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65 . - HID: usbhid: fix info leak in hid_submit_ctrl . - HID: usbhid: Fix race between usbhid_close and usbhid_stop . - hwmon: Fix index values . - hwmon: shows the negative temperature properly . - i2c: mpc: Make use of i2c_recover_bus . - i2c: qcom-geni: Suspend and resume the bus during SYSTEM_SLEEP_PM ops . - ice: add ndo_bpf callback for safe mode netdev ops . - ice: Allow all LLDP packets from PF to Tx . - ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared . - isdn: mISDN: correctly handle ph_info allocation failure in hfcsusb_ph_info . - isdn: mISDN: netjet: Fix crash in nj_probe: . - isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io . - ixgbe: fix large MTU request from VF . - kABI workaround for struct lis3lv02d change . - kernel-binary.spec.in: Add Supplements: for -extra package on Leap kernel-$flavor-extra should supplement kernel-$flavor on Leap, like it does on SLED, and like the kernel-$flavor-optional package does. - kernel-binary.spec.in: build-id check requires elfutils. - kernel-binary.spec.in: Regenerate makefile when not using mkmakefile. - kernel-binary.spec: Only use mkmakefile when it exists Linux 5.13 no longer had a mkmakefile script - kernel: kexec_file: fix error return code of kexec_calculate_store_digests . - kthread: prevent deadlock when kthread_mod_delayed_work races with kthread_cancel_delayed_work_sync . - kthread_worker: split code for canceling the delayed work timer . - kyber: fix out of bounds access when preempted . - lib: vdso: Remove CROSS_COMPILE_COMPAT_VDSO . - libertas: register sysfs groups properly . - locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal . - md: Fix missing unused status line of /proc/mdstat . - media: dvb: Add check on sp8870_readreg return . - media: dvb: Add check on sp8870_readreg return . - media: gspca: mt9m111: Check write_bridge for timeout . - media: gspca: mt9m111: Check write_bridge for timeout . - media: gspca: properly check for errors in po1030_probe . - media: gspca: properly check for errors in po1030_probe . - media: mtk-mdp: Check return value of of_clk_get . - media: mtk-mdp: Fix a refcounting bug on error in init . - media: s5p-g2d: Fix a memory leak in an error handling path in "g2d_probe" . - mei: request autosuspend after sending rx flow control . - mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk . - module: limit enabling module.sig_enforce . - net/mlx4: Fix EEPROM dump support . - net/mlx5: Consider RoCE cap before init RDMA resources . - net/mlx5: DR, Create multi-destination flow table with level less than 64 . - net/mlx5: Fix PBMC register mapping . - net/mlx5: Fix placement of log_max_flow_counter . - net/mlx5: Fix sleep while atomic in mlx5_eswitch_get_vepa . - net/mlx5e: Block offload of outer header csum for UDP tunnels . - net/mlx5e: Fix multipath lag activation . - net/mlx5e: Fix nullptr in add_vlan_push_action . - net/mlx5e: Fix page reclaim for dead peer hairpin . - net/mlx5e: Remove dependency in IPsec initialization flows . - net/nfc/rawsock.c: fix a permission check bug . - net/sched: act_ct: handle DNAT tuple collision . - net/x25: Return the correct errno code . - net: bnx2: Fix error return code in bnx2_init_board . - net: fix iteration for sctp transport seq_files . - net: hns3: Limiting the scope of vector_ring_chain variable . - net: hns3: put off calling register_netdev until client initialize complete . - net: mvpp2: add mvpp2_phylink_to_port helper . - netxen_nic: Fix an error handling path in "netxen_nic_probe" . - nfc: fix NULL ptr dereference in llcp_sock_getname after failed connect . - NFC: SUSE specific brutal fix for runtime PM . - NFS: Deal correctly with attribute generation counter overflow . - NFS: Do not corrupt the value of pg_bytes_written in nfs_do_recoalesce . - NFS: Do not discard pNFS layout segments that are marked for return . - NFS: Do not gratuitously clear the inode cache when lookup failed . - NFS: Do not revalidate the directory permissions on a lookup failure . - NFS: Fix a potential NULL dereference in nfs_get_client . - NFS: fix an incorrect limit in filelayout_decode_layout . - NFS: Fix an Oopsable condition in __nfs_pageio_add_request . - NFS: Fix use-after-free in nfs4_init_client . - nfsd: register pernet ops last, unregister first . - NFSD: Repair misuse of sv_lock in 5.10.16-rt30 . - NFSv4.2 fix handling of sr_eof in SEEK"s reply . - NFSv4.2: Always flush out writes in nfs42_proc_fallocate . - NFSv4.2: fix return value of _nfs4_get_security_label . - NFSv4: Do not discard segments marked for return in _pnfs_return_layout . - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return . - NFSv4: Fix deadlock between nfs4_evict_inode and nfs4_opendata_get_inode . - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config . - ocfs2: fix data corruption by fallocate . - PCI/LINK: Remove bandwidth notification . - PCI: aardvark: Do not rely on jiffies while holding spinlock . - PCI: aardvark: Fix kernel panic during PIO transfer . - PCI: Add ACS quirk for Broadcom BCM57414 NIC . - PCI: Mark some NVIDIA GPUs to avoid bus reset . - PCI: Mark TI C667X to avoid bus reset . - PCI: Work around Huawei Intelligent NIC VF FLR erratum . - perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 . - pid: take a reference when initializing `cad_pid` . - platform/x86: hp-wireless: add AMD"s hardware id to the supported list . - platform/x86: hp_accel: Avoid invoking _INI to speed up resume . - platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI . - platform/x86: touchscreen_dmi: Add info for the Mediacom Winpad 7.0 W700 tablet . - PM: sleep: Add pm_debug_messages kernel command line option . - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh . - pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process . - qla2xxx: synchronize rport dev_loss_tmo setting . - qlcnic: Fix an error handling path in "qlcnic_probe" . - radeon: use memcpy_to/fromio for UVD fw upload . - regulator: bd70528: Fix off-by-one for buck123 .n_voltages setting . - regulator: core: resolve supply for boot-on/always-on regulators . - regulator: max77620: Use device_set_of_node_from_dev . - Revert ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd . - Revert brcmfmac: add a check for the status of usb_register . - Revert char: hpet: fix a missing check of ioremap . - Revert char: hpet: fix a missing check of ioremap . - Revert dmaengine: qcom_hidma: Check for driver register failure . - Revert ecryptfs: replace BUG_ON with error handling code . - Revert ibmvnic: simplify reset_long_term_buff function . - Revert isdn: mISDN: Fix potential NULL pointer dereference of kzalloc . - Revert isdn: mISDNinfineon: fix potential NULL pointer dereference . - Revert libertas: add checks for the return value of sysfs_create_group . - Revert media: dvb: Add check on sp8870_readreg . - Revert media: dvb: Add check on sp8870_readreg . - Revert media: gspca: Check the return value of write_bridge for timeout . - Revert media: gspca: Check the return value of write_bridge for timeout . - Revert media: gspca: mt9m111: Check write_bridge for timeout . - Revert media: gspca: mt9m111: Check write_bridge for timeout . - Revert media: usb: gspca: add a missed check for goto_low_power . - Revert net: liquidio: fix a NULL pointer dereference . - Revert PCI: PM: Do not read power state in pci_enable_device_flags . - Revert qlcnic: Avoid potential NULL pointer dereference . - Revert scsi: core: run queue if SCSI device queue isn"t ready and queue is idle . - Revert serial: max310x: pass return value of spi_register_driver . - Revert video: hgafb: fix potential NULL pointer dereference . - Revert video: imsttfb: fix potential NULL pointer dereferences - rpm/kernel-binary.spec.in: Correct Supplements in optional subpkg - rpm/kernel-binary.spec.in: Fix handling of +arch marker - rpm/split-modules: Avoid errors even if Module.* are not present - s390/stack: fix possible register corruption with stack switch helper . - sched/debug: Fix cgroup_path[] serialization - sched/fair: Keep load_avg and load_sum synced - scsi: aacraid: Fix an oops in error handling . - scsi: aacraid: Remove erroneous fallthrough annotation . - scsi: aacraid: Use memdup_user as a cleanup . - scsi: acornscsi: Fix an error handling path in acornscsi_probe . - scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs . - scsi: be2iscsi: Revert Fix a theoretical leak in beiscsi_create_eqs . - scsi: bfa: Fix error return in bfad_pci_init . - scsi: bnx2fc: Fix Kconfig warning and CNIC build errors . - scsi: bnx2i: Requires MMU . - scsi: core: Fix race between handling STS_RESOURCE and completion . - scsi: csiostor: Fix wrong return value in csio_hw_prep_fw . - scsi: cumana_2: Fix different dev_id between request_irq and free_irq . - scsi: cxgb3i: Fix some leaks in init_act_open . - scsi: cxgb4i: Fix TLS dependency . - scsi: eesox: Fix different dev_id between request_irq and free_irq . - scsi: fcoe: Fix mismatched fcoe_wwn_from_mac declaration . - scsi: fnic: Fix error return code in fnic_probe . - scsi: hisi_sas: Fix IRQ checks . - scsi: hisi_sas: Remove preemptible . - scsi: jazz_esp: Add IRQ check . - scsi: libfc: Fix enum-conversion warning . - scsi: libsas: Fix error path in sas_notify_lldd_dev_found . - scsi: libsas: Reset num_scatter if libata marks qc as NODATA . - scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA . - scsi: lpfc: Fix ancient double free . - scsi: lpfc: Fix failure to transmit ABTS on FC link . - scsi: megaraid_sas: Check user-provided offsets . - scsi: megaraid_sas: Clear affinity hint . - scsi: megaraid_sas: Do not call disable_irq from process IRQ poll . - scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression . - scsi: megaraid_sas: Remove undefined ENABLE_IRQ_POLL macro . - scsi: mesh: Fix panic after host or bus reset . - scsi: mpt3sas: Do not use GFP_KERNEL in atomic context . - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach . - scsi: mpt3sas: Fix ioctl timeout . - scsi: myrs: Fix a double free in myrs_cleanup . - scsi: pm80xx: Fix error return in pm8001_pci_probe . - scsi: powertec: Fix different dev_id between request_irq and free_irq . - scsi: qedi: Check for buffer overflow in qedi_set_path . - scsi: qedi: Fix error return code of qedi_alloc_global_queues . - scsi: qedi: Fix missing destroy_workqueue on error in __qedi_probe . - scsi: qla2xxx: Prevent PRLI in target mode . - scsi: qla4xxx: Fix an error handling path in "qla4xxx_get_host_stats" . - scsi: qla4xxx: Remove in_interrupt . - scsi: scsi_debug: Add check for sdebug_max_queue during module init . - scsi: scsi_dh_alua: Retry RTPG on a different path after failure . - scsi: sd: Fix Opal support . - scsi: sni_53c710: Add IRQ check . - scsi: sun3x_esp: Add IRQ check . - scsi: ufs-qcom: Fix scheduling while atomic issue . - scsi: ufs: Add quirk to disallow reset of interrupt aggregation . - scsi: ufs: Add quirk to enable host controller without hce . - scsi: ufs: Add quirk to fix abnormal ocs fatal error . - scsi: ufs: Add quirk to fix mishandling utrlclr/utmrlclr . - scsi: ufs: core: Narrow down fast path in system suspend path . - scsi: ufs: Do not update urgent bkops level when toggling auto bkops . - scsi: ufs: Fix imprecise load calculation in devfreq window . - SCSI: ufs: fix ktime_t kabi change . - scsi: ufs: Fix race between shutdown and runtime resume flow . - scsi: ufs: Introduce UFSHCD_QUIRK_PRDT_BYTE_GRAN quirk . - scsi: ufs: Make ufshcd_print_trs consider UFSHCD_QUIRK_PRDT_BYTE_GRAN . - scsi: ufs: Properly release resources if a task is aborted successfully . - scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM . - scsi: ufs: ufshcd-pltfrm: Fix deferred probing . - scsi: ufshcd: use an enum for quirks . - serial: max310x: unregister uart driver in case of failure and abort . - serial: rp2: use "request_firmware" instead of "request_firmware_nowait" . - spi: spi-nxp-fspi: move the register operation after the clock enable . - spi: sprd: Add missing MODULE_DEVICE_TABLE . - spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd . - staging: rtl8723bs: Fix uninitialized variables . - sunrpc: fix refcount leak for rpc auth modules . - SUNRPC: Handle major timeout in xprt_adjust_timeout . - SUNRPC: Move fault injection call sites . - SUNRPC: Set memalloc_nofs_save for sync tasks . - svcrdma: disable timeouts on rdma backchannel . - thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID . - tpm: fix error return code in tpm2_get_cc_attrs_tbl . - tracing: Correct the length check which causes memory corruption . - tracing: Do no increment trace_clock_global by one . - tracing: Do not stop recording cmdlines when tracing is off . - tracing: Do not stop recording comms if the trace file is being read . - tracing: Restructure trace_clock_global to never block . - ttyprintk: Add TTY hangup callback . - usb: core: hub: Disable autosuspend for Cypress CY7C65632 . - usb: core: reduce power-on-good delay time of root hub . - usb: dwc3: core: fix kernel panic when do reboot . - usb: dwc3: core: fix kernel panic when do reboot . - usb: dwc3: debugfs: Add and remove endpoint dirs dynamically . - usb: dwc3: ep0: fix NULL pointer exception . - USB: f_ncm: ncm_bitrate is unsigned . - usb: f_ncm: only first packet of aggregate needs to start timer . - usb: f_ncm: only first packet of aggregate needs to start timer . - usb: fix various gadget panics on 10gbps cabling . - usb: fix various gadget panics on 10gbps cabling . - usb: fix various gadgets null ptr deref on 10gbps cabling . - usb: gadget: eem: fix wrong eem header operation . - usb: gadget: eem: fix wrong eem header operation . - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind . - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind . - usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling . - usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms . - USB: serial: cp210x: fix alternate function for CP2102N QFN20 . - USB: serial: ftdi_sio: add IDs for IDS GmbH Products . - USB: serial: ftdi_sio: add NovaTech OrionMX product ID . - USB: serial: ftdi_sio: add NovaTech OrionMX product ID . - USB: serial: omninet: add device id for Zyxel Omni 56K Plus . - USB: serial: omninet: add device id for Zyxel Omni 56K Plus . - USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 . - USB: serial: pl2303: add device id for ADLINK ND-6530 GC . - USB: serial: quatech2: fix control-request directions . - USB: serial: ti_usb_3410_5052: add startech.com device id . - usb: typec: mux: Fix copy-paste mistake in typec_mux_match . - usb: typec: mux: Fix matching with typec_altmode_desc . - usb: typec: tcpm: Use LE to CPU conversion when accessing msg- greater than header . - usb: typec: ucsi: Clear PPM capability data in ucsi_init error path . - usb: typec: wcove: Use LE to CPU conversion when accessing msg- greater than header . - USB: usbfs: Do not WARN about excessively large memory allocations . - vfio/pci: Fix error return code in vfio_ecap_init . - vfio/pci: zap_vma_ptes needs MMU . - vfio/platform: fix module_put call in error flow . - video: hgafb: correctly handle card detect failure during probe . - video: hgafb: fix potential NULL pointer dereference . - vmlinux.lds.h: Avoid orphan section with !SMP . - vrf: fix maximum MTU . - vsock/vmci: log once the failed queue pair allocation . - wireguard: allowedips: initialize list head in selftest . - wireguard: do not use -O3 . - wireguard: peer: allocate in kmem_cache . - wireguard: peer: put frequently used members above cache lines . - wireguard: queueing: get rid of per-peer ring buffers . - wireguard: selftests: make sure rp_filter is disabled on vethc . - wireguard: selftests: remove old conntrack kconfig value . - wireguard: use synchronize_net rather than synchronize_rcu . - x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing . - x86/fault: Do not send SIGSEGV twice on SEGV_PKUERR . - x86/pkru: Write hardware init value to PKRU when xstate is init . - x86/process: Check PF_KTHREAD and not current- greater than mm for kernel threads . - x86: fix seq_file iteration for pat.c . - xen-blkback: fix compatibility bug with single page rings . - xen-pciback: reconfigure also from backend watch handler . - xen-pciback: redo VF placement in the virtual topology . - xen/evtchn: Change irq_info lock to raw_spinlock_t . - xfrm: policy: Read seqcount outside of rcu-read side in xfrm_policy_lookup_bytype . - xprtrdma: Avoid Receive Queue wrapping . - xprtrdma: rpcrdma_mr_pop already does list_del_init . Special Instructions and Notes: Please reboot the system after installing this update.