[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253164

 
 

909

 
 

197077

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2021:0741-1 -- SLES kernel

ID: oval:org.secpod.oval:def:89049513Date: (C)2023-09-27   (M)2024-04-17
Class: PATCHFamily: unix




The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-26930: Fixed an improper error handling in blkback"s grant mapping . - CVE-2021-26931: Fixed an issue where Linux kernel was treating grant mapping errors as bugs . - CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping . by remote attackers to read or write files via directory traversal in an XCOPY request . - CVE-2020-12362: Fixed an integer overflow in the firmware which may have allowed a privileged user to potentially enable an escalation of privilege via local access . - CVE-2020-12363: Fixed an improper input validation which may have allowed a privileged user to potentially enable a denial of service via local access . - CVE-2020-12364: Fixed a null pointer reference which may have allowed a privileged user to potentially enable a denial of service via local access . - CVE-2020-12373: Fixed an expired pointer dereference which may have allowed a privileged user to potentially enable a denial of service via local access . - CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check . The following non-security bugs were fixed: - ACPI: configfs: add missing check after configfs_register_default_group . - ACPI: property: Fix fwnode string properties matching . - ACPI: property: Satisfy kernel doc validator . - ACPI: property: Satisfy kernel doc validator . - ALSA: hda: Add another CometLake-H PCI ID . - ALSA: hda/hdmi: Drop bogus check at closing a stream . - ALSA: hda/realtek: modify EAPD in the ALC886 . - ALSA: pcm: Assure sync with the pending stop operation at suspend . - ALSA: pcm: Call sync_stop at disconnection . - ALSA: pcm: Do not call sync_stop if it hasn"t been stopped . - ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 . - ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all . - ALSA: usb-audio: Do not avoid stopping the stream at disconnection . - ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode . - ALSA: usb-audio: Handle invalid running state at releasing EP . - ALSA: usb-audio: More strict state change in EP . - amba: Fix resource leak for drivers without .remove . - arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true - ASoC: cpcap: fix microphone timeslot mask . - ASoC: cs42l56: fix up error handling in probe . - ASoC: simple-card-utils: Fix device module clock . - ASoC: SOF: debug: Fix a potential issue on string buffer termination . - ata: ahci_brcm: Add back regulators management . - ata: sata_nv: Fix retrieving of active qcs . - ath10k: Fix error handling in case of CE pipe init failure . - ath9k: fix data bus crash when setting nf_override via debugfs . - bcache: fix overflow in offset_to_stripe . - blk-mq: call commit_rqs while list empty but error happen . - blk-mq: insert request not through - greater than queue_rq into sw/scheduler queue . - blk-mq: move cancel of hctx- greater than run_work to the front of blk_exit_queue . - block: fix inflight statistics of part0 . - block: respect queue limit of max discard segment . - block: virtio_blk: fix handling single range discard request . - Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function . - Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv . - Bluetooth: drop HCI device reference before return . - Bluetooth: Fix initializing response id after clearing struct . - Bluetooth: hci_uart: Fix a race for write_work scheduling . - Bluetooth: Put HCI device if inquiry procedure interrupts . - bnxt_en: Fix accumulation of bp- greater than net_stats_prev . - bnxt_en: fix error return code in bnxt_init_board . - bnxt_en: fix error return code in bnxt_init_one . - bnxt_en: Improve stats context resource accounting with RDMA driver loaded . - bnxt_en: read EEPROM A2h address using page 0 . - bnxt_en: Release PCI regions when DMA mask setup fails during probe . - bonding: Fix reference count leak in bond_sysfs_slave_add . - bonding: set dev- greater than needed_headroom in bond_setup_by_slave . - bonding: wait for sysfs kobject destruction before freeing struct slave . - bpf, cgroup: Fix optlen WARN_ON_ONCE toctou . - bpf, cgroup: Fix problematic bounds check . - btrfs: add assertion for empty list of transactions at late stage of umount . - btrfs: Cleanup try_flush_qgroup . - btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata . - btrfs: Fix race between extent freeing/allocation when using bitmaps . - btrfs: fix race between RO remount and the cleaner task . - btrfs: fix transaction leak and crash after cleaning up orphans on RO mount . - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan . - btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata . - btrfs: lift read-write mount setup from mount and remount . - btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata . - btrfs: run delayed iputs when remounting RO to avoid leaking them . - btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata . - btrfs: Unlock extents in btrfs_zero_range in case of errors . - caif: no need to check return value of debugfs_create functions . - ceph: fix flush_snap logic after putting caps . - cgroup: Fix memory leak when parsing multiple source parameters . - cgroup: fix psi monitor for root cgroup . - cgroup-v1: add disabled controller check in cgroup1_parse_param . - chelsio/chtls: correct function return and return type . - chelsio/chtls: correct netdevice for vlan interface . - chelsio/chtls: fix a double free in chtls_setkey . - chelsio/chtls: fix always leaking ctrl_skb . - chelsio/chtls: fix deadlock issue . - chelsio/chtls: fix memory leaks caused by a race . - chelsio/chtls: fix memory leaks in CPL handlers . - chelsio/chtls: fix panic during unload reload chtls . - chelsio/chtls: fix socket lock . - chelsio/chtls: fix tls record info to user . - Cherry-pick ibmvnic patches from SP3 . - chtls: Added a check to avoid NULL pointer dereference . - chtls: Fix chtls resources release sequence . - chtls: Fix hardware tid leak . - chtls: Fix panic when route to peer not configured . - chtls: Remove invalid set_tcb call . - chtls: Replace skb_dequeue with skb_peek . - cifs: check all path components in resolved dfs target . - cifs: fix nodfs mount option . - cifs: introduce helper for finding referral server . - cifs: report error instead of invalid when revalidating a dentry fails . - cirrus: cs89x0: remove set but not used variable "lp" . - cirrus: cs89x0: use devm_platform_ioremap_resource to simplify code . - clk: meson: clk-pll: fix initializing the old rate for a PLL . - clk: meson: clk-pll: make ret a signed integer . - clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate . - clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs . - clk: sunxi-ng: h6: Fix CEC clock . - clk: sunxi-ng: h6: Fix clock divider range on some clocks . - clk: sunxi-ng: mp: fix parent rate change flag check . - clocksource/drivers/ixp4xx: Select TIMER_OF when needed . - cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in - greater than remove . - cpufreq: brcmstb-avs-cpufreq: Free resources in error path . - cpuset: fix race between hotplug work and later CPU offline . - crypto: ecdh_helper - Ensure "len greater than = secret.len" in decode_key . - crypto: talitos - Work around SEC6 ERRATA . - cxgb3: fix error return code in t3_sge_alloc_qset . - cxgb4: fix all-mask IP address comparison . - cxgb4: fix checks for max queues to allocate . - cxgb4: fix endian conversions for L4 ports in filters . - cxgb4: fix set but unused variable when DCB is disabled . - cxgb4: fix SGE queue dump destination buffer context . - cxgb4: fix the panic caused by non smac rewrite . - cxgb4: move DCB version extern to header file . - cxgb4: move handling L2T ARP failures to caller . - cxgb4: move PTP lock and unlock to caller in Tx path . - cxgb4: parse TC-U32 key values and masks natively . - cxgb4: remove cast when saving IPv4 partial checksum . - cxgb4: set up filter action after rewrites . - cxgb4: use correct type for all-mask IP address comparison . - cxgb4: use unaligned conversion for fetching timestamp . - dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function . - dmaengine: fsldma: Fix a resource leak in the remove function . - dmaengine: hsu: disable spurious interrupt . - dmaengine: owl-dma: Fix a resource leak in the remove function . - dm crypt: avoid truncating the logical block size . - dm: fix bio splitting and its bio completion order for regular IO . - dm thin: fix use-after-free in metadata_pre_commit_callback . - dm thin metadata: Avoid returning cmd- greater than bm wild pointer on error . - dm thin metadata: fix lockdep complaint . - dm thin metadata: Fix use-after-free in dm_bm_set_read_only . - dm: use noio when sending kobject event . - docs: filesystems: vfs: correct flag name . - dpaa2-eth: fix return codes used in ndo_setup_tc . - drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind . - drivers: net: davinci_mdio: fix potential NULL dereference in davinci_mdio_probe . - drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] . - drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs . - drm/amd/display: Change function decide_dp_link_settings to avoid infinite looping . - drm/amd/display: Decrement refcount of dc_sink before reassignment . - drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction . - drm/amd/display: Fix dc_sink kref count in emulated_link_detect . - drm/amd/display: Fix HDMI deep color output for DCE 6-11 . - drm/amd/display: Free atomic state after drm_atomic_commit . - drm/amd/display: Revert Fix EDID parsing after resume from suspend . - drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition . - drm/fb-helper: Add missed unlocks in setcmap_legacy . - drm/gma500: Fix error return code in psb_driver_load . - drm/meson: Unbind all connectors on module removal - drm/sun4i: dw-hdmi: always set clock rate - drm/sun4i: dw-hdmi: Fix max. frequency for H6 - drm/sun4i: Fix H6 HDMI PHY configuration - drm/sun4i: tcon: set sync polarity for tcon1 channel - drm/vc4: hvs: Fix buffer overflow with the dlist handling - Drop HID logitech patch that caused a regression - exec: Always set cap_ambient in cap_bprm_set_creds . - exfat: Avoid allocating upcase table using kcalloc . - ext4: do not remount read-only with errors=continue on reboot . - ext4: fix a memory leak of ext4_free_data . - ext4: fix bug for rename with RENAME_WHITEOUT . - ext4: fix deadlock with fs freezing and EA inodes . - ext4: fix superblock checksum failure when setting password salt . - ext4: prevent creating duplicate encrypted filenames . - fgraph: Initialize tracing_graph_pause at task creation . - firmware_loader: align .builtin_fw to 8 . - fscrypt: add fscrypt_is_nokey_name . - fscrypt: rename DCACHE_ENCRYPTED_NAME to DCACHE_NOKEY_NAME . - fs: fix lazytime expiration handling in __writeback_single_inode . - gma500: clean up error handling in init . - gpio: pcf857x: Fix missing first interrupt . - HID: core: detect and skip invalid inputs to snto32 . - HID: make arrays usage and value to be the same . - HID: wacom: Ignore attempts to overwrite the touch_max value from HID . - hwrng: timeriomem - Fix cooldown period calculation . - i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition . - i2c: iproc: handle only slave interrupts which are enabled . - i2c: mediatek: Move suspend and resume handling to NOIRQ phase . - i2c: stm32f7: fix configuration of the digital filter . - i3c: master: dw: Drop redundant disec call . - i40e: acquire VSI pointer only after VF is initialized . - i40e: avoid premature Rx buffer reuse . - i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs . - i40e: Fix MAC address setting for a VF via Host/VM . - i40e: Fix removing driver while bare-metal VFs pass traffic . - i40e: Revert i40e: do not report link up for a VF who hasn"t enabled queues . - iavf: fix double-release of rtnl_lock . - iavf: fix error return code in iavf_init_get_resources . - iavf: fix speed reporting over virtchnl . - iavf: Fix updating statistics . - ibmvnic: add memory barrier to protect long term buffer . - ibmvnic: change IBMVNIC_MAX_IND_DESCS to 16 . - ibmvnic: Clean up TX code and TX buffer data structure . - ibmvnic: Clear failover_pending if unable to schedule . - ibmvnic: compare adapter- greater than init_done_rc with more readable ibmvnic_rc_codes . - ibmvnic: Correctly re-enable interrupts in NAPI polling routine . - ibmvnic: create send_control_ip_offload . - ibmvnic: create send_query_ip_offload . - ibmvnic: device remove has higher precedence over reset . - ibmvnic: Do not replenish RX buffers after every polling loop . - ibmvnic: Ensure that CRQ entry read are correctly ordered . - ibmvnic: Ensure that device queue memory is cache-line aligned . - ibmvnic: Ensure that SCRQ entry reads are correctly ordered . - ibmvnic: fix a race between open and reset . - ibmvnic: fix login buffer memory leak . - ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq . - ibmvnic: fix rx buffer tracking and index management in replenish_rx_pool partial success . - ibmvnic: Fix TX completion error handling . - ibmvnic: Fix use-after-free of VNIC login response buffer . - ibmvnic: handle inconsistent login with reset . - ibmvnic: Harden device Command Response Queue handshake . - ibmvnic: improve ibmvnic_init and ibmvnic_reset_init . - ibmvnic: Introduce batched RX buffer descriptor transmission . - ibmvnic: Introduce indirect subordinate Command Response Queue buffer . - ibmvnic: Introduce xmit_more support using batched subCRQ hcalls . - ibmvnic: merge ibmvnic_reset_init and ibmvnic_init . - ibmvnic: no reset timeout for 5 seconds after reset . - ibmvnic: reduce wait for completion time . - ibmvnic: remove never executed if statement . - ibmvnic: Remove send_subcrq function . - ibmvnic: rename ibmvnic_send_req_caps to send_request_cap . - ibmvnic: rename send_cap_queries to send_query_cap . - ibmvnic: rename send_map_query to send_query_map . - ibmvnic: send_login should check for crq errors . - ibmvnic: serialize access to work queue on remove . - ibmvnic: Set to CLOSED state even on error . - ibmvnic: skip send_request_unmap for timeout reset . - ibmvnic: skip tx timeout reset while in resetting . - ibmvnic: stop free_all_rwi on failed reset . - ibmvnic: store RX and TX subCRQ handle array in ibmvnic_adapter struct . - ibmvnic: track pending login . - ibmvnic: update MAINTAINERS . - ibmvnic: Use netdev_alloc_skb instead of alloc_skb to replenish RX buffers . - ice: Do not allow more channels than LAN MSI-X available . - ice: Fix MSI-X vector fallback logic . - igc: check return value of ret_val in igc_config_fc_after_link_up . - igc: fix link speed advertising . - igc: Fix returning wrong statistics . - igc: Report speed and duplex as unknown when device is runtime suspended . - igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr . - include/linux/memremap.h: remove stale comments . - Input: elo - fix an error code in elo_connect . - Input: i8042 - unbreak Pegatron C15B . - Input: joydev - prevent potential read overflow in ioctl . - Input: sur40 - fix an error code in sur40_probe . - Input: xpad - sync supported devices with fork on GitHub . - iwlwifi: mvm: do not send RFH_QUEUE_CONFIG_CMD with no queues . - iwlwifi: mvm: guard against device removal in reprobe . - iwlwifi: mvm: invalidate IDs of internal stations at mvm start . - iwlwifi: mvm: skip power command when unbinding vif during CSA . - iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time . - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap . - iwlwifi: pcie: fix context info memory leak . - iwlwifi: pcie: reschedule in long-running memory reads . - iwlwifi: pcie: use jiffies for memory read spin time limit . - ixgbe: avoid premature Rx buffer reuse . - ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K . - kABI: Fix kABI after AMD SEV PCID fixes . - kABI: Fix kABI after modifying struct __call_single_data . - kABI: Fix kABI for extended APIC-ID support . - kABI: repair, after nVMX: Emulate MTF when performinginstruction emulation kvm_x86_ops is part of kABI as it"s used by LTTng. But it"s only read and never allocated in there, so growing it is fine. - kernel-binary.spec: Add back initrd and image symlink ghosts to filelist . Fixes: 76a9256314c3 - kernel/smp: add boot parameter for controlling CSD lock debugging . - kernel/smp: add more data to CSD lock debugging . - kernel/smp: prepare more CSD lock debugging . - kernel/smp: Provide CSD lock timeout diagnostics . - KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch . - KVM: arm64: Remove S1PTW check from kvm_vcpu_dabt_iswrite . - KVM: nVMX: do not clear mtf_pending when nested events are blocked . - KVM: nVMX: Emulate MTF when performing instruction emulation . - KVM: nVMX: Handle pending #DB when injecting INIT VM-exit. Pulling in as a dependency of: KVM: nVMX: Emulate MTF when performing instruction emulation . - KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests . - KVM: tracing: Fix unmatched kvm_entry and kvm_exit events . - KVM: VMX: Condition ENCLS-exiting enabling on CPU support for SGX1 . - KVM: x86: Allocate new rmap and large page tracking when moving memslot . - KVM: x86: allow KVM_STATE_NESTED_MTF_PENDING in kvm_state flags . - KVM: x86: clear stale x86_emulate_ctxt- greater than intercept value . - KVM: x86: do not notify userspace IOAPIC on edge-triggered interrupt EOI . - KVM: x86: Gracefully handle __vmalloc failure during VM allocation . - KVM: x86: Introduce cr3_lm_rsvd_bits in kvm_vcpu_arch . - KVM: x86: remove stale comment from struct x86_emulate_ctxt . - libnvdimm/dimm: Avoid race between probe and available_slots_show . - lib/vsprintf: no_hash_pointers prints all addresses as unhashed . - linux/clk.h: use correct kernel-doc notation for 2 functions . - mac80211: 160MHz with extended NSS BW in CSA . - mac80211: fix fast-rx encryption check . - mac80211: fix potential overflow when multiplying to u32 integers . - mac80211: pause TX while changing interface type . - macros.kernel-source: Use spec_install_pre for certificate installation . Since rpm 4.16 files installed during build phase are lost. - MAINTAINERS: remove John Allen from ibmvnic . - matroxfb: avoid -Warray-bounds warning - media: aspeed: fix error return code in aspeed_video_setup_video . - media: camss: missing error code in msm_video_register . - media: cx25821: Fix a bug when reallocating some dma memory . - media: em28xx: Fix use-after-free in em28xx_alloc_urbs . - media: i2c: ov5670: Fix PIXEL_RATE minimum value . - media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt . - media: lmedm04: Fix misuse of comma . - media: media/pci: Fix memleak in empress_init . - media: mt9v111: Remove unneeded device-managed puts . - media: pwc: Use correct device for DMA . - media: pxa_camera: declare variable when DEBUG is defined . - media: qm1d1c0042: fix error return code in qm1d1c0042_init . - media: software_node: Fix refcounts in software_node_get_next_child . - media: tm6000: Fix memleak in tm6000_start_stream . - media: vsp1: Fix an error handling path in the probe function . - mei: hbm: call mei_set_devstate on hbm stop response . - memory: ti-aemif: Drop child node when jumping out loop . - mfd: bd9571mwv: Use devm_mfd_add_devices . - mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq . - misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users . - misc: eeprom_93xx46: Fix module alias to enable module autoprobe . - mlxsw: core: Add validation of transceiver temperature thresholds . - mlxsw: core: Fix memory leak on module removal . - mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish . - mlxsw: core: Free EMAD transactions using kfree_rcu . - mlxsw: core: Increase critical threshold for ASIC thermal zone . - mlxsw: core: Increase scope of RCU read-side critical section . - mlxsw: core: Use variable timeout for EMAD retries . - mlxsw: spectrum_acl: Fix mlxsw_sp_acl_tcam_group_add"s error path . - mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails . - mmc: core: Limit retries when analyse of SDIO tuples fails . - mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to 128-bytes . - mmc: sdhci-sprd: Fix some resource leaks in the remove function . - mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe . - mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support is disabled . - mm: proc: Invalidate TLB after clearing soft-dirty page state . - mm: thp: kABI: move the added flag to the end of enum . - mt76: dma: fix a possible memory leak in mt76_add_fragment . - net: ag71xx: add missed clk_disable_unprepare in error path of probe . - net: axienet: Fix error return code in axienet_probe . - net: bcmgenet: Fix WoL with password after deep sleep . - net: bcmgenet: keep MAC in reset until PHY is up . - net: bcmgenet: re-remove bcmgenet_hfb_add_filter . - net: bcmgenet: set Rx mode before starting netif . - net: bcmgenet: use hardware padding of runt frames . - net: broadcom CNIC: requires MMU . - net: caif: Fix debugfs on 64-bit platforms . - net/cxgb4: Check the return from t4_query_params properly . - net: cxgb4: fix return error value in t4_prep_fw . - net: dsa: bcm_sf2: Fix overflow checks . - net: dsa: lantiq_gswip: fix and improve the unsupported interface error . - net: dsa: mt7530: Change the LINK bit to reflect the link status . - net: dsa: mt7530: set CPU port to fallback mode . - net: ena: set initial DMA width to avoid intel iommu issue . - net: ethernet: ave: Fix error returns in ave_init . - net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it anymore in mlx4_en_xmit . - net: ethernet: ti: ale: fix allmulti for nu type ale . - net: ethernet: ti: ale: fix seeing unreg mcast packets with promisc and allmulti disabled . - net: ethernet: ti: ale: modify vlan/mdb api for switchdev . - net: ethernet: ti: cpsw: allow untagged traffic on host port . - net: ethernet: ti: fix some return value check of cpsw_ale_create . - net: gemini: Fix missing clk_disable_unprepare in error path of gemini_ethernet_port_probe . - net: gro: do not keep too many GRO packets in napi- greater than rx_list . - net: hns3: add a check for queue_id in hclge_reset_vf_queue . - net: hns3: add a missing uninit debugfs when unload driver . - net: hns3: add reset check for VF updating port based VLAN . - net: hns3: clear port base VLAN when unload PF . - net: hns3: fix aRFS FD rules leftover after add a user FD rule . - net: hns3: fix a TX timeout issue . - net: hns3: fix desc filling bug when skb is expanded or lineared . - net: hns3: fix for mishandle of asserting VF reset fail . - net: hns3: fix for VLAN config when reset failed . - net: hns3: fix RSS config lost after VF reset . - net: hns3: fix set and get link ksettings issue . - net: hns3: fix tc qdisc del failed issue . - net: hns3: fix the number of queues actually used by ARQ . - net: hns3: fix use-after-free when doing self test . - net: hns3: fix VF VLAN table entries inconsistent issue . - net: hns: fix return value check in __lb_other_process . - net: lpc-enet: fix error return code in lpc_mii_init . - net: macb: fix call to pm_runtime in the suspend/resume functions . - net: macb: fix wakeup test in runtime suspend/resume routines . - net: macb: mark device wake capable when magic-packet property present . - net/mlx4_core: fix a memory leak bug . - net/mlx4_core: Fix init_hca fields offset . - net/mlx4_en: Avoid scheduling restart task if it is already running . - net/mlx4_en: Handle TX error CQE . - net/mlx5: Add handling of port type in rule deletion . - net/mlx5: Annotate mutex destroy for root ns . - net/mlx5: Clear LAG notifier pointer after unregister . - net/mlx5: Disable QoS when min_rates on all VFs are zero . - net/mlx5: Do not call timecounter cyc2time directly from 1PPS flow . - net/mlx5: Do not maintain a case of del_sw_func being null . - net/mlx5e: Correctly handle changing the number of queues when the interface is down . - net/mlx5e: Do not trigger IRQ multiple times on XSK wakeup to avoid WQ overruns . - net/mlx5e: en_accel, Add missing net/geneve.h include . - net/mlx5e: Encapsulate updating netdev queues into a function . - net/mlx5e: E-switch, Fix rate calculation for overflow . - net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq . - net/mlx5e: Fix configuration of XPS cpumasks and netdev queues in corner cases . - net/mlx5e: Fix endianness handling in pedit mask . - net/mlx5e: Fix error path of device attach . - net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups . - net/mlx5e: Fix two double free cases . - net/mlx5e: Fix VLAN cleanup flow . - net/mlx5e: Fix VLAN create flow . - net/mlx5e: Get the latest values from counters in switchdev mode . - net/mlx5e: IPoIB, Drop multicast packets that this interface sent . - net/mlx5e: kTLS, Fix wrong value in record tracker enum . - net/mlx5e: Reduce tc unsupported key print level . - net/mlx5e: Rename hw_modify to preactivate . - net/mlx5e: Set of completion request bit should not clear other adjacent bits . - net/mlx5: E-switch, Destroy TSAR after reload interface . - net/mlx5: E-Switch, Hold mutex when querying drop counter in legacy mode . - net/mlx5: E-Switch, Use vport metadata matching by default . - net/mlx5: E-Switch, Use vport metadata matching only when mandatory . - net/mlx5e: Use preactivate hook to set the indirection table . - net/mlx5e: vxlan: Use RCU for vxlan table lookup . - net/mlx5: Fix a bug of using ptp channel index as pin index . - net/mlx5: Fix deletion of duplicate rules . - net/mlx5: Fix failing fw tracer allocation on s390 . - net/mlx5: Fix memory leak on flow table creation error flow . - net/mlx5: Fix request_irqs error flow . - net/mlx5: Fix wrong address reclaim when command interface is down . - net/mlx5: Query PPS pin operational status before registering it . - net/mlx5: Verify Hardware supports requested ptp function on a given pin . - net: moxa: Fix a potential double "free_irq" . - net: mscc: ocelot: ANA_AUTOAGE_AGE_PERIOD holds a value in seconds, not ms . - net: mscc: ocelot: fix address ageing time . - net: mscc: ocelot: properly account for VLAN header length when setting MRU . - net: mvpp2: Add TCAM entry to drop flow control pause frames . - net: mvpp2: disable force link UP during port init procedure . - net: mvpp2: Fix error return code in mvpp2_open . - net: mvpp2: Fix GoP port 3 Networking Complex Control configurations . - net: mvpp2: fix memory leak in mvpp2_rx . - net: mvpp2: fix pkt coalescing int-threshold configuration . - net: mvpp2: prs: fix PPPoE with ipv6 packet parse . - net: mvpp2: Remove Pause and Asym_Pause support . - net: mvpp2: TCAM entry enable should be written after SRAM data . - net: netsec: Correct dma sync for XDP_TX frames . - net: nixge: fix potential memory leak in nixge_probe . - net: octeon: mgmt: Repair filling of RX ring . - net: phy: at803x: use operating parameters from PHY-specific status . - net: phy: extract link partner advertisement reading . - net: phy: extract pause mode . - net: phy: marvell10g: fix null pointer dereference . - net: phy: marvell10g: fix temperature sensor on 2110 . - net: phy: read MII_CTRL1000 in genphy_read_status only if needed . - net: qca_spi: fix receive buffer size check . - net: qca_spi: Move reset_count to struct qcaspi . - net: qede: fix PTP initialization on recovery . - net: qede: fix use-after-free on recovery and AER handling . - net: qede: stop adding events on an already destroyed workqueue . - net: qed: fix async event callbacks unregistering . - net: qed: fix excessive QM ILT lines consumption . - net: qed: fix maybe uninitialized warning . - net: qed: fix NVMe login fails over VFs . - net: qed: RDMA personality shouldn"t fail VF load . - net: re-solve some conflicts after net - greater than net-next merge . - net: rmnet: do not allow to add multiple bridge interfaces . - net: rmnet: do not allow to change mux id if mux id is duplicated . - net: rmnet: fix bridge mode bugs . - net: rmnet: fix lower interface leak . - net: rmnet: fix NULL pointer dereference in rmnet_changelink . - net: rmnet: fix NULL pointer dereference in rmnet_newlink . - net: rmnet: fix packet forwarding in rmnet bridge mode . - net: rmnet: fix suspicious RCU usage . - net: rmnet: print error message when command fails . - net: rmnet: remove rcu_read_lock in rmnet_force_unassociate_device . - net: rmnet: use upper/lower device infrastructure . - net, sctp, filter: remap copy_from_user failure error . - net: smc91x: Fix possible memory leak in smc_drv_probe . - net/sonic: Add mutual exclusion for accessing shared state . - net: stmmac: 16KB buffer must be 16 byte aligned . - net: stmmac: Always arm TX Timer at end of transmission start . - net: stmmac: Do not accept invalid MTU values . - net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes . - net: stmmac: Enable 16KB buffer size . - net: stmmac: fix disabling flexible PPS output . - net: stmmac: fix length of PTP clock"s name string . - net: stmmac: Fix the TX IOC in xmit path . - net: stmmac: RX buffer size must be 16 byte aligned . - net: stmmac: selftests: Flow Control test can also run with ASYM Pause . - net: stmmac: selftests: Needs to check the number of Multicast regs . - net: stmmac: xgmac: Clear previous RX buffer size . - net: sun: fix missing release regions in cas_init_one . - net: team: fix memory leak in __team_options_register . - net: thunderx: initialize VF"s mailbox mutex before first usage . - net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family . - net: usb: qmi_wwan: Adding support for Cinterion MV31 . - nvme-hwmon: rework to avoid devm allocation . - nvme-multipath: Early exit if no path is available . - nvme: re-read ANA log on NS CHANGED AEN . - nvmet-tcp: Fix NULL dereference when a connect data comes in h2cdata pdu . - objtool: Do not fail on missing symbol table . - perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu . - perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info . - perf/x86/intel/uncore: Factor out uncore_pci_pmu_register . - perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister . - perf/x86/intel/uncore: Generic support for the PCI sub driver . - perf/x86/intel/uncore: Store the logical die id instead of the physical die id . - perf/x86/intel/uncore: With greater than 8 nodes, get pci bus die id from NUMA info . - phy: cpcap-usb: Fix warning for missing regulator_disable . - phy: rockchip-emmc: emmc_phy_init always return 0 . - platform/x86: hp-wmi: Disable tablet-mode reporting by default . - platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron 7352 . - platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix touchscreen on Estar Beauty HD tablet . - powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning . - powerpc/boot: Delete unneeded .globl _zimage_start . - powerpc: Fix alignment bug within the init sections . - powerpc/fpu: Drop cvt_fd and cvt_df . - powerpc/hvcall: add token and codes for H_VASI_SIGNAL . - powerpc: kABI: add back suspend_disable_cpu in machdep_calls . - powerpc/machdep: remove suspend_disable_cpu . - powerpc/mm/pkeys: Make pkey access check work on execute_only_key . - powerpc/numa: Fix build when CONFIG_NUMA=n . - powerpc/numa: make vphn_enabled, prrn_enabled flags const . - powerpc/numa: remove ability to enable topology updates . - powerpc/numa: remove arch_update_cpu_topology . - powerpc/numa: Remove late request for home node associativity . - powerpc/numa: remove prrn_is_enabled . - powerpc/numa: remove start/stop_topology_update . - powerpc/numa: remove timed_topology_update . - powerpc/numa: remove unreachable topology timer code . - powerpc/numa: remove unreachable topology update code . - powerpc/numa: remove unreachable topology workqueue code . - powerpc/numa: remove vphn_enabled and prrn_enabled internal flags . - powerpc/numa: stub out numa_update_cpu_topology . - powerpc/perf: Exclude kernel samples while counting events in user space . - powerpc/perf/hv-24x7: Dont create sysfs event files for dummy events . - powerpc/pkeys: Avoid using lockless page table walk . - powerpc/pkeys: Check vma before returning key fault error to the user . - powerpc/powernv/memtrace: Do not leak kernel memory to user space . - powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently . - powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU . - powerpc/prom: Fix ibm,arch-vec-5-platform-support scan . - powerpc/pseries/dlpar: handle ibm, configure-connector delay status . - powerpc/pseries: Do not enforce MSI affinity with kdump . - powerpc/pseries/eeh: Make pseries_pcibios_bus_add_device static . - powerpc/pseries: extract host bridge from pci_bus prior to bus removal . - powerpc/pseries/hibernation: drop pseries_suspend_begin from suspend ops . - powerpc/pseries/hibernation: pass stream id via function arguments . - powerpc/pseries/hibernation: perform post-suspend fixups later . - powerpc/pseries/hibernation: remove prepare_late callback . - powerpc/pseries/hibernation: remove pseries_suspend_cpu . - powerpc/pseries/hibernation: switch to rtas_ibm_suspend_me . - powerpc/pseries/mobility: add missing break to default case . - powerpc/pseries/mobility: Add pr_debug for device tree changes . - powerpc/pseries/mobility: do not error on absence of ibm, update-nodes . - powerpc/pseries/mobility: error message improvements . - powerpc/pseries/mobility: extract VASI session polling logic . - powerpc/pseries/mobility: refactor node lookup during DT update . - powerpc/pseries/mobility: retry partition suspend after error . - powerpc/pseries/mobility: Set pr_fmt . - powerpc/pseries/mobility: signal suspend cancellation to platform . - powerpc/pseries/mobility: use rtas_activate_firmware on resume . - powerpc/pseries/mobility: use stop_machine for join/suspend . - powerpc/pseries/ras: Make init_ras_hotplug_IRQ static . - powerpc/pseries: remove dlpar_cpu_readd . - powerpc/pseries: remove memory re-add implementation . - powerpc/pseries: remove obsolete memory hotplug DT notifier code . - powerpc/pseries: remove prrn special case from DT update path . - powerpc/rtas: add rtas_activate_firmware . - powerpc/rtas: add rtas_ibm_suspend_me . - powerpc/rtas: complete ibm,suspend-me status codes . - powerpc/rtas: dispatch partition migration requests to pseries . - powerpc/rtasd: simplify handle_rtas_event, emit message on events . - powerpc/rtas: prevent suspend-related sys_rtas use on LE . - powerpc/rtas: remove rtas_ibm_suspend_me_unsafe . - powerpc/rtas: remove rtas_suspend_cpu . - powerpc/rtas: remove unused rtas_suspend_last_cpu . - powerpc/rtas: remove unused rtas_suspend_me_data . - powerpc/rtas: rtas_ibm_suspend_me - greater than rtas_ibm_suspend_me_unsafe . - power: reset: at91-sama5d2_shdwc: fix wkupdbc mask . - pseries/drmem: do not cache node id in drmem_lmb struct . - pseries/hotplug-memory: hot-add: skip redundant LMB lookup . - qed: fix error return code in qed_iwarp_ll2_start . - qed: Fix race condition between scheduling and destroying the slowpath workqueue . - qed: Populate nvm-file attributes while reading nvm config partition . - qed: select CONFIG_CRC32 . - qlcnic: fix missing release in qlcnic_83xx_interrupt_test . - quota: Fix memory leak when handling corrupted quota file . - quota: Sanity-check quota file headers on load . - r8169: fix resuming from suspend on RTL8105e if machine runs on battery . - r8169: fix WoL on shutdown if CONFIG_DEBUG_SHIRQ is set . - rcu/nocb: Perform deferred wake up before last idle"s - rcu/nocb: Trigger self-IPI on late deferred wake up before - rcu: Pull deferred rcuog wake up to rcu_eqs_enter callers - RDMA/efa: Add EFA 0xefa1 PCI ID . - RDMA/efa: Count admin commands errors . - RDMA/efa: Count mmap failures . - RDMA/efa: Do not delay freeing of DMA pages . - RDMA/efa: Drop double zeroing for sg_init_table . - RDMA/efa: Expose maximum TX doorbell batch . - RDMA/efa: Expose minimum SQ size . - RDMA/efa: Fix setting of wrong bit in get/set_feature commands . - RDMA/efa: Properly document the interrupt mask register . - RDMA/efa: Remove redundant udata check from alloc ucontext response . - RDMA/efa: Report create CQ error counter . - RDMA/efa: Report host information to the device . - RDMA/efa: Unified getters/setters for device structs bitmask access . - RDMA/efa: Use in-kernel offsetofend to check field availability . - RDMA/efa: User/kernel compatibility handshake mechanism . - RDMA/efa: Use the correct current and new states in modify QP . - regulator: axp20x: Fix reference cout leak . - regulator: core: Avoid debugfs: Directory ... already present! error . - regulator: core: avoid regulator_resolve_supply race condition . - regulator: Fix lockdep warning resolving supplies . - regulator: s5m8767: Drop regulators OF node reference . - regulator: s5m8767: Fix reference count leak . - reiserfs: add check for an invalid ih_entry_count . - reset: hisilicon: correct vendor prefix . - Revert ibmvnic: remove never executed if statement . - Revert net: bcmgenet: remove unused function in bcmgenet.c . - Revert platform/x86: ideapad-laptop: Switch touchpad attribute to be RO . - Revert RDMA/mlx5: Fix devlink deadlock on net namespace deletion . - rpm/kernel-subpackage-build: Workaround broken bot - rpm/post.sh: Avoid purge-kernel for the first installed kernel - rtc: s5m: select REGMAP_I2C . - rxrpc: Fix memory leak in rxrpc_lookup_local . - s390/vfio-ap: clean up vfio_ap resources when KVM pointer invalidated . - s390/vfio-ap: No need to disable IRQ after queue reset . - sched: Reenable interrupts in do_sched_yield - scsi: lpfc: Fix EEH encountering oops with NVMe traffic . - sh_eth: check sh_eth_cpu_data::cexcr when dumping registers . - sh_eth: check sh_eth_cpu_data::no_tx_cntrs when dumping registers . - sh_eth: check sh_eth_cpu_data::no_xdfar when dumping registers . - smp: Add source and destination CPUs to __call_single_data . - smsc95xx: avoid memory leak in smsc95xx_bind . - smsc95xx: check return value of smsc95xx_reset . - soc: aspeed: snoop: Add clock control logic . - spi: atmel: Put allocated master before return . - spi: pxa2xx: Fix the controller numbering for Wildcat Point . - spi: spi-synquacer: fix set_cs handling . - spi: stm32: properly handle 0 byte transfer . - squashfs: add more sanity checks in id lookup . - squashfs: add more sanity checks in inode lookup . - squashfs: add more sanity checks in xattr id lookup . - staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules . - target: disallow emulate_legacy_capacity with RBD object-map . - team: set dev- greater than needed_headroom in team_setup_by_port . - tpm: Remove tpm_dev_wq_lock . - tpm_tis: Clean up locality release . - tpm_tis: Fix check_locality for correct locality acquisition . - tracing: Check length before giving out the filter buffer . - tracing: Do not count ftrace events in top level enable output . - tracing/kprobe: Fix to support kretprobe events on unloaded modules . - tracing/kprobes: Do the notrace functions check without kprobes on ftrace . - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS . - ubifs: Fix error return code in ubifs_init_authentication . - ubifs: Fix ubifs_tnc_lookup usage in do_kill_orphans . - ubifs: prevent creating duplicate encrypted filenames . - ubifs: ubifs_add_orphan: Fix a memory leak bug . - ubifs: ubifs_jnl_write_inode: Fix a memory leak bug . - ubifs: wbuf: Do not leak kernel memory to flash . - Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 . - Update config files: Set ledtrig-default-on as builtin - USB: dwc2: Abort transaction after errors with unknown reason . - USB: dwc2: Fix endpoint direction check in ep_from_windex . - USB: dwc2: Make trimming xfer length a debug message . - USB: dwc3: fix clock issue during resume in OTG mode . - USB: gadget: legacy: fix an error code in eth_bind . - USB: gadget: u_audio: Free requests only after callback . - USB: mUSB: Fix runtime PM race in musb_queue_resume_work . - USB: quirks: add quirk to start video capture on ELMO L-12F document camera reliable . - USB: quirks: sort quirk entries . - USB: renesas_usbhs: Clear pipe running flag in USBhs_pkt_pop . - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 . - USB: serial: cp210x: add pid/vid for WSDA-200-USB . - USB: serial: mos7720: fix error code in mos7720_write . - USB: serial: mos7720: improve OOM-handling in read_mos_reg . - USB: serial: mos7840: fix error code in mos7840_write . - USB: serial: option: Adding support for Cinterion MV31 . - USB: usblp: do not call usb_set_interface if there"s a single alt . - veth: Adjust hard_start offset on redirect XDP frames . - vfs: Convert squashfs to use the new mount API . - virtio_net: Fix error code in probe . - virtio_net: Fix recursive call to cpus_read_lock . - virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer . - virt: vbox: Do not use wait_event_interruptible when called from kernel context . - vmxnet3: Remove buf_info from device accessible structures . - vxlan: fix memleak of fdb . - wext: fix NULL-ptr-dereference with cfg80211"s lack of commit . - writeback: Drop I_DIRTY_TIME_EXPIRE . - x86/alternatives: Sync bp_patching update for avoiding NULL pointer exception . - x86/apic: Add extra serialization for non-serializing MSRs . - x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available . - x86/ioapic: Handle Extended Destination ID field in RTE . - x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID . - x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID . - x86/msi: Only use high bits of MSI address for DMAR unit . - xen/netback: avoid race in xenvif_rx_ring_slots_available . - xen/netback: fix spurious event detection for common event case . - xfs: ensure inobt record walks always make forward progress . - xfs: fix an ABBA deadlock in xfs_rename . - xfs: fix parent pointer scrubber bailing out on unallocated inodes . - xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks . - xfs: fix the minrecs logic when dealing with inode root child blocks . - xfs: ratelimit xfs_discard_page messages . - xfs: reduce quota reservation when doing a dax unwritten extent conversion . - xfs: return corresponding errcode if xfs_initialize_perag fail . - xfs: scrub should mark a directory corrupt if any entries cannot be iget"d . - xfs: strengthen rmap record flags checking . - xhci: fix bounce buffer usage for non-sg list case . The kernel-default-base packaging was changed: - Added squashfs for kiwi installiso support - Added fuse - Added modules which got lost when migrating away from supported.conf : * am53c974 had a typo * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress - Also added vport-* modules for Open vSwitch Special Instructions and Notes: Please reboot the system after installing this update.

Platform:
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Desktop 15 SP2
Product:
kernel
Reference:
SUSE-SU-2021:0741-1
CVE-2020-12362
CVE-2020-12363
CVE-2020-12364
CVE-2020-12373
CVE-2020-29368
CVE-2020-29374
CVE-2021-26930
CVE-2021-26931
CVE-2021-26932
CVE    9
CVE-2020-12373
CVE-2021-26931
CVE-2021-26932
CVE-2021-26930
...

© SecPod Technologies