The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2019-25162: Fixed a potential use after free . * CVE-2021-46923: Fixed reference leakage in fs/mount_setattr . * CVE-2021-46924: Fixed fix memory leak in device probe and remove * CVE-2021-46932: Fixed missing work initialization before device registration * CVE-2023-28746: Fixed Register File Data Sampling . * CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction . * CVE-2023-52340: Fixed ICMPv6 'Packet Too Big' packets force a DoS of the Linux kernel by forcing 100% CPU . * CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm- table.c . * CVE-2023-52439: Fixed use-after-free in uio_open . * CVE-2023-52443: Fixed crash when parsed profile name is empty . * CVE-2023-52445: Fixed use after free on context disconnection . * CVE-2023-52447: Fixed map_fd_put_ptr signature kABI workaround . * CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump . * CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier . * CVE-2023-52451: Fixed access beyond end of drmem array . * CVE-2023-52452: Fixed Fix accesses to uninit stack slots . * CVE-2023-52456: Fixed tx statemachine deadlock . * CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get failed . * CVE-2023-52463: Fixed null pointer dereference in efivarfs . * CVE-2023-52464: Fixed possible out-of-bounds string access * CVE-2023-52475: Fixed use-after-free in powermate_config_complete * CVE-2023-52478: Fixed kernel crash on receiver USB disconnect * CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk . * CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval . * CVE-2024-1151: Fixed unlimited number of recursions from action sets . * CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv . * CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure . * CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c . * CVE-2024-25744: Fixed Security issue with int 80 interrupt vector . * CVE-2024-26585: Fixed race between tx work scheduling and socket close . * CVE-2024-26586: Fixed stack corruption . * CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS . * CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach . * CVE-2024-26593: Fixed block process call transactions . * CVE-2024-26595: Fixed NULL pointer dereference in error path . * CVE-2024-26598: Fixed potential UAF in LPI translation cache . * CVE-2024-26602: Fixed overall slowdowns with sys_membarrier . * CVE-2024-26603: Fixed infinite loop via #PF handling . * CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control . The following non-security bugs were fixed: * acpi: apei: set memory failure flags as mf_action_required on synchronous events . * acpi: button: add lid disable dmi quirk for nextbook ares 8a . * acpi: extlog: fix null pointer dereference check . * acpi: resource: add asus model s5402za to quirks . * acpi: resource: skip irq override on asus expertbook b1502cba . * acpi: resource: skip irq override on asus expertbook b2402cba . * acpi: video: add backlight=native dmi quirk for apple imac11,3 . * acpi: video: add backlight=native dmi quirk for apple imac12,1 and imac12,2 . * acpi: video: add backlight=native dmi quirk for lenovo thinkpad x131e . * acpi: video: add quirk for the colorful x15 at 23 laptop . * add reference to recently released cve * afs: fix the usage of read_seqbegin_or_lock in afs_find_server* . * afs: fix the usage of read_seqbegin_or_lock in afs_lookup_volume_rcu . * afs: hide silly-rename files from userspace . * afs: increase buffer size in afs_update_volume_status . * ahci: asm1166: correct count of reported ports . * alsa: drop leftover snd-rtctimer stuff from makefile . * alsa: firewire-lib: fix to check cycle continuity . * alsa: hda/conexant: add quirk for sws js201d . * alsa: hda/realtek: apply headset jack quirk for non-bass alc287 thinkpads . * alsa: hda/realtek: cs35l41: fix device id / model name . * alsa: hda/realtek: cs35l41: fix order and duplicates in quirks table . * alsa: hda/realtek: enable headset mic on vaio vjfe-adl . * alsa: hda/realtek: enable mute led on hp laptop 14-fq0xxx . * alsa: hda/realtek: fix mute/micmute led for hp mt645 . * alsa: hda/realtek: fix mute/micmute leds for hp zbook power . * alsa: hda/realtek: fix the external mic not being recognised for acer swift 1 sf114-32 . * alsa: usb-audio: add a quirk for yamaha yit-w12tx transmitter . * alsa: usb-audio: add delay quirk for motu m series 2nd revision . * alsa: usb-audio: add quirk for rode nt-usb+ . * alsa: usb-audio: check presence of valid altsetting control . * alsa: usb-audio: ignore clock selector errors for single connection . * alsa: usb-audio: more relaxed check of midi jack names . * alsa: usb-audio: sort quirk table entries . * arm64: entry: fix arm64_workaround_speculative_unpriv_load * arm64: entry: preserve/restore x29 even for compat tasks * arm64: entry: simplify tramp_alias macro and tramp_exit routine * arm64: errata: add cortex-a510 speculative unprivileged load enable workaround. * arm64: errata: add cortex-a520 speculative unprivileged load enable workaround without kabi break. * arm64: errata: mitigate ampere1 erratum ac03_cpu_38 at stage-2 enable ampere_erratum_ac03_cpu_38 workaround without kabi break * arm64: irq: set the correct node for shadow call stack * arm64: irq: set the correct node for vmap stack * arm64: rename arm64_workaround_2966298 * arm64: subscribe microsoft azure cobalt 100 to arm neoverse n2 errata * asoc: doc: fix undefined snd_soc_dapm_nopm argument . * asoc: rt5645: fix deadlock in rt5645_jack_detect_work . * asoc: sof: ipc3: fix message bounds on ipc ops . * asoc: sunxi: sun4i-spdif: add support for allwinner h616 . * atm: idt77252: fix a memleak in open_card_ubr0 . * bluetooth: avoid potential use-after-free in hci_error_reset . * bluetooth: enforce validation on max value of connection interval . * bluetooth: hci_event: fix handling of hci_ev_io_capa_request . * bluetooth: hci_event: fix wrongly recorded wakeup bd_addr . * bluetooth: hci_sync: check the correct flag before starting a scan . * bluetooth: hci_sync: fix accept_list when attempting to suspend . * bluetooth: l2cap: fix possible multiple reject send . * bluetooth: qca: fix wrong event type for patch config command . * bpf: fix verification of indirect var-off stack access . * bpf: guard stack limits against 32bit overflow . * bpf: minor logging improvement . * bus: moxtet: add spi device table . * cachefiles: fix memory leak in cachefiles_add_cache . * can: j1939: fix uaf in j1939_sk_match_filter during setsockopt . * crypto: api - disallow identical driver names . * crypto: ccp - fix null pointer dereference in __sev_platform_shutdown_locked . * crypto: octeontx2 - fix cptvf driver cleanup . * crypto: stm32/crc32 - fix parsing list of devices . * dmaengine: fsl-qdma: fix a memory leak related to the queue command dma . * dmaengine: fsl-qdma: fix soc may hang on 16 byte unaligned read . * dmaengine: fsl-qdma: increase size of "irq_name" . * dmaengine: fsl-qdma: init irq after reg initialization . * dmaengine: ptdma: use consistent dma masks . * dmaengine: shdma: increase size of "dev_id" . * dmaengine: ti: edma: add some null pointer checks to the edma_probe . * driver core: fix device_link_flag_is_sync_state_only . * drm/amd/display: fix memory leak in dm_sw_fini . * drm/amd/display: fix possible buffer overflow in "find_dcfclk_for_voltage" . * drm/amd/display: fix possible null dereference on device remove/driver unload . * drm/amd/display: increase frame-larger-than for all display_mode_vba files . * drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz . * drm/amd/display: preserve original aspect ratio in create stream . * drm/amdgpu/display: initialize gamma correction mode variable in dcn30_get_gamcor_current . * drm/amdgpu: reset gpu for s3 suspend abort case . * drm/amdgpu: skip to program gfxdec registers for suspend abort . * drm/buddy: fix range bias . * drm/crtc: fix uninitialized variable use even harder . * drm/i915/gvt: fix uninitialized variable in handle_mmio . * drm/msm/dp: return correct colorimetry for dp_test_dynamic_range_cea case . * drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup . * drm/msms/dp: fixed link clock divider bits be over written in bpc unknown case . * drm/prime: support page array greater than= 4gb . * drm/syncobj: call drm_syncobj_fence_add_wait when wait_available flag is set . * drm/ttm: fix an invalid freeing on already freed page in error path . * drop bcm5974 input patch causing a regression * efi/capsule-loader: fix incorrect allocation size . * efi: do not add memblocks for soft-reserved memory . * efi: runtime: fix potential overflow of soft-reserved region size . * fbcon: always restore the old font data in fbcon_do_set_font . * fbdev: savage: error out if pixclock equals zero . * fbdev: sis: error out if pixclock equals zero . * firewire: core: send bus reset promptly on gap count error . * fs: dlm: fix build with config_ipv6 disabled . * fs:jfs:ubsan:array-index-out-of-bounds in dbadjtree . * gpio: 74x164: enable output pins after registers are reset . * gpio: fix resource unwinding order in error path . * gpiolib: acpi: ignore touchpad wakeup on gpd g1619-04 . * gpiolib: fix the error path order in gpiochip_add_data_with_key . * hid: apple: add 2021 magic keyboard fn key mapping . * hid: apple: add support for the 2021 magic keyboard . * hid: wacom: do not register input devices until after hid_hw_start . * hid: wacom: generic: avoid reporting a serial of "0" to userspace . * hwmon: mutex for tach reading . * hwmon: enlarge per package core count limit . * hwmon: fix bogus core_id to attr name mapping . * hwmon: fix out-of-bounds memory access . * i2c: i801: fix block process call transactions . * i2c: i801: remove i801_set_block_buffer_mode . * i2c: imx: add timer for handling the stop condition . * i2c: imx: when being a target, mark the last read as processed . * i3c: master: cdns: update maximum prescaler value for i2c clock . * ib/hfi1: fix a memleak in init_credit_return * ib/hfi1: fix sdma.h tx- greater thannum_descs off-by-one error * iio: accel: bma400: fix a compilation problem . * iio: adc: ad7091r: set alert bit in config register . * iio: core: fix memleak in iio_device_register_sysfs . * iio: hid-sensor-als: return 0 for hid_usage_sensor_time_timestamp . * iio: magnetometer: rm3100: add boundary check for the value read from rm3100_reg_tmrc . * input: iqs269a - switch to define_simple_dev_pm_ops and pm_sleep_ptr . * input: xpad - add lenovo legion go controllers . * irqchip/gic-v3-its: fix gicv4.1 vpe affinity update . * irqchip/irq-brcmstb-l2: add write memory barrier before exit . * jfs: fix array-index-out-of-bounds in dbadjtree . * jfs: fix array-index-out-of-bounds in dinewext . * jfs: fix slab-out-of-bounds read in dtsearch . * jfs: fix uaf in jfs_evict_inode . * kbuild: fix changing elf file type for output of gen_btf for big endian . * kvm: s390: fix cc for successful pqap . * kvm: s390: fix setting of fpc register . * kvm: s390: vsie: fix race during shadow creation . * kvm: vmx: move verw closer to vmentry for mds mitigation . * kvm: vmx: use bt+jnc, i.e. eflags.cf to select vmresume vs. vmlaunch . * lan78xx: enable auto speed configuration for lan7850 if no eeprom is detected . * leds: trigger: panic: do not register panic notifier if creating the trigger failed . * lib/stackdepot: add depot_fetch_stack helper . * lib/stackdepot: add refcount for records . * lib/stackdepot: fix first entry having a 0-handle . * lib/stackdepot: move stack_record struct definition into the header . * libsubcmd: fix memory leak in uniq . * media: ddbridge: fix an error code problem in ddb_probe . * media: ir_toy: fix a memleak in irtoy_tx . * media: rc: bpf attach/detach requires write permission . * media: rockchip: rga: fix swizzling for rgb formats . * media: stk1160: fixed high volume of stk1160_dbg messages . * mfd: syscon: fix null pointer dereference in of_syscon_register . * mm,page_owner: display all stacks and their count . * mm,page_owner: filter out stacks by a threshold . * mm,page_owner: implement the tracking of the stacks count . * mm,page_owner: maintain own list of stack_records structs . * mm,page_owner: update documentation regarding page_owner_stacks . * mm/hwpoison: fix unpoison_memory . * mm/hwpoison: mf_mutex for soft offline and unpoison . * mm/hwpoison: remove mf_msg_buddy_2nd and mf_msg_poisoned_huge . * mm: memory-failure: fix potential unexpected return value from unpoison_memory . * mmc: core: fix emmc initialization with 1-bit bus connection . * mmc: core: use mrq.sbc in close-ended ffu . * mmc: mmc_spi: remove custom dma mapped buffers . * mmc: sdhci-xenon: add timeout for phy init complete . * mmc: sdhci-xenon: fix phy init clock stability . * mmc: slot-gpio: allow non-sleeping gpio ro . * modpost: trim leading spaces when processing source files list . * mtd: spinand: gigadevice: fix the get ecc status issue . * net: usb: dm9601: fix wrong return value in dm9601_mdio_read . * netfs, fscache: prevent oops in fscache_put_cache . * nilfs2: fix data corruption in dsync block recovery for small block sizes . * nilfs2: replace warn_ons for invalid dat metadata block requests . * nouveau/svm: fix kvcalloc argument order . * nouveau: fix function cast warnings . * ntfs: check overflow when iterating attr_records . * ntfs: fix use-after-free in ntfs_attr_find . * nvme-fabrics: fix i/o connect error handling . * nvme-host: fix the updating of the firmware version . * pci/aer: decode requester id when no error info found . * pci: add no pm reset quirk for nvidia spectrum devices . * pci: add pci_header_type_mfd definition . * pci: fix 64gt/s effective data rate calculation . * pci: only override amd usb controller if required . * pci: switchtec: fix stdev_release crash after surprise hot remove . * platform/x86: thinkpad_acpi: only update profile if successfully converted . * platform/x86: touchscreen_dmi: add info for the teclast x16 plus tablet . * platform/x86: touchscreen_dmi: allow partial matches for acpi names . * pm: core: remove unnecessary conversions . * pm: runtime: have devm_pm_runtime_enable handle pm_runtime_dont_use_autosuspend . * pnp: acpi: fix fortify warning . * power: supply: bq27xxx-i2c: do not free non existing irq . * powerpc/64: set task pt_regs- greater thanlink to the lr value on scv entry . * powerpc/powernv: fix fortify source warnings in opal-prd.c . * powerpc/pseries: add a clear modifier to ibm,pa/pi-features parser . * powerpc/pseries: rework lppaca_shared_proc to avoid debug_preempt . * powerpc/pseries: set cpu_ftr_dbell according to ibm,pi-features . * powerpc/watchpoint: disable pagefaults when getting user instruction . * powerpc/watchpoints: annotate atomic context in more places . * powerpc/watchpoints: disable preemption in thread_change_pc . * powerpc: add crtsavres.o to always-y instead of extra-y . * powerpc: do not include lppaca.h in paca.h . * pstore/ram: fix crash when setting number of cpus to an odd number . * ras/amd/atl: add mi300 row retirement support . * ras/amd/atl: fix bit overflow in denorm_addr_df4_np2 . * ras: introduce a fru memory poison manager . * rdma/bnxt_re: add a missing check in bnxt_qplib_query_srq * rdma/bnxt_re: return error for srq resize * rdma/core: fix uninit-value access in ib_get_eth_speed . * rdma/core: get ib width and speed from netdev . * rdma/irdma: add ae for too many rnrs * rdma/irdma: fix kasan issue with tasklet * rdma/irdma: set the cq read threshold for gen 1 * rdma/irdma: validate max_send_wr and max_recv_wr * rdma/qedr: fix qedr_create_user_qp error flow * rdma/srpt: fix function pointer cast warnings * rdma/srpt: support specifying the srpt_service_guid parameter * refresh patches.suse/dm_blk_ioctl-implement-path-failover-for-sg_io * regulator: core: only increment use_count when enable_count changes . * regulator: pwm-regulator: add validity checks in continuous .get_voltage . * revert "drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz" . * revert "drm/amd/pm: resolve reboot exception for si oland" . * revert "drm/amd: flush any delayed gfxoff on suspend entry" . * rpm/kernel-binary.spec.in: install scripts/gdb when enabled in config they are put into -devel subpackage. and a proper link to /usr/share/gdb/auto-load/ is created. * s390/qeth: fix potential loss of l3-ip@ in case of network issues . * s390: use the correct count for __iowrite64_copy . * sched/membarrier: reduce the ability to hammer on sys_membarrier . * scsi: core: move scsi_host_busy out of host lock for waking up eh handler . * scsi: core: move scsi_host_busy out of host lock if it is for per-command . * scsi: fnic: move fnic_fnic_flush_tx to a work queue . * scsi: hisi_sas: prevent parallel flr and controller reset . * scsi: ibmvfc: limit max hw queues by num_online_cpus . * scsi: ibmvfc: open-code reset loop for target reset . * scsi: isci: fix an error code problem in isci_io_request_build . * scsi: lpfc: add condition to delete ndlp object after sending bls_rjt to an abts . * scsi: lpfc: allow lpfc_plogi_confirm_nport logic to execute for fabric nodes . * scsi: lpfc: change lpfc_vport fc_flag member into a bitmask . * scsi: lpfc: change lpfc_vport load_flag member into a bitmask . * scsi: lpfc: change nlp state statistic counters into atomic_t . * scsi: lpfc: copyright updates for 14.4.0.0 patches . * scsi: lpfc: fix failure to delete vports when discovery is in progress . * scsi: lpfc: fix possible memory leak in lpfc_rcv_padisc . * scsi: lpfc: initialize status local variable in lpfc_sli4_repost_sgl_list . * scsi: lpfc: move handling of reset congestion statistics events . * scsi: lpfc: protect vport fc_nodes list with an explicit spin lock . * scsi: lpfc: remove d_id swap log message from trace event logger . * scsi: lpfc: remove nlp_rcv_plogi early return during rscn processing for ndlps . * scsi: lpfc: remove shost_lock protection for fc_host_port shost apis . * scsi: lpfc: replace deprecated strncpy with strscpy . * scsi: lpfc: save fpin frequency statistics upon receipt of peer cgn notifications . * scsi: lpfc: update lpfc version to 14.4.0.0 . * scsi: lpfc: use pci_header_type_mfd instead of literal . * scsi: lpfc: use sg_dma_len api to get struct scatterlist"s length . * scsi: mpi3mr: refresh sdev queue depth after controller reset . * scsi: revert "scsi: fcoe: fix potential deadlock on fip- greater thanctlr_lock" . * serial: 8250: remove serial_rs485 sanitization from em485 . * spi-mxs: fix chipselect glitch . * spi: hisi-sfc-v3xx: return irq_none if no interrupts were detected . * spi: ppc4xx: drop write-only variable . * spi: sh-msiof: avoid integer overflow in constants . * staging: iio: ad5933: fix type mismatch regression . * supported.conf: remove external flag from ibm supported modules. * tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd . * tomoyo: fix uaf write bug in tomoyo_write_control . * topology/sysfs: add format parameter to macro defining "show" functions for proc . * topology/sysfs: add ppin in sysfs under cpu topology . * tty: allow tiocslcktrmios with cap_checkpoint_restore . * ubsan: array-index-out-of-bounds in dtsplitroot . * usb: cdns3: fix memory double free when handle zero packet . * usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable . * usb: cdns3: modify the return value of cdns_set_active to void when config_pm_sleep is disabled . * usb: cdns3: put the cdns set active part outside the spin lock . * usb: cdns: readd old api . * usb: cdnsp: blocked some cdns3 specific code . * usb: cdnsp: fixed issue with incorrect detecting cdnsp family controllers . * usb: dwc3: gadget: do not disconnect if not started . * usb: dwc3: gadget: handle ep0 request dequeuing properly . * usb: dwc3: gadget: ignore end transfer delay on teardown . * usb: dwc3: gadget: queue pm runtime idle on disconnect event . * usb: dwc3: gadget: refactor ep0 forced stall/restart into a separate api . * usb: dwc3: gadget: submit endxfer command if delayed during disconnect . * usb: dwc3: host: set xhci_sg_trb_cache_size_quirk . * usb: f_mass_storage: forbid async queue when shutdown happen . * usb: gadget: core: add missing kerneldoc for vbus_work . * usb: gadget: core: adjust uevent timing on gadget unbind . * usb: gadget: core: help prevent panic during uvc unconfigure . * usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate . * usb: gadget: f_hid: fix report descriptor allocation . * usb: gadget: fix obscure lockdep violation for udc_mutex . * usb: gadget: fix use-after-free read in usb_udc_uevent . * usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc . * usb: gadget: ncm: avoid dropping datagrams of properly parsed ntbs . * usb: gadget: udc: core: offload usb_udc_vbus_handler processing . * usb: gadget: udc: core: prevent soft_connect_store race . * usb: gadget: udc: handle gadget_connect failure during bind operation . * usb: hub: check for alternate port before enabling a_alt_hnp_support . * usb: hub: replace hardcoded quirk value with bit macro . * usb: roles: do not get/set_role when usb_role_switch is unregistered . * usb: roles: fix null pointer issue when put module"s reference . * usb: serial: cp210x: add id for imst im871a-usb . * usb: serial: option: add fibocom fm101-gl variant . * usb: serial: qcserial: add new usb-id for dell wireless dw5826e . * watchdog: it87_wdt: keep wdtctrl bit 3 unmodified for it8784/it8786 . * wifi: ath11k: fix registration of 6ghz-only phy without the full channel range . * wifi: ath9k: fix potential array-index-out-of-bounds read in ath9k_htc_txstatus . * wifi: cfg80211: fix missing interfaces when dumping . * wifi: cfg80211: free beacon_ies when overridden from hidden bss . * wifi: iwlwifi: fix some error codes . * wifi: iwlwifi: mvm: avoid baid size integer overflow . * wifi: iwlwifi: uninitialized variable in iwl_acpi_get_ppag_table . * wifi: mac80211: adding missing drv_mgd_complete_tx call . * wifi: mac80211: fix race condition on enabling fast-xmit . * wifi: nl80211: reject iftype change with mesh id change . * wifi: rt2x00: restart beacon queue when hardware reset . * wifi: rtl8xxxu: add additional usb ids for rtl8192eu devices . * wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift . * wifi: wext-core: fix -wstringop-overflow warning in ioctl_standard_iw_point . * x86/asm: add _asm_rip macro for x86-64 suffix . * x86/bugs: add asm helpers for executing verw . * x86/bugs: use alternative instead of mds_user_clear static key . also add mds_user_clear to kabi severities since it"s strictly mitigation related so should be low risk. * x86/cpu: x86_feature_intel_ppin finally had a cpuid bit . * x86/entry_32: add verw just before userspace transition . * x86/entry_64: add verw just before userspace transition . * x86/mm: fix memory encryption features advertisement . * xfs: remove unused fields from struct xbtree_ifakeroot . * xfs: short circuit xfs_growfs_data_private if delta is zero . ## Special Instructions and Notes: * Please reboot the system after installing this update.