SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:2605-1
Rating:             important
References:         #1065729 #1071995 #1074701 #1083548 #1085030 
                    #1085235 #1085308 #1087078 #1087082 #1094912 
                    #1100394 #1102640 #1105412 #1111666 #1112178 
                    #1113956 #1120163 #1133021 #1144333 #1171988 
                    #1172108 #1172247 #1172418 #1172428 #1172781 
                    #1172782 #1172783 #1172871 #1172872 #1172963 
                    #1173485 #1173798 #1173954 #1174026 #1174070 
                    #1174161 #1174205 #1174247 #1174343 #1174356 
                    #1174387 #1174409 #1174438 #1174462 #1174484 
                    #1174547 #1174549 #1174550 #1174625 #1174658 
                    #1174685 #1174689 #1174699 #1174734 #1174757 
                    #1174771 #1174840 #1174841 #1174843 #1174844 
                    #1174845 #1174852 #1174873 #1174887 #1174904 
                    #1174926 #1174968 #1175062 #1175063 #1175064 
                    #1175065 #1175066 #1175067 #1175112 #1175127 
                    #1175128 #1175149 #1175199 #1175213 #1175228 
                    #1175232 #1175284 #1175393 #1175394 #1175396 
                    #1175397 #1175398 #1175399 #1175400 #1175401 
                    #1175402 #1175403 #1175404 #1175405 #1175406 
                    #1175407 #1175408 #1175409 #1175410 #1175411 
                    #1175412 #1175413 #1175414 #1175415 #1175416 
                    #1175417 #1175418 #1175419 #1175420 #1175421 
                    #1175422 #1175423 #1175440 #1175493 #1175518 
                    #1175526 #1175550 #1175654 #1175666 #1175668 
                    #1175669 #1175670 #1175767 #1175768 #1175769 
                    #1175770 #1175771 #1175772 #1175786 #1175992 
                    
Cross-References:   CVE-2018-3639 CVE-2020-0305 CVE-2020-10135
                    CVE-2020-14314 CVE-2020-14331 CVE-2020-14356
                    CVE-2020-16166 CVE-2020-24394
Affected Products:
                    SUSE Linux Enterprise Real Time Extension 12-SP5
______________________________________________________________________________

   An update that solves 8 vulnerabilities and has 122 fixes
   is now available.

Description:

   The SUSE Linux Enterprise 12 SP5 realtime kernel was updated to receive
   various security and bugfixes.


   The following security bugs were fixed:

   - CVE-2020-14314: Fixed a potential negative array index in do_split()
     (bsc#1173798).
   - CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem
     which could have led to privilege escalation (bsc#1175213).
   - CVE-2020-14331: Fixed a missing check in vgacon scrollback handling
     (bsc#1174205).
   - CVE-2020-16166: Fixed a potential issue which could have allowed remote
     attackers to make observations that help to obtain sensitive information
     about the internal state of the network RNG (bsc#1174757).
   - CVE-2020-24394: Fixed an issue which could set incorrect permissions on
     new filesystem objects when the filesystem lacks ACL support
     (bsc#1175518).
   - CVE-2020-10135: Legacy pairing and secure-connections pairing
     authentication Bluetooth might have allowed an unauthenticated user to
     complete authentication without pairing credentials via adjacent access
     (bsc#1171988).
   - CVE-2020-0305: Fixed a a possible use-after-free due to a race condition
     cdev_get(). This could lead to local escalation of privilege with System
     execution privileges needed (bnc#1174462).

   The following non-security bugs were fixed:

   - af_key: pfkey_dump needs parameter validation (git-fixes).
   - agp/intel: Fix a memory leak on module initialisation failure
     (git-fixes).
   - ACPI: kABI fixes for subsys exports (bsc#1174968).
   - ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq
     (bsc#1174968).
   - ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for
     hibernate (bsc#1174968).
   - ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
     (bsc#1174968).
   - ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
   - ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
   - ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
   - ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
   - ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
   - ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
   - ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
   - ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
   - ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
   - ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value
     (bsc#1111666).
   - ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
   - ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
   - ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO
     (bsc#1111666).
   - ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
   - ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops
     (bsc#1111666).
   - ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
   - ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems
     (bsc#1111666).
   - ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
   - ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
   - ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
   - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
   - ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
   - ALSA: hda/realtek - change to suitable link model for ASUS platform
     (bsc#1111666).
   - ALSA: hda/realtek - Check headset type by unplug and resume
     (bsc#1111666).
   - ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC
     (bsc#1111666).
   - ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC
     (bsc#1111666).
   - ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with
     ALC256 (bsc#1111666).
   - ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with
     ALC269VC (bsc#1111666).
   - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401)
     series with ALC289 (bsc#1111666).
   - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502)
     series with ALC289 (bsc#1111666).
   - ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
   - ALSA: hda/realtek: Fix add a "ultra_low_power" function for intel
     reference board (alc256) (bsc#1111666).
   - ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung
     Notebook Pen S (bsc#1111666).
   - ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666).
   - ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id
     (bsc#1111666).
   - ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (bsc#1111666).
   - ALSA: hda/realtek - Fix unused variable warning (bsc#1111666).
   - ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus
     G14(GA401) series with ALC289 (bsc#1111666).
   - ALSA: hda - reverse the setting value in the micmute_led_set
     (bsc#1111666).
   - ALSA: hda: Workaround for spurious wakeups on some Intel platforms
     (git-fixes).
   - ALSA: opl3: fix infoleak in opl3 (bsc#1111666).
   - ALSA: pci: delete repeated words in comments (bsc#1111666).
   - ALSA: seq: oss: Serialize ioctls (bsc#1111666).
   - ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes).
   - ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).
   - ALSA: usb-audio: add quirk for Pioneer DDJ-RB (bsc#1111666).
   - ALSA: usb-audio: add startech usb audio dock name (bsc#1111666).
   - ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (bsc#1111666).
   - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support
     (bsc#1111666).
   - ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control
     (bsc#1111666).
   - ALSA: usb-audio: endpoint : remove needless check before
     usb_free_coherent() (bsc#1111666).
   - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109
     (bsc#1174625).
   - ALSA: usb-audio: fix spelling mistake "buss" -> "bus" (bsc#1111666).
   - ALSA: usb-audio: ignore broken processing/extension unit (git-fixes).
   - ALSA: usb-audio: Update documentation comment for MS2109 quirk
     (git-fixes).
   - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109
     (bsc#1111666).
   - ALSA: usb/line6: remove 'defined but not used' warning (bsc#1111666).
   - arm64: Add MIDR encoding for HiSilicon Taishan CPUs (bsc#1174547).
   - arm64: Add MIDR encoding for NVIDIA CPUs (bsc#1174547).
   - arm64: add sysfs vulnerability show for meltdown (bsc#1174547).
   - arm64: Add sysfs vulnerability show for spectre-v1 (bsc#1174547).
   - arm64: add sysfs vulnerability show for spectre-v2 (bsc#1174547).
   - arm64: add sysfs vulnerability show for speculative store bypass
     (bsc#1174547).
   - arm64: Advertise mitigation of Spectre-v2, or lack thereof (bsc#1174547).
   - arm64: Always enable spectre-v2 vulnerability detection (bsc#1174547).
   - arm64: Always enable ssb vulnerability detection (bsc#1174547).
   - arm64: backtrace: Do not bother trying to unwind the userspace stack
     (bsc#1175397).
   - arm64: capabilities: Add NVIDIA Denver CPU to bp_harden list
     (bsc#1174547).
   - arm64: capabilities: Merge duplicate Cavium erratum entries
     (bsc#1174547).
   - arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE
     (bsc#1174547).
   - arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 (bsc#1175398).
   - arm64: Do not mask out PTE_RDONLY in pte_same() (bsc#1175393).
   - arm64: enable generic CPU vulnerabilites support (bsc#1174547).
   - arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default (bsc#1175394).
   - arm64: errata: Do not define type field twice for arm64_errata entries
     (bsc#1174547).
   - arm64: errata: Update stale comment (bsc#1174547).
   - arm64: Get rid of __smccc_workaround_1_hvc_* (bsc#1174547).
   - arm64: kpti: Avoid rewriting early page tables when KASLR is enabled
     (bsc#1174547).
   - arm64: kpti: Update arm64_kernel_use_ng_mappings() when forced on
     (bsc#1174547).
   - arm64: kpti: Whitelist Cortex-A CPUs that do not implement the CSV3
     field (bsc#1174547).
   - arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs (bsc#1174547).
   - arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1
     (bsc#1133021).
   - arm64: KVM: Guests can skip __install_bp_hardening_cb()s HYP work
     (bsc#1174547).
   - arm64: KVM: Use SMCCC_ARCH_WORKAROUND_1 for Falkor BP hardening
     (bsc#1174547).
   - arm64: mm: Fix pte_mkclean, pte_mkdirty semantics (bsc#1175526).
   - arm64: Provide a command line to disable spectre_v2 mitigation
     (bsc#1174547).
   - arm64: Silence clang warning on mismatched value/register sizes
     (bsc#1175396).
   - arm64/speculation: Support 'mitigations=' cmdline option (bsc#1174547).
   - arm64: ssbd: explicitly depend on <linux/prctl.h> (bsc#1175399).
   - arm64: ssbs: Do not treat CPUs with SSBS as unaffected by SSB
     (bsc#1174547).
   - arm64: ssbs: Fix context-switch when SSBS is present on all CPUs
     (bsc#1175669).
   - arm64/sve: <uapi/asm/ptrace.h> should not depend on
     <uapi/linux/prctl.h> (bsc#1175401).
   - arm64/sve: Fix wrong free for task->thread.sve_state (bsc#1175400).
   - arm64: tlbflush: avoid writing RES0 bits (bsc#1175402).
   - arm64: Use firmware to detect CPUs that are not affected by Spectre-v2
     (bsc#1174547).
   - ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17 (bsc#1133021).
   - ARM: KVM: invalidate icache on guest exit for Cortex-A15 (bsc#1133021).
   - ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15
     (bsc#1133021).
   - ASoC: hda/tegra: Set buffer alignment to 128 bytes (bsc#1111666).
   - ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (git-fixes).
   - AX.25: Fix out-of-bounds read in ax25_connect() (git-fixes).
   - AX.25: Prevent integer overflows in connect and sendmsg (git-fixes).
   - AX.25: Prevent out-of-bounds read in ax25_sendmsg() (git-fixes).
   - ax88172a: fix ax88172a_unbind() failures (git-fixes).
   - b43: Remove uninitialized_var() usage (git-fixes).
   - block: Fix use-after-free in blkdev_get() (bsc#1174843).
   - Bluetooth: Fix slab-out-of-bounds read in
     hci_extended_inquiry_result_evt() (bsc#1111666).
   - Bluetooth: Fix update of connection state in `hci_encrypt_cfm`
     (git-fixes).
   - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
     (bsc#1111666).
   - Bluetooth: Prevent out-of-bounds read in
     hci_inquiry_result_with_rssi_evt() (bsc#1111666).
   - bonding: fix active-backup failover for current ARP slave (bsc#1174771).
   - bonding: fix a potential double-unregister (git-fixes).
   - bonding: show saner speed for broadcast mode (git-fixes).
   - bpf: Fix map leak in HASH_OF_MAPS map (git-fixes).
   - brcmfmac: keep SDIO watchdog running when console_interval is non-zero
     (bsc#1111666).
   - brcmfmac: set state of hanger slot to FREE when flushing PSQ
     (bsc#1111666).
   - brcmfmac: To fix Bss Info flag definition Bug (bsc#1111666).
   - btrfs: add assertions for tree == inode->io_tree to extent IO helpers     (bsc#1174438).
   - btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438).
   - btrfs: Always use a cached extent_state in
     btrfs_lock_and_flush_ordered_range (bsc#1174438).
   - btrfs: change timing for qgroup reserved space for ordered extents to
     fix reserved space leak (bsc#1172247).
   - btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range
     (bsc#1174438).
   - btrfs: file: reserve qgroup space after the hole punch range is locked
     (bsc#1172247).
   - btrfs: fix a block group ref counter leak after failure to remove block
     group (bsc#1175149).
   - btrfs: fix block group leak when removing fails (bsc#1175149).
   - btrfs: fix bytes_may_use underflow when running balance and scrub in
     parallel (bsc#1175149).
   - btrfs: fix corrupt log due to concurrent fsync of inodes with shared
     extents (bsc#1175149).
   - btrfs: fix data block group relocation failure due to concurrent scrub
     (bsc#1175149).
   - btrfs: fix double free on ulist after backref resolution failure
     (bsc#1175149).
   - btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range
     (bsc#1174438).
   - btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof
     (bsc#1174438).
   - btrfs: fix fatal extent_buffer readahead vs releasepage race
     (bsc#1175149).
   - btrfs: fix hang on snapshot creation after RWF_NOWAIT write
     (bsc#1174438).
   - btrfs: fix memory leaks after failure to lookup checksums during inode
     logging (bsc#1175550).
   - btrfs: fix page leaks after failure to lock page for delalloc
     (bsc#1175149).
   - btrfs: fix race between block group removal and block group creation
     (bsc#1175149).
   - btrfs: fix RWF_NOWAIT write not failling when we need to cow
     (bsc#1174438).
   - btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO
     (bsc#1174438).
   - btrfs: fix space_info bytes_may_use underflow after nocow buffered write
     (bsc#1175149).
   - btrfs: fix space_info bytes_may_use underflow during space cache
     writeout (bsc#1175149).
   - btrfs: fix wrong file range cleanup after an error filling dealloc range
     (bsc#1175149).
   - btrfs: inode: fix NULL pointer dereference if inode does not need
     compression (bsc#1174484).
   - btrfs: inode: move qgroup reserved space release to the callers of
     insert_reserved_file_extent() (bsc#1172247).
   - btrfs: inode: refactor the parameters of insert_reserved_file_extent()
     (bsc#1172247).
   - btrfs: make btrfs_ordered_extent naming consistent with
     btrfs_file_extent_item (bsc#1172247).
   - btrfs: Open code btrfs_write_and_wait_marked_extents (bsc#1175149).
   - btrfs: qgroup: allow to unreserve range without releasing other ranges
     (bsc#1120163).
   - btrfs: qgroup: fix data leak caused by race between writeback and
     truncate (bsc#1172247).
   - btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve
     retry-after-EDQUOT (bsc#1120163).
   - btrfs: qgroup: try to flush qgroup space when we get -EDQUOT
     (bsc#1120163).
   - btrfs: Rename and export clear_btree_io_tree (bsc#1175149).
   - btrfs: Return EAGAIN if we can't start no snpashot write in
     check_can_nocow (bsc#1174438).
   - btrfs: treat RWF_{,D}SYNC writes as sync for CRCs (bsc#1175493).
   - btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438).
   - btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range
     (bsc#1174438).
   - bus: hisi_lpc: Add .remove method to avoid driver unbind crash
     (bsc#1174658).
   - bus: hisi_lpc: Do not fail probe for unrecognised child devices
     (bsc#1174658).
   - bus: hisi_lpc: Unregister logical PIO range to avoid potential
     use-after-free (bsc#1174658).
   - cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes).
   - cfg80211: check vendor command doit pointer before use (git-fixes).
   - cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
   - cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333
     bsc#1172428).
   - cifs: fix double free error on share and prefix (bsc#1144333
     bsc#1172428).
   - cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333
     bsc#1172428).
   - cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect
     (bsc#1144333 bsc#1172428).
   - cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect()
     (bsc#1144333 bsc#1172428).
   - cifs: only update prefix path of DFS links in cifs_tree_connect()
     (bsc#1144333 bsc#1172428).
   - cifs: reduce number of referral requests in DFS link lookups
     (bsc#1144333 bsc#1172428).
   - cifs: rename reconn_inval_dfs_target() (bsc#1144333 bsc#1172428).
   - clk: at91: clk-generated: check best_rate against ranges (bsc#1111666).
   - clk: clk-atlas6: fix return value check in atlas6_clk_init()
     (bsc#1111666).
   - clk: iproc: round clock rate to the closest (bsc#1111666).
   - clk: spear: Remove uninitialized_var() usage (git-fixes).
   - clk: st: Remove uninitialized_var() usage (git-fixes).
   - config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References:
     bsc#1174549
   - console: newport_con: fix an issue about leak related system resources
     (git-fixes).
   - crypto: ccp - Fix use of merged scatterlists (git-fixes).
   - crypto: cpt - do not sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified
     (git-fixes).
   - crypto: qat - fix double free in qat_uclo_create_batch_init_list
     (git-fixes).
   - crypto: rockchip - fix scatterlist nents error (git-fixes).
   - crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes).
   - crypto: talitos - check AES key size (git-fixes).
   - crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK (git-fixes).
   - crypto: talitos - fix IPsec cipher in length (git-fixes).
   - crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes).
   - crypto: virtio: Fix src/dst scatterlist calculation in
     __virtio_crypto_skcipher_do_req() (git-fixes).
   - dev: Defer free of skbs in flush_backlog (git-fixes).
   - devinet: fix memleak in inetdev_init() (networking-stable-20_06_07).
   - /dev/mem: Add missing memory barriers for devmem_inode (git-fixes).
   - /dev/mem: Revoke mappings when a driver claims the region (git-fixes).
   - devres: keep both device name and resource name in pretty name
     (git-fixes).
   - dlm: Fix kobject memleak (bsc#1175768).
   - dlm: remove BUG() before panic() (bsc#1174844).
   - dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler
     (git-fixes).
   - Documentation/networking: Add net DIM documentation (bsc#1174852).
   - dpaa2-eth: Fix passing zero to 'PTR_ERR' warning (bsc#1175403).
   - dpaa2-eth: free already allocated channels on probe defer (bsc#1175404).
   - dpaa2-eth: prevent array underflow in update_cls_rule() (bsc#1175405).
   - dpaa_eth: add dropped frames to percpu ethtool stats (bsc#1174550).
   - dpaa_eth: add newline in dev_err() msg (bsc#1174550).
   - dpaa_eth: avoid timestamp read on error paths (bsc#1175406).
   - dpaa_eth: change DMA device (bsc#1174550).
   - dpaa_eth: cleanup skb_to_contig_fd() (bsc#1174550).
   - dpaa_eth: defer probing after qbman (bsc#1174550).
   - dpaa_eth: extend delays in ndo_stop (bsc#1174550).
   - dpaa_eth: fix DMA mapping leak (bsc#1174550).
   - dpaa_eth: Fix one possible memleak in dpaa_eth_probe (bsc#1174550).
   - dpaa_eth: FMan erratum A050385 workaround (bsc#1174550).
   - dpaa_eth: perform DMA unmapping before read (bsc#1175407).
   - dpaa_eth: register a device link for the qman portal used (bsc#1174550).
   - dpaa_eth: remove netdev_err() for user errors (bsc#1174550).
   - dpaa_eth: remove redundant code (bsc#1174550).
   - dpaa_eth: simplify variables used in dpaa_cleanup_tx_fd() (bsc#1174550).
   - dpaa_eth: use a page to store the SGT (bsc#1174550).
   - dpaa_eth: use fd information in dpaa_cleanup_tx_fd() (bsc#1174550).
   - dpaa_eth: use only one buffer pool per interface (bsc#1174550).
   - dpaa_eth: use page backed rx buffers (bsc#1174550).
   - driver core: Avoid binding drivers to dead devices (git-fixes).
   - Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE (git-fixes).
   - Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops
     (bsc#1175127, bsc#1175128).
   - drivers/perf: hisi: Fix typo in events attribute array (bsc#1175408).
   - drivers/perf: hisi: Fixup one DDRC PMU register offset (bsc#1175410).
   - drivers/perf: hisi: Fix wrong value for all counters enable
     (bsc#1175409).
   - drm: Added orientation quirk for ASUS tablet model T103HAF (bsc#1111666).
   - drm/amdgpu: avoid dereferencing a NULL pointer (bsc#1111666).
   - drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume
     (bsc#1111666).
   - drm/amdgpu: Fix NULL dereference in dpm sysfs handlers (bsc#1113956)
   - drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (git-fixes).
   - drm/amdgpu: Replace invalid device ID with a valid device ID
     (bsc#1113956)
   - drm/arm: fix unintentional integer overflow on left shift (git-fixes).
   - drm/bridge: dw-hdmi: Do not cleanup i2c adapter and ddc ptr in
     (bsc#1113956)
   - drm/bridge: sil_sii8620: initialize return of sii8620_readb (git-fixes).
   - drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1113956)
   - drm/debugfs: fix plain echo to connector "force" attribute (bsc#1111666).
   - drm/etnaviv: Fix error path on failure to enable bus clk (git-fixes).
   - drm/etnaviv: fix ref count leak via pm_runtime_get_sync (bsc#1111666).
   - drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi
     (bsc#1112178)
   - drm: hold gem reference until object is no longer accessed (bsc#1113956)
   - drm/imx: fix use after free (git-fixes).
   - drm/imx: imx-ldb: Disable both channels for split mode in enc->disable()
     (git-fixes).
   - drm/imx: tve: fix regulator_disable error path (git-fixes).
   - drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (git-fixes).
   - drm/msm: ratelimit crtc event overflow error (bsc#1111666).
   - drm/nouveau/fbcon: fix module unload when fbcon init has failed for some
     reason (git-fixes).
   - drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (git-fixes).
   - drm/nouveau: fix multiple instances of reference count leaks
     (bsc#1111666).
   - drm/panel: otm8009a: Drop unnessary backlight_device_unregister()
     (git-fixes).
   - drm: panel: simple: Fix bpc for LG LB070WV8 panel (git-fixes).
   - drm/radeon: disable AGP by default (bsc#1111666).
   - drm/radeon: fix array out-of-bounds read and write issues (git-fixes).
   - drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync
     (bsc#1111666).
   - drm/rockchip: fix VOP_WIN_GET macro (bsc#1175411).
   - drm/tilcdc: fix leak & null ref in panel_connector_get_modes
     (bsc#1111666).
   - drm/ttm/nouveau: do not call tt destroy callback on alloc failure
     (bsc#1175232).
   - drm/vmwgfx: Fix two list_for_each loop exit tests (bsc#1111666).
   - drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (bsc#1111666).
   - efi/memreserve: deal with memreserve entries in unmapped memory
     (bsc#1174685).
   - ext4: check journal inode extents more carefully (bsc#1173485).
   - ext4: do not allow overlapping system zones (bsc#1173485).
   - ext4: fix checking of directory entry validity for inline directories
     (bsc#1175771).
   - ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1174840).
   - ext4: handle error of ext4_setup_system_zone() on remount (bsc#1173485).
   - fat: do not allow to mount if the FAT length == 0 (bsc#1174845).
   - fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
     (bsc#1112178)
   - firmware: google: check if size is valid when decoding VPD data
     (git-fixes).
   - firmware: google: increment VPD key_len properly (git-fixes).
   - fpga: dfl: fix bug in port reset handshake (git-fixes).
   - fsl/fman: add API to get the device behind a fman port (bsc#1174550).
   - fsl/fman: detect FMan erratum A050385 (bsc#1174550).
   - fsl/fman: do not touch liodn base regs reserved on non-PAMU SoCs
     (bsc#1174550).
   - fsl/fman: remove unused struct member (bsc#1174550).
   - fuse: fix memleak in cuse_channel_open (bsc#1174926).
   - fuse: fix missing unlock_page in fuse_writepage() (bsc#1174904).
   - fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (bsc#1175062).
   - fuse: fix weird page warning (bsc#1175063).
   - fuse: flush dirty data/metadata before non-truncate setattr
     (bsc#1175064).
   - fuse: truncate pending writes on O_TRUNC (bsc#1175065).
   - fuse: verify attributes (bsc#1175066).
   - fuse: verify nlink (bsc#1175067).
   - genetlink: remove genl_bind (networking-stable-20_07_17).
   - go7007: add sanity checking for endpoints (git-fixes).
   - gpu: host1x: debug: Fix multiple channels emitting messages
     simultaneously (bsc#1111666).
   - HID: hiddev: fix mess in hiddev_open() (git-fixes).
   - HID: magicmouse: do not set up autorepeat (git-fixes).
   - HISI LPC: Re-Add ACPI child enumeration support (bsc#1174658).
   - HISI LPC: Stop using MFD APIs (bsc#1174658).
   - hv_netvsc: Fix error handling in netvsc_attach() (git-fixes).
   - hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
   - hv_netvsc: Fix unwanted wakeup in netvsc_attach() (git-fixes).
   - i2c: eg20t: Load module automatically if ID matches (bsc#1111666).
   - i2c: rcar: slave: only send STOP event when we have been addressed
     (bsc#1111666).
   - i40e: Fix crash during removing i40e driver (git-fixes).
   - i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (git-fixes).
   - IB/hfi1: Do not destroy hfi1_wq when the device is shut down
     (bsc#1174409).
   - IB/hfi1: Do not destroy link_wq when the device is shut down
     (bsc#1174409).
   - ibmveth: Fix use of ibmveth in a bridge (bsc#1174387 ltc#187506).
   - ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
   - include/linux/poison.h: remove obsolete comment (git fixes (poison)).
   - Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list
     (bsc#1111666).
   - input: i8042 - Remove special PowerPC handling (git-fixes).
   - Input: sentelic - fix error return when fsp_reg_write fails
     (bsc#1111666).
   - integrity: remove redundant initialization of variable ret (git-fixes).
   - io-mapping: indicate mapping failure (git-fixes).
   - ip6_gre: fix null-ptr-deref in ip6gre_init_net() (git-fixes).
   - ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
     (networking-stable-20_06_28).
   - ip_tunnel: Emit events for post-register MTU changes (git-fixes).
   - ip_tunnel: fix use-after-free in ip_tunnel_lookup()
     (networking-stable-20_06_28).
   - ip_tunnel: restore binding to ifaces with a large mtu (git-fixes).
   - ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg
     (networking-stable-20_07_17).
   - ipv4: Silence suspicious RCU usage warning (git-fixes).
   - ipv6: fix memory leaks on IPV6_ADDRFORM path (git-fixes).
   - ipvlan: fix device features (git-fixes).
   - ipvs: allow connection reuse for unconfirmed conntrack (git-fixes).
   - ipvs: fix refcount usage for conns in ops mode (git-fixes).
   - ipvs: fix the connection sync failed in some cases (bsc#1174699).
   - irqchip/gic: Atomically update affinity (bsc#1111666).
   - iwlegacy: Check the return value of pcie_capability_read_*()
     (bsc#1111666).
   - jbd2: add the missing unlock_buffer() in the error path of
     jbd2_write_superblock() (bsc#1175772).
   - kABI: genetlink: remove genl_bind (kabi).
   - kabi: hv: prevent struct device_node to become defined (bsc#1172871).
   - kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi).
   - kernel/cpu_pm: Fix uninitted local in cpu_pm (git fixes (kernel/pm)).
   - kernfs: do not call fsnotify() with name without a parent (bsc#1175770).
   - KVM: arm64: Ensure 'params' is initialised when looking up sys register
     (bsc#1133021).
   - KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (bsc#1133021).
   - KVM: arm/arm64: Fix young bit from mmu notifier (bsc#1133021).
   - KVM: arm/arm64: vgic: Do not rely on the wrong pending table
     (bsc#1133021).
   - KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections
     (bsc#1133021).
   - KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests (bsc#1133021).
   - KVM: arm: Make inject_abt32() inject an external abort instead
     (bsc#1133021).
   - kvm: Change offset in kvm_write_guest_offset_cached to unsigned
     (bsc#1133021).
   - KVM: Check for a bad hva before dropping into the ghc slow path
     (bsc#1133021).
   - KVM: PPC: Book3S PR: Remove uninitialized_var() usage (bsc#1065729).
   - l2tp: add sk_family checks to l2tp_validate_socket
     (networking-stable-20_06_07).
   - l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07).
   - l2tp: remove skb_dst_set() from l2tp_xmit_skb()
     (networking-stable-20_07_17).
   - leds: 88pm860x: fix use-after-free on unbind (git-fixes).
   - leds: core: Flush scheduled work for system suspend (git-fixes).
   - leds: da903x: fix use-after-free on unbind (git-fixes).
   - leds: lm3533: fix use-after-free on unbind (git-fixes).
   - leds: lm355x: avoid enum conversion warning (git-fixes).
   - leds: wm831x-status: fix use-after-free on unbind (git-fixes).
   - lib/dim: Fix -Wunused-const-variable warnings (bsc#1174852).
   - lib: dimlib: fix help text typos (bsc#1174852).
   - lib: logic_pio: Add logic_pio_unregister_range() (bsc#1174658).
   - lib: logic_pio: Avoid possible overlap for unregistering regions
     (bsc#1174658).
   - lib: logic_pio: Fix RCU usage (bsc#1174658).
   - linux/dim: Add completions count to dim_sample (bsc#1174852).
   - linux/dim: Fix overflow in dim calculation (bsc#1174852).
   - linux/dim: Move implementation to .c files (bsc#1174852).
   - linux/dim: Move logic to dim.h (bsc#1174852).
   - linux/dim: Remove "net" prefix from internal DIM members (bsc#1174852).
   - linux/dim: Rename externally exposed macros (bsc#1174852).
   - linux/dim: Rename externally used net_dim members (bsc#1174852).
   - linux/dim: Rename net_dim_sample() to net_dim_update_sample()
     (bsc#1174852).
   - liquidio: Fix wrong return value in cn23xx_get_pf_num() (git-fixes).
   - llc: make sure applications use ARPHRD_ETHER
     (networking-stable-20_07_17).
   - mac80211: mesh: Free ie data when leaving mesh (git-fixes).
   - mac80211: mesh: Free pending skb when destroying a mpath (git-fixes).
   - MAINTAINERS: add entry for Dynamic Interrupt Moderation (bsc#1174852).
   - md-cluster: Fix potential error pointer dereference in resize_bitmaps()
     (git-fixes).
   - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5
     (git-fixes).
   - media: cec: silence shift wrapping warning in __cec_s_log_addrs()
     (git-fixes).
   - media: exynos4-is: Add missed check for pinctrl_lookup_state()
     (git-fixes).
   - media: firewire: Using uninitialized values in node_probe() (git-fixes).
   - media: omap3isp: Add missed v4l2_ctrl_handler_free() for
     preview_init_entities() (git-fixes).
   - mfd: arizona: Ensure 32k clock is put on driver unbind and error
     (git-fixes).
   - mfd: dln2: Run event handler loop under spinlock (git-fixes).
   - mfd: rk808: Fix RK818 ID template (bsc#1175412).
   - mld: fix memory leak in ipv6_mc_destroy_dev()
     (networking-stable-20_06_28).
   - mmc: sdhci: do not enable card detect interrupt for gpio cd type
     (bsc#1111666).
   - mm: filemap: clear idle flag for writes (bsc#1175769).
   - mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate
     (git fixes (mm/migrate)).
   - mm/mmu_notifier: use hlist_add_head_rcu() (git fixes (mm/mmu_notifiers)).
   - mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (git fixes
     (mm/compaction)).
   - mm/rmap.c: do not reuse anon_vma if we just want a copy (git fixes
     (mm/rmap)).
   - mm/shmem.c: cast the type of unmap_start to u64 (git fixes (mm/shmem)).
   - mm, thp: fix defrag setting if newline is not used (git fixes (mm/thp)).
   - mm/vunmap: add cond_resched() in vunmap_pmd_range (bsc#1175654
     ltc#184617).
   - mtd: spi-nor: Fix an error code in spi_nor_read_raw() (bsc#1175413).
   - mtd: spi-nor: fix kernel-doc for spi_nor::info (bsc#1175414).
   - mtd: spi-nor: fix kernel-doc for spi_nor::reg_proto (bsc#1175415).
   - mtd: spi-nor: fix silent truncation in spi_nor_read_raw() (bsc#1175416).
   - mwifiex: Prevent memory corruption handling keys (git-fixes).
   - net: Added pointer check for dst->ops->neigh_lookup in
     dst_neigh_lookup_skb (git-fixes).
   - net: be more gentle about silly gso requests coming from user
     (networking-stable-20_06_07).
   - net: bridge: enfore alignment for ethernet address
     (networking-stable-20_06_28).
   - net: check untrusted gso_size at kernel entry
     (networking-stable-20_06_07).
   - net: core: reduce recursion limit value (networking-stable-20_06_28).
   - net: Do not clear the sock TX queue in sk_set_socket()
     (networking-stable-20_06_28).
   - net: dsa: b53: check for timeout (git-fixes).
   - net: dsa: bcm_sf2: Fix node reference count (git-fixes).
   - net: ena: Add first_interrupt field to napi struct (bsc#1174852).
   - net: ena: add reserved PCI device ID (bsc#1174852).
   - net: ena: add support for reporting of packet drops (bsc#1174852).
   - net: ena: add support for the rx offset feature (bsc#1174852).
   - net: ena: add support for traffic mirroring (bsc#1174852).
   - net: ena: add unmask interrupts statistics to ethtool (bsc#1174852).
   - net: ena: allow setting the hash function without changing the key
     (bsc#1174852).
   - net: ena: avoid unnecessary admin command when RSS function set fails
     (bsc#1174852).
   - net: ena: avoid unnecessary rearming of interrupt vector when
     busy-polling (bsc#1174852).
   - net: ena: change default RSS hash function to Toeplitz (bsc#1174852).
   - net: ena: change num_queues to num_io_queues for clarity and consistency
     (bsc#1174852).
   - net: ena: changes to RSS hash key allocation (bsc#1174852).
   - net: ena: Change WARN_ON expression in ena_del_napi_in_range()
     (bsc#1174852).
   - net: ena: clean up indentation issue (bsc#1174852).
   - net: ena: cosmetic: change ena_com_stats_admin stats to u64
     (bsc#1174852).
   - net: ena: cosmetic: code reorderings (bsc#1174852).
   - net: ena: cosmetic: extract code to ena_indirection_table_set()
     (bsc#1174852).
   - net: ena: cosmetic: fix line break issues (bsc#1174852).
   - net: ena: cosmetic: fix spacing issues (bsc#1174852).
   - net: ena: cosmetic: fix spelling and grammar mistakes in comments
     (bsc#1174852).
   - net: ena: cosmetic: minor code changes (bsc#1174852).
   - net: ena: cosmetic: remove unnecessary code (bsc#1174852).
   - net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h
     macros (bsc#1174852).
   - net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation()
     (bsc#1174852).
   - net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
   - net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1174852).
   - net: ena: drop superfluous prototype (bsc#1174852).
   - net: ena: enable support of rss hash key and function changes
     (bsc#1174852).
   - net: ena: enable the interrupt_moderation in driver_supported_features
     (bsc#1174852).
   - net: ena: ethtool: clean up minor indentation issue (bsc#1174852).
   - net: ena: ethtool: get_channels: use combined only (bsc#1174852).
   - net: ena: ethtool: remove redundant non-zero check on rc (bsc#1174852).
   - net: ena: ethtool: support set_channels callback (bsc#1174852).
   - net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
   - net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1174852).
   - net: ena: fix error returning in ena_com_get_hash_function()
     (bsc#1174852).
   - net: ena: fix incorrect setting of the number of msix vectors     (bsc#1174852).
   - net: ena: fix incorrect update of intr_delay_resolution (bsc#1174852).
   - net: ena: fix request of incorrect number of IRQ vectors (bsc#1174852).
   - net: ena: fix update of interrupt moderation register (bsc#1174852).
   - net: ena: Fix using plain integer as NULL pointer in
     ena_init_napi_in_range (bsc#1174852).
   - net: ena: implement XDP drop support (bsc#1174852).
   - net: ena: Implement XDP_TX action (bsc#1174852).
   - net: ena: make ethtool -l show correct max number of queues
     (bsc#1174852).
   - net: ena: Make missed_tx stat incremental (bsc#1083548).
   - net: ena: Make some functions static (bsc#1174852).
   - net: ena: move llq configuration from ena_probe to ena_device_init()
     (bsc#1174852).
   - net: ena: multiple queue creation related cleanups (bsc#1174852).
   - net: ena: Prevent reset after device destruction (bsc#1083548).
   - net: ena: reduce driver load time (bsc#1174852).
   - net: ena: remove all old adaptive rx interrupt moderation code from
     ena_com (bsc#1174852).
   - net: ena: remove code duplication in
     ena_com_update_nonadaptive_moderation_interval _*() (bsc#1174852).
   - net: ena: remove code that does nothing (bsc#1174852).
   - net: ena: remove ena_restore_ethtool_params() and relevant fields
     (bsc#1174852).
   - net: ena: remove old adaptive interrupt moderation code from ena_netdev
     (bsc#1174852).
   - net: ena: remove redundant print of number of queues (bsc#1174852).
   - net: ena: remove set but not used variable 'hash_key' (bsc#1174852).
   - net: ena: remove set but not used variable 'rx_ring' (bsc#1174852).
   - net: ena: rename ena_com_free_desc to make API more uniform
     (bsc#1174852).
   - net: ena: Select DIMLIB for ENA_ETHERNET (bsc#1174852).
   - net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1174852).
   - net: ena: support new LLQ acceleration mode (bsc#1174852).
   - net: ena: switch to dim algorithm for rx adaptive interrupt moderation
     (bsc#1174852).
   - net: ena: use explicit variable size for clarity (bsc#1174852).
   - net: ena: use SHUTDOWN as reset reason when closing interface
     (bsc#1174852).
   - net: ena: xdp: update napi budget for DROP and ABORTED (bsc#1174852).
   - net: ena: xdp: XDP_TX: fix memory leak (bsc#1174852).
   - net: ethernet: broadcom: have drivers select DIMLIB as needed
     (bsc#1174852).
   - net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
   - net: fec: correct the error path for regulator disable in probe
     (git-fixes).
   - netfilter: x_tables: add counters allocation wrapper (git-fixes).
   - netfilter: x_tables: cap allocations at 512 mbyte (git-fixes).
   - netfilter: x_tables: limit allocation requests for blob rule heads
     (git-fixes).
   - net: Fix a documentation bug wrt. ip_unprivileged_port_start (git-fixes).
   - net: fix memleak in register_netdevice() (networking-stable-20_06_28).
   - net: Fix the arp error in some cases (networking-stable-20_06_28).
   - net: gre: recompute gre csum for sctp over gre tunnels (git-fixes).
   - net: hns3: add autoneg and change speed support for fibre port
     (bsc#1174070).
   - net: hns3: add support for FEC encoding control (bsc#1174070).
   - net: hns3: add support for multiple media type (bsc#1174070).
   - net: hns3: fix a not link up issue when fibre port supports autoneg
     (bsc#1174070).
   - net: hns3: fix for FEC configuration (bsc#1174070).
   - net: hns3: fix port capbility updating issue (bsc#1174070).
   - net: hns3: fix port setting handle for fibre port (bsc#1174070).
   - net: hns3: fix selftest fail issue for fibre port with autoneg on
     (bsc#1174070).
   - net: hns3: restore the MAC autoneg state after reset (bsc#1174070).
   - net: increment xmit_recursion level in dev_direct_xmit()
     (networking-stable-20_06_28).
   - net: ip6_gre: Request headroom in __gre6_xmit() (git-fixes).
   - net: lan78xx: add missing endpoint sanity check (git-fixes).
   - net: lan78xx: fix transfer-buffer memory leak (git-fixes).
   - net: make symbol 'flush_works' static (git-fixes).
   - net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07).
   - net: netsec: Fix signedness bug in netsec_probe() (bsc#1175417).
   - net: netsec: initialize tx ring on ndo_open (bsc#1175418).
   - net: phy: Check harder for errors in get_phy_id() (bsc#1111666).
   - net: Set fput_needed iff FDPUT_FPUT is set (git-fixes).
   - net: socionext: Fix a signedness bug in ave_probe() (bsc#1175419).
   - net: socionext: replace napi_alloc_frag with the netdev variant on init
     (bsc#1175420).
   - net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
   - net: udp: Fix wrong clean up for IS_UDPLITE macro (git-fixes).
   - net: update net_dim documentation after rename (bsc#1174852).
   - net: usb: ax88179_178a: fix packet alignment padding
     (networking-stable-20_06_28).
   - net: usb: qmi_wwan: add support for Quectel EG95 LTE modem
     (networking-stable-20_07_17).
   - net: usb: qmi_wwan: add Telit 0x1050 composition
     (networking-stable-20_06_07).
   - net: usb: qmi_wwan: add Telit LE910C1-EUX composition
     (networking-stable-20_06_07).
   - nfc: nci: add missed destroy_workqueue in nci_register_device
     (git-fixes).
   - NTB: Fix an error in get link status (git-fixes).
   - ntb_netdev: fix sleep time mismatch (git-fixes).
   - NTB: ntb_transport: Use scnprintf() for avoiding potential buffer
     overflow (git-fixes).
   - nvme: explicitly update mpath disk capacity on revalidation (git-fixes).
   - nvme: fix possible deadlock when I/O is blocked (git-fixes).
   - nvme-multipath: do not fall back to __nvme_find_path() for non-optimized
     paths (bsc#1172108).
   - nvme-multipath: fix logic for non-optimized paths (bsc#1172108).
   - nvme-multipath: round-robin: eliminate "fallback" variable (bsc#1172108).
   - nvme: multipath: round-robin: fix single non-optimized path case
     (bsc#1172108).
   - ocfs2: add trimfs dlm lock resource (bsc#1175228).
   - ocfs2: add trimfs lock to avoid duplicated trims in cluster
     (bsc#1175228).
   - ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
   - ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
   - ocfs2: change slot number type s16 to u16 (bsc#1175786).
   - ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
   - ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
   - ocfs2: fix remounting needed after setfacl command (bsc#1173954).
   - ocfs2: fix the application IO timeout when fstrim is running
     (bsc#1175228).
   - ocfs2: fix value of OCFS2_INVALID_SLOT (bsc#1175767).
   - ocfs2: load global_inode_alloc (bsc#1172963).
   - ocfs2: load global_inode_alloc (bsc#1172963).
   - omapfb: dss: Fix max fclk divider for omap36xx (bsc#1113956)
   - openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() (git-fixes).
   - PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership
     (bsc#1174356).
   - PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356).
   - PCI/ASPM: Add missing newline in sysfs 'policy' (git-fixes).
   - PCI: dwc: Move interrupt acking into the proper callback (bsc#1175666).
   - PCI: Fix pci_cfg_wait queue locking problem (git-fixes).
   - PCI: Fix "try" semantics of bus and slot reset (git-fixes).
   - PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context()
     (git-fixes).
   - PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871,
     bsc#1172872).
   - PCI: hv: Fix a timing issue which causes kdump to fail occasionally
     (bsc#1172871, bsc#1172872, git-fixes).
   - PCI: hv: Fix the PCI HyperV probe failure path to release resource
     properly (bsc#1172871, bsc#1172872).
   - PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872).
   - PCI: hv: Move hypercall related definitions into tlfs header
     (bsc#1172871, bsc#1172872).
   - PCI: hv: Move retarget related structures into tlfs header (bsc#1172871,
     bsc#1172872).
   - PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871,
     bsc#1172872).
   - PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871,
     bsc#1172872).
   - PCI: Release IVRS table in AMD ACS quirk (git-fixes).
   - pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356).
   - PCI: switchtec: Add missing __iomem and __user tags to fix sparse
     warnings (git-fixes).
   - PCI: switchtec: Add missing __iomem tag to fix sparse warnings
     (git-fixes).
   - phy: sun4i-usb: fix dereference of pointer phy0 before it is null
     checked (git-fixes).
   - pinctrl: single: fix function name in documentation (git-fixes).
   - pinctrl-single: fix pcs_parse_pinconf() return value (git-fixes).
   - platform/x86: intel-hid: Fix return value check in check_acpi_dev()
     (git-fixes).
   - platform/x86: intel-vbtn: Fix return value check in check_acpi_dev()
     (git-fixes).
   - PM / CPU: replace raw_notifier with atomic_notifier (git fixes
     (kernel/pm)).
   - PM / devfreq: rk3399_dmc: Add missing of_node_put() (bsc#1175668).
   - PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails.
   - PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent
     (bsc#1175668).
   - powerpc/64s: Do not init FSCR_DSCR in __init_FSCR() (bsc#1065729).
   - powerpc/64s: Fix early_init_mmu section mismatch (bsc#1065729).
   - powerpc: Allow 4224 bytes of stack expansion for the signal frame
     (bsc#1065729).
   - powerpc/book3s64/pkeys: Use PVR check instead of cpu feature
     (bsc#1065729).
   - powerpc/boot: Fix CONFIG_PPC_MPC52XX references (bsc#1065729).
   - powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689).
   - powerpc/nvdimm: Use HCALL error as the return value (bsc#1175284).
   - powerpc/nvdimm: use H_SCM_QUERY hcall on H_OVERLAP error (bsc#1175284).
   - powerpc/perf: Fix missing is_sier_aviable() during build (bsc#1065729).
   - powerpc/pseries: Do not initiate shutdown when system is running on UPS
     (bsc#1175440 ltc#187574).
   - powerpc/pseries/hotplug-cpu: Remove double free in error path
     (bsc#1065729).
   - powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
     (bsc#1085030 ltC#165630).
   - powerpc/pseries: PCIE PHB reset (bsc#1174689).
   - powerpc/pseries: remove cede offline state for CPUs (bsc#1065729).
   - powerpc/rtas: do not online CPUs for partition suspend (bsc#1065729).
   - powerpc/vdso: Fix vdso cpu truncation (bsc#1065729).
   - power: supply: check if calc_soc succeeded in pm860x_init_battery
     (git-fixes).
   - propagate_one(): mnt_set_mountpoint() needs mount_lock (bsc#1174841).
   - pseries: Fix 64 bit logical memory block panic (bsc#1065729).
   - pwm: bcm-iproc: handle clk_get_rate() return (git-fixes).
   - rds: Prevent kernel-infoleak in rds_notify_queue_get() (git-fixes).
   - regulator: gpio: Honor regulator-boot-on property (git-fixes).
   - rocker: fix incorrect error handling in dma_rings_init
     (networking-stable-20_06_28).
   - rtlwifi: rtl8192cu: Remove uninitialized_var() usage (git-fixes).
   - rtnetlink: Fix memory(net_device) leak when ->newlink fails (git-fixes).
   - s390, dcssblk: kaddr and pfn can be NULL to ->direct_access()
     (bsc#1174873).
   - sched: consistently handle layer3 header accesses in the presence of
     VLANs (networking-stable-20_07_17).
   - scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository
   - scsi: dh: Add Fujitsu device to devinfo and dh lists (bsc#1174026).
   - scsi: smartpqi: add bay identifier (bsc#1172418).
   - scsi: smartpqi: add gigabyte controller (bsc#1172418).
   - scsi: smartpqi: add id support for SmartRAID 3152-8i (bsc#1172418).
   - scsi: smartpqi: add inquiry timeouts (bsc#1172418).
   - scsi: smartpqi: add module param for exposure order (bsc#1172418).
   - scsi: smartpqi: add module param to hide vsep (bsc#1172418).
   - scsi: smartpqi: add new pci ids (bsc#1172418).
   - scsi: smartpqi: add pci ids for fiberhome controller (bsc#1172418).
   - scsi: smartpqi: add RAID bypass counter (bsc#1172418).
   - scsi: smartpqi: add sysfs entries (bsc#1172418).
   - scsi: smartpqi: Align driver syntax with oob (bsc#1172418).
   - scsi: smartpqi: avoid crashing kernel for controller issues
     (bsc#1172418).
   - scsi: smartpqi: bump version (bsc#1172418).
   - scsi: smartpqi: bump version (bsc#1172418).
   - scsi: smartpqi: bump version to 1.2.16-010 (bsc#1172418).
   - scsi: smartpqi: change TMF timeout from 60 to 30 seconds (bsc#1172418).
   - scsi: smartpqi: correct hang when deleting 32 lds (bsc#1172418).
   - scsi: smartpqi: correct REGNEWD return status (bsc#1172418).
   - scsi: smartpqi: correct syntax issue (bsc#1172418).
   - scsi: smartpqi: fix call trace in device discovery (bsc#1172418).
   - scsi: smartpqi: fix controller lockup observed during force reboot
     (bsc#1172418).
   - scsi: smartpqi: fix LUN reset when fw bkgnd thread is hung (bsc#1172418).
   - scsi: smartpqi: fix problem with unique ID for physical device
     (bsc#1172418).
   - scsi: smartpqi: identify physical devices without issuing INQUIRY
     (bsc#1172418).
   - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
     (bsc#1172418).
   - scsi: smartpqi: remove unused manifest constants (bsc#1172418).
   - scsi: smartpqi: Reporting unhandled SCSI errors (bsc#1172418).
   - scsi: smartpqi: support device deletion via sysfs (bsc#1172418).
   - scsi: smartpqi: update copyright (bsc#1172418).
   - scsi: smartpqi: update logical volume size after expansion (bsc#1172418).
   - scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow
     (bsc#1172418).
   - scsi: storvsc: Correctly set number of hardware queues for IDE disk
     (git-fixes).
   - sctp: Do not advertise IPv4 addresses if ipv6only is set on the socket
     (networking-stable-20_06_28).
   - selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
   - selftests/livepatch: more verification in test-klp-shadow-vars     (bsc#1071995).
   - selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
   - selftests/livepatch: simplify test-klp-callbacks busy target tests
     (bsc#1071995).
   - soc: fsl: qbman: allow registering a device link for the portal user
     (bsc#1174550).
   - soc: fsl: qbman_portals: add APIs to retrieve the probing status
     (bsc#1174550).
   - spi: davinci: Remove uninitialized_var() usage (git-fixes).
   - spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666).
   - spi: lantiq: fix: Rx overflow error in full duplex mode (git-fixes).
   - spi: nxp-fspi: Ensure width is respected in spi-mem operations
     (bsc#1175421).
   - spi: spidev: fix a race between spidev_release and spidev_remove
     (bsc#1111666).
   - spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode
     (bsc#1175422).
   - spi: spi-mem: export spi_mem_default_supports_op() (bsc#1175421).
   - spi: sun4i: update max transfer size reported (git-fixes).
   - staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift
     (git-fixes).
   - staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift
     (git-fixes).
   - staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift
     (git-fixes).
   - staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support
     (git-fixes).
   - staging: fsl-dpaa2: ethsw: Add missing netdevice check (bsc#1175423).
   - staging: rtl8192u: fix a dubious looking mask before a shift (git-fixes).
   - Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()
     (git-fixes).
   - staging/speakup: fix get_word non-space look-ahead (git-fixes).
   - tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
     (networking-stable-20_06_28).
   - tcp: grow window for OOO packets only for SACK flows
     (networking-stable-20_06_28).
   - tcp: make sure listeners do not initialize congestion-control state
     (networking-stable-20_07_17).
   - tcp: md5: add missing memory barriers in
     tcp_md5_do_add()/tcp_md5_hash_key() (networking-stable-20_07_17).
   - tcp: md5: do not send silly options in SYNCOOKIES
     (networking-stable-20_07_17).
   - tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers     (networking-stable-20_07_17).
   - tpm_tis: extra chip->ops check on error path in tpm_tis_core_init
     (bsc#1111666).
   - tracepoint: Mark __tracepoint_string's __used (git-fixes).
   - tracing: Use trace_sched_process_free() instead of exit() for pid
     tracing (git-fixes).
   - tty: hvc_console, fix crashes on parallel open/close (git-fixes).
   - tty: serial: fsl_lpuart: add imx8qxp support (bsc#1175670).
   - tty: serial: fsl_lpuart: free IDs allocated by IDA (bsc#1175670).
   - USB: iowarrior: fix up report size handling for some devices (git-fixes).
   - usbip: tools: fix module name in man page (git-fixes).
   - USB: serial: ch341: add new Product ID for CH340 (bsc#1111666).
   - USB: serial: cp210x: enable usb generic throttle/unthrottle (git-fixes).
   - USB: serial: cp210x: re-enable auto-RTS on open (git-fixes).
   - USB: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666).
   - USB: serial: iuu_phoenix: fix led-activity helpers (git-fixes).
   - USB: serial: option: add GosunCn GM500 series (bsc#1111666).
   - USB: serial: option: add Quectel EG95 LTE modem (bsc#1111666).
   - usb: xhci: Fix ASM2142/ASM3142 DMA addressing (git-fixes).
   - usb: xhci-mtk: fix the failure of bandwidth allocation (git-fixes).
   - VFS: Check rename_lock in lookup_fast() (bsc#1174734).
   - video: fbdev: sm712fb: fix an issue about iounmap for a wrong address
     (git-fixes).
   - video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()'
     call (git-fixes).
   - virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc
     serial (git-fixes).
   - vlan: consolidate VLAN parsing code and limit max parsing depth
     (networking-stable-20_07_17).
   - vmxnet3: use correct tcp hdr length when packet is encapsulated
     (bsc#1175199).
   - vsock: fix timeout in vsock_accept() (networking-stable-20_06_07).
   - vt_compat_ioctl(): clean up, use compat_ptr() properly (git-fixes).
   - vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes).
   - watchdog: f71808e_wdt: clear watchdog timeout occurred flag
     (bsc#1111666).
   - watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in
     watchdog_info.options (bsc#1111666).
   - watchdog: f71808e_wdt: remove use of wrong watchdog_info option
     (bsc#1111666).
   - wl1251: fix always return 0 error (git-fixes).
   - x86/hyper-v: Fix overflow bug in fill_gva_list() (git-fixes).
   - xfrm: check id proto in validate_tmpl() (git-fixes).
   - xfrm: clean up xfrm protocol checks (git-fixes).
   - xfrm_user: uncoditionally validate esn replay attribute struct
     (git-fixes).
   - xfs: fix inode allocation block res calculation precedence (git-fixes).
   - xfs: fix reflink quota reservation accounting error (git-fixes).
   - xhci: Fix enumeration issue when setting max packet size for FS devices
     (git-fixes).


Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Real Time Extension 12-SP5:

      zypper in -t patch SUSE-SLE-RT-12-SP5-2020-2605=1



Package List:

   - SUSE Linux Enterprise Real Time Extension 12-SP5 (x86_64):

      cluster-md-kmp-rt-4.12.14-10.16.1
      dlm-kmp-rt-4.12.14-10.16.1
      gfs2-kmp-rt-4.12.14-10.16.1
      kernel-rt-4.12.14-10.16.1
      kernel-rt-base-4.12.14-10.16.1
      kernel-rt-devel-4.12.14-10.16.1
      kernel-rt_debug-4.12.14-10.16.1
      kernel-rt_debug-devel-4.12.14-10.16.1
      kernel-syms-rt-4.12.14-10.16.1
      ocfs2-kmp-rt-4.12.14-10.16.1

   - SUSE Linux Enterprise Real Time Extension 12-SP5 (noarch):

      kernel-devel-rt-4.12.14-10.16.1
      kernel-source-rt-4.12.14-10.16.1


References:

   https://www.suse.com/security/cve/CVE-2018-3639.html
   https://www.suse.com/security/cve/CVE-2020-0305.html
   https://www.suse.com/security/cve/CVE-2020-10135.html
   https://www.suse.com/security/cve/CVE-2020-14314.html
   https://www.suse.com/security/cve/CVE-2020-14331.html
   https://www.suse.com/security/cve/CVE-2020-14356.html
   https://www.suse.com/security/cve/CVE-2020-16166.html
   https://www.suse.com/security/cve/CVE-2020-24394.html
   https://bugzilla.suse.com/1065729
   https://bugzilla.suse.com/1071995
   https://bugzilla.suse.com/1074701
   https://bugzilla.suse.com/1083548
   https://bugzilla.suse.com/1085030
   https://bugzilla.suse.com/1085235
   https://bugzilla.suse.com/1085308
   https://bugzilla.suse.com/1087078
   https://bugzilla.suse.com/1087082
   https://bugzilla.suse.com/1094912
   https://bugzilla.suse.com/1100394
   https://bugzilla.suse.com/1102640
   https://bugzilla.suse.com/1105412
   https://bugzilla.suse.com/1111666
   https://bugzilla.suse.com/1112178
   https://bugzilla.suse.com/1113956
   https://bugzilla.suse.com/1120163
   https://bugzilla.suse.com/1133021
   https://bugzilla.suse.com/1144333
   https://bugzilla.suse.com/1171988
   https://bugzilla.suse.com/1172108
   https://bugzilla.suse.com/1172247
   https://bugzilla.suse.com/1172418
   https://bugzilla.suse.com/1172428
   https://bugzilla.suse.com/1172781
   https://bugzilla.suse.com/1172782
   https://bugzilla.suse.com/1172783
   https://bugzilla.suse.com/1172871
   https://bugzilla.suse.com/1172872
   https://bugzilla.suse.com/1172963
   https://bugzilla.suse.com/1173485
   https://bugzilla.suse.com/1173798
   https://bugzilla.suse.com/1173954
   https://bugzilla.suse.com/1174026
   https://bugzilla.suse.com/1174070
   https://bugzilla.suse.com/1174161
   https://bugzilla.suse.com/1174205
   https://bugzilla.suse.com/1174247
   https://bugzilla.suse.com/1174343
   https://bugzilla.suse.com/1174356
   https://bugzilla.suse.com/1174387
   https://bugzilla.suse.com/1174409
   https://bugzilla.suse.com/1174438
   https://bugzilla.suse.com/1174462
   https://bugzilla.suse.com/1174484
   https://bugzilla.suse.com/1174547
   https://bugzilla.suse.com/1174549
   https://bugzilla.suse.com/1174550
   https://bugzilla.suse.com/1174625
   https://bugzilla.suse.com/1174658
   https://bugzilla.suse.com/1174685
   https://bugzilla.suse.com/1174689
   https://bugzilla.suse.com/1174699
   https://bugzilla.suse.com/1174734
   https://bugzilla.suse.com/1174757
   https://bugzilla.suse.com/1174771
   https://bugzilla.suse.com/1174840
   https://bugzilla.suse.com/1174841
   https://bugzilla.suse.com/1174843
   https://bugzilla.suse.com/1174844
   https://bugzilla.suse.com/1174845
   https://bugzilla.suse.com/1174852
   https://bugzilla.suse.com/1174873
   https://bugzilla.suse.com/1174887
   https://bugzilla.suse.com/1174904
   https://bugzilla.suse.com/1174926
   https://bugzilla.suse.com/1174968
   https://bugzilla.suse.com/1175062
   https://bugzilla.suse.com/1175063
   https://bugzilla.suse.com/1175064
   https://bugzilla.suse.com/1175065
   https://bugzilla.suse.com/1175066
   https://bugzilla.suse.com/1175067
   https://bugzilla.suse.com/1175112
   https://bugzilla.suse.com/1175127
   https://bugzilla.suse.com/1175128
   https://bugzilla.suse.com/1175149
   https://bugzilla.suse.com/1175199
   https://bugzilla.suse.com/1175213
   https://bugzilla.suse.com/1175228
   https://bugzilla.suse.com/1175232
   https://bugzilla.suse.com/1175284
   https://bugzilla.suse.com/1175393
   https://bugzilla.suse.com/1175394
   https://bugzilla.suse.com/1175396
   https://bugzilla.suse.com/1175397
   https://bugzilla.suse.com/1175398
   https://bugzilla.suse.com/1175399
   https://bugzilla.suse.com/1175400
   https://bugzilla.suse.com/1175401
   https://bugzilla.suse.com/1175402
   https://bugzilla.suse.com/1175403
   https://bugzilla.suse.com/1175404
   https://bugzilla.suse.com/1175405
   https://bugzilla.suse.com/1175406
   https://bugzilla.suse.com/1175407
   https://bugzilla.suse.com/1175408
   https://bugzilla.suse.com/1175409
   https://bugzilla.suse.com/1175410
   https://bugzilla.suse.com/1175411
   https://bugzilla.suse.com/1175412
   https://bugzilla.suse.com/1175413
   https://bugzilla.suse.com/1175414
   https://bugzilla.suse.com/1175415
   https://bugzilla.suse.com/1175416
   https://bugzilla.suse.com/1175417
   https://bugzilla.suse.com/1175418
   https://bugzilla.suse.com/1175419
   https://bugzilla.suse.com/1175420
   https://bugzilla.suse.com/1175421
   https://bugzilla.suse.com/1175422
   https://bugzilla.suse.com/1175423
   https://bugzilla.suse.com/1175440
   https://bugzilla.suse.com/1175493
   https://bugzilla.suse.com/1175518
   https://bugzilla.suse.com/1175526
   https://bugzilla.suse.com/1175550
   https://bugzilla.suse.com/1175654
   https://bugzilla.suse.com/1175666
   https://bugzilla.suse.com/1175668
   https://bugzilla.suse.com/1175669
   https://bugzilla.suse.com/1175670
   https://bugzilla.suse.com/1175767
   https://bugzilla.suse.com/1175768
   https://bugzilla.suse.com/1175769
   https://bugzilla.suse.com/1175770
   https://bugzilla.suse.com/1175771
   https://bugzilla.suse.com/1175772
   https://bugzilla.suse.com/1175786
   https://bugzilla.suse.com/1175992

_______________________________________________
sle-security-updates mailing list
sle-security-updates@lists.suse.com
http://lists.suse.com/mailman/listinfo/sle-security-updates