SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:3491-1
Rating:             important
References:         #1055014 #1055186 #1061843 #1065600 #1065729 
                    #1066382 #1077428 #1129923 #1134760 #1149032 
                    #1152489 #1155798 #1163592 #1164648 #1165692 
                    #1168468 #1171675 #1171688 #1174003 #1174098 
                    #1174748 #1174969 #1175052 #1175599 #1175621 
                    #1175718 #1175721 #1175749 #1175807 #1175898 
                    #1176019 #1176354 #1176381 #1176400 #1176485 
                    #1176588 #1176713 #1176907 #1176979 #1177027 
                    #1177086 #1177090 #1177109 #1177121 #1177193 
                    #1177194 #1177206 #1177258 #1177271 #1177281 
                    #1177283 #1177284 #1177285 #1177286 #1177297 
                    #1177353 #1177384 #1177410 #1177411 #1177470 
                    #1177511 #1177617 #1177681 #1177683 #1177687 
                    #1177694 #1177697 #1177719 #1177724 #1177725 
                    #1177726 #1177739 #1177749 #1177750 #1177754 
                    #1177755 #1177765 #1177766 #1177799 #1177801 
                    #1177814 #1177817 #1177854 #1177855 #1177856 
                    #1177861 #1178002 #1178079 #1178166 #1178173 
                    #1178175 #1178176 #1178177 #1178183 #1178184 
                    #1178185 #1178186 #1178190 #1178191 #1178246 
                    #1178255 #1178307 #1178330 #1178395 
Cross-References:   CVE-2020-12351 CVE-2020-12352 CVE-2020-14351
                    CVE-2020-16120 CVE-2020-24490 CVE-2020-25212
                    CVE-2020-25285 CVE-2020-25641 CVE-2020-25643
                    CVE-2020-25645 CVE-2020-25656 CVE-2020-25705
                    CVE-2020-27673 CVE-2020-27675
Affected Products:
                    SUSE Linux Enterprise Module for Public Cloud 15-SP2
______________________________________________________________________________

   An update that solves 14 vulnerabilities and has 90 fixes
   is now available.

Description:

   The SUSE Linux Enterprise 15 SP2 kernel Azure was updated to receive
   various security and bugfixes.

   The following security bugs were fixed:

   - CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl
     (bnc#1177766).
   - CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers     in mm/hugetlb.c (bnc#1176485).
   - CVE-2020-14351: Fixed a race in the perf_mmap_close() function
     (bsc#1177086).
   - CVE-2020-16120: Fixed a permissions issue in ovl_path_open()
     (bsc#1177470).
   - CVE-2020-12351: Implemented a kABI workaround for bluetooth l2cap_ops
     filter addition (bsc#1177724).
   - CVE-2020-12352: Fixed an information leak when processing certain AMP
     packets aka "BleedingTooth" (bsc#1177725).
   - CVE-2020-25212: Fixed a TOCTOU mismatch in the NFS client code
     (bnc#1176381).
   - CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between
     two Geneve endpoints to be unencrypted (bnc#1177511).
   - CVE-2020-24490: Fixed a heap buffer overflow when processing extended
     advertising report events aka "BleedingTooth" aka "BadVibes"
     (bsc#1177726).
   - CVE-2020-25641: Fixed a zero-length biovec request issued by the block
     subsystem could have caused the kernel to enter an infinite loop,
     causing a denial of service (bsc#1177121).
   - CVE-2020-25643: Fixed a memory corruption and a read overflow which
     could have caused by improper input validation in the ppp_cp_parse_cr
     function (bsc#1177206).
   - CVE-2020-27673: Fixed an issue where rogue guests could have caused
     denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
   - CVE-2020-27675: Fixed a race condition in event handler which may crash
     dom0 (XSA-331 bsc#1177410).
   - CVE-2020-25705: A ICMP global rate limiting side-channel was removed
     which could lead to e.g. the SADDNS attack (bsc#1175721)

   The following non-security bugs were fixed:

   - 9p: Fix memory leak in v9fs_mount (git-fixes).
   - ACPI: Always build evged in (git-fixes).
   - ACPI: button: fix handling lid state changes when input device closed
     (git-fixes).
   - ACPI: configfs: Add missing config_item_put() to fix refcount leak
     (git-fixes).
   - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
   - ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
   - ACPI: EC: Reference count query handlers under lock (git-fixes).
   - act_ife: load meta modules before tcf_idr_check_alloc()
     (networking-stable-20_09_24).
   - Add CONFIG_CHECK_CODESIGN_EKU
   - airo: Fix read overflows sending packets (git-fixes).
   - ALSA: ac97: (cosmetic) align argument names (git-fixes).
   - ALSA: aoa: i2sbus: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
   - ALSA: asihpi: fix spellint typo in comments (git-fixes).
   - ALSA: atmel: ac97: clarify operator precedence (git-fixes).
   - ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
   - ALSA: compress_offload: remove redundant initialization (git-fixes).
   - ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
   - ALSA: core: pcm: simplify locking for timers (git-fixes).
   - ALSA: core: timer: clarify operator precedence (git-fixes).
   - ALSA: core: timer: remove redundant assignment (git-fixes).
   - ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock
     (git-fixes).
   - ALSA: fireworks: use semicolons rather than commas to separate
     statements (git-fixes).
   - ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
   - ALSA: hda: (cosmetic) align function parameters (git-fixes).
   - ALSA: hda - Do not register a cb func if it is registered already
     (git-fixes).
   - ALSA: hda - Fix the return value if cb func is already registered
     (git-fixes).
   - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close (git-fixes).
   - ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7
     (git-fixes).
   - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
     (git-fixes).
   - ALSA: hda/realtek - set mic to auto detect on a HP AIO machine
     (git-fixes).
   - ALSA: hda/realtek - The front Mic on a HP machine does not work
     (git-fixes).
   - ALSA: hda: use semicolons rather than commas to separate statements
     (git-fixes).
   - ALSA: hdspm: Fix typo arbitary (git-fixes).
   - ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
   - ALSA: portman2x4: fix repeated word 'if' (git-fixes).
   - ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
   - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
   - ALSA: sparc: dbri: fix repeated word 'the' (git-fixes).
   - ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
   - ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
   - ALSA: usb-audio: fix spelling mistake "Frequence" -> "Frequency"
     (git-fixes).
   - ALSA: usb-audio: Line6 Pod Go interface requires static clock rate quirk
     (git-fixes).
   - ALSA: usb: scarless_gen2: fix endianness issue (git-fixes).
   - ALSA: vx: vx_core: clarify operator precedence (git-fixes).
   - ALSA: vx: vx_pcm: remove redundant assignment (git-fixes).
   - ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).
   - arm64: Enable PCI write-combine resources under sysfs (bsc#1175807).
   - ASoC: fsl: imx-es8328: add missing put_device() call in
     imx_es8328_probe() (git-fixes).
   - ASoC: fsl_sai: Instantiate snd_soc_dai_driver (git-fixes).
   - ASoC: img-i2s-out: Fix runtime PM imbalance on error (git-fixes).
   - ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
     (git-fixes).
   - ASoC: kirkwood: fix IRQ error handling (git-fixes).
   - ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
   - ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
   - ASoC: sun50i-codec-analog: Fix duplicate use of ADC enable bits
     (git-fixes).
   - ASoC: tlv320aic32x4: Fix bdiv clock rate derivation (git-fixes).
   - ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect
     functions (git-fixes).
   - ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811
     (git-fixes).
   - ata: ahci: mvebu: Make SATA PHY optional for Armada 3720 (git-fixes).
   - ata: sata_rcar: Fix DMA boundary mask (git-fixes).
   - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).
   - ath10k: fix array out-of-bounds access (git-fixes).
   - ath10k: fix memory leak for tpc_stats_final (git-fixes).
   - ath10k: Fix the size used in a 'dma_free_coherent()' call in an error
     handling path (git-fixes).
   - ath10k: provide survey info as accumulated data (git-fixes).
   - ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).
   - ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
     (git-fixes).
   - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
     (git-fixes).
   - ath9k: hif_usb: fix race condition between usb_get_urb() and
     usb_kill_anchored_urbs() (git-fixes).
   - ath9k_htc: Use appropriate rs_datalen type (git-fixes).
   - backlight: sky81452-backlight: Fix refcount imbalance on error
     (git-fixes).
   - blk-mq: order adding requests to hctx->dispatch and checking
     SCHED_RESTART (bsc#1177750).
   - block: ensure bdi->io_pages is always initialized (bsc#1177749).
   - block: Fix page_is_mergeable() for compound pages (bsc#1177814).
   - block: Set same_page to false in __bio_try_merge_page if ret is false
     (git-fixes).
   - Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb
     (git-fixes).
   - Bluetooth: Fix refcount use-after-free issue (git-fixes).
   - Bluetooth: guard against controllers sending zero'd events (git-fixes).
   - Bluetooth: Handle Inquiry Cancel error after Inquiry Complete
     (git-fixes).
   - Bluetooth: hci_uart: Cancel init work before unregistering (git-fixes).
   - Bluetooth: L2CAP: handle l2cap config request during open state
     (git-fixes).
   - Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).
   - Bluetooth: Only mark socket zapped after unlocking (git-fixes).
   - Bluetooth: prefetch channel before killing sock (git-fixes).
   - bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex
     (git-fixes).
   - bonding: show saner speed for broadcast mode
     (networking-stable-20_08_24).
   - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).
   - brcmfmac: check ndev pointer (git-fixes).
   - brcmfmac: Fix double freeing in the fmac usb data path (git-fixes).
   - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).
   - btrfs: add owner and fs_info to alloc_state io_tree (bsc#1177854).
   - btrfs: allocate scrub workqueues outside of locks (bsc#1178183).
   - btrfs: block-group: do not set the wrong READA flag for
     btrfs_read_block_groups() (bsc#1176019).
   - btrfs: block-group: fix free-space bitmap threshold (bsc#1176019).
   - btrfs: block-group: refactor how we delete one block group item
     (bsc#1176019).
   - btrfs: block-group: refactor how we insert a block group item
     (bsc#1176019).
   - btrfs: block-group: refactor how we read one block group item
     (bsc#1176019).
   - btrfs: block-group: rename write_one_cache_group() (bsc#1176019).
   - btrfs: check the right error variable in btrfs_del_dir_entries_in_log
     (bsc#1177687).
   - btrfs: do not force read-only after error in drop snapshot (bsc#1176354).
   - btrfs: do not set the full sync flag on the inode during page release
     (bsc#1177687).
   - btrfs: do not take an extra root ref at allocation time (bsc#1176019).
   - btrfs: drop logs when we've aborted a transaction (bsc#1176019).
   - btrfs: drop path before adding new uuid tree entry (bsc#1178176).
   - btrfs: fix a race between scrub and block group removal/allocation
     (bsc#1176019).
   - btrfs: fix crash during unmount due to race with delayed inode workers     (bsc#1176019).
   - btrfs: fix filesystem corruption after a device replace (bsc#1178395).
   - btrfs: fix NULL pointer dereference after failure to create snapshot
     (bsc#1178190).
   - btrfs: fix overflow when copying corrupt csums for a message
     (bsc#1178191).
   - btrfs: fix race between page release and a fast fsync (bsc#1177687).
   - btrfs: fix space cache memory leak after transaction abort (bsc#1178173).
   - btrfs: free block groups after free'ing fs trees (bsc#1176019).
   - btrfs: hold a ref on the root on the dead roots list (bsc#1176019).
   - btrfs: kill the subvol_srcu (bsc#1176019).
   - btrfs: make btrfs_cleanup_fs_roots use the radix tree lock (bsc#1176019).
   - btrfs: make inodes hold a ref on their roots (bsc#1176019).
   - btrfs: make the extent buffer leak check per fs info (bsc#1176019).
   - btrfs: move btrfs_rm_dev_replace_free_srcdev outside of all locks
     (bsc#1178395).
   - btrfs: move btrfs_scratch_superblocks into btrfs_dev_replace_finishing
     (bsc#1178395).
   - btrfs: move ino_cache_inode dropping out of btrfs_free_fs_root
     (bsc#1176019).
   - btrfs: move the block group freeze/unfreeze helpers into block-group.c
     (bsc#1176019).
   - btrfs: move the root freeing stuff into btrfs_put_root (bsc#1176019).
   - btrfs: only commit delayed items at fsync if we are logging a directory
     (bsc#1177687).
   - btrfs: only commit the delayed inode when doing a full fsync
     (bsc#1177687).
   - btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations
     (bsc#1177856).
   - btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode
     (bsc#1177855).
   - btrfs: reduce contention on log trees when logging checksums
     (bsc#1177687).
   - btrfs: release old extent maps during page release (bsc#1177687).
   - btrfs: remove no longer necessary chunk mutex locking cases
     (bsc#1176019).
   - btrfs: remove no longer needed use of log_writers for the log root tree
     (bsc#1177687).
   - btrfs: rename member 'trimming' of block group to a more generic name
     (bsc#1176019).
   - btrfs: scrub, only lookup for csums if we are dealing with a data extent
     (bsc#1176019).
   - btrfs: set the correct lockdep class for new nodes (bsc#1178184).
   - btrfs: set the lockdep class for log tree extent buffers (bsc#1178186).
   - btrfs: stop incremening log_batch for the log root tree when syncing log
     (bsc#1177687).
   - btrfs: tree-checker: fix false alert caused by legacy btrfs root item
     (bsc#1177861).
   - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host
     removal (git-fixes).
   - can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes).
   - can: flexcan: flexcan_chip_stop(): add error handling and propagate
     error value (git-fixes).
   - can: flexcan: remove ack_grp and ack_bit handling from driver
     (git-fixes).
   - can: softing: softing_card_shutdown(): add braces around empty body in
     an 'if' statement (git-fixes).
   - ceph: promote to unsigned long long before shifting (bsc#1178175).
   - clk: at91: remove the checking of parent_name (git-fixes).
   - clk: bcm2835: add missing release if devm_clk_hw_register fails
     (git-fixes).
   - clk: imx8mq: Fix usdhc parents order (git-fixes).
   - clk: keystone: sci-clk: fix parsing assigned-clock data during probe
     (git-fixes).
   - clk: meson: g12a: mark fclk_div2 as critical (git-fixes).
   - clk: qcom: gcc-sdm660: Fix wrong parent_map (git-fixes).
   - clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
     (git-fixes).
   - clk: socfpga: stratix10: fix the divider for the emac_ptp_free_clk
     (git-fixes).
   - clk: tegra: Always program PLL_E when enabled (git-fixes).
   - clk/ti/adpll: allocate room for terminating null (git-fixes).
   - clocksource/drivers/h8300_timer8: Fix wrong return value in
     h8300_8timer_init() (git-fixes).
   - clocksource/drivers/timer-gx6605s: Fixup counter reload (git-fixes).
   - cpuidle: Poll for a minimum of 30ns and poll for a tick if lower
     c-states are disabled (bnc#1176588).
   - create Storage / NVMe subsection
   - crypto: algif_aead - Do not set MAY_BACKLOG on the async path
     (git-fixes).
   - crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).
   - crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).
   - crypto: ccp - fix error handling (git-fixes).
   - crypto: dh - check validity of Z before export (bsc#1175718).
   - crypto: dh - SP800-56A rev 3 local public key validation (bsc#1175718).
   - crypto: ecc - SP800-56A rev 3 local public key validation (bsc#1175718).
   - crypto: ecdh - check validity of Z before export (bsc#1175718).
   - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
     (git-fixes).
   - crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc()
     (git-fixes).
   - crypto: omap-sham - fix digcnt register handling with export/import
     (git-fixes).
   - crypto: picoxcell - Fix potential race condition bug (git-fixes).
   - crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA (git-fixes).
   - cxgb4: fix memory leak during module unload (networking-stable-20_09_24).
   - cxgb4: Fix offset when clearing filter byte counters     (networking-stable-20_09_24).
   - cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes).
   - cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes).
   - dax: Fix compilation for CONFIG_DAX && !CONFIG_FS_DAX (bsc#1177817).
   - Disable ipa-clones dump for KMP builds (bsc#1178330) The feature is not
     really useful for KMP, and rather confusing, so let's disable it at
     building out-of-tree codes
   - Disable module compression on SLE15 SP2 (bsc#1178307)
   - dma-direct: add missing set_memory_decrypted() for coherent mapping
     (bsc#1175898, ECO-2743).
   - dma-direct: always align allocation size in dma_direct_alloc_pages()
     (bsc#1175898, ECO-2743).
   - dma-direct: atomic allocations must come from atomic coherent pools
     (bsc#1175898, ECO-2743).
   - dma-direct: check return value when encrypting or decrypting memory
     (bsc#1175898, ECO-2743).
   - dma-direct: consolidate the error handling in dma_direct_alloc_pages
     (bsc#1175898, ECO-2743).
   - dma-direct: make uncached_kernel_address more general (bsc#1175898,
     ECO-2743).
   - dma-direct: provide function to check physical memory area validity
     (bsc#1175898, ECO-2743).
   - dma-direct: provide mmap and get_sgtable method overrides (bsc#1175898,
     ECO-2743).
   - dma-direct: re-encrypt memory if dma_direct_alloc_pages() fails
     (bsc#1175898, ECO-2743).
   - dma-direct: remove __dma_direct_free_pages (bsc#1175898, ECO-2743).
   - dma-direct: remove the dma_handle argument to __dma_direct_alloc_pages
     (bsc#1175898, ECO-2743).
   - dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes).
   - dmaengine: dmatest: Check list for emptiness before access its last
     entry (git-fixes).
   - dmaengine: dw: Activate FIFO-mode for memory peripherals only
     (git-fixes).
   - dmaengine: mediatek: hsdma_probe: fixed a memory leak when
     devm_request_irq fails (git-fixes).
   - dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all
     (git-fixes).
   - dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all
     (git-fixes).
   - dmaengine: tegra-apb: Prevent race conditions on channel's freeing
     (git-fixes).
   - dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).
   - dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling)
     (git-fixes).
   - dma-mapping: add a dma_can_mmap helper (bsc#1175898, ECO-2743).
   - dma-mapping: always use VM_DMA_COHERENT for generic DMA remap
     (bsc#1175898, ECO-2743).
   - dma-mapping: DMA_COHERENT_POOL should select GENERIC_ALLOCATOR
     (bsc#1175898, ECO-2743).
   - dma-mapping: make dma_atomic_pool_init self-contained (bsc#1175898,
     ECO-2743).
   - dma-mapping: merge the generic remapping helpers into dma-direct
     (bsc#1175898, ECO-2743).
   - dma-mapping: remove arch_dma_mmap_pgprot (bsc#1175898, ECO-2743).
   - dma-mapping: warn when coherent pool is depleted (bsc#1175898, ECO-2743).
   - dma-pool: add additional coherent pools to map to gfp mask (bsc#1175898,
     ECO-2743).
   - dma-pool: add pool sizes to debugfs (bsc#1175898, ECO-2743).
   - dma-pool: decouple DMA_REMAP from DMA_COHERENT_POOL (bsc#1175898,
     ECO-2743).
   - dma-pool: do not allocate pool memory from CMA (bsc#1175898, ECO-2743).
   - dma-pool: dynamically expanding atomic pools (bsc#1175898, ECO-2743).
   - dma-pool: Fix an uninitialized variable bug in atomic_pool_expand()
     (bsc#1175898, ECO-2743).
   - dma-pool: fix coherent pool allocations for IOMMU mappings (bsc#1175898,
     ECO-2743).
   - dma-pool: fix too large DMA pools on medium memory size systems
     (bsc#1175898, ECO-2743).
   - dma-pool: get rid of dma_in_atomic_pool() (bsc#1175898, ECO-2743).
   - dma-pool: introduce dma_guess_pool() (bsc#1175898, ECO-2743).
   - dma-pool: make sure atomic pool suits device (bsc#1175898, ECO-2743).
   - dma-pool: Only allocate from CMA when in same memory zone (bsc#1175898,
     ECO-2743).
   - dma-pool: scale the default DMA coherent pool size with memory capacity
     (bsc#1175898, ECO-2743).
   - dma-remap: separate DMA atomic pools from direct remap code
     (bsc#1175898, ECO-2743).
   - dm: Call proper helper to determine dax support (bsc#1177817).
   - dm/dax: Fix table reference counts (bsc#1178246).
   - docs: driver-api: remove a duplicated index entry (git-fixes).
   - drivers: char: tlclk.c: Avoid data race between init and interrupt
     handler (git-fixes).
   - drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config
     (git-fixes).
   - drm/radeon: revert "Prefer lower feedback dividers" (bsc#1177384).
   - drop Storage / bsc#1171688 subsection No effect on expanded tree.
   - e1000: Do not perform reset in reset_task if we are already down
     (git-fixes).
   - EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1152489).
   - eeprom: at25: set minimum read/write access stride to 1 (git-fixes).
   - extcon: ptn5150: Fix usage of atomic GPIO with sleeping GPIO chips
     (git-fixes).
   - ftrace: Move RCU is watching check after recursion check (git-fixes).
   - fuse: do not ignore errors from fuse_writepages_fill() (bsc#1177193).
   - futex: Adjust absolute futex timeouts with per time namespace offset
     (bsc#1164648).
   - futex: Consistently use fshared as boolean (bsc#1149032).
   - futex: Fix incorrect should_fail_futex() handling (bsc#1149032).
   - futex: Remove put_futex_key() (bsc#1149032).
   - futex: Remove unused or redundant includes (bsc#1149032).
   - gpio: mockup: fix resource leak in error path (git-fixes).
   - gpio: rcar: Fix runtime PM imbalance on error (git-fixes).
   - gpio: siox: explicitly support only threaded irqs (git-fixes).
   - gpio: sprd: Clear interrupt when setting the type as edge (git-fixes).
   - gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).
   - gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY
     (networking-stable-20_08_24).
   - gtp: add GTPA_LINK info to msg sent to userspace
     (networking-stable-20_09_11).
   - HID: hid-input: fix stylus battery reporting (git-fixes).
   - HID: ite: Add USB id match for Acer One S1003 keyboard dock (git-fixes).
   - HID: roccat: add bounds checking in kone_sysfs_write_settings()
     (git-fixes).
   - HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery
     (git-fixes).
   - hwmon: (applesmc) check status earlier (git-fixes).
   - hwmon: (mlxreg-fan) Fix double "Mellanox" (git-fixes).
   - hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
     (git-fixes).
   - i2c: aspeed: Mask IRQ status to relevant bits (git-fixes).
   - i2c: core: Call i2c_acpi_install_space_handler() before
     i2c_acpi_register_devices() (git-fixes).
   - i2c: core: Restore acpi_walk_dep_device_list() getting called after
     registering the ACPI i2c devs (git-fixes).
   - i2c: cpm: Fix i2c_ram structure (git-fixes).
   - i2c: i801: Exclude device from suspend direct complete optimization
     (git-fixes).
   - i2c: imx: Fix external abort on interrupt in exit paths (git-fixes).
   - i2c: meson: fix clock setting overwrite (git-fixes).
   - i2c: meson: fixup rate calculation with filter delay (git-fixes).
   - i2c: owl: Clear NACK and BUS error bits (git-fixes).
   - i2c: rcar: Auto select RESET_CONTROLLER (git-fixes).
   - i2c: tegra: Prevent interrupt triggering after transfer timeout
     (git-fixes).
   - i2c: tegra: Restore pinmux on system resume (git-fixes).
   - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo
     (git-fixes).
   - i3c: master: Fix error return in cdns_i3c_master_probe() (git-fixes).
   - ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897).
   - ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes).
   - ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes).
   - ibmvnic: save changed mac address to adapter->mac_addr (bsc#1134760
     ltc#177449 git-fixes).
   - ibmvnic: set up 200GBPS speed (bsc#1129923 git-fixes).
   - icmp: randomize the global rate limiter (git-fixes).
   - ida: Free allocated bitmap in error path (git-fixes).
   - ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).
   - ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).
   - iio:accel:bma180: Fix use of true when should be iio_shared_by enum
     (git-fixes).
   - iio: adc: gyroadc: fix leak of device node iterator (git-fixes).
   - iio: adc: qcom-spmi-adc5: fix driver name (git-fixes).
   - iio: adc: stm32-adc: fix runtime autosuspend delay when slow polling
     (git-fixes).
   - iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes).
   - iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes).
   - iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes).
   - iio:gyro:itg3200: Fix timestamp alignment and prevent data leak
     (git-fixes).
   - iio:light:si1145: Fix timestamp alignment and prevent data leak
     (git-fixes).
   - iio:magn:hmc5843: Fix passing true where iio_shared_by enum required
     (git-fixes).
   - ima: extend boot_aggregate with kernel measurements (bsc#1177617).
   - ima: Remove semicolon at the end of ima_get_binary_runtime_size()
     (git-fixes).
   - Input: ati_remote2 - add missing newlines when printing module
     parameters (git-fixes).
   - Input: ep93xx_keypad - fix handling of platform_get_irq() error
     (git-fixes).
   - Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (bsc#954532).
   - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
     (git-fixes).
   - Input: omap4-keypad - fix handling of platform_get_irq() error
     (git-fixes).
   - Input: stmfts - fix a & vs && typo (git-fixes).
   - Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes).
   - Input: trackpoint - enable Synaptics trackpoints (git-fixes).
   - Input: twl4030_keypad - fix handling of platform_get_irq() error
     (git-fixes).
   - iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754).
   - iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE
     (bsc#1177297).
   - iommu/amd: Fix potential @entry null deref (bsc#1177283).
   - iommu/amd: Re-factor guest virtual APIC (de-)activation code
     (bsc#1177284).
   - iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode
     (bsc#1177285).
   - iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate()
     (bsc#1177286).
   - iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).
   - iommu/vt-d: Gracefully handle DMAR units with no supported address
     widths (bsc#1177739).
   - ip: fix tos reflection in ack and reset packets
     (networking-stable-20_09_24).
   - ipmi_si: Fix wrong return value in try_smi_init() (git-fixes).
   - ipv4: Initialize flowi4_multipath_hash in data path
     (networking-stable-20_09_24).
   - ipv4: Update exception handling for multipath routes via same device
     (networking-stable-20_09_24).
   - ipv6: avoid lockdep issue in fib6_del() (networking-stable-20_09_24).
   - ipv6: Fix sysctl max for fib_multipath_hash_policy
     (networking-stable-20_09_11).
   - ipvlan: fix device features (networking-stable-20_08_24).
   - iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes).
   - kABI fix for NFS: Fix flexfiles read failover (git-fixes).
   - kABI: Fix kABI after add CodeSigning extended key usage (bsc#1177353).
   - kABI: Fix kABI for 12856e7acde4 PCI/IOV: Mark VFs as not implementing
     PCI_COMMAND_MEMORY (bsc#1176979).
   - kabi/severities: ignore kABI for target_core_rbd Match behaviour for all
     other Ceph specific modules.
   - kallsyms: Refactor kallsyms_show_value() to take cred (git-fixes).
   - kbuild: enforce -Werror=return-type (bsc#1177281).
   - KVM: x86/mmu: Commit zap of remaining invalid pages when recovering
     lpages (git-fixes).
   - leds: mlxreg: Fix possible buffer overflow (git-fixes).
   - leds: mt6323: move period calculation (git-fixes).
   - libceph-add-support-for-CMPEXT-compare-extent-reques.patch:
     (bsc#1177090).
   - libceph: clear con->out_msg on Policy::stateful_server faults
     (bsc#1178177).
   - lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes).
   - lib/mpi: Add mpi_sub_ui() (bsc#1175718).
   - locking/rwsem: Disable reader optimistic spinning (bnc#1176588).
   - mac80211: do not allow bigger VHT MPDUs than the hardware supports
     (git-fixes).
   - mac80211: handle lack of sband->bitrates in rates (git-fixes).
   - mac80211: skip mpath lookup also for control port tx (git-fixes).
   - mac802154: tx: fix use-after-free (git-fixes).
   - macsec: avoid use-after-free in macsec_handle_frame() (git-fixes).
   - mailbox: avoid timer start from callback (git-fixes).
   - media: ati_remote: sanity check for both endpoints (git-fixes).
   - media: bdisp: Fix runtime PM imbalance on error (git-fixes).
   - media: camss: Fix a reference count leak (git-fixes).
   - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
     (git-fixes).
   - media: exynos4-is: Fix a reference count leak (git-fixes).
   - media: exynos4-is: Fix several reference count leaks due to
     pm_runtime_get_sync (git-fixes).
   - media: firewire: fix memory leak (git-fixes).
   - media: i2c: ov5640: Enable data pins on poweron for DVP mode (git-fixes).
   - media: i2c: ov5640: Remain in power down for DVP mode unless streaming
     (git-fixes).
   - media: i2c: ov5640: Separate out mipi configuration from s_power
     (git-fixes).
   - media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes).
   - media: mc-device.c: fix memleak in media_device_register_entity
     (git-fixes).
   - media: media/pci: prevent memory leak in bttv_probe (git-fixes).
   - media: mx2_emmaprp: Fix memleak in emmaprp_probe (git-fixes).
   - media: omap3isp: Fix memleak in isp_probe (git-fixes).
   - media: ov5640: Correct Bit Div register in clock tree diagram
     (git-fixes).
   - media: platform: fcp: Fix a reference count leak (git-fixes).
   - media: platform: s3c-camif: Fix runtime PM imbalance on error
     (git-fixes).
   - media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes).
   - media: rcar-csi2: Allocate v4l2_async_subdev dynamically (git-fixes).
   - media: rcar_drif: Allocate v4l2_async_subdev dynamically (git-fixes).
   - media: rcar_drif: Fix fwnode reference leak when parsing DT (git-fixes).
   - media: rcar-vin: Fix a reference count leak (git-fixes).
   - media: rc: do not access device via sysfs after rc_unregister_device()
     (git-fixes).
   - media: rc: uevent sysfs file races with rc_unregister_device()
     (git-fixes).
   - media: Revert "media: exynos4-is: Add missed check for
     pinctrl_lookup_state()" (git-fixes).
   - media: rockchip/rga: Fix a reference count leak (git-fixes).
   - media: s5p-mfc: Fix a reference count leak (git-fixes).
   - media: saa7134: avoid a shift overflow (git-fixes).
   - media: smiapp: Fix error handling at NVM reading (git-fixes).
   - media: staging/intel-ipu3: css: Correctly reset some memory (git-fixes).
   - media: st-delta: Fix reference count leak in delta_run_work (git-fixes).
   - media: sti: Fix reference count leaks (git-fixes).
   - media: stm32-dcmi: Fix a reference count leak (git-fixes).
   - media: tc358743: cleanup tc358743_cec_isr (git-fixes).
   - media: tc358743: initialize variable (git-fixes).
   - media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).
   - media: ti-vpe: Fix a missing check and reference count leak (git-fixes).
   - media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes).
   - media: usbtv: Fix refcounting mixup (git-fixes).
   - media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes).
   - media: uvcvideo: Set media controller entity functions (git-fixes).
   - media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
   - media: v4l2-async: Document asd allocation requirements (git-fixes).
   - media: venus: core: Fix runtime PM imbalance in venus_probe (git-fixes).
   - media: vsp1: Fix runtime PM imbalance on error (git-fixes).
   - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
     (git-fixes).
   - memory: omap-gpmc: Fix a couple off by ones (git-fixes).
   - memory: omap-gpmc: Fix build error without CONFIG_OF (git-fixes).
   - mfd: mfd-core: Protect against NULL call-back function pointer
     (git-fixes).
   - mfd: sm501: Fix leaks in probe() (git-fixes).
   - mic: vop: copy data to kernel space then write to io memory (git-fixes).
   - misc: mic: scif: Fix error handling path (git-fixes).
   - misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes).
   - misc: vop: add round_up(x,4) for vring_size to avoid kernel panic
     (git-fixes).
   - mm: call cond_resched() from deferred_init_memmap() (git fixes
     (mm/init), bsc#1177697).
   - mmc: core: do not set limits.discard_granularity as 0 (git-fixes).
   - mmc: core: Rework wp-gpio handling (git-fixes).
   - mm, compaction: fully assume capture is not NULL in compact_zone_order()
     (git fixes (mm/compaction), bsc#1177681).
   - mm, compaction: make capture control handling safe wrt interrupts (git
     fixes (mm/compaction), bsc#1177681).
   - mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN
     (git-fixes).
   - mmc: sdhci: Add LTR support for some Intel BYT based controllers     (git-fixes).
   - mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS
     models (git-fixes).
   - mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes).
   - mm/debug.c: always print flags in dump_page() (git fixes (mm/debug)).
   - mm: do not panic when links can't be created in sysfs (bsc#1178002).
   - mm: do not rely on system state to detect hot-plug operations
     (bsc#1178002).
   - mm: fix a race during THP splitting (bsc#1178255).
   - mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)).
   - mm: initialize deferred pages with interrupts enabled (git fixes
     (mm/init), bsc#1177697).
   - mm: madvise: fix vma user-after-free (git-fixes).
   - mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps()
     (bsc#1177694).
   - mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes
     (mm/mempolicy)).
   - mm/migrate.c: also overwrite error when it is bigger than zero (git
     fixes (mm/move_pages), bsc#1177683).
   - mm: move_pages: report the number of non-attempted pages (git fixes
     (mm/move_pages), bsc#1177683).
   - mm: move_pages: return valid node id in status if the page is already on
     the target node (git fixes (mm/move_pages), bsc#1177683).
   - mm/pagealloc.c: call touch_nmi_watchdog() on max order boundaries in
     deferred init (git fixes (mm/init), bsc#1177697).
   - mm/page-writeback.c: avoid potential division by zero in
     wb_min_max_ratio() (git-fixes (mm/writeback)).
   - mm/page-writeback.c: improve arithmetic divisions (git-fixes
     (mm/writeback)).
   - mm: replace memmap_context by meminit_context (bsc#1178002).
   - mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)).
   - mm, slab/slub: move and improve cache_from_obj() (mm/slub bsc#1165692).
     mm, slab/slub: improve error reporting and overhead of cache_from_obj()
     (mm/slub bsc#1165692).
   - mm, slub: extend checks guarded by slub_debug static key (mm/slub
     bsc#1165692).
   - mm, slub: extend slub_debug syntax for multiple blocks (mm/slub
     bsc#1165692).
   - mm, slub: introduce kmem_cache_debug_flags() (mm/slub bsc#1165692).
   - mm, slub: introduce static key for slub_debug() (mm/slub bsc#1165692).
   - mm, slub: make reclaim_account attribute read-only (mm/slub bsc#1165692).
   - mm, slub: make remaining slub_debug related attributes read-only
     (mm/slub bsc#1165692).
   - mm, slub: make some slub_debug related attributes read-only (mm/slub
     bsc#1165692).
   - mm, slub: remove runtime allocation order changes (mm/slub bsc#1165692).
   - mm, slub: restore initial kmem_cache flags (mm/slub bsc#1165692).
   - mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes
     (mm/zsmalloc)).
   - module: Correctly truncate sysfs sections output (git-fixes).
   - module: Do not expose section addresses to non-CAP_SYSLOG (git-fixes).
   - module: Refactor section attr into bin attribute (git-fixes).
   - module: statically initialize init section freeing data (git-fixes).
   - mt76: add missing locking around ampdu action (git-fixes).
   - mt76: clear skb pointers from rx aggregation reorder buffer during
     cleanup (git-fixes).
   - mt76: do not use devm API for led classdev (git-fixes).
   - mt76: fix handling full tx queues in mt76_dma_tx_queue_skb_raw
     (git-fixes).
   - mt76: fix LED link time failure (git-fixes).
   - mtd: cfi_cmdset_0002: do not free cfi->cfiq in error path of
     cfi_amdstd_setup() (git-fixes).
   - mtd: lpddr: Fix bad logic in print_drs_error (git-fixes).
   - mtd: lpddr: fix excessive stack usage with clang (git-fixes).
   - mtd: mtdoops: Do not write panic data twice (git-fixes).
   - mtd: rawnand: gpmi: Fix runtime PM imbalance on error (git-fixes).
   - mtd: rawnand: omap_elm: Fix runtime PM imbalance on error (git-fixes).
   - mtd: rawnand: stm32_fmc2: fix a buffer overflow (git-fixes).
   - mtd: rawnand: vf610: disable clk on error handling path in probe
     (git-fixes).
   - mtd: spinand: gigadevice: Add QE Bit (git-fixes).
   - mtd: spinand: gigadevice: Only one dummy byte in QUADIO (git-fixes).
   - mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes).
   - mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes).
   - mwifiex: fix double free (git-fixes).
   - mwifiex: remove function pointer check (git-fixes).
   - mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO
     (git-fixes).
   - net: bridge: br_vlan_get_pvid_rcu() should dereference the VLAN group
     under RCU (networking-stable-20_09_24).
   - net/core: check length before updating Ethertype in skb_mpls_{push,pop}
     (git-fixes).
   - net: DCB: Validate DCB_ATTR_DCB_BUFFER argument
     (networking-stable-20_09_24).
   - net: disable netpoll on fresh napis (networking-stable-20_09_11).
   - net: dsa: b53: check for timeout (networking-stable-20_08_24).
   - net: dsa: rtl8366: Properly clear member config
     (networking-stable-20_09_24).
   - net: fec: correct the error path for regulator disable in probe
     (networking-stable-20_08_24).
   - net: Fix bridge enslavement failure (networking-stable-20_09_24).
   - net: Fix potential wrong skb->protocol in skb_vlan_untag()
     (networking-stable-20_08_24).
   - net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11).
   - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC
     (networking-stable-20_09_24).
   - netlabel: fix problems with mapping removal (networking-stable-20_09_11).
   - net: lantiq: Disable IRQs only if NAPI gets scheduled
     (networking-stable-20_09_24).
   - net: lantiq: Use napi_complete_done() (networking-stable-20_09_24).
   - net: lantiq: use netif_tx_napi_add() for TX NAPI
     (networking-stable-20_09_24).
   - net: lantiq: Wake TX queue again (networking-stable-20_09_24).
   - net/mlx5e: Enable adding peer miss rules only if merged eswitch is
     supported (networking-stable-20_09_24).
   - net/mlx5e: TLS, Do not expose FPGA TLS counter if not supported
     (networking-stable-20_09_24).
   - net/mlx5: Fix FTE cleanup (networking-stable-20_09_24).
   - net: phy: Avoid NPD upon phy_detach() when driver is unbound
     (networking-stable-20_09_24).
   - net: phy: Do not warn in phy_stop() on PHY_DOWN
     (networking-stable-20_09_24).
   - net: phy: realtek: fix rtl8211e rx/tx delay config (git-fixes).
   - net: qrtr: fix usage of idr in port assignment to socket
     (networking-stable-20_08_24).
   - net/sched: act_ct: Fix skb double-free in tcf_ct_handle_fragments()
     error flow (networking-stable-20_08_24).
   - net: sctp: Fix IPv6 ancestor_size calc in sctp_copy_descendant
     (networking-stable-20_09_24).
   - net: sctp: Fix negotiation of the number of data streams
     (networking-stable-20_08_24).
   - net/smc: Prevent kernel-infoleak in __smc_diag_dump()
     (networking-stable-20_08_24).
   - net: systemport: Fix memleak in bcm_sysport_probe
     (networking-stable-20_09_11).
   - net: usb: dm9601: Add USB ID of Keenetic Plus DSL
     (networking-stable-20_09_11).
   - net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes).
   - net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
     (git-fixes).
   - net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
     (git-fixes).
   - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in
     nfc_genl_fw_download() (git-fixes).
   - nfp: use correct define to return NONE fec (networking-stable-20_09_24).
   - nfsd4: fix NULL dereference in nfsd/clients display code (git-fixes).
   - NFS: Do not move layouts to plh_return_segs list while in use
     (git-fixes).
   - NFS: Do not return layout segments that are in use (git-fixes).
   - NFS: ensure correct writeback errors are returned on close() (git-fixes).
   - NFS: Fix flexfiles read failover (git-fixes).
   - NFS: Fix security label length not being reset (bsc#1176381).
   - NFS: nfs_file_write() should check for writeback errors (git-fixes).
   - NFSv4.2: fix client's attribute cache management for copy_file_range
     (git-fixes).
   - nl80211: fix non-split wiphy information (git-fixes).
   - NTB: hw: amd: fix an issue about leak system resources (git-fixes).
   - ntb: intel: Fix memleak in intel_ntb_pci_probe (git-fixes).
   - nvme-multipath: retry commands for dying queues (bsc#1171688).
   - nvme-rdma: fix crash due to incorrect cqe (bsc#1174748).
   - nvme-rdma: fix crash when connect rejected (bsc#1174748).
   - overflow: Include header file with SIZE_MAX declaration (git-fixes).
   - PCI: aardvark: Check for errors from pci_bridge_emul_init() call
     (git-fixes).
   - PCI: Avoid double hpmemsize MMIO window assignment (git-fixes).
   - PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979).
   - PCI: tegra194: Fix runtime PM imbalance on error (git-fixes).
   - PCI: tegra: Fix runtime PM imbalance on error (git-fixes).
   - percpu: fix first chunk size calculation for populated bitmap (git-fixes
     (mm/percpu)).
   - perf/x86/amd: Fix sampling Large Increment per Cycle events
     (bsc#1152489).
   - perf/x86: Fix n_pair for cancelled txn (bsc#1152489).
   - phy: ti: am654: Fix a leak in serdes_am654_probe() (git-fixes).
   - pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB (git-fixes).
   - pinctrl: mcp23s08: Fix mcp23x17 precious range (git-fixes).
   - pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser (git-fixes).
   - pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).
   - PKCS#7: Check codeSigning EKU for kernel module and kexec pe
     verification.
   - PKCS#7: Check codeSigning EKU for kernel module and kexec pe
     verification (bsc#1177353).
   - Platform: OLPC: Fix memleak in olpc_ec_probe (git-fixes).
   - platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP
     (git-fixes).
   - platform/x86: fix kconfig dependency warning for LG_LAPTOP (git-fixes).
   - platform/x86: intel_pmc_core: do not create a static struct device
     (git-fixes).
   - platform/x86: intel-vbtn: Switch to an allow-list for SW_TABLET_MODE
     reporting (bsc#1175599).
   - platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes).
   - platform/x86: thinkpad_acpi: initialize tp_nvram_state variable
     (git-fixes).
   - platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse
     (git-fixes).
   - PM: hibernate: Batch hibernate and resume IO requests (bsc#1178079).
   - PM: hibernate: remove the bogus call to get_gendisk() in
     software_resume() (git-fixes).
   - pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly on read
     (git-fixes).
   - powerpc/book3s64/radix: Make radix_mem_block_size 64bit (bsc#1055186
     ltc#153436 git-fixes).
   - powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729).
   - powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load
     emulation (bsc#1065729).
   - powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729).
   - powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729).
   - powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729).
   - powerpc/papr_scm: Fix warning triggered by perf_stats_show()
     (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769 git-fixes).
   - powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729).
   - powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729).
   - powerpc/powernv/elog: Fix race while processing OPAL error log event
     (bsc#1065729).
   - powerpc/pseries: Avoid using addr_to_pfn in real mode (jsc#SLE-9246
     git-fixes).
   - powerpc/pseries: explicitly reschedule during drmem_lmb list traversal
     (bsc#1077428 ltc#163882 git-fixes).
   - powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729).
   - power: supply: max17040: Correct voltage reading (git-fixes).
   - pwm: img: Fix null pointer access in probe (git-fixes).
   - pwm: lpss: Add range limit check for the base_unit register value
     (git-fixes).
   - pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare()
     (git-fixes).
   - qla2xxx: Return EBUSY on fcport deletion (bsc#1171688).
   - qtnfmac: fix resource leaks on unsupported iftype error return path
     (git-fixes).
   - r8169: fix data corruption issue on RTL8402 (bsc#1174098).
   - r8169: fix issue with forced threading in combination with shared
     interrupts (git-fixes).
   - r8169: fix operation under forced interrupt threading (git-fixes).
   - rapidio: fix the missed put_device() for rio_mport_add_riodev
     (git-fixes).
   - rbd-add-rbd_img_fill_cmp_and_write_from_bvecs.patch: (bsc#1177090).
   - rbd-add-support-for-COMPARE_AND_WRITE-CMPEXT.patch: (bsc#1177090).
   - RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request
     (bsc#1175621).
   - Refresh
     patches.suse/fnic-to-not-call-scsi_done-for-unhandled-commands.patch
     (bsc#1168468, bsc#1171675).
   - regulator: axp20x: fix LDO2/4 description (git-fixes).
   - regulator: resolve supply after creating regulator (git-fixes).
   - rename Other drivers / Intel IOMMU subsection to IOMMU
   - reset: sti: reset-syscfg: fix struct description warnings (git-fixes).
   - ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes).
   - rpm/kernel-binary.spec.in: Fix compressed module handling for in-tree
     KMP (jsc#SLE-10886) The in-tree KMP that is built with SLE kernels have
     a different scriptlet that is embedded in kernel-binary.spec.in rather
     than *.sh files.
   - rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)
   - rtc: ds1374: fix possible race condition (git-fixes).
   - rtc: rx8010: do not modify the global rtc ops (git-fixes).
   - rtc: sa1100: fix possible race condition (git-fixes).
   - rtl8xxxu: prevent potential memory leak (git-fixes).
   - rtw88: increse the size of rx buffer size (git-fixes).
   - s390/cio: add cond_resched() in the slow_eval_known_fn() loop
     (bsc#1177799 LTC#188733).
   - s390/dasd: Fix zero write for FBA devices (bsc#1177801 LTC#188735).
   - s390/pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY
     (bsc#1176979).
   - sched/fair: Ignore cache hotness for SMT migration (bnc#1155798 (CPU
     scheduler functional and performance backports)).
   - sched/fair: Use dst group while checking imbalance for NUMA balancer
     (bnc#1155798 (CPU scheduler functional and performance backports)).
   - sched/numa: Avoid creating large imbalances at task creation time
     (bnc#1176588).
   - sched/numa: Check numa balancing information only when enabled
     (bnc#1176588).
   - sched/numa: Use runnable_avg to classify node (bnc#1155798 (CPU
     scheduler functional and performance backports)).
   - scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729).
   - scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166
     ltc#188226).
   - scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling
     getpeername() (bsc#1177258).
   - scsi: mptfusion: Do not use GFP_ATOMIC for larger DMA allocations
     (bsc#1175898, ECO-2743).
   - scsi: qla2xxx: Add IOCB resource tracking (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Add rport fields in debugfs (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Add SLER and PI control support (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices
     (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1171688
     bsc#1174003).
   - scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1171688
     bsc#1174003).
   - scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1171688
     bsc#1174003).
   - scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c
     (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c
     (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c
     (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1171688
     bsc#1174003).
   - scsi: qla2xxx: Fix I/O failures during remote port toggle testing
     (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Fix memory size truncation (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Fix MPI reset needed message (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue
     (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Fix reset of MPI firmware (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1171688
     bsc#1174003).
   - scsi: qla2xxx: Make tgt_port_database available in initiator mode
     (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Performance tweak (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1171688
     bsc#1174003).
   - scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1171688 bsc#1174003).
   - scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1171688
     bsc#1174003).
   - scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1171688
     bsc#1174003).
   - scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1171688
     bsc#1174003).
   - sctp: not disable bh in the whole sctp_get_port_local()
     (networking-stable-20_09_11).
   - selftests/timers: Turn off timeout setting (git-fixes).
   - serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout
     (git-fixes).
   - serial: 8250_omap: Fix sleeping function called from invalid context
     during probe (git-fixes).
   - serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).
   - serial: uartps: Wait for tx_empty in console setup (git-fixes).
   - slimbus: core: check get_addr before removing laddr ida (git-fixes).
   - slimbus: core: do not enter to clock pause mode in core (git-fixes).
   - slimbus: qcom-ngd-ctrl: disable ngd in qmi server down callback
     (git-fixes).
   - soc: fsl: qbman: Fix return value on success (git-fixes).
   - spi: dw-pci: free previously allocated IRQs if desc->setup() fails
     (git-fixes).
   - spi: fsl-espi: Only process interrupts for expected events (git-fixes).
   - spi: omap2-mcspi: Improve performance waiting for CHSTAT (git-fixes).
   - spi: spi-s3c64xx: Check return values (git-fixes).
   - spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and
     s3c64xx_enable_datapath() (git-fixes).
   - spi: sprd: Release DMA channel also on probe deferral (git-fixes).
   - spi: stm32: Rate-limit the 'Communication suspended' message (git-fixes).
   - staging: comedi: check validity of wMaxPacketSize of usb endpoints found
     (git-fixes).
   - staging:r8188eu: avoid skb_clone for amsdu to msdu conversion
     (git-fixes).
   - staging: rtl8192u: Do not use GFP_KERNEL in atomic context (git-fixes).
   - SUNRPC: Revert 241b1f419f0e ("SUNRPC: Remove xdr_buf_trim()")
     (git-fixes).
   - svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (git-fixes).
   - taprio: Fix allowing too small intervals (networking-stable-20_09_24).
   - target-compare-and-write-backend-driver-sense-handli.patch:
     (bsc#1177719).
   - target-rbd-add-emulate_legacy_capacity-dev-attribute.patch:
     (bsc#1177109).
   - target-rbd-add-WRITE-SAME-support.patch: (bsc#1177090).
   - target-rbd-conditionally-fix-off-by-one-bug-in-get_b.patch:
     (bsc#1177109).
   - target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
     (bsc#1177090).
   - target-rbd-fix-unmap-discard-block-size-conversion.patch: (bsc#1177271).
   - target-rbd-fix-unmap-handling-with-unmap_zeroes_data.patch:
     (bsc#1177271).
   - target-rbd-support-COMPARE_AND_WRITE.patch: (bsc#1177090).
   - thermal: rcar_thermal: Handle probe error gracefully (git-fixes).
   - time: Prevent undefined behaviour in timespec64_to_ns() (bsc#1164648).
   - tipc: fix memory leak caused by tipc_buf_append() (git-fixes).
   - tipc: Fix memory leak in tipc_group_create_member()
     (networking-stable-20_09_24).
   - tipc: fix shutdown() of connectionless socket
     (networking-stable-20_09_11).
   - tipc: fix shutdown() of connection oriented socket
     (networking-stable-20_09_24).
   - tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes).
   - tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
     (networking-stable-20_08_24).
   - tipc: use skb_unshare() instead in tipc_buf_append()
     (networking-stable-20_09_24).
   - tracing: Check return value of __create_val_fields() before using its
     result (git-fixes).
   - tracing: Save normal string variables (git-fixes).
   - tty: ipwireless: fix error handling (git-fixes).
   - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes).
   - Update config files. Enable ACPI_PCI_SLOT and HOTPLUG_PCI_ACPI
     (bsc#1177194).
   - USB: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes).
   - USB: cdc-acm: handle broken union descriptors (git-fixes).
   - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync()
     (git-fixes).
   - USB: core: Solve race condition in anchor cleanup functions (git-fixes).
   - USB: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes).
   - USB: dwc2: Fix parameter type in function pointer prototype (git-fixes).
   - USB: dwc3: core: add phy cleanup for probe error handling (git-fixes).
   - USB: dwc3: core: do not trigger runtime pm when remove driver
     (git-fixes).
   - USB: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes).
   - USB: dwc3: gadget: Resume pending requests after CLEAR_STALL (git-fixes).
   - USB: dwc3: Increase timeout for CmdAct cleared by device controller
     (git-fixes).
   - USB: dwc3: pci: Allow Elkhart Lake to utilize DSM method for PM
     functionality (git-fixes).
   - USB: dwc3: simple: add support for Hikey 970 (git-fixes).
   - USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).
   - USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int
     (git-fixes).
   - USB: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets
     (git-fixes).
   - USB: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes).
   - USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).
   - USB: gadget: function: printer: fix use-after-free in __lock_acquire
     (git-fixes).
   - USB: gadget: u_ether: enable qmult on SuperSpeed Plus as well
     (git-fixes).
   - usblp: fix race between disconnect() and read() (git-fixes).
   - USB: ohci: Default to per-port over-current protection (git-fixes).
   - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters     (git-fixes).
   - USB: serial: option: add Cellient MPL200 card (git-fixes).
   - USB: serial: option: Add Telit FT980-KS composition (git-fixes).
   - USB: serial: pl2303: add device-id for HP GC device (git-fixes).
   - USB: serial: qcserial: fix altsetting probing (git-fixes).
   - USB: xhci-mtk: Fix typo (git-fixes).
   - vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn
     (bsc#1176979).
   - virtio-net: do not disable guest csum when disable LRO (git-fixes).
   - VMCI: check return value of get_user_pages_fast() for errors (git-fixes).
   - vmxnet3: fix cksum offload issues for non-udp tunnels (git-fixes).
   - w1: mxc_w1: Fix timeout resolution problem leading to bus error
     (git-fixes).
   - watchdog: Fix memleak in watchdog_cdev_register (git-fixes).
   - watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3 (git-fixes).
   - watchdog: Use put_device on error (git-fixes).
   - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
     (git-fixes).
   - whitespace cleanup
   - wlcore: fix runtime pm imbalance in wl1271_tx_work (git-fixes).
   - wlcore: fix runtime pm imbalance in wlcore_regdomain_config (git-fixes).
   - writeback: Avoid skipping inode writeback (bsc#1177755).
   - writeback: Fix sync livelock due to b_dirty_time processing
     (bsc#1177755).
   - writeback: Protect inode->i_io_list with inode->i_lock (bsc#1177755).
   - X.509: Add CodeSigning extended key usage parsing (bsc#1177353).
   - x86/alternative: Do not call text_poke() in lazy TLB mode (bsc#1175749).
   - x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1152489).
   - x86/ioapic: Unbreak check_timer() (bsc#1152489).
   - x86/{mce,mm}: Unmap the entire page if the whole page is affected and
     poisoned (bsc#1177765).
   - x86/mm: unencrypted non-blocking DMA allocations use coherent pools
     (bsc#1175898, ECO-2743).
   - x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10
     compiled kernels (bsc#1176907).
   - x86/xen: disable Firmware First mode for correctable memory errors     (bsc#1176713).
   - xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411).
   - xen/events: add a new "late EOI" evtchn framework (XSA-332 bsc#1177411).
   - xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332
     bsc#1177411).
   - xen/events: avoid removing an event channel while handling it (XSA-331
     bsc#1177410).
   - xen/events: block rogue events for some time (XSA-332 bsc#1177411).
   - xen/events: defer eoi in case of excessive number of events (XSA-332
     bsc#1177411).
   - xen/events: do not use chip_data for legacy IRQs (bsc#1065600).
   - xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411).
   - xen/events: switch user event channels to lateeoi model (XSA-332
     bsc#1177411).
   - xen/events: use a common cpu hotplug hook for event channels (XSA-332
     bsc#1177411).
   - xen/gntdev.c: Mark pages as dirty (bsc#1065600).
   - xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411).
   - xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411).
   - xen/pvcallsback: use lateeoi irq binding (XSA-332 bsc#1177411).
   - xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411).
   - xfs: fix high key handling in the rt allocator's query_range function
     (git-fixes).
   - xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt
     files (git-fixes).
   - xfs: force the log after remapping a synchronous-writes file (git-fixes).
   - xfs: limit entries returned when counting fsmap records (git-fixes).
   - xhci: do not create endpoint debugfs entry before ring buffer is set
     (git-fixes).
   - xprtrdma: fix incorrect header size calculations (git-fixes).
   - yam: fix possible memory leak in yam_init_driver (git-fixes).


Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Public Cloud 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2020-3491=1



Package List:

   - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch):

      kernel-devel-azure-5.3.18-18.24.1
      kernel-source-azure-5.3.18-18.24.1

   - SUSE Linux Enterprise Module for Public Cloud 15-SP2 (x86_64):

      kernel-azure-5.3.18-18.24.1
      kernel-azure-debuginfo-5.3.18-18.24.1
      kernel-azure-debugsource-5.3.18-18.24.1
      kernel-azure-devel-5.3.18-18.24.1
      kernel-azure-devel-debuginfo-5.3.18-18.24.1
      kernel-syms-azure-5.3.18-18.24.1


References:

   https://www.suse.com/security/cve/CVE-2020-12351.html
   https://www.suse.com/security/cve/CVE-2020-12352.html
   https://www.suse.com/security/cve/CVE-2020-14351.html
   https://www.suse.com/security/cve/CVE-2020-16120.html
   https://www.suse.com/security/cve/CVE-2020-24490.html
   https://www.suse.com/security/cve/CVE-2020-25212.html
   https://www.suse.com/security/cve/CVE-2020-25285.html
   https://www.suse.com/security/cve/CVE-2020-25641.html
   https://www.suse.com/security/cve/CVE-2020-25643.html
   https://www.suse.com/security/cve/CVE-2020-25645.html
   https://www.suse.com/security/cve/CVE-2020-25656.html
   https://www.suse.com/security/cve/CVE-2020-25705.html
   https://www.suse.com/security/cve/CVE-2020-27673.html
   https://www.suse.com/security/cve/CVE-2020-27675.html
   https://bugzilla.suse.com/1055014
   https://bugzilla.suse.com/1055186
   https://bugzilla.suse.com/1061843
   https://bugzilla.suse.com/1065600
   https://bugzilla.suse.com/1065729
   https://bugzilla.suse.com/1066382
   https://bugzilla.suse.com/1077428
   https://bugzilla.suse.com/1129923
   https://bugzilla.suse.com/1134760
   https://bugzilla.suse.com/1149032
   https://bugzilla.suse.com/1152489
   https://bugzilla.suse.com/1155798
   https://bugzilla.suse.com/1163592
   https://bugzilla.suse.com/1164648
   https://bugzilla.suse.com/1165692
   https://bugzilla.suse.com/1168468
   https://bugzilla.suse.com/1171675
   https://bugzilla.suse.com/1171688
   https://bugzilla.suse.com/1174003
   https://bugzilla.suse.com/1174098
   https://bugzilla.suse.com/1174748
   https://bugzilla.suse.com/1174969
   https://bugzilla.suse.com/1175052
   https://bugzilla.suse.com/1175599
   https://bugzilla.suse.com/1175621
   https://bugzilla.suse.com/1175718
   https://bugzilla.suse.com/1175721
   https://bugzilla.suse.com/1175749
   https://bugzilla.suse.com/1175807
   https://bugzilla.suse.com/1175898
   https://bugzilla.suse.com/1176019
   https://bugzilla.suse.com/1176354
   https://bugzilla.suse.com/1176381
   https://bugzilla.suse.com/1176400
   https://bugzilla.suse.com/1176485
   https://bugzilla.suse.com/1176588
   https://bugzilla.suse.com/1176713
   https://bugzilla.suse.com/1176907
   https://bugzilla.suse.com/1176979
   https://bugzilla.suse.com/1177027
   https://bugzilla.suse.com/1177086
   https://bugzilla.suse.com/1177090
   https://bugzilla.suse.com/1177109
   https://bugzilla.suse.com/1177121
   https://bugzilla.suse.com/1177193
   https://bugzilla.suse.com/1177194
   https://bugzilla.suse.com/1177206
   https://bugzilla.suse.com/1177258
   https://bugzilla.suse.com/1177271
   https://bugzilla.suse.com/1177281
   https://bugzilla.suse.com/1177283
   https://bugzilla.suse.com/1177284
   https://bugzilla.suse.com/1177285
   https://bugzilla.suse.com/1177286
   https://bugzilla.suse.com/1177297
   https://bugzilla.suse.com/1177353
   https://bugzilla.suse.com/1177384
   https://bugzilla.suse.com/1177410
   https://bugzilla.suse.com/1177411
   https://bugzilla.suse.com/1177470
   https://bugzilla.suse.com/1177511
   https://bugzilla.suse.com/1177617
   https://bugzilla.suse.com/1177681
   https://bugzilla.suse.com/1177683
   https://bugzilla.suse.com/1177687
   https://bugzilla.suse.com/1177694
   https://bugzilla.suse.com/1177697
   https://bugzilla.suse.com/1177719
   https://bugzilla.suse.com/1177724
   https://bugzilla.suse.com/1177725
   https://bugzilla.suse.com/1177726
   https://bugzilla.suse.com/1177739
   https://bugzilla.suse.com/1177749
   https://bugzilla.suse.com/1177750
   https://bugzilla.suse.com/1177754
   https://bugzilla.suse.com/1177755
   https://bugzilla.suse.com/1177765
   https://bugzilla.suse.com/1177766
   https://bugzilla.suse.com/1177799
   https://bugzilla.suse.com/1177801
   https://bugzilla.suse.com/1177814
   https://bugzilla.suse.com/1177817
   https://bugzilla.suse.com/1177854
   https://bugzilla.suse.com/1177855
   https://bugzilla.suse.com/1177856
   https://bugzilla.suse.com/1177861
   https://bugzilla.suse.com/1178002
   https://bugzilla.suse.com/1178079
   https://bugzilla.suse.com/1178166
   https://bugzilla.suse.com/1178173
   https://bugzilla.suse.com/1178175
   https://bugzilla.suse.com/1178176
   https://bugzilla.suse.com/1178177
   https://bugzilla.suse.com/1178183
   https://bugzilla.suse.com/1178184
   https://bugzilla.suse.com/1178185
   https://bugzilla.suse.com/1178186
   https://bugzilla.suse.com/1178190
   https://bugzilla.suse.com/1178191
   https://bugzilla.suse.com/1178246
   https://bugzilla.suse.com/1178255
   https://bugzilla.suse.com/1178307
   https://bugzilla.suse.com/1178330
   https://bugzilla.suse.com/1178395

SUSE: 2020:3491-1 important: the Linux Kernel

November 23, 2020
An update that solves 14 vulnerabilities and has 90 fixes is now available

Summary

The SUSE Linux Enterprise 15 SP2 kernel Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766). - CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485). - CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086). - CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470). - CVE-2020-12351: Implemented a kABI workaround for bluetooth l2cap_ops filter addition (bsc#1177724). - CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka "BleedingTooth" (bsc#1177725). - CVE-2020-25212: Fixed a TOCTOU mismatch in the NFS client code (bnc#1176381). - CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177511). - CVE-2020-24490: Fixed a heap buffer overflow when processing extended advertising report events aka "BleedingTooth" aka "BadVibes" (bsc#1177726). - CVE-2020-25641: Fixed a zero-length biovec request issued by the block subsystem could have caused the kernel to enter an infinite loop, causing a denial of service (bsc#1177121). - CVE-2020-25643: Fixed a memory corruption and a read overflow which could have caused by improper input validation in the ppp_cp_parse_cr function (bsc#1177206). - CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411) - CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410). - CVE-2020-25705: A ICMP global rate limiting side-channel was removed which could lead to e.g. the SADDNS attack (bsc#1175721) The following non-security bugs were fixed: - 9p: Fix memory leak in v9fs_mount (git-fixes). - ACPI: Always build evged in (git-fixes). - ACPI: button: fix handling lid state changes when input device closed (git-fixes). - ACPI: configfs: Add missing config_item_put() to fix refcount leak (git-fixes). - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes). - ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes). - ACPI: EC: Reference count query handlers under lock (git-fixes). - act_ife: load meta modules before tcf_idr_check_alloc() (networking-stable-20_09_24). - Add CONFIG_CHECK_CODESIGN_EKU - airo: Fix read overflows sending packets (git-fixes). - ALSA: ac97: (cosmetic) align argument names (git-fixes). - ALSA: aoa: i2sbus: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes). - ALSA: asihpi: fix spellint typo in comments (git-fixes). - ALSA: atmel: ac97: clarify operator precedence (git-fixes). - ALSA: bebob: potential info leak in hwdep_read() (git-fixes). - ALSA: compress_offload: remove redundant initialization (git-fixes). - ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes). - ALSA: core: pcm: simplify locking for timers (git-fixes). - ALSA: core: timer: clarify operator precedence (git-fixes). - ALSA: core: timer: remove redundant assignment (git-fixes). - ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock (git-fixes). - ALSA: fireworks: use semicolons rather than commas to separate statements (git-fixes). - ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes). - ALSA: hda: (cosmetic) align function parameters (git-fixes). - ALSA: hda - Do not register a cb func if it is registered already (git-fixes). - ALSA: hda - Fix the return value if cb func is already registered (git-fixes). - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close (git-fixes). - ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes). - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes). - ALSA: hda/realtek - set mic to auto detect on a HP AIO machine (git-fixes). - ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes). - ALSA: hda: use semicolons rather than commas to separate statements (git-fixes). - ALSA: hdspm: Fix typo arbitary (git-fixes). - ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes). - ALSA: portman2x4: fix repeated word 'if' (git-fixes). - ALSA: rawmidi: (cosmetic) align function parameters (git-fixes). - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes). - ALSA: sparc: dbri: fix repeated word 'the' (git-fixes). - ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes). - ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes). - ALSA: usb-audio: fix spelling mistake "Frequence" -> "Frequency" (git-fixes). - ALSA: usb-audio: Line6 Pod Go interface requires static clock rate quirk (git-fixes). - ALSA: usb: scarless_gen2: fix endianness issue (git-fixes). - ALSA: vx: vx_core: clarify operator precedence (git-fixes). - ALSA: vx: vx_pcm: remove redundant assignment (git-fixes). - ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes). - arm64: Enable PCI write-combine resources under sysfs (bsc#1175807). - ASoC: fsl: imx-es8328: add missing put_device() call in imx_es8328_probe() (git-fixes). - ASoC: fsl_sai: Instantiate snd_soc_dai_driver (git-fixes). - ASoC: img-i2s-out: Fix runtime PM imbalance on error (git-fixes). - ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1 (git-fixes). - ASoC: kirkwood: fix IRQ error handling (git-fixes). - ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes). - ASoC: qcom: lpass-platform: fix memory leak (git-fixes). - ASoC: sun50i-codec-analog: Fix duplicate use of ADC enable bits (git-fixes). - ASoC: tlv320aic32x4: Fix bdiv clock rate derivation (git-fixes). - ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions (git-fixes). - ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811 (git-fixes). - ata: ahci: mvebu: Make SATA PHY optional for Armada 3720 (git-fixes). - ata: sata_rcar: Fix DMA boundary mask (git-fixes). - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes). - ath10k: fix array out-of-bounds access (git-fixes). - ath10k: fix memory leak for tpc_stats_final (git-fixes). - ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes). - ath10k: provide survey info as accumulated data (git-fixes). - ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes). - ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes). - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes). - ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes). - ath9k_htc: Use appropriate rs_datalen type (git-fixes). - backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes). - blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART (bsc#1177750). - block: ensure bdi->io_pages is always initialized (bsc#1177749). - block: Fix page_is_mergeable() for compound pages (bsc#1177814). - block: Set same_page to false in __bio_try_merge_page if ret is false (git-fixes). - Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb (git-fixes). - Bluetooth: Fix refcount use-after-free issue (git-fixes). - Bluetooth: guard against controllers sending zero'd events (git-fixes). - Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes). - Bluetooth: hci_uart: Cancel init work before unregistering (git-fixes). - Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes). - Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes). - Bluetooth: Only mark socket zapped after unlocking (git-fixes). - Bluetooth: prefetch channel before killing sock (git-fixes). - bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex (git-fixes). - bonding: show saner speed for broadcast mode (networking-stable-20_08_24). - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes). - brcmfmac: check ndev pointer (git-fixes). - brcmfmac: Fix double freeing in the fmac usb data path (git-fixes). - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes). - btrfs: add owner and fs_info to alloc_state io_tree (bsc#1177854). - btrfs: allocate scrub workqueues outside of locks (bsc#1178183). - btrfs: block-group: do not set the wrong READA flag for btrfs_read_block_groups() (bsc#1176019). - btrfs: block-group: fix free-space bitmap threshold (bsc#1176019). - btrfs: block-group: refactor how we delete one block group item (bsc#1176019). - btrfs: block-group: refactor how we insert a block group item (bsc#1176019). - btrfs: block-group: refactor how we read one block group item (bsc#1176019). - btrfs: block-group: rename write_one_cache_group() (bsc#1176019). - btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687). - btrfs: do not force read-only after error in drop snapshot (bsc#1176354). - btrfs: do not set the full sync flag on the inode during page release (bsc#1177687). - btrfs: do not take an extra root ref at allocation time (bsc#1176019). - btrfs: drop logs when we've aborted a transaction (bsc#1176019). - btrfs: drop path before adding new uuid tree entry (bsc#1178176). - btrfs: fix a race between scrub and block group removal/allocation (bsc#1176019). - btrfs: fix crash during unmount due to race with delayed inode workers (bsc#1176019). - btrfs: fix filesystem corruption after a device replace (bsc#1178395). - btrfs: fix NULL pointer dereference after failure to create snapshot (bsc#1178190). - btrfs: fix overflow when copying corrupt csums for a message (bsc#1178191). - btrfs: fix race between page release and a fast fsync (bsc#1177687). - btrfs: fix space cache memory leak after transaction abort (bsc#1178173). - btrfs: free block groups after free'ing fs trees (bsc#1176019). - btrfs: hold a ref on the root on the dead roots list (bsc#1176019). - btrfs: kill the subvol_srcu (bsc#1176019). - btrfs: make btrfs_cleanup_fs_roots use the radix tree lock (bsc#1176019). - btrfs: make inodes hold a ref on their roots (bsc#1176019). - btrfs: make the extent buffer leak check per fs info (bsc#1176019). - btrfs: move btrfs_rm_dev_replace_free_srcdev outside of all locks (bsc#1178395). - btrfs: move btrfs_scratch_superblocks into btrfs_dev_replace_finishing (bsc#1178395). - btrfs: move ino_cache_inode dropping out of btrfs_free_fs_root (bsc#1176019). - btrfs: move the block group freeze/unfreeze helpers into block-group.c (bsc#1176019). - btrfs: move the root freeing stuff into btrfs_put_root (bsc#1176019). - btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687). - btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687). - btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856). - btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855). - btrfs: reduce contention on log trees when logging checksums (bsc#1177687). - btrfs: release old extent maps during page release (bsc#1177687). - btrfs: remove no longer necessary chunk mutex locking cases (bsc#1176019). - btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687). - btrfs: rename member 'trimming' of block group to a more generic name (bsc#1176019). - btrfs: scrub, only lookup for csums if we are dealing with a data extent (bsc#1176019). - btrfs: set the correct lockdep class for new nodes (bsc#1178184). - btrfs: set the lockdep class for log tree extent buffers (bsc#1178186). - btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687). - btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861). - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal (git-fixes). - can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes). - can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes). - can: flexcan: remove ack_grp and ack_bit handling from driver (git-fixes). - can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes). - ceph: promote to unsigned long long before shifting (bsc#1178175). - clk: at91: remove the checking of parent_name (git-fixes). - clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes). - clk: imx8mq: Fix usdhc parents order (git-fixes). - clk: keystone: sci-clk: fix parsing assigned-clock data during probe (git-fixes). - clk: meson: g12a: mark fclk_div2 as critical (git-fixes). - clk: qcom: gcc-sdm660: Fix wrong parent_map (git-fixes). - clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED (git-fixes). - clk: socfpga: stratix10: fix the divider for the emac_ptp_free_clk (git-fixes). - clk: tegra: Always program PLL_E when enabled (git-fixes). - clk/ti/adpll: allocate room for terminating null (git-fixes). - clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes). - clocksource/drivers/timer-gx6605s: Fixup counter reload (git-fixes). - cpuidle: Poll for a minimum of 30ns and poll for a tick if lower c-states are disabled (bnc#1176588). - create Storage / NVMe subsection - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (git-fixes). - crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes). - crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes). - crypto: ccp - fix error handling (git-fixes). - crypto: dh - check validity of Z before export (bsc#1175718). - crypto: dh - SP800-56A rev 3 local public key validation (bsc#1175718). - crypto: ecc - SP800-56A rev 3 local public key validation (bsc#1175718). - crypto: ecdh - check validity of Z before export (bsc#1175718). - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes). - crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes). - crypto: omap-sham - fix digcnt register handling with export/import (git-fixes). - crypto: picoxcell - Fix potential race condition bug (git-fixes). - crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA (git-fixes). - cxgb4: fix memory leak during module unload (networking-stable-20_09_24). - cxgb4: Fix offset when clearing filter byte counters (networking-stable-20_09_24). - cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes). - cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes). - dax: Fix compilation for CONFIG_DAX && !CONFIG_FS_DAX (bsc#1177817). - Disable ipa-clones dump for KMP builds (bsc#1178330) The feature is not really useful for KMP, and rather confusing, so let's disable it at building out-of-tree codes - Disable module compression on SLE15 SP2 (bsc#1178307) - dma-direct: add missing set_memory_decrypted() for coherent mapping (bsc#1175898, ECO-2743). - dma-direct: always align allocation size in dma_direct_alloc_pages() (bsc#1175898, ECO-2743). - dma-direct: atomic allocations must come from atomic coherent pools (bsc#1175898, ECO-2743). - dma-direct: check return value when encrypting or decrypting memory (bsc#1175898, ECO-2743). - dma-direct: consolidate the error handling in dma_direct_alloc_pages (bsc#1175898, ECO-2743). - dma-direct: make uncached_kernel_address more general (bsc#1175898, ECO-2743). - dma-direct: provide function to check physical memory area validity (bsc#1175898, ECO-2743). - dma-direct: provide mmap and get_sgtable method overrides (bsc#1175898, ECO-2743). - dma-direct: re-encrypt memory if dma_direct_alloc_pages() fails (bsc#1175898, ECO-2743). - dma-direct: remove __dma_direct_free_pages (bsc#1175898, ECO-2743). - dma-direct: remove the dma_handle argument to __dma_direct_alloc_pages (bsc#1175898, ECO-2743). - dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes). - dmaengine: dmatest: Check list for emptiness before access its last entry (git-fixes). - dmaengine: dw: Activate FIFO-mode for memory peripherals only (git-fixes). - dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq fails (git-fixes). - dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all (git-fixes). - dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all (git-fixes). - dmaengine: tegra-apb: Prevent race conditions on channel's freeing (git-fixes). - dmaengine: zynqmp_dma: fix burst length configuration (git-fixes). - dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling) (git-fixes). - dma-mapping: add a dma_can_mmap helper (bsc#1175898, ECO-2743). - dma-mapping: always use VM_DMA_COHERENT for generic DMA remap (bsc#1175898, ECO-2743). - dma-mapping: DMA_COHERENT_POOL should select GENERIC_ALLOCATOR (bsc#1175898, ECO-2743). - dma-mapping: make dma_atomic_pool_init self-contained (bsc#1175898, ECO-2743). - dma-mapping: merge the generic remapping helpers into dma-direct (bsc#1175898, ECO-2743). - dma-mapping: remove arch_dma_mmap_pgprot (bsc#1175898, ECO-2743). - dma-mapping: warn when coherent pool is depleted (bsc#1175898, ECO-2743). - dma-pool: add additional coherent pools to map to gfp mask (bsc#1175898, ECO-2743). - dma-pool: add pool sizes to debugfs (bsc#1175898, ECO-2743). - dma-pool: decouple DMA_REMAP from DMA_COHERENT_POOL (bsc#1175898, ECO-2743). - dma-pool: do not allocate pool memory from CMA (bsc#1175898, ECO-2743). - dma-pool: dynamically expanding atomic pools (bsc#1175898, ECO-2743). - dma-pool: Fix an uninitialized variable bug in atomic_pool_expand() (bsc#1175898, ECO-2743). - dma-pool: fix coherent pool allocations for IOMMU mappings (bsc#1175898, ECO-2743). - dma-pool: fix too large DMA pools on medium memory size systems (bsc#1175898, ECO-2743). - dma-pool: get rid of dma_in_atomic_pool() (bsc#1175898, ECO-2743). - dma-pool: introduce dma_guess_pool() (bsc#1175898, ECO-2743). - dma-pool: make sure atomic pool suits device (bsc#1175898, ECO-2743). - dma-pool: Only allocate from CMA when in same memory zone (bsc#1175898, ECO-2743). - dma-pool: scale the default DMA coherent pool size with memory capacity (bsc#1175898, ECO-2743). - dma-remap: separate DMA atomic pools from direct remap code (bsc#1175898, ECO-2743). - dm: Call proper helper to determine dax support (bsc#1177817). - dm/dax: Fix table reference counts (bsc#1178246). - docs: driver-api: remove a duplicated index entry (git-fixes). - drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes). - drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config (git-fixes). - drm/radeon: revert "Prefer lower feedback dividers" (bsc#1177384). - drop Storage / bsc#1171688 subsection No effect on expanded tree. - e1000: Do not perform reset in reset_task if we are already down (git-fixes). - EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1152489). - eeprom: at25: set minimum read/write access stride to 1 (git-fixes). - extcon: ptn5150: Fix usage of atomic GPIO with sleeping GPIO chips (git-fixes). - ftrace: Move RCU is watching check after recursion check (git-fixes). - fuse: do not ignore errors from fuse_writepages_fill() (bsc#1177193). - futex: Adjust absolute futex timeouts with per time namespace offset (bsc#1164648). - futex: Consistently use fshared as boolean (bsc#1149032). - futex: Fix incorrect should_fail_futex() handling (bsc#1149032). - futex: Remove put_futex_key() (bsc#1149032). - futex: Remove unused or redundant includes (bsc#1149032). - gpio: mockup: fix resource leak in error path (git-fixes). - gpio: rcar: Fix runtime PM imbalance on error (git-fixes). - gpio: siox: explicitly support only threaded irqs (git-fixes). - gpio: sprd: Clear interrupt when setting the type as edge (git-fixes). - gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes). - gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24). - gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11). - HID: hid-input: fix stylus battery reporting (git-fixes). - HID: ite: Add USB id match for Acer One S1003 keyboard dock (git-fixes). - HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes). - HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes). - hwmon: (applesmc) check status earlier (git-fixes). - hwmon: (mlxreg-fan) Fix double "Mellanox" (git-fixes). - hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61} (git-fixes). - i2c: aspeed: Mask IRQ status to relevant bits (git-fixes). - i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices() (git-fixes). - i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs (git-fixes). - i2c: cpm: Fix i2c_ram structure (git-fixes). - i2c: i801: Exclude device from suspend direct complete optimization (git-fixes). - i2c: imx: Fix external abort on interrupt in exit paths (git-fixes). - i2c: meson: fix clock setting overwrite (git-fixes). - i2c: meson: fixup rate calculation with filter delay (git-fixes). - i2c: owl: Clear NACK and BUS error bits (git-fixes). - i2c: rcar: Auto select RESET_CONTROLLER (git-fixes). - i2c: tegra: Prevent interrupt triggering after transfer timeout (git-fixes). - i2c: tegra: Restore pinmux on system resume (git-fixes). - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo (git-fixes). - i3c: master: Fix error return in cdns_i3c_master_probe() (git-fixes). - ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897). - ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes). - ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes). - ibmvnic: save changed mac address to adapter->mac_addr (bsc#1134760 ltc#177449 git-fixes). - ibmvnic: set up 200GBPS speed (bsc#1129923 git-fixes). - icmp: randomize the global rate limiter (git-fixes). - ida: Free allocated bitmap in error path (git-fixes). - ieee802154/adf7242: check status of adf7242_read_reg (git-fixes). - ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes). - iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes). - iio: adc: gyroadc: fix leak of device node iterator (git-fixes). - iio: adc: qcom-spmi-adc5: fix driver name (git-fixes). - iio: adc: stm32-adc: fix runtime autosuspend delay when slow polling (git-fixes). - iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes). - iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes). - iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes). - iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes). - iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes). - iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes). - ima: extend boot_aggregate with kernel measurements (bsc#1177617). - ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes). - Input: ati_remote2 - add missing newlines when printing module parameters (git-fixes). - Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes). - Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (bsc#954532). - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes). - Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes). - Input: stmfts - fix a & vs && typo (git-fixes). - Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes). - Input: trackpoint - enable Synaptics trackpoints (git-fixes). - Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes). - iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754). - iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177297). - iommu/amd: Fix potential @entry null deref (bsc#1177283). - iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177284). - iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177285). - iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177286). - iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400). - iommu/vt-d: Gracefully handle DMAR units with no supported address widths (bsc#1177739). - ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24). - ipmi_si: Fix wrong return value in try_smi_init() (git-fixes). - ipv4: Initialize flowi4_multipath_hash in data path (networking-stable-20_09_24). - ipv4: Update exception handling for multipath routes via same device (networking-stable-20_09_24). - ipv6: avoid lockdep issue in fib6_del() (networking-stable-20_09_24). - ipv6: Fix sysctl max for fib_multipath_hash_policy (networking-stable-20_09_11). - ipvlan: fix device features (networking-stable-20_08_24). - iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes). - kABI fix for NFS: Fix flexfiles read failover (git-fixes). - kABI: Fix kABI after add CodeSigning extended key usage (bsc#1177353). - kABI: Fix kABI for 12856e7acde4 PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979). - kabi/severities: ignore kABI for target_core_rbd Match behaviour for all other Ceph specific modules. - kallsyms: Refactor kallsyms_show_value() to take cred (git-fixes). - kbuild: enforce -Werror=return-type (bsc#1177281). - KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (git-fixes). - leds: mlxreg: Fix possible buffer overflow (git-fixes). - leds: mt6323: move period calculation (git-fixes). - libceph-add-support-for-CMPEXT-compare-extent-reques.patch: (bsc#1177090). - libceph: clear con->out_msg on Policy::stateful_server faults (bsc#1178177). - lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes). - lib/mpi: Add mpi_sub_ui() (bsc#1175718). - locking/rwsem: Disable reader optimistic spinning (bnc#1176588). - mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes). - mac80211: handle lack of sband->bitrates in rates (git-fixes). - mac80211: skip mpath lookup also for control port tx (git-fixes). - mac802154: tx: fix use-after-free (git-fixes). - macsec: avoid use-after-free in macsec_handle_frame() (git-fixes). - mailbox: avoid timer start from callback (git-fixes). - media: ati_remote: sanity check for both endpoints (git-fixes). - media: bdisp: Fix runtime PM imbalance on error (git-fixes). - media: camss: Fix a reference count leak (git-fixes). - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes). - media: exynos4-is: Fix a reference count leak (git-fixes). - media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes). - media: firewire: fix memory leak (git-fixes). - media: i2c: ov5640: Enable data pins on poweron for DVP mode (git-fixes). - media: i2c: ov5640: Remain in power down for DVP mode unless streaming (git-fixes). - media: i2c: ov5640: Separate out mipi configuration from s_power (git-fixes). - media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes). - media: mc-device.c: fix memleak in media_device_register_entity (git-fixes). - media: media/pci: prevent memory leak in bttv_probe (git-fixes). - media: mx2_emmaprp: Fix memleak in emmaprp_probe (git-fixes). - media: omap3isp: Fix memleak in isp_probe (git-fixes). - media: ov5640: Correct Bit Div register in clock tree diagram (git-fixes). - media: platform: fcp: Fix a reference count leak (git-fixes). - media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes). - media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes). - media: rcar-csi2: Allocate v4l2_async_subdev dynamically (git-fixes). - media: rcar_drif: Allocate v4l2_async_subdev dynamically (git-fixes). - media: rcar_drif: Fix fwnode reference leak when parsing DT (git-fixes). - media: rcar-vin: Fix a reference count leak (git-fixes). - media: rc: do not access device via sysfs after rc_unregister_device() (git-fixes). - media: rc: uevent sysfs file races with rc_unregister_device() (git-fixes). - media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()" (git-fixes). - media: rockchip/rga: Fix a reference count leak (git-fixes). - media: s5p-mfc: Fix a reference count leak (git-fixes). - media: saa7134: avoid a shift overflow (git-fixes). - media: smiapp: Fix error handling at NVM reading (git-fixes). - media: staging/intel-ipu3: css: Correctly reset some memory (git-fixes). - media: st-delta: Fix reference count leak in delta_run_work (git-fixes). - media: sti: Fix reference count leaks (git-fixes). - media: stm32-dcmi: Fix a reference count leak (git-fixes). - media: tc358743: cleanup tc358743_cec_isr (git-fixes). - media: tc358743: initialize variable (git-fixes). - media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes). - media: ti-vpe: Fix a missing check and reference count leak (git-fixes). - media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes). - media: usbtv: Fix refcounting mixup (git-fixes). - media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes). - media: uvcvideo: Set media controller entity functions (git-fixes). - media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes). - media: v4l2-async: Document asd allocation requirements (git-fixes). - media: venus: core: Fix runtime PM imbalance in venus_probe (git-fixes). - media: vsp1: Fix runtime PM imbalance on error (git-fixes). - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes). - memory: omap-gpmc: Fix a couple off by ones (git-fixes). - memory: omap-gpmc: Fix build error without CONFIG_OF (git-fixes). - mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes). - mfd: sm501: Fix leaks in probe() (git-fixes). - mic: vop: copy data to kernel space then write to io memory (git-fixes). - misc: mic: scif: Fix error handling path (git-fixes). - misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes). - misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes). - mm: call cond_resched() from deferred_init_memmap() (git fixes (mm/init), bsc#1177697). - mmc: core: do not set limits.discard_granularity as 0 (git-fixes). - mmc: core: Rework wp-gpio handling (git-fixes). - mm, compaction: fully assume capture is not NULL in compact_zone_order() (git fixes (mm/compaction), bsc#1177681). - mm, compaction: make capture control handling safe wrt interrupts (git fixes (mm/compaction), bsc#1177681). - mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN (git-fixes). - mmc: sdhci: Add LTR support for some Intel BYT based controllers (git-fixes). - mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes). - mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes). - mm/debug.c: always print flags in dump_page() (git fixes (mm/debug)). - mm: do not panic when links can't be created in sysfs (bsc#1178002). - mm: do not rely on system state to detect hot-plug operations (bsc#1178002). - mm: fix a race during THP splitting (bsc#1178255). - mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)). - mm: initialize deferred pages with interrupts enabled (git fixes (mm/init), bsc#1177697). - mm: madvise: fix vma user-after-free (git-fixes). - mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps() (bsc#1177694). - mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)). - mm/migrate.c: also overwrite error when it is bigger than zero (git fixes (mm/move_pages), bsc#1177683). - mm: move_pages: report the number of non-attempted pages (git fixes (mm/move_pages), bsc#1177683). - mm: move_pages: return valid node id in status if the page is already on the target node (git fixes (mm/move_pages), bsc#1177683). - mm/pagealloc.c: call touch_nmi_watchdog() on max order boundaries in deferred init (git fixes (mm/init), bsc#1177697). - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)). - mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)). - mm: replace memmap_context by meminit_context (bsc#1178002). - mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)). - mm, slab/slub: move and improve cache_from_obj() (mm/slub bsc#1165692). mm, slab/slub: improve error reporting and overhead of cache_from_obj() (mm/slub bsc#1165692). - mm, slub: extend checks guarded by slub_debug static key (mm/slub bsc#1165692). - mm, slub: extend slub_debug syntax for multiple blocks (mm/slub bsc#1165692). - mm, slub: introduce kmem_cache_debug_flags() (mm/slub bsc#1165692). - mm, slub: introduce static key for slub_debug() (mm/slub bsc#1165692). - mm, slub: make reclaim_account attribute read-only (mm/slub bsc#1165692). - mm, slub: make remaining slub_debug related attributes read-only (mm/slub bsc#1165692). - mm, slub: make some slub_debug related attributes read-only (mm/slub bsc#1165692). - mm, slub: remove runtime allocation order changes (mm/slub bsc#1165692). - mm, slub: restore initial kmem_cache flags (mm/slub bsc#1165692). - mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)). - module: Correctly truncate sysfs sections output (git-fixes). - module: Do not expose section addresses to non-CAP_SYSLOG (git-fixes). - module: Refactor section attr into bin attribute (git-fixes). - module: statically initialize init section freeing data (git-fixes). - mt76: add missing locking around ampdu action (git-fixes). - mt76: clear skb pointers from rx aggregation reorder buffer during cleanup (git-fixes). - mt76: do not use devm API for led classdev (git-fixes). - mt76: fix handling full tx queues in mt76_dma_tx_queue_skb_raw (git-fixes). - mt76: fix LED link time failure (git-fixes). - mtd: cfi_cmdset_0002: do not free cfi->cfiq in error path of cfi_amdstd_setup() (git-fixes). - mtd: lpddr: Fix bad logic in print_drs_error (git-fixes). - mtd: lpddr: fix excessive stack usage with clang (git-fixes). - mtd: mtdoops: Do not write panic data twice (git-fixes). - mtd: rawnand: gpmi: Fix runtime PM imbalance on error (git-fixes). - mtd: rawnand: omap_elm: Fix runtime PM imbalance on error (git-fixes). - mtd: rawnand: stm32_fmc2: fix a buffer overflow (git-fixes). - mtd: rawnand: vf610: disable clk on error handling path in probe (git-fixes). - mtd: spinand: gigadevice: Add QE Bit (git-fixes). - mtd: spinand: gigadevice: Only one dummy byte in QUADIO (git-fixes). - mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes). - mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes). - mwifiex: fix double free (git-fixes). - mwifiex: remove function pointer check (git-fixes). - mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes). - net: bridge: br_vlan_get_pvid_rcu() should dereference the VLAN group under RCU (networking-stable-20_09_24). - net/core: check length before updating Ethertype in skb_mpls_{push,pop} (git-fixes). - net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (networking-stable-20_09_24). - net: disable netpoll on fresh napis (networking-stable-20_09_11). - net: dsa: b53: check for timeout (networking-stable-20_08_24). - net: dsa: rtl8366: Properly clear member config (networking-stable-20_09_24). - net: fec: correct the error path for regulator disable in probe (networking-stable-20_08_24). - net: Fix bridge enslavement failure (networking-stable-20_09_24). - net: Fix potential wrong skb->protocol in skb_vlan_untag() (networking-stable-20_08_24). - net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11). - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24). - netlabel: fix problems with mapping removal (networking-stable-20_09_11). - net: lantiq: Disable IRQs only if NAPI gets scheduled (networking-stable-20_09_24). - net: lantiq: Use napi_complete_done() (networking-stable-20_09_24). - net: lantiq: use netif_tx_napi_add() for TX NAPI (networking-stable-20_09_24). - net: lantiq: Wake TX queue again (networking-stable-20_09_24). - net/mlx5e: Enable adding peer miss rules only if merged eswitch is supported (networking-stable-20_09_24). - net/mlx5e: TLS, Do not expose FPGA TLS counter if not supported (networking-stable-20_09_24). - net/mlx5: Fix FTE cleanup (networking-stable-20_09_24). - net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24). - net: phy: Do not warn in phy_stop() on PHY_DOWN (networking-stable-20_09_24). - net: phy: realtek: fix rtl8211e rx/tx delay config (git-fixes). - net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24). - net/sched: act_ct: Fix skb double-free in tcf_ct_handle_fragments() error flow (networking-stable-20_08_24). - net: sctp: Fix IPv6 ancestor_size calc in sctp_copy_descendant (networking-stable-20_09_24). - net: sctp: Fix negotiation of the number of data streams (networking-stable-20_08_24). - net/smc: Prevent kernel-infoleak in __smc_diag_dump() (networking-stable-20_08_24). - net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11). - net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11). - net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes). - net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes). - net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes). - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes). - nfp: use correct define to return NONE fec (networking-stable-20_09_24). - nfsd4: fix NULL dereference in nfsd/clients display code (git-fixes). - NFS: Do not move layouts to plh_return_segs list while in use (git-fixes). - NFS: Do not return layout segments that are in use (git-fixes). - NFS: ensure correct writeback errors are returned on close() (git-fixes). - NFS: Fix flexfiles read failover (git-fixes). - NFS: Fix security label length not being reset (bsc#1176381). - NFS: nfs_file_write() should check for writeback errors (git-fixes). - NFSv4.2: fix client's attribute cache management for copy_file_range (git-fixes). - nl80211: fix non-split wiphy information (git-fixes). - NTB: hw: amd: fix an issue about leak system resources (git-fixes). - ntb: intel: Fix memleak in intel_ntb_pci_probe (git-fixes). - nvme-multipath: retry commands for dying queues (bsc#1171688). - nvme-rdma: fix crash due to incorrect cqe (bsc#1174748). - nvme-rdma: fix crash when connect rejected (bsc#1174748). - overflow: Include header file with SIZE_MAX declaration (git-fixes). - PCI: aardvark: Check for errors from pci_bridge_emul_init() call (git-fixes). - PCI: Avoid double hpmemsize MMIO window assignment (git-fixes). - PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979). - PCI: tegra194: Fix runtime PM imbalance on error (git-fixes). - PCI: tegra: Fix runtime PM imbalance on error (git-fixes). - percpu: fix first chunk size calculation for populated bitmap (git-fixes (mm/percpu)). - perf/x86/amd: Fix sampling Large Increment per Cycle events (bsc#1152489). - perf/x86: Fix n_pair for cancelled txn (bsc#1152489). - phy: ti: am654: Fix a leak in serdes_am654_probe() (git-fixes). - pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB (git-fixes). - pinctrl: mcp23s08: Fix mcp23x17 precious range (git-fixes). - pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser (git-fixes). - pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes). - PKCS#7: Check codeSigning EKU for kernel module and kexec pe verification. - PKCS#7: Check codeSigning EKU for kernel module and kexec pe verification (bsc#1177353). - Platform: OLPC: Fix memleak in olpc_ec_probe (git-fixes). - platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP (git-fixes). - platform/x86: fix kconfig dependency warning for LG_LAPTOP (git-fixes). - platform/x86: intel_pmc_core: do not create a static struct device (git-fixes). - platform/x86: intel-vbtn: Switch to an allow-list for SW_TABLET_MODE reporting (bsc#1175599). - platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes). - platform/x86: thinkpad_acpi: initialize tp_nvram_state variable (git-fixes). - platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse (git-fixes). - PM: hibernate: Batch hibernate and resume IO requests (bsc#1178079). - PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (git-fixes). - pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly on read (git-fixes). - powerpc/book3s64/radix: Make radix_mem_block_size 64bit (bsc#1055186 ltc#153436 git-fixes). - powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729). - powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729). - powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729). - powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729). - powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729). - powerpc/papr_scm: Fix warning triggered by perf_stats_show() (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769 git-fixes). - powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729). - powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729). - powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729). - powerpc/pseries: Avoid using addr_to_pfn in real mode (jsc#SLE-9246 git-fixes). - powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes). - powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729). - power: supply: max17040: Correct voltage reading (git-fixes). - pwm: img: Fix null pointer access in probe (git-fixes). - pwm: lpss: Add range limit check for the base_unit register value (git-fixes). - pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes). - qla2xxx: Return EBUSY on fcport deletion (bsc#1171688). - qtnfmac: fix resource leaks on unsupported iftype error return path (git-fixes). - r8169: fix data corruption issue on RTL8402 (bsc#1174098). - r8169: fix issue with forced threading in combination with shared interrupts (git-fixes). - r8169: fix operation under forced interrupt threading (git-fixes). - rapidio: fix the missed put_device() for rio_mport_add_riodev (git-fixes). - rbd-add-rbd_img_fill_cmp_and_write_from_bvecs.patch: (bsc#1177090). - rbd-add-support-for-COMPARE_AND_WRITE-CMPEXT.patch: (bsc#1177090). - RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request (bsc#1175621). - Refresh patches.suse/fnic-to-not-call-scsi_done-for-unhandled-commands.patch (bsc#1168468, bsc#1171675). - regulator: axp20x: fix LDO2/4 description (git-fixes). - regulator: resolve supply after creating regulator (git-fixes). - rename Other drivers / Intel IOMMU subsection to IOMMU - reset: sti: reset-syscfg: fix struct description warnings (git-fixes). - ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes). - rpm/kernel-binary.spec.in: Fix compressed module handling for in-tree KMP (jsc#SLE-10886) The in-tree KMP that is built with SLE kernels have a different scriptlet that is embedded in kernel-binary.spec.in rather than *.sh files. - rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592) - rtc: ds1374: fix possible race condition (git-fixes). - rtc: rx8010: do not modify the global rtc ops (git-fixes). - rtc: sa1100: fix possible race condition (git-fixes). - rtl8xxxu: prevent potential memory leak (git-fixes). - rtw88: increse the size of rx buffer size (git-fixes). - s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177799 LTC#188733). - s390/dasd: Fix zero write for FBA devices (bsc#1177801 LTC#188735). - s390/pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY (bsc#1176979). - sched/fair: Ignore cache hotness for SMT migration (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Use dst group while checking imbalance for NUMA balancer (bnc#1155798 (CPU scheduler functional and performance backports)). - sched/numa: Avoid creating large imbalances at task creation time (bnc#1176588). - sched/numa: Check numa balancing information only when enabled (bnc#1176588). - sched/numa: Use runnable_avg to classify node (bnc#1155798 (CPU scheduler functional and performance backports)). - scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729). - scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226). - scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258). - scsi: mptfusion: Do not use GFP_ATOMIC for larger DMA allocations (bsc#1175898, ECO-2743). - scsi: qla2xxx: Add IOCB resource tracking (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Add rport fields in debugfs (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Add SLER and PI control support (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix memory size truncation (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix MPI reset needed message (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Fix reset of MPI firmware (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Performance tweak (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1171688 bsc#1174003). - scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1171688 bsc#1174003). - sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11). - selftests/timers: Turn off timeout setting (git-fixes). - serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes). - serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes). - serial: 8250_port: Do not service RX FIFO if throttled (git-fixes). - serial: uartps: Wait for tx_empty in console setup (git-fixes). - slimbus: core: check get_addr before removing laddr ida (git-fixes). - slimbus: core: do not enter to clock pause mode in core (git-fixes). - slimbus: qcom-ngd-ctrl: disable ngd in qmi server down callback (git-fixes). - soc: fsl: qbman: Fix return value on success (git-fixes). - spi: dw-pci: free previously allocated IRQs if desc->setup() fails (git-fixes). - spi: fsl-espi: Only process interrupts for expected events (git-fixes). - spi: omap2-mcspi: Improve performance waiting for CHSTAT (git-fixes). - spi: spi-s3c64xx: Check return values (git-fixes). - spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath() (git-fixes). - spi: sprd: Release DMA channel also on probe deferral (git-fixes). - spi: stm32: Rate-limit the 'Communication suspended' message (git-fixes). - staging: comedi: check validity of wMaxPacketSize of usb endpoints found (git-fixes). - staging:r8188eu: avoid skb_clone for amsdu to msdu conversion (git-fixes). - staging: rtl8192u: Do not use GFP_KERNEL in atomic context (git-fixes). - SUNRPC: Revert 241b1f419f0e ("SUNRPC: Remove xdr_buf_trim()") (git-fixes). - svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (git-fixes). - taprio: Fix allowing too small intervals (networking-stable-20_09_24). - target-compare-and-write-backend-driver-sense-handli.patch: (bsc#1177719). - target-rbd-add-emulate_legacy_capacity-dev-attribute.patch: (bsc#1177109). - target-rbd-add-WRITE-SAME-support.patch: (bsc#1177090). - target-rbd-conditionally-fix-off-by-one-bug-in-get_b.patch: (bsc#1177109). - target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch: (bsc#1177090). - target-rbd-fix-unmap-discard-block-size-conversion.patch: (bsc#1177271). - target-rbd-fix-unmap-handling-with-unmap_zeroes_data.patch: (bsc#1177271). - target-rbd-support-COMPARE_AND_WRITE.patch: (bsc#1177090). - thermal: rcar_thermal: Handle probe error gracefully (git-fixes). - time: Prevent undefined behaviour in timespec64_to_ns() (bsc#1164648). - tipc: fix memory leak caused by tipc_buf_append() (git-fixes). - tipc: Fix memory leak in tipc_group_create_member() (networking-stable-20_09_24). - tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11). - tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24). - tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes). - tipc: fix uninit skb->data in tipc_nl_compat_dumpit() (networking-stable-20_08_24). - tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24). - tracing: Check return value of __create_val_fields() before using its result (git-fixes). - tracing: Save normal string variables (git-fixes). - tty: ipwireless: fix error handling (git-fixes). - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes). - Update config files. Enable ACPI_PCI_SLOT and HOTPLUG_PCI_ACPI (bsc#1177194). - USB: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes). - USB: cdc-acm: handle broken union descriptors (git-fixes). - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes). - USB: core: Solve race condition in anchor cleanup functions (git-fixes). - USB: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes). - USB: dwc2: Fix parameter type in function pointer prototype (git-fixes). - USB: dwc3: core: add phy cleanup for probe error handling (git-fixes). - USB: dwc3: core: do not trigger runtime pm when remove driver (git-fixes). - USB: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes). - USB: dwc3: gadget: Resume pending requests after CLEAR_STALL (git-fixes). - USB: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes). - USB: dwc3: pci: Allow Elkhart Lake to utilize DSM method for PM functionality (git-fixes). - USB: dwc3: simple: add support for Hikey 970 (git-fixes). - USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes). - USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes). - USB: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes). - USB: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes). - USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes). - USB: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes). - USB: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes). - usblp: fix race between disconnect() and read() (git-fixes). - USB: ohci: Default to per-port over-current protection (git-fixes). - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes). - USB: serial: option: add Cellient MPL200 card (git-fixes). - USB: serial: option: Add Telit FT980-KS composition (git-fixes). - USB: serial: pl2303: add device-id for HP GC device (git-fixes). - USB: serial: qcserial: fix altsetting probing (git-fixes). - USB: xhci-mtk: Fix typo (git-fixes). - vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn (bsc#1176979). - virtio-net: do not disable guest csum when disable LRO (git-fixes). - VMCI: check return value of get_user_pages_fast() for errors (git-fixes). - vmxnet3: fix cksum offload issues for non-udp tunnels (git-fixes). - w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes). - watchdog: Fix memleak in watchdog_cdev_register (git-fixes). - watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3 (git-fixes). - watchdog: Use put_device on error (git-fixes). - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes). - whitespace cleanup - wlcore: fix runtime pm imbalance in wl1271_tx_work (git-fixes). - wlcore: fix runtime pm imbalance in wlcore_regdomain_config (git-fixes). - writeback: Avoid skipping inode writeback (bsc#1177755). - writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755). - writeback: Protect inode->i_io_list with inode->i_lock (bsc#1177755). - X.509: Add CodeSigning extended key usage parsing (bsc#1177353). - x86/alternative: Do not call text_poke() in lazy TLB mode (bsc#1175749). - x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1152489). - x86/ioapic: Unbreak check_timer() (bsc#1152489). - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1177765). - x86/mm: unencrypted non-blocking DMA allocations use coherent pools (bsc#1175898, ECO-2743). - x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1176907). - x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713). - xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/events: add a new "late EOI" evtchn framework (XSA-332 bsc#1177411). - xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411). - xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410). - xen/events: block rogue events for some time (XSA-332 bsc#1177411). - xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411). - xen/events: do not use chip_data for legacy IRQs (bsc#1065600). - xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411). - xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411). - xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411). - xen/gntdev.c: Mark pages as dirty (bsc#1065600). - xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/pvcallsback: use lateeoi irq binding (XSA-332 bsc#1177411). - xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411). - xfs: fix high key handling in the rt allocator's query_range function (git-fixes). - xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files (git-fixes). - xfs: force the log after remapping a synchronous-writes file (git-fixes). - xfs: limit entries returned when counting fsmap records (git-fixes). - xhci: do not create endpoint debugfs entry before ring buffer is set (git-fixes). - xprtrdma: fix incorrect header size calculations (git-fixes). - yam: fix possible memory leak in yam_init_driver (git-fixes).

References

#1055014 #1055186 #1061843 #1065600 #1065729

#1066382 #1077428 #1129923 #1134760 #1149032

#1152489 #1155798 #1163592 #1164648 #1165692

#1168468 #1171675 #1171688 #1174003 #1174098

#1174748 #1174969 #1175052 #1175599 #1175621

#1175718 #1175721 #1175749 #1175807 #1175898

#1176019 #1176354 #1176381 #1176400 #1176485

#1176588 #1176713 #1176907 #1176979 #1177027

#1177086 #1177090 #1177109 #1177121 #1177193

#1177194 #1177206 #1177258 #1177271 #1177281

#1177283 #1177284 #1177285 #1177286 #1177297

#1177353 #1177384 #1177410 #1177411 #1177470

#1177511 #1177617 #1177681 #1177683 #1177687

#1177694 #1177697 #1177719 #1177724 #1177725

#1177726 #1177739 #1177749 #1177750 #1177754

#1177755 #1177765 #1177766 #1177799 #1177801

#1177814 #1177817 #1177854 #1177855 #1177856

#1177861 #1178002 #1178079 #1178166 #1178173

#1178175 #1178176 #1178177 #1178183 #1178184

#1178185 #1178186 #1178190 #1178191 #1178246

#1178255 #1178307 #1178330 #1178395

Cross- CVE-2020-12351 CVE-2020-12352 CVE-2020-14351

CVE-2020-16120 CVE-2020-24490 CVE-2020-25212

CVE-2020-25285 CVE-2020-25641 CVE-2020-25643

CVE-2020-25645 CVE-2020-25656 CVE-2020-25705

CVE-2020-27673 CVE-2020-27675

Affected Products:

SUSE Linux Enterprise Module for Public Cloud 15-SP2

https://www.suse.com/security/cve/CVE-2020-12351.html

https://www.suse.com/security/cve/CVE-2020-12352.html

https://www.suse.com/security/cve/CVE-2020-14351.html

https://www.suse.com/security/cve/CVE-2020-16120.html

https://www.suse.com/security/cve/CVE-2020-24490.html

https://www.suse.com/security/cve/CVE-2020-25212.html

https://www.suse.com/security/cve/CVE-2020-25285.html

https://www.suse.com/security/cve/CVE-2020-25641.html

https://www.suse.com/security/cve/CVE-2020-25643.html

https://www.suse.com/security/cve/CVE-2020-25645.html

https://www.suse.com/security/cve/CVE-2020-25656.html

https://www.suse.com/security/cve/CVE-2020-25705.html

https://www.suse.com/security/cve/CVE-2020-27673.html

https://www.suse.com/security/cve/CVE-2020-27675.html

https://bugzilla.suse.com/1055014

https://bugzilla.suse.com/1055186

https://bugzilla.suse.com/1061843

https://bugzilla.suse.com/1065600

https://bugzilla.suse.com/1065729

https://bugzilla.suse.com/1066382

https://bugzilla.suse.com/1077428

https://bugzilla.suse.com/1129923

https://bugzilla.suse.com/1134760

https://bugzilla.suse.com/1149032

https://bugzilla.suse.com/1152489

https://bugzilla.suse.com/1155798

https://bugzilla.suse.com/1163592

https://bugzilla.suse.com/1164648

https://bugzilla.suse.com/1165692

https://bugzilla.suse.com/1168468

https://bugzilla.suse.com/1171675

https://bugzilla.suse.com/1171688

https://bugzilla.suse.com/1174003

https://bugzilla.suse.com/1174098

https://bugzilla.suse.com/1174748

https://bugzilla.suse.com/1174969

https://bugzilla.suse.com/1175052

https://bugzilla.suse.com/1175599

https://bugzilla.suse.com/1175621

https://bugzilla.suse.com/1175718

https://bugzilla.suse.com/1175721

https://bugzilla.suse.com/1175749

https://bugzilla.suse.com/1175807

https://bugzilla.suse.com/1175898

https://bugzilla.suse.com/1176019

https://bugzilla.suse.com/1176354

https://bugzilla.suse.com/1176381

https://bugzilla.suse.com/1176400

https://bugzilla.suse.com/1176485

https://bugzilla.suse.com/1176588

https://bugzilla.suse.com/1176713

https://bugzilla.suse.com/1176907

https://bugzilla.suse.com/1176979

https://bugzilla.suse.com/1177027

https://bugzilla.suse.com/1177086

https://bugzilla.suse.com/1177090

https://bugzilla.suse.com/1177109

https://bugzilla.suse.com/1177121

https://bugzilla.suse.com/1177193

https://bugzilla.suse.com/1177194

https://bugzilla.suse.com/1177206

https://bugzilla.suse.com/1177258

https://bugzilla.suse.com/1177271

https://bugzilla.suse.com/1177281

https://bugzilla.suse.com/1177283

https://bugzilla.suse.com/1177284

https://bugzilla.suse.com/1177285

https://bugzilla.suse.com/1177286

https://bugzilla.suse.com/1177297

https://bugzilla.suse.com/1177353

https://bugzilla.suse.com/1177384

https://bugzilla.suse.com/1177410

https://bugzilla.suse.com/1177411

https://bugzilla.suse.com/1177470

https://bugzilla.suse.com/1177511

https://bugzilla.suse.com/1177617

https://bugzilla.suse.com/1177681

https://bugzilla.suse.com/1177683

https://bugzilla.suse.com/1177687

https://bugzilla.suse.com/1177694

https://bugzilla.suse.com/1177697

https://bugzilla.suse.com/1177719

https://bugzilla.suse.com/1177724

https://bugzilla.suse.com/1177725

https://bugzilla.suse.com/1177726

https://bugzilla.suse.com/1177739

https://bugzilla.suse.com/1177749

https://bugzilla.suse.com/1177750

https://bugzilla.suse.com/1177754

https://bugzilla.suse.com/1177755

https://bugzilla.suse.com/1177765

https://bugzilla.suse.com/1177766

https://bugzilla.suse.com/1177799

https://bugzilla.suse.com/1177801

https://bugzilla.suse.com/1177814

https://bugzilla.suse.com/1177817

https://bugzilla.suse.com/1177854

https://bugzilla.suse.com/1177855

https://bugzilla.suse.com/1177856

https://bugzilla.suse.com/1177861

https://bugzilla.suse.com/1178002

https://bugzilla.suse.com/1178079

https://bugzilla.suse.com/1178166

https://bugzilla.suse.com/1178173

https://bugzilla.suse.com/1178175

https://bugzilla.suse.com/1178176

https://bugzilla.suse.com/1178177

https://bugzilla.suse.com/1178183

https://bugzilla.suse.com/1178184

https://bugzilla.suse.com/1178185

https://bugzilla.suse.com/1178186

https://bugzilla.suse.com/1178190

https://bugzilla.suse.com/1178191

https://bugzilla.suse.com/1178246

https://bugzilla.suse.com/1178255

https://bugzilla.suse.com/1178307

https://bugzilla.suse.com/1178330

https://bugzilla.suse.com/1178395

Severity
Announcement ID: SUSE-SU-2020:3491-1
Rating: important

Related News