Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 29 articles for you...
89
security advisoryfedoraarbitrary code executionFedora 43 pcs Important Arbitrary Code Execution Fix 2026-c0f7d885ee
Updated standalone web UI and HA Cluster Management Cockpit application to pcs- web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Fixed a crash when running pcs resource|stonith list Fixed order of resources in sets when listing configuration of constraints. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-c0f7d885ee 2026-06-10 01:08:28.182950+00:00 -------------------------------------------------------------------------------- Name : pcs Product : Fedora 43 Version : 0.12.2 Release : 2.fc43 URL : https://github.com/ClusterLabs/pcs Summary : Pacemaker/Corosync Configuration System Description : pcs is a configuration tool for Corosync and Pacemaker. It permits users to easily view, modify and create high availability clusters based on Pacemaker. This package contains the pcs command-line utility and its server pcsd. -------------------------------------------------------------------------------- Update Information: Updated standalone web UI and HA Cluster Management Cockpit application to pcs- web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Fixed a crash when running pcs resource|stonith list Fixed order of resources in sets when listing configuration of constraints -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2026 Michal Pospíšil - 0.12.2-2 - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.3 (see CHANGELOG_WUI.md) Resolves: rhbz#2454042 - Fixed a crash when running pcs resource|stonith list Resolves: rhbz#2458608 - Fixed order of resources in sets when listing configuration of constraints Resolves: rhbz#2461143 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2454042 - CVE-2026-4800 pcs: lodash: Arbitrary code execution via untrusted input in template imports [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2454042 [ 2 ] Bug #2458608 -pcs resource list produces traceback https://bugzilla.redhat.com/show_bug.cgi?id=2458608 [ 3 ] Bug #2461143 - pcs constraint in default text mode orders resources alphabetically https://bugzilla.redhat.com/show_bug.cgi?id=2461143 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c0f7d885ee' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Enhance your Fedora 43 pcs setup by applying important updates and fixes to avoid security risks.. Fedora pcs update security fixes management. . Severity: Important. LinuxSecurity.com Team
Jun 09, 2026
•Important
Fedora
89
security advisoryfedoraimportantFedora 44 pcs Important Update Fixes Installation Issues 2026-015b33238d
Rebased pcs to the newest major version (see CHANGELOG.md) Updated standalone web UI and HA Cluster Management Cockpit application to pcs- web-ui 0.1.24.2 (see CHANGELOG_WUI.md) Fixed FTBFS with Python 3.15 Fixed issues with installing pcs on Fedora 43+, upgrade and uninstall. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-015b33238d 2026-03-15 00:15:25.518032+00:00 -------------------------------------------------------------------------------- Name : pcs Product : Fedora 44 Version : 0.12.2 Release : 1.fc44 URL : https://github.com/ClusterLabs/pcs Summary : Pacemaker/Corosync Configuration System Description : pcs is a configuration tool for Corosync and Pacemaker. It permits users to easily view, modify and create high availability clusters based on Pacemaker. This package contains the pcs command-line utility and its server pcsd. -------------------------------------------------------------------------------- Update Information: Rebased pcs to the newest major version (see CHANGELOG.md) Updated standalone web UI and HA Cluster Management Cockpit application to pcs- web-ui 0.1.24.2 (see CHANGELOG_WUI.md) Fixed FTBFS with Python 3.15 Fixed issues with installing pcs on Fedora 43+, upgrade and uninstall -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 5 2026 Michal Posp\u0161il - 0.12.2-1 - Rebased pcs to the newest major version (see CHANGELOG.md) - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.2 (see CHANGELOG_WUI.md) Resolves: rhbz#2432985, rhbz#2433035 - Fixed FTBFS with Python 3.15 Resolves: rhbz#2440684 - Fixed issues with installing pcs on Fedora 43+, upgrade and uninstall -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-015b33238d' at the command line.For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Update for Fedora 44 pcs tool fixing issues and improving performance for high availability cluster management.. Fedora Update, pcs Configuration, Cluster Management, High Availability. . Severity: Important. LinuxSecurity.com Team
Mar 15, 2026
•Important
Fedora
219
security advisorymoderateupdateRocky Linux 8 RLSA-2025:0743 moderate: keepalived integer overflow
Moderate: keepalived security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2025:0743", "synopsis": "Moderate: keepalived security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for keepalived.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.\n\nSecurity Fix(es):\n\n* keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2298532", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2298532", "description": ""}], "cves": [{"name": "CVE-2024-41184", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2024-41184", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2025-02-13T20:34:26.141542Z", "rpms": {"Rocky Linux 8": {"nvras": ["keepalived-0:2.1.5-10.el8_10.aarch64.rpm", "keepalived-0:2.1.5-10.el8_10.src.rpm", "keepalived-0:2.1.5-10.el8_10.x86_64.rpm", "keepalived-debuginfo-0:2.1.5-10.el8_10.aarch64.rpm", "keepalived-debuginfo-0:2.1.5-10.el8_10.x86_64.rpm","keepalived-debugsource-0:2.1.5-10.el8_10.aarch64.rpm", "keepalived-debugsource-0:2.1.5-10.el8_10.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. AlmaLinux unveils a significant security patch for haproxy, fixing a buffer overflow vulnerability. Upgrade today!. keepalived Security Update, Rocky Linux Advisory, Load Balancing Security. . LinuxSecurity.com Team
Feb 13, 2025
Rocky Linux
100
security advisoryvulnerabilityimportantSUSE Linux Kernel Security Update 2025:0201-1 - Important Fixes
* bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1190358 * bsc#1190428 . # Security update for the Linux Kernel Announcement ID: SUSE-SU-2025:0201-1 Release Date: 2025-01-21T12:51:49Z Rating: important References: * bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1190358 * bsc#1190428 * bsc#1203332 * bsc#1205521 * bsc#1209288 * bsc#1209798 * bsc#1211593 * bsc#1211595 * bsc#1214635 * bsc#1215304 * bsc#1215523 * bsc#1216813 * bsc#1216909 * bsc#1219608 * bsc#1222878 * bsc#1223044 * bsc#1225758 * bsc#1225820 * bsc#1226694 * bsc#1228190 * bsc#1229809 * bsc#1230422 * bsc#1230697 * bsc#1231388 * bsc#1231453 * bsc#1231854 * bsc#1232045 * bsc#1232157 * bsc#1232166 * bsc#1232419 * bsc#1232436 * bsc#1232472 * bsc#1232823 * bsc#1233038 * bsc#1233050 * bsc#1233070 * bsc#1233096 * bsc#1233127 * bsc#1233200 * bsc#1233239 * bsc#1233324 * bsc#1233467 * bsc#1233468 * bsc#1233469 * bsc#1233485 * bsc#1233547 * bsc#1233550 * bsc#1233558 * bsc#1233564 * bsc#1233568 * bsc#1233637 * bsc#1233642 * bsc#1233701 * bsc#1233769 * bsc#1233837 * bsc#1234072 * bsc#1234073 * bsc#1234075 * bsc#1234076 * bsc#1234077 * bsc#1234087 * bsc#1234120 * bsc#1234156 * bsc#1234219 * bsc#1234220 * bsc#1234240 * bsc#1234241 * bsc#1234281 * bsc#1234282 * bsc#1234294 * bsc#1234338 * bsc#1234357 * bsc#1234437 * bsc#1234464 * bsc#1234605 * bsc#1234639 * bsc#1234650 * bsc#1234727 * bsc#1234811 * bsc#1234827 * bsc#1234834 * bsc#1234843 * bsc#1234846 * bsc#1234853 * bsc#1234856 * bsc#1234891 * bsc#1234912 * bsc#1234920 * bsc#1234921 * bsc#1234960 * bsc#1234963 * bsc#1234971 * bsc#1234973 * bsc#1235004 * bsc#1235035 * bsc#1235037 * bsc#1235039 * bsc#1235054 * bsc#1235056 * bsc#1235061 * bsc#1235073 * bsc#1235220 * bsc#1235224 * bsc#1235246 * bsc#1235507 Cross-References: * CVE-2021-47202 * CVE-2022-36280 * CVE-2022-48742 *CVE-2022-49033 * CVE-2022-49035 * CVE-2023-1382 * CVE-2023-33951 * CVE-2023-33952 * CVE-2023-52920 * CVE-2024-24860 * CVE-2024-26886 * CVE-2024-26924 * CVE-2024-36915 * CVE-2024-42232 * CVE-2024-44934 * CVE-2024-47666 * CVE-2024-47678 * CVE-2024-49944 * CVE-2024-49952 * CVE-2024-50018 * CVE-2024-50143 * CVE-2024-50154 * CVE-2024-50166 * CVE-2024-50181 * CVE-2024-50202 * CVE-2024-50211 * CVE-2024-50256 * CVE-2024-50262 * CVE-2024-50278 * CVE-2024-50279 * CVE-2024-50280 * CVE-2024-50296 * CVE-2024-53051 * CVE-2024-53055 * CVE-2024-53056 * CVE-2024-53064 * CVE-2024-53072 * CVE-2024-53090 * CVE-2024-53095 * CVE-2024-53101 * CVE-2024-53113 * CVE-2024-53114 * CVE-2024-53119 * CVE-2024-53120 * CVE-2024-53122 * CVE-2024-53125 * CVE-2024-53130 * CVE-2024-53131 * CVE-2024-53142 * CVE-2024-53146 * CVE-2024-53150 * CVE-2024-53156 * CVE-2024-53157 * CVE-2024-53158 * CVE-2024-53161 * CVE-2024-53162 * CVE-2024-53173 * CVE-2024-53179 * CVE-2024-53206 * CVE-2024-53210 * CVE-2024-53213 * CVE-2024-53214 * CVE-2024-53239 * CVE-2024-53240 * CVE-2024-53241 * CVE-2024-56539 * CVE-2024-56548 * CVE-2024-56549 * CVE-2024-56570 * CVE-2024-56571 * CVE-2024-56575 * CVE-2024-56598 * CVE-2024-56604 * CVE-2024-56605 * CVE-2024-56619 * CVE-2024-56755 * CVE-2024-8805 CVSS scores: * CVE-2021-47202 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-47202 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-36280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-36280 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H * CVE-2022-48742 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-48742 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-49033 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2022-49033 ( SUSE ): 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-49033 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-49035 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2022-49035 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-49035 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1382 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-1382 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-33951 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L * CVE-2023-33951 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2023-33952 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2023-33952 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52920 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2023-52920 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52920 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24860 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-24860 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26886 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26886 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26924 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26924 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36915 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2024-42232 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-42232 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-42232 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44934 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44934 ( NVD ): 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-47666 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-47666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-47666 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-47678 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-47678 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-47678 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-49944 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-49944 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-49952 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-49952 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50018 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-50018 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50143 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-50143 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-50143 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50154 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-50154 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50154 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50166 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50181 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-50181 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50181 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50202 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-50202 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50202 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50211 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-50211 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50211 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-50256 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-50256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50256 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50262 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-50262 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-50262 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50262 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50278 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2024-50278 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-50279 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-50279 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-50280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50280 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50296 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-50296 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53051 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53051 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53055 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53055 ( NVD ): 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53056 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53056 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53072 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53072 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53090 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53090 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53095 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53095 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53101 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-53101 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2024-53101 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53113 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53113 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53114 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53114 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53119 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53119 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53120 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53120 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53122 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53122 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H *CVE-2024-53130 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53131 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53131 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53142 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2024-53142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53146 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53146 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53146 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53150 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-53150 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-53150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-53156 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53156 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53156 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53157 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-53157 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53157 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53158 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-53158 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2024-53161 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-53161 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2024-53162 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-53162 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-53173 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53173 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53173 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53179 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53179 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53179 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53206 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-53206 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-53206 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53210 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-53210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53213 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-53213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2024-53213 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53214 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53214 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53239 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53239 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53241 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-53241 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-56539 ( SUSE ): 8.6 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56539 ( SUSE ): 8.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-56548 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56548 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56549 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-56549 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56570 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-56570 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56571 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-56571 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56575 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-56575 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56598 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56598 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56604 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56604 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56604 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56605 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56605 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56619 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56619 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56755 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-56755 ( SUSE ): 2.5CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-56755 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8805 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8805 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8805 ( NVD ): 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 77 vulnerabilities and has 31 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). * CVE-2022-48742: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (bsc#1226694). * CVE-2022-49033: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (bsc#1232045). * CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). * CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593). * CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595). * CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823). * CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock (bsc#1223044). *CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). * CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758). * CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809). * CVE-2024-47666: scsi: pm80xx: Set phy-> enable_completion only when we wait for it (bsc#1231453). * CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854). * CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166). * CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157). * CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419). * CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038). * CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050). * CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (bsc#1233127). * CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324). * CVE-2024-50211: udf: refactor inode_bmap() to handle error (bsc#1233096). * CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200). * CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239). * CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469). * CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467). * CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468). * CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485). * CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547). * CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550). * CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568). * CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464). * CVE-2024-53072: platform/x86/amd/pmc: Detect when STB is not available (bsc#1233564). * CVE-2024-53090: afs: Fix lock recursion (bsc#1233637). * CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642). * CVE-2024-53101: fs: Fix uninitialized value issue in from_kuid and from_kgid (bsc#1233769). * CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077). * CVE-2024-53114: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1234072). * CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073). * CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076). * CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156). * CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219). * CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220). * CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234853). * CVE-2024-53150: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (bsc#1234834). * CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234846). * CVE-2024-53157: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (bsc#1234827). * CVE-2024-53158: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (bsc#1234811). * CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856). * CVE-2024-53162: crypto: qat/qat_4xxx - fix off by one in uof_get_name() (bsc#1234843). * CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234891). * CVE-2024-53179: smb: client:fix use-after-free of signing key (bsc#1234921). * CVE-2024-53210: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (bsc#1234971). * CVE-2024-53213: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (bsc#1234973). * CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004). * CVE-2024-53239: ALSA: 6fire: Release resources at card release (bsc#1235054). * CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281). * CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282). * CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (bsc#1234963). * CVE-2024-56548: hfsplus: do not query the device logical block size multiple times (bsc#1235073). * CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object-> file (bsc#1234912). * CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035). * CVE-2024-56571: media: uvcvideo: Require entities to have a non-zero unique ID (bsc#1235037). * CVE-2024-56575: media: imx-jpeg: Ensure power suppliers be suspended before detach them (bsc#1235039). * CVE-2024-56598: jfs: array-index-out-of-bounds fix in dtReadFirst (bsc#1235220). * CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056). * CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061). * CVE-2024-56619: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (bsc#1235224). * CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920). The following non-security bugs were fixed: * ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294) * Documentation: Add x86/amd_hsmp driver (jsc#PED-1295). * Drivers: hv: util: Avoid accessing a ringbuffer notinitialized yet (git- fixes). * Drop a couple of block layer git-fixes (bsc#1170891 bsc#1173139) * KVM: x86: fix sending PV IPI (git-fixes). * NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git- fixes). * NFSD: Fix nfsd4_shutdown_copy() (git-fixes). * NFSD: Move fill_pre_wcc() and fill_post_wcc() (bsc#1234650 bsc#1233701 bsc#1232472). * NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes). * NFSD: Prevent a potential integer overflow (git-fixes). * NFSD: reduce locking in nfsd_lookup() (bsc#1234650 bsc#1233701 bsc#1232472). * NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git- fixes). * PCI: vmd: Fix secondary bus reset for Intel bridges (git-fixes). * RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git- fixes) * README: Clean-up trailing whitespace * SUNRPC: make sure cache entry active before cache_show (git-fixes). * amd_hsmp: Add HSMP protocol version 5 messages (jsc#PED-1295). * arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605) * arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git- fixes). * arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes). * arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git- fixes). * arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire- excavator (git-fixes). * arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (git- fixes). * arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (git-fixes). * autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes). * autofs: use flexible array in ioctl structure (git-fixes). * devlink: allow registering parameters after the instance (bsc#1231388 bsc#1230422). * devlink: do not require setting features before registration (bsc#1231388 bsc#1230422). * dma-fence: Fix reference leak on fence merge failure path (git-fixes). *dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357). * dmaengine: idxd: add wq driver name support for accel-config user tool (bsc#1234357). * drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes). * drm/v3d: Enable Performance Counters before clearing them (git-fixes). * exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes). * fixup "rpm: support gz and zst compression methods" once more (bsc#1190428, bsc#1190358) Fixes: 3b8c4d9bcc24 ("rpm: support gz and zst compression methods") Fixes: 23510fce36ec ("fixup "rpm: support gz and zst compression methods"") * hfsplus: do not query the device logical block size multiple times (git- fixes). * idpf: add support for SW triggered interrupts (bsc#1235507). * idpf: enable WB_ON_ITR (bsc#1235507). * idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507). * ipc/sem: Fix dangling sem_array access in semtimedop race (bsc#1234727). * jffs2: Fix rtime decompressor (git-fixes). * jffs2: Prevent rtime decompress memory corruption (git-fixes). * jffs2: fix use of uninitialized variable (git-fixes). * jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git- fixes). * jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes). * jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes). * jfs: fix shift-out-of-bounds in dbSplit (git-fixes). * jfs: xattr: check invalid xattr size more strictly (git-fixes). * kabi/severities: ignore intermodule symbols between fsl_fman and fsl_dpaa_eth * kernel-binary: do not BuildIgnore m4. It is actually needed for regenerating zconf when it is not up-to-date due to merge. * kobject: Add sanity check for kset-> kobj.ktype in kset_register() (bsc#1234639). * memory: tegra: Add API for retrieving carveout bounds (jsc#PED-1763). * mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool (bsc#1234120). * mmc: core: Further prevent card detect during shutdown(git-fixes). * net/ipv6: release expired exception dst cached in socket (bsc#1216813). * net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246). * nfsd: make sure exp active before svc_export_show (git-fixes). * nfsd: remove unsafe BUG_ON from set_change_info (bsc#1234650 bsc#1233701 bsc#1232472). * nfsd: restore callback functionality for NFSv4.0 (git-fixes). * nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes). * nilfs2: prevent use of deleted inode (git-fixes). * ocfs2: uncache inode which has failed entering the group (bsc#1234087). * phy: tegra: p2u: Set ENABLE_L2_EXIT_RATE_CHANGE in calibration (jsc#PED-1763). * platform/x86: Add AMD system management interface (jsc#PED-1295). * proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git- fixes). * pwm: tegra: Improve required rate calculation (jsc#PED-1763). * regmap: detach regmap from dev on regmap_exit (git-fixes). * rpm/kernel-binary.spec.in: Fix build regression The previous fix forgot to take over grep -c option that broke the conditional expression * scatterlist: fix incorrect func name in kernel-doc (git-fixes). * scripts/git_sort/git_sort.py: add tegra DRM and linux-pwm repo * scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes). * serial: tegra: Read DMA status before terminating (jsc#PED-1763). * smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: this fixes issue discussed in bsc#1233642]. * spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes). * sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (git- fixes). * supported.conf: add bsc1185010 dependency * supported.conf: hyperv_drm (jsc#sle-19733) * svcrdma: Address an integer overflow (git-fixes). * svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git- fixes). * tpm_tis_spi: Release chip select when flow control fails(bsc#1234338) * ubifs: Correct the total block count by deducting journal reservation (git- fixes). * ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git- fixes). * udf: Handle error when adding extent to a file (bsc#1234437). * udf: refactor udf_current_aext() to handle error (bsc#1234240). * udf: refactor udf_next_aext() to handle error (bsc#1234241). * usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() (git-fixes). * usb: typec: tps6598x: Fix return value check in tps6598x_probe() (git- fixes). * x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). * x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). * x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). * x86/fpu: Remove unused supervisor only offsets (git-fixes). * x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). * x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). * x86/mce: Allow instrumentation during task work queueing (git-fixes). * x86/mce: Mark mce_end() noinstr (git-fixes). * x86/mce: Mark mce_panic() noinstr (git-fixes). * x86/mce: Mark mce_read_aux() noinstr (git-fixes). * x86/mm: Flush global TLB when switching to trampoline page-table (git- fixes). * x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). * x86/sgx: Free backing memory after faulting the enclave page (git-fixes). * x86/sgx: Silence softlockup detection when releasing large enclaves (git- fixes). * x86/uaccess: Move variable into switch case statement (git-fixes). * x86: Annotate call_on_stack() (git-fixes). * xfs: can't use kmem_zalloc() for attribute buffers (bsc#1216909). * zonefs: fix zone report size in __zonefs_io_error() (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommendedinstallation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-201=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-201=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2025-201=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2025-201=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-201=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-201=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-201=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-201=1 ## Package List: * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (noarch) * kernel-macros-5.14.21-150500.55.91.1 * kernel-source-vanilla-5.14.21-150500.55.91.1 * kernel-docs-html-5.14.21-150500.55.91.1 * kernel-source-5.14.21-150500.55.91.1 * kernel-devel-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (nosrc ppc64le x86_64) * kernel-debug-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (ppc64le x86_64) * kernel-debug-debuginfo-5.14.21-150500.55.91.1 * kernel-debug-devel-debuginfo-5.14.21-150500.55.91.1 * kernel-debug-debugsource-5.14.21-150500.55.91.1 * kernel-debug-devel-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (x86_64) * kernel-default-vdso-debuginfo-5.14.21-150500.55.91.1 * kernel-kvmsmall-vdso-5.14.21-150500.55.91.1 * kernel-default-vdso-5.14.21-150500.55.91.1 * kernel-debug-vdso-5.14.21-150500.55.91.1 * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.91.1 * kernel-debug-vdso-debuginfo-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debugsource-5.14.21-150500.55.91.1 * kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1 * kernel-kvmsmall-debuginfo-5.14.21-150500.55.91.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.91.1 * kernel-default-base-rebuild-5.14.21-150500.55.91.1.150500.6.41.1 * kernel-kvmsmall-devel-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-default-optional-5.14.21-150500.55.91.1 * kernel-default-devel-5.14.21-150500.55.91.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.91.1 * reiserfs-kmp-default-5.14.21-150500.55.91.1 * kselftests-kmp-default-5.14.21-150500.55.91.1 * kernel-syms-5.14.21-150500.55.91.1 * ocfs2-kmp-default-5.14.21-150500.55.91.1 * kernel-obs-build-debugsource-5.14.21-150500.55.91.1 * kernel-default-livepatch-5.14.21-150500.55.91.1 * kernel-default-debuginfo-5.14.21-150500.55.91.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.91.1 * kernel-default-optional-debuginfo-5.14.21-150500.55.91.1 * kernel-obs-qa-5.14.21-150500.55.91.1 * dlm-kmp-default-5.14.21-150500.55.91.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.91.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.91.1 * kernel-default-extra-5.14.21-150500.55.91.1 * cluster-md-kmp-default-5.14.21-150500.55.91.1 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.91.1 * kernel-default-debugsource-5.14.21-150500.55.91.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.91.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.91.1 * gfs2-kmp-default-5.14.21-150500.55.91.1 * kernel-obs-build-5.14.21-150500.55.91.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) *kernel-livepatch-SLE15-SP5_Update_22-debugsource-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_55_91-default-debuginfo-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_55_91-default-1-150500.11.3.1 * kernel-default-livepatch-devel-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.91.1 * kernel-zfcpdump-debugsource-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (nosrc) * dtb-aarch64-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (aarch64) * dtb-nvidia-5.14.21-150500.55.91.1 * kernel-64kb-debugsource-5.14.21-150500.55.91.1 * dtb-apple-5.14.21-150500.55.91.1 * dtb-amlogic-5.14.21-150500.55.91.1 * ocfs2-kmp-64kb-5.14.21-150500.55.91.1 * dtb-socionext-5.14.21-150500.55.91.1 * dtb-allwinner-5.14.21-150500.55.91.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.91.1 * kernel-64kb-extra-5.14.21-150500.55.91.1 * kernel-64kb-optional-5.14.21-150500.55.91.1 * dtb-arm-5.14.21-150500.55.91.1 * dtb-qcom-5.14.21-150500.55.91.1 * dtb-rockchip-5.14.21-150500.55.91.1 * dtb-marvell-5.14.21-150500.55.91.1 * dtb-lg-5.14.21-150500.55.91.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.91.1 * dtb-sprd-5.14.21-150500.55.91.1 * dtb-freescale-5.14.21-150500.55.91.1 * dtb-xilinx-5.14.21-150500.55.91.1 * dtb-exynos-5.14.21-150500.55.91.1 * cluster-md-kmp-64kb-5.14.21-150500.55.91.1 * dlm-kmp-64kb-5.14.21-150500.55.91.1 * kernel-64kb-extra-debuginfo-5.14.21-150500.55.91.1 * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.91.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.91.1 * dtb-apm-5.14.21-150500.55.91.1 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.91.1 * dtb-cavium-5.14.21-150500.55.91.1 * dtb-altera-5.14.21-150500.55.91.1 * dtb-amazon-5.14.21-150500.55.91.1 * dtb-hisilicon-5.14.21-150500.55.91.1 * kernel-64kb-debuginfo-5.14.21-150500.55.91.1 * kernel-64kb-devel-5.14.21-150500.55.91.1 * dtb-broadcom-5.14.21-150500.55.91.1 * kselftests-kmp-64kb-5.14.21-150500.55.91.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.91.1 * dtb-mediatek-5.14.21-150500.55.91.1 * dtb-amd-5.14.21-150500.55.91.1 * dtb-renesas-5.14.21-150500.55.91.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.91.1 * reiserfs-kmp-64kb-5.14.21-150500.55.91.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.91.1 * gfs2-kmp-64kb-5.14.21-150500.55.91.1 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.91.1 * kernel-default-debuginfo-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.91.1 * kernel-livepatch-5_14_21-150500_55_91-default-debuginfo-1-150500.11.3.1 * kernel-default-livepatch-5.14.21-150500.55.91.1 * kernel-default-debuginfo-5.14.21-150500.55.91.1 * kernel-default-livepatch-devel-5.14.21-150500.55.91.1 * kernel-livepatch-SLE15-SP5_Update_22-debugsource-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_55_91-default-1-150500.11.3.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * dlm-kmp-default-5.14.21-150500.55.91.1 * ocfs2-kmp-default-5.14.21-150500.55.91.1 * kernel-default-debugsource-5.14.21-150500.55.91.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.91.1 *cluster-md-kmp-default-debuginfo-5.14.21-150500.55.91.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.91.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.91.1 * cluster-md-kmp-default-5.14.21-150500.55.91.1 * kernel-default-debuginfo-5.14.21-150500.55.91.1 * gfs2-kmp-default-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (nosrc) * kernel-default-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64) * kernel-64kb-debugsource-5.14.21-150500.55.91.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.91.1 * kernel-64kb-debuginfo-5.14.21-150500.55.91.1 * kernel-64kb-devel-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * kernel-default-debugsource-5.14.21-150500.55.91.1 * kernel-obs-build-debugsource-5.14.21-150500.55.91.1 * kernel-default-devel-5.14.21-150500.55.91.1 * kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1 * kernel-default-debuginfo-5.14.21-150500.55.91.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.91.1 * kernel-syms-5.14.21-150500.55.91.1 * kernel-obs-build-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * kernel-macros-5.14.21-150500.55.91.1 * kernel-devel-5.14.21-150500.55.91.1 * kernel-source-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64) *kernel-64kb-debugsource-5.14.21-150500.55.91.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.91.1 * kernel-64kb-debuginfo-5.14.21-150500.55.91.1 * kernel-64kb-devel-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * kernel-default-debugsource-5.14.21-150500.55.91.1 * kernel-obs-build-debugsource-5.14.21-150500.55.91.1 * kernel-default-devel-5.14.21-150500.55.91.1 * kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1 * kernel-default-debuginfo-5.14.21-150500.55.91.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.91.1 * kernel-syms-5.14.21-150500.55.91.1 * kernel-obs-build-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * kernel-macros-5.14.21-150500.55.91.1 * kernel-devel-5.14.21-150500.55.91.1 * kernel-source-5.14.21-150500.55.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64) * kernel-64kb-debugsource-5.14.21-150500.55.91.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.91.1 * kernel-64kb-debuginfo-5.14.21-150500.55.91.1 * kernel-64kb-devel-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.91.1 * kernel-obs-build-debugsource-5.14.21-150500.55.91.1 * kernel-default-devel-5.14.21-150500.55.91.1 * reiserfs-kmp-default-5.14.21-150500.55.91.1 * kernel-default-debuginfo-5.14.21-150500.55.91.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.91.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.91.1 * kernel-syms-5.14.21-150500.55.91.1 * kernel-obs-build-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * kernel-macros-5.14.21-150500.55.91.1 * kernel-devel-5.14.21-150500.55.91.1 * kernel-source-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch nosrc) * kernel-docs-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.91.1 * kernel-zfcpdump-debugsource-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * kernel-default-debugsource-5.14.21-150500.55.91.1 * kernel-obs-build-debugsource-5.14.21-150500.55.91.1 * kernel-default-devel-5.14.21-150500.55.91.1 * reiserfs-kmp-default-5.14.21-150500.55.91.1 * kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1 * kernel-default-debuginfo-5.14.21-150500.55.91.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.91.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.91.1 * kernel-syms-5.14.21-150500.55.91.1 * kernel-obs-build-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * kernel-macros-5.14.21-150500.55.91.1 * kernel-devel-5.14.21-150500.55.91.1 * kernel-source-5.14.21-150500.55.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.91.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47202.html *https://www.suse.com/security/cve/CVE-2022-36280.html * https://www.suse.com/security/cve/CVE-2022-48742.html * https://www.suse.com/security/cve/CVE-2022-49033.html * https://www.suse.com/security/cve/CVE-2022-49035.html * https://www.suse.com/security/cve/CVE-2023-1382.html * https://www.suse.com/security/cve/CVE-2023-33951.html * https://www.suse.com/security/cve/CVE-2023-33952.html * https://www.suse.com/security/cve/CVE-2023-52920.html * https://www.suse.com/security/cve/CVE-2024-24860.html * https://www.suse.com/security/cve/CVE-2024-26886.html * https://www.suse.com/security/cve/CVE-2024-26924.html * https://www.suse.com/security/cve/CVE-2024-36915.html * https://www.suse.com/security/cve/CVE-2024-42232.html * https://www.suse.com/security/cve/CVE-2024-44934.html * https://www.suse.com/security/cve/CVE-2024-47666.html * https://www.suse.com/security/cve/CVE-2024-47678.html * https://www.suse.com/security/cve/CVE-2024-49944.html * https://www.suse.com/security/cve/CVE-2024-49952.html * https://www.suse.com/security/cve/CVE-2024-50018.html * https://www.suse.com/security/cve/CVE-2024-50143.html * https://www.suse.com/security/cve/CVE-2024-50154.html * https://www.suse.com/security/cve/CVE-2024-50166.html * https://www.suse.com/security/cve/CVE-2024-50181.html * https://www.suse.com/security/cve/CVE-2024-50202.html * https://www.suse.com/security/cve/CVE-2024-50211.html * https://www.suse.com/security/cve/CVE-2024-50256.html * https://www.suse.com/security/cve/CVE-2024-50262.html * https://www.suse.com/security/cve/CVE-2024-50278.html * https://www.suse.com/security/cve/CVE-2024-50279.html * https://www.suse.com/security/cve/CVE-2024-50280.html * https://www.suse.com/security/cve/CVE-2024-50296.html * https://www.suse.com/security/cve/CVE-2024-53051.html * https://www.suse.com/security/cve/CVE-2024-53055.html * https://www.suse.com/security/cve/CVE-2024-53056.html * https://www.suse.com/security/cve/CVE-2024-53064.html *https://www.suse.com/security/cve/CVE-2024-53072.html * https://www.suse.com/security/cve/CVE-2024-53090.html * https://www.suse.com/security/cve/CVE-2024-53095.html * https://www.suse.com/security/cve/CVE-2024-53101.html * https://www.suse.com/security/cve/CVE-2024-53113.html * https://www.suse.com/security/cve/CVE-2024-53114.html * https://www.suse.com/security/cve/CVE-2024-53119.html * https://www.suse.com/security/cve/CVE-2024-53120.html * https://www.suse.com/security/cve/CVE-2024-53122.html * https://www.suse.com/security/cve/CVE-2024-53125.html * https://www.suse.com/security/cve/CVE-2024-53130.html * https://www.suse.com/security/cve/CVE-2024-53131.html * https://www.suse.com/security/cve/CVE-2024-53142.html * https://www.suse.com/security/cve/CVE-2024-53146.html * https://www.suse.com/security/cve/CVE-2024-53150.html * https://www.suse.com/security/cve/CVE-2024-53156.html * https://www.suse.com/security/cve/CVE-2024-53157.html * https://www.suse.com/security/cve/CVE-2024-53158.html * https://www.suse.com/security/cve/CVE-2024-53161.html * https://www.suse.com/security/cve/CVE-2024-53162.html * https://www.suse.com/security/cve/CVE-2024-53173.html * https://www.suse.com/security/cve/CVE-2024-53179.html * https://www.suse.com/security/cve/CVE-2024-53206.html * https://www.suse.com/security/cve/CVE-2024-53210.html * https://www.suse.com/security/cve/CVE-2024-53213.html * https://www.suse.com/security/cve/CVE-2024-53214.html * https://www.suse.com/security/cve/CVE-2024-53239.html * https://www.suse.com/security/cve/CVE-2024-53240.html * https://www.suse.com/security/cve/CVE-2024-53241.html * https://www.suse.com/security/cve/CVE-2024-56539.html * https://www.suse.com/security/cve/CVE-2024-56548.html * https://www.suse.com/security/cve/CVE-2024-56549.html * https://www.suse.com/security/cve/CVE-2024-56570.html * https://www.suse.com/security/cve/CVE-2024-56571.html * https://www.suse.com/security/cve/CVE-2024-56575.html *https://www.suse.com/security/cve/CVE-2024-56598.html * https://www.suse.com/security/cve/CVE-2024-56604.html * https://www.suse.com/security/cve/CVE-2024-56605.html * https://www.suse.com/security/cve/CVE-2024-56619.html * https://www.suse.com/security/cve/CVE-2024-56755.html * https://www.suse.com/security/cve/CVE-2024-8805.html * https://bugzilla.suse.com/show_bug.cgi?id=1170891 * https://bugzilla.suse.com/show_bug.cgi?id=1173139 * https://bugzilla.suse.com/show_bug.cgi?id=1185010 * https://bugzilla.suse.com/show_bug.cgi?id=1190358 * https://bugzilla.suse.com/show_bug.cgi?id=1190428 * https://bugzilla.suse.com/show_bug.cgi?id=1203332 * https://bugzilla.suse.com/show_bug.cgi?id=1205521 * https://bugzilla.suse.com/show_bug.cgi?id=1209288 * https://bugzilla.suse.com/show_bug.cgi?id=1209798 * https://bugzilla.suse.com/show_bug.cgi?id=1211593 * https://bugzilla.suse.com/show_bug.cgi?id=1211595 * https://bugzilla.suse.com/show_bug.cgi?id=1214635 * https://bugzilla.suse.com/show_bug.cgi?id=1215304 * https://bugzilla.suse.com/show_bug.cgi?id=1215523 * https://bugzilla.suse.com/show_bug.cgi?id=1216813 * https://bugzilla.suse.com/show_bug.cgi?id=1216909 * https://bugzilla.suse.com/show_bug.cgi?id=1219608 * https://bugzilla.suse.com/show_bug.cgi?id=1222878 * https://bugzilla.suse.com/show_bug.cgi?id=1223044 * https://bugzilla.suse.com/show_bug.cgi?id=1225758 * https://bugzilla.suse.com/show_bug.cgi?id=1225820 * https://bugzilla.suse.com/show_bug.cgi?id=1226694 * https://bugzilla.suse.com/show_bug.cgi?id=1228190 * https://bugzilla.suse.com/show_bug.cgi?id=1229809 * https://bugzilla.suse.com/show_bug.cgi?id=1230422 * https://bugzilla.suse.com/show_bug.cgi?id=1230697 * https://bugzilla.suse.com/show_bug.cgi?id=1231388 * https://bugzilla.suse.com/show_bug.cgi?id=1231453 * https://bugzilla.suse.com/show_bug.cgi?id=1231854 * https://bugzilla.suse.com/show_bug.cgi?id=1232045 * https://bugzilla.suse.com/show_bug.cgi?id=1232157 *https://bugzilla.suse.com/show_bug.cgi?id=1232166 * https://bugzilla.suse.com/show_bug.cgi?id=1232419 * https://bugzilla.suse.com/show_bug.cgi?id=1232436 * https://bugzilla.suse.com/show_bug.cgi?id=1232472 * https://bugzilla.suse.com/show_bug.cgi?id=1232823 * https://bugzilla.suse.com/show_bug.cgi?id=1233038 * https://bugzilla.suse.com/show_bug.cgi?id=1233050 * https://bugzilla.suse.com/show_bug.cgi?id=1233070 * https://bugzilla.suse.com/show_bug.cgi?id=1233096 * https://bugzilla.suse.com/show_bug.cgi?id=1233127 * https://bugzilla.suse.com/show_bug.cgi?id=1233200 * https://bugzilla.suse.com/show_bug.cgi?id=1233239 * https://bugzilla.suse.com/show_bug.cgi?id=1233324 * https://bugzilla.suse.com/show_bug.cgi?id=1233467 * https://bugzilla.suse.com/show_bug.cgi?id=1233468 * https://bugzilla.suse.com/show_bug.cgi?id=1233469 * https://bugzilla.suse.com/show_bug.cgi?id=1233485 * https://bugzilla.suse.com/show_bug.cgi?id=1233547 * https://bugzilla.suse.com/show_bug.cgi?id=1233550 * https://bugzilla.suse.com/show_bug.cgi?id=1233558 * https://bugzilla.suse.com/show_bug.cgi?id=1233564 * https://bugzilla.suse.com/show_bug.cgi?id=1233568 * https://bugzilla.suse.com/show_bug.cgi?id=1233637 * https://bugzilla.suse.com/show_bug.cgi?id=1233642 * https://bugzilla.suse.com/show_bug.cgi?id=1233701 * https://bugzilla.suse.com/show_bug.cgi?id=1233769 * https://bugzilla.suse.com/show_bug.cgi?id=1233837 * https://bugzilla.suse.com/show_bug.cgi?id=1234072 * https://bugzilla.suse.com/show_bug.cgi?id=1234073 * https://bugzilla.suse.com/show_bug.cgi?id=1234075 * https://bugzilla.suse.com/show_bug.cgi?id=1234076 * https://bugzilla.suse.com/show_bug.cgi?id=1234077 * https://bugzilla.suse.com/show_bug.cgi?id=1234087 * https://bugzilla.suse.com/show_bug.cgi?id=1234120 * https://bugzilla.suse.com/show_bug.cgi?id=1234156 * https://bugzilla.suse.com/show_bug.cgi?id=1234219 * https://bugzilla.suse.com/show_bug.cgi?id=1234220 *https://bugzilla.suse.com/show_bug.cgi?id=1234240 * https://bugzilla.suse.com/show_bug.cgi?id=1234241 * https://bugzilla.suse.com/show_bug.cgi?id=1234281 * https://bugzilla.suse.com/show_bug.cgi?id=1234282 * https://bugzilla.suse.com/show_bug.cgi?id=1234294 * https://bugzilla.suse.com/show_bug.cgi?id=1234338 * https://bugzilla.suse.com/show_bug.cgi?id=1234357 * https://bugzilla.suse.com/show_bug.cgi?id=1234437 * https://bugzilla.suse.com/show_bug.cgi?id=1234464 * https://bugzilla.suse.com/show_bug.cgi?id=1234605 * https://bugzilla.suse.com/show_bug.cgi?id=1234639 * https://bugzilla.suse.com/show_bug.cgi?id=1234650 * https://bugzilla.suse.com/show_bug.cgi?id=1234727 * https://bugzilla.suse.com/show_bug.cgi?id=1234811 * https://bugzilla.suse.com/show_bug.cgi?id=1234827 * https://bugzilla.suse.com/show_bug.cgi?id=1234834 * https://bugzilla.suse.com/show_bug.cgi?id=1234843 * https://bugzilla.suse.com/show_bug.cgi?id=1234846 * https://bugzilla.suse.com/show_bug.cgi?id=1234853 * https://bugzilla.suse.com/show_bug.cgi?id=1234856 * https://bugzilla.suse.com/show_bug.cgi?id=1234891 * https://bugzilla.suse.com/show_bug.cgi?id=1234912 * https://bugzilla.suse.com/show_bug.cgi?id=1234920 * https://bugzilla.suse.com/show_bug.cgi?id=1234921 * https://bugzilla.suse.com/show_bug.cgi?id=1234960 * https://bugzilla.suse.com/show_bug.cgi?id=1234963 * https://bugzilla.suse.com/show_bug.cgi?id=1234971 * https://bugzilla.suse.com/show_bug.cgi?id=1234973 * https://bugzilla.suse.com/show_bug.cgi?id=1235004 * https://bugzilla.suse.com/show_bug.cgi?id=1235035 * https://bugzilla.suse.com/show_bug.cgi?id=1235037 * https://bugzilla.suse.com/show_bug.cgi?id=1235039 * https://bugzilla.suse.com/show_bug.cgi?id=1235054 * https://bugzilla.suse.com/show_bug.cgi?id=1235056 * https://bugzilla.suse.com/show_bug.cgi?id=1235061 * https://bugzilla.suse.com/show_bug.cgi?id=1235073 * https://bugzilla.suse.com/show_bug.cgi?id=1235220 *https://bugzilla.suse.com/show_bug.cgi?id=1235224 * https://bugzilla.suse.com/show_bug.cgi?id=1235246 * https://bugzilla.suse.com/show_bug.cgi?id=1235507 . SUSE Linux Kernel patch released for January 2025 addresses numerous vulnerabilities alongside several critical corrections.. SUSE Update, Linux Kernel Security, Security Fixes, Bug Fixes. . Severity: Important. LinuxSecurity.com Team
Jan 21, 2025
•Important
SuSE
100
security advisoryimportantkernelSUSE: 2025:0203-1 important: Linux Kernel Security Updates
* bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1190358 * bsc#1190428 . # Security update for the Linux Kernel Announcement ID: SUSE-SU-2025:0203-1 Release Date: 2025-01-21T13:58:43Z Rating: important References: * bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1190358 * bsc#1190428 * bsc#1209798 * bsc#1215304 * bsc#1222878 * bsc#1228466 * bsc#1230697 * bsc#1232436 * bsc#1233070 * bsc#1233642 * bsc#1234281 * bsc#1234282 * bsc#1234846 * bsc#1234853 * bsc#1234891 * bsc#1234921 * bsc#1234960 * bsc#1234963 * bsc#1235004 * bsc#1235035 * bsc#1235054 * bsc#1235056 * bsc#1235061 * bsc#1235073 * bsc#1235220 * bsc#1235224 * bsc#1235246 * bsc#1235507 Cross-References: * CVE-2021-47202 * CVE-2022-49035 * CVE-2024-41087 * CVE-2024-50154 * CVE-2024-53095 * CVE-2024-53142 * CVE-2024-53146 * CVE-2024-53156 * CVE-2024-53173 * CVE-2024-53179 * CVE-2024-53206 * CVE-2024-53214 * CVE-2024-53239 * CVE-2024-53240 * CVE-2024-53241 * CVE-2024-56539 * CVE-2024-56548 * CVE-2024-56570 * CVE-2024-56598 * CVE-2024-56604 * CVE-2024-56605 * CVE-2024-56619 * CVE-2024-8805 CVSS scores: * CVE-2021-47202 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2021-47202 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-49035 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2022-49035 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-49035 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-41087 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41087 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50154 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-50154 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-50154 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H *CVE-2024-50154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53095 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53095 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53142 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2024-53142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53146 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53146 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53146 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-53156 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53156 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53156 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53173 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53173 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53173 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53179 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53179 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53179 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53206 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2024-53206 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-53206 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53214 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53214 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53239 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53239 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53241 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-53241 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-56539 ( SUSE ): 8.6 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56539 ( SUSE ): 8.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-56548 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56548 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56570 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-56570 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56598 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56598 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56604 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56604 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56604 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56605 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56605 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56619 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56619 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8805 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8805 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8805 ( NVD ): 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux EnterpriseHigh Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves 23 vulnerabilities and has eight security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2024-41087: Fix double free on error (bsc#1228466). * CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642). * CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234853). * CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234846). * CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234891). * CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921). * CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004). * CVE-2024-53239: ALSA: 6fire: Release resources at card release (bsc#1235054). * CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281). * CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282). * CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (bsc#1234963). * CVE-2024-56548: hfsplus: do not query the device logical block size multiple times(bsc#1235073). * CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035). * CVE-2024-56598: jfs: array-index-out-of-bounds fix in dtReadFirst (bsc#1235220). * CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056). * CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061). * CVE-2024-56619: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (bsc#1235224). * CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1230697). The following non-security bugs were fixed: * Drop a couple of block layer git-fixes (bsc#1170891 bsc#1173139) * KVM: x86: fix sending PV IPI (git-fixes). * fixup "rpm: support gz and zst compression methods" once more (bsc#1190428, bsc#1190358) * idpf: add support for SW triggered interrupts (bsc#1235507). * idpf: enable WB_ON_ITR (bsc#1235507). * idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507). * kernel-binary: do not BuildIgnore m4. It is actually needed for regenerating zconf when it is not up-to-date due to merge. * net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246). * rpm/kernel-binary.spec.in: Fix build regression The previous fix forgot to take over grep -c option that broke the conditional expression * scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes). * smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: this fixes issue discussed in bsc#1233642]. * supported.conf: add bsc1185010 dependency * supported.conf: hyperv_drm (jsc#sle-19733) * usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() (git-fixes). * usb: typec: tps6598x: Fix return value check in tps6598x_probe() (git- fixes). * x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). * x86/fpu/xsave: Handlecompacted offsets correctly with supervisor states (git-fixes). * x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). * x86/fpu: Remove unused supervisor only offsets (git-fixes). * x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). * x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). * x86/mce: Allow instrumentation during task work queueing (git-fixes). * x86/mce: Mark mce_end() noinstr (git-fixes). * x86/mce: Mark mce_panic() noinstr (git-fixes). * x86/mce: Mark mce_read_aux() noinstr (git-fixes). * x86/mm: Flush global TLB when switching to trampoline page-table (git- fixes). * x86/sgx: Free backing memory after faulting the enclave page (git-fixes). * x86/sgx: Silence softlockup detection when releasing large enclaves (git- fixes). * x86/uaccess: Move variable into switch case statement (git-fixes). * x86: Annotate call_on_stack() (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-203=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-203=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-203=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-203=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-203=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-203=1 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * SUSE Linux Enterprise High AvailabilityExtension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2025-203=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-203=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-203=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-203=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-203=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-203=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-203=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-203=1 ## Package List: * openSUSE Leap 15.4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (noarch) * kernel-source-5.14.21-150400.24.147.1 * kernel-macros-5.14.21-150400.24.147.1 * kernel-devel-5.14.21-150400.24.147.1 * kernel-source-vanilla-5.14.21-150400.24.147.1 * kernel-docs-html-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (nosrc ppc64le x86_64) * kernel-debug-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (ppc64le x86_64) * kernel-debug-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-debug-debugsource-5.14.21-150400.24.147.1 * kernel-debug-debuginfo-5.14.21-150400.24.147.1 * kernel-debug-devel-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-5.14.21-150400.24.147.1 * kernel-kvmsmall-debuginfo-5.14.21-150400.24.147.1 * kernel-kvmsmall-debugsource-5.14.21-150400.24.147.1 * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * kernel-default-base-rebuild-5.14.21-150400.24.147.1.150400.24.72.1 *kernel-kvmsmall-devel-debuginfo-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kernel-syms-5.14.21-150400.24.147.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.147.1 * kernel-obs-build-debugsource-5.14.21-150400.24.147.1 * reiserfs-kmp-default-5.14.21-150400.24.147.1 * kselftests-kmp-default-debuginfo-5.14.21-150400.24.147.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-devel-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * kernel-obs-qa-5.14.21-150400.24.147.1 * kernel-default-optional-debuginfo-5.14.21-150400.24.147.1 * kernel-default-optional-5.14.21-150400.24.147.1 * kernel-default-livepatch-5.14.21-150400.24.147.1 * dlm-kmp-default-5.14.21-150400.24.147.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.147.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.147.1 * cluster-md-kmp-default-5.14.21-150400.24.147.1 * ocfs2-kmp-default-5.14.21-150400.24.147.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * kselftests-kmp-default-5.14.21-150400.24.147.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.147.1 * kernel-default-extra-5.14.21-150400.24.147.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.147.1 * kernel-obs-build-5.14.21-150400.24.147.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.147.1 * gfs2-kmp-default-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 * kernel-livepatch-5_14_21-150400_24_147-default-debuginfo-1-150400.9.3.1 * kernel-livepatch-SLE15-SP4_Update_35-debugsource-1-150400.9.3.1 * kernel-default-livepatch-devel-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (nosrc s390x) *kernel-zfcpdump-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.147.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (aarch64) * cluster-md-kmp-64kb-5.14.21-150400.24.147.1 * gfs2-kmp-64kb-5.14.21-150400.24.147.1 * dtb-allwinner-5.14.21-150400.24.147.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150400.24.147.1 * reiserfs-kmp-64kb-5.14.21-150400.24.147.1 * kernel-64kb-extra-debuginfo-5.14.21-150400.24.147.1 * dtb-freescale-5.14.21-150400.24.147.1 * dtb-amd-5.14.21-150400.24.147.1 * dtb-amlogic-5.14.21-150400.24.147.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150400.24.147.1 * dlm-kmp-64kb-debuginfo-5.14.21-150400.24.147.1 * kselftests-kmp-64kb-5.14.21-150400.24.147.1 * dtb-apm-5.14.21-150400.24.147.1 * kernel-64kb-extra-5.14.21-150400.24.147.1 * dtb-qcom-5.14.21-150400.24.147.1 * dtb-arm-5.14.21-150400.24.147.1 * dlm-kmp-64kb-5.14.21-150400.24.147.1 * dtb-lg-5.14.21-150400.24.147.1 * kernel-64kb-optional-debuginfo-5.14.21-150400.24.147.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150400.24.147.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150400.24.147.1 * dtb-cavium-5.14.21-150400.24.147.1 * dtb-apple-5.14.21-150400.24.147.1 * dtb-mediatek-5.14.21-150400.24.147.1 * ocfs2-kmp-64kb-5.14.21-150400.24.147.1 * dtb-broadcom-5.14.21-150400.24.147.1 * dtb-exynos-5.14.21-150400.24.147.1 * dtb-xilinx-5.14.21-150400.24.147.1 * dtb-marvell-5.14.21-150400.24.147.1 * kernel-64kb-debugsource-5.14.21-150400.24.147.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150400.24.147.1 * kernel-64kb-devel-5.14.21-150400.24.147.1 * dtb-nvidia-5.14.21-150400.24.147.1 * dtb-rockchip-5.14.21-150400.24.147.1 * kernel-64kb-optional-5.14.21-150400.24.147.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.147.1 * dtb-sprd-5.14.21-150400.24.147.1 *kernel-64kb-debuginfo-5.14.21-150400.24.147.1 * dtb-renesas-5.14.21-150400.24.147.1 * dtb-hisilicon-5.14.21-150400.24.147.1 * dtb-altera-5.14.21-150400.24.147.1 * dtb-socionext-5.14.21-150400.24.147.1 * dtb-amazon-5.14.21-150400.24.147.1 * openSUSE Leap 15.4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.147.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.147.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.147.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.147.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Live Patching15-SP4 (nosrc) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_147-default-debuginfo-1-150400.9.3.1 * kernel-default-livepatch-devel-5.14.21-150400.24.147.1 * kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 * kernel-livepatch-SLE15-SP4_Update_35-debugsource-1-150400.9.3.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * kernel-default-livepatch-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * gfs2-kmp-default-debuginfo-5.14.21-150400.24.147.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.147.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.147.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.147.1 * cluster-md-kmp-default-5.14.21-150400.24.147.1 * ocfs2-kmp-default-5.14.21-150400.24.147.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * gfs2-kmp-default-5.14.21-150400.24.147.1 * dlm-kmp-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (nosrc) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * kernel-64kb-debuginfo-5.14.21-150400.24.147.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-64kb-devel-5.14.21-150400.24.147.1 * kernel-64kb-debugsource-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * kernel-default-devel-debuginfo-5.14.21-150400.24.147.1 *kernel-syms-5.14.21-150400.24.147.1 * kernel-obs-build-debugsource-5.14.21-150400.24.147.1 * reiserfs-kmp-default-5.14.21-150400.24.147.1 * kernel-obs-build-5.14.21-150400.24.147.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-devel-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.147.1 * kernel-macros-5.14.21-150400.24.147.1 * kernel-devel-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * kernel-64kb-debuginfo-5.14.21-150400.24.147.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-64kb-devel-5.14.21-150400.24.147.1 * kernel-64kb-debugsource-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * kernel-default-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-syms-5.14.21-150400.24.147.1 * kernel-obs-build-debugsource-5.14.21-150400.24.147.1 * reiserfs-kmp-default-5.14.21-150400.24.147.1 * kernel-obs-build-5.14.21-150400.24.147.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-devel-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance ComputingLTSS 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.147.1 * kernel-macros-5.14.21-150400.24.147.1 * kernel-devel-5.14.21-150400.24.147.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64) * kernel-64kb-debuginfo-5.14.21-150400.24.147.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-64kb-devel-5.14.21-150400.24.147.1 * kernel-64kb-debugsource-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * kernel-default-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-syms-5.14.21-150400.24.147.1 * kernel-obs-build-debugsource-5.14.21-150400.24.147.1 * reiserfs-kmp-default-5.14.21-150400.24.147.1 * kernel-obs-build-5.14.21-150400.24.147.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-devel-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * kernel-source-5.14.21-150400.24.147.1 * kernel-macros-5.14.21-150400.24.147.1 * kernel-devel-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch nosrc) * kernel-docs-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.147.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.147.1 * SUSE LinuxEnterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * kernel-default-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-syms-5.14.21-150400.24.147.1 * kernel-obs-build-debugsource-5.14.21-150400.24.147.1 * reiserfs-kmp-default-5.14.21-150400.24.147.1 * kernel-obs-build-5.14.21-150400.24.147.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-devel-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.147.1 * kernel-macros-5.14.21-150400.24.147.1 * kernel-devel-5.14.21-150400.24.147.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.147.1 * SUSE Manager Proxy 4.3 (nosrc x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Manager Proxy 4.3 (x86_64) * kernel-default-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-syms-5.14.21-150400.24.147.1 * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-devel-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * SUSE Manager Proxy 4.3 (noarch) * kernel-source-5.14.21-150400.24.147.1 * kernel-macros-5.14.21-150400.24.147.1 * kernel-devel-5.14.21-150400.24.147.1 * SUSE Manager Retail Branch Server 4.3 (nosrc x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * kernel-default-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 *kernel-default-devel-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * kernel-macros-5.14.21-150400.24.147.1 * kernel-devel-5.14.21-150400.24.147.1 * SUSE Manager Server 4.3 (nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.147.1 * SUSE Manager Server 4.3 (ppc64le x86_64) * kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * kernel-default-devel-debuginfo-5.14.21-150400.24.147.1 * kernel-syms-5.14.21-150400.24.147.1 * kernel-default-debuginfo-5.14.21-150400.24.147.1 * kernel-default-devel-5.14.21-150400.24.147.1 * kernel-default-debugsource-5.14.21-150400.24.147.1 * SUSE Manager Server 4.3 (noarch) * kernel-source-5.14.21-150400.24.147.1 * kernel-macros-5.14.21-150400.24.147.1 * kernel-devel-5.14.21-150400.24.147.1 * SUSE Manager Server 4.3 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.147.1 * SUSE Manager Server 4.3 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.147.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.147.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47202.html * https://www.suse.com/security/cve/CVE-2022-49035.html * https://www.suse.com/security/cve/CVE-2024-41087.html * https://www.suse.com/security/cve/CVE-2024-50154.html * https://www.suse.com/security/cve/CVE-2024-53095.html * https://www.suse.com/security/cve/CVE-2024-53142.html * https://www.suse.com/security/cve/CVE-2024-53146.html * https://www.suse.com/security/cve/CVE-2024-53156.html * https://www.suse.com/security/cve/CVE-2024-53173.html * https://www.suse.com/security/cve/CVE-2024-53179.html * https://www.suse.com/security/cve/CVE-2024-53206.html * https://www.suse.com/security/cve/CVE-2024-53214.html * https://www.suse.com/security/cve/CVE-2024-53239.html * https://www.suse.com/security/cve/CVE-2024-53240.html *https://www.suse.com/security/cve/CVE-2024-53241.html * https://www.suse.com/security/cve/CVE-2024-56539.html * https://www.suse.com/security/cve/CVE-2024-56548.html * https://www.suse.com/security/cve/CVE-2024-56570.html * https://www.suse.com/security/cve/CVE-2024-56598.html * https://www.suse.com/security/cve/CVE-2024-56604.html * https://www.suse.com/security/cve/CVE-2024-56605.html * https://www.suse.com/security/cve/CVE-2024-56619.html * https://www.suse.com/security/cve/CVE-2024-8805.html * https://bugzilla.suse.com/show_bug.cgi?id=1170891 * https://bugzilla.suse.com/show_bug.cgi?id=1173139 * https://bugzilla.suse.com/show_bug.cgi?id=1185010 * https://bugzilla.suse.com/show_bug.cgi?id=1190358 * https://bugzilla.suse.com/show_bug.cgi?id=1190428 * https://bugzilla.suse.com/show_bug.cgi?id=1209798 * https://bugzilla.suse.com/show_bug.cgi?id=1215304 * https://bugzilla.suse.com/show_bug.cgi?id=1222878 * https://bugzilla.suse.com/show_bug.cgi?id=1228466 * https://bugzilla.suse.com/show_bug.cgi?id=1230697 * https://bugzilla.suse.com/show_bug.cgi?id=1232436 * https://bugzilla.suse.com/show_bug.cgi?id=1233070 * https://bugzilla.suse.com/show_bug.cgi?id=1233642 * https://bugzilla.suse.com/show_bug.cgi?id=1234281 * https://bugzilla.suse.com/show_bug.cgi?id=1234282 * https://bugzilla.suse.com/show_bug.cgi?id=1234846 * https://bugzilla.suse.com/show_bug.cgi?id=1234853 * https://bugzilla.suse.com/show_bug.cgi?id=1234891 * https://bugzilla.suse.com/show_bug.cgi?id=1234921 * https://bugzilla.suse.com/show_bug.cgi?id=1234960 * https://bugzilla.suse.com/show_bug.cgi?id=1234963 * https://bugzilla.suse.com/show_bug.cgi?id=1235004 * https://bugzilla.suse.com/show_bug.cgi?id=1235035 * https://bugzilla.suse.com/show_bug.cgi?id=1235054 * https://bugzilla.suse.com/show_bug.cgi?id=1235056 * https://bugzilla.suse.com/show_bug.cgi?id=1235061 * https://bugzilla.suse.com/show_bug.cgi?id=1235073 * https://bugzilla.suse.com/show_bug.cgi?id=1235220 *https://bugzilla.suse.com/show_bug.cgi?id=1235224 * https://bugzilla.suse.com/show_bug.cgi?id=1235246 * https://bugzilla.suse.com/show_bug.cgi?id=1235507 . A recent significant kernel enhancement for SUSE tackles various vulnerabilities and resolves several bugs. Keep your system safe!. Linux Kernel update,SUSE updates,security fixes,operating system vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Jan 21, 2025
•Important
SuSE
100
security advisorymoderatepatchSUSE: 2024:3634-1 moderate: keepalived integer overflow advisory
* bsc#1228123 Cross-References: * CVE-2024-41184 . # Security update for keepalived Announcement ID: SUSE-SU-2024:3634-1 Release Date: 2024-10-15T09:21:36Z Rating: moderate References: * bsc#1228123 Cross-References: * CVE-2024-41184 CVSS scores: * CVE-2024-41184 ( SUSE ): 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for keepalived fixes the following issues: * CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2024-3634=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3634=1 openSUSE-SLE-15.5-2024-3634=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3634=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3634=1 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * keepalived-2.2.2-150500.8.5.1 * keepalived-debuginfo-2.2.2-150500.8.5.1 * keepalived-debugsource-2.2.2-150500.8.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * keepalived-2.2.2-150500.8.5.1 * keepalived-debuginfo-2.2.2-150500.8.5.1 * keepalived-debugsource-2.2.2-150500.8.5.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * keepalived-2.2.2-150500.8.5.1 *keepalived-debuginfo-2.2.2-150500.8.5.1 * keepalived-debugsource-2.2.2-150500.8.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * keepalived-2.2.2-150500.8.5.1 * keepalived-debuginfo-2.2.2-150500.8.5.1 * keepalived-debugsource-2.2.2-150500.8.5.1 ## References: * https://www.suse.com/security/cve/CVE-2024-41184.html * https://bugzilla.suse.com/show_bug.cgi?id=1228123 . The security advisory SUSE-SU-2024:3645-1 highlights a noteworthy buffer overflow vulnerability in Keepalived. It is advised to implement the update promptly.. keepalived security advisory, SUSE updates, high availability patch, integer overflow fix. . LinuxSecurity.com Team
Oct 15, 2024
SuSE
89
security advisoryupdateFedoraFedora 41: 2024-bd2368f66a Moderate: HAProxy 3.0.4 DoS Fix
Update to 3.0.4 (CVE-2024-45506, #2309472). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-bd2368f66a 2024-09-13 20:43:08.472492 -------------------------------------------------------------------------------- Name : haproxy Product : Fedora 41 Version : 3.0.4 Release : 1.fc41 URL : http://www.haproxy.org/ Summary : HAProxy reverse proxy for high availability environments Description : HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to backup servers in the event a main one fails - accept connections to special ports dedicated to service monitoring - stop accepting connections without breaking existing ones - add, modify, and delete HTTP headers in both directions - block requests matching particular patterns - report detailed status to authenticated users from a URI intercepted from the application -------------------------------------------------------------------------------- Update Information: Update to 3.0.4 (CVE-2024-45506, #2309472) -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 3 2024 Ryan O'Hara - 3.0.4-1 - Update to 3.0.4 (CVE-2024-45506, #2309472) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2309472 - haproxy-3.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2309472 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-bd2368f66a' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Sep 13, 2024
Fedora
100
security advisorykernel updatecriticalSUSE: 2024:2802-1 Important: Kernel Update Addressing Multiple Issues
* bsc#1194869 * bsc#1215199 * bsc#1215587 * bsc#1218442 * bsc#1218730 . # Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:2802-1 Rating: important References: * bsc#1194869 * bsc#1215199 * bsc#1215587 * bsc#1218442 * bsc#1218730 * bsc#1218820 * bsc#1219832 * bsc#1220138 * bsc#1220427 * bsc#1220430 * bsc#1220942 * bsc#1221057 * bsc#1221647 * bsc#1221654 * bsc#1221656 * bsc#1221659 * bsc#1222326 * bsc#1222328 * bsc#1222438 * bsc#1222463 * bsc#1222768 * bsc#1222775 * bsc#1222779 * bsc#1222893 * bsc#1223010 * bsc#1223021 * bsc#1223570 * bsc#1223731 * bsc#1223740 * bsc#1223778 * bsc#1223804 * bsc#1223806 * bsc#1223807 * bsc#1223813 * bsc#1223815 * bsc#1223836 * bsc#1223863 * bsc#1224414 * bsc#1224422 * bsc#1224490 * bsc#1224499 * bsc#1224512 * bsc#1224516 * bsc#1224544 * bsc#1224545 * bsc#1224589 * bsc#1224604 * bsc#1224636 * bsc#1224641 * bsc#1224743 * bsc#1224767 * bsc#1225088 * bsc#1225172 * bsc#1225272 * bsc#1225489 * bsc#1225600 * bsc#1225601 * bsc#1225711 * bsc#1225717 * bsc#1225719 * bsc#1225744 * bsc#1225745 * bsc#1225746 * bsc#1225752 * bsc#1225753 * bsc#1225757 * bsc#1225805 * bsc#1225810 * bsc#1225830 * bsc#1225835 * bsc#1225839 * bsc#1225840 * bsc#1225843 * bsc#1225847 * bsc#1225851 * bsc#1225856 * bsc#1225894 * bsc#1225895 * bsc#1225896 * bsc#1226202 * bsc#1226213 * bsc#1226502 * bsc#1226519 * bsc#1226750 * bsc#1226757 * bsc#1226783 * bsc#1226866 * bsc#1226883 * bsc#1226915 * bsc#1226993 * bsc#1227103 * bsc#1227149 * bsc#1227282 * bsc#1227362 * bsc#1227363 * bsc#1227383 * bsc#1227432 * bsc#1227433 * bsc#1227434 * bsc#1227435 * bsc#1227443 * bsc#1227446 * bsc#1227447 * bsc#1227487 * bsc#1227573 * bsc#1227626 * bsc#1227716 * bsc#1227719 * bsc#1227723 * bsc#1227730 * bsc#1227736 * bsc#1227755 * bsc#1227757 * bsc#1227762 * bsc#1227763 * bsc#1227779 *bsc#1227780 * bsc#1227783 * bsc#1227786 * bsc#1227788 * bsc#1227789 * bsc#1227797 * bsc#1227800 * bsc#1227801 * bsc#1227803 * bsc#1227806 * bsc#1227813 * bsc#1227814 * bsc#1227836 * bsc#1227855 * bsc#1227862 * bsc#1227866 * bsc#1227886 * bsc#1227899 * bsc#1227910 * bsc#1227913 * bsc#1227926 * bsc#1228090 * bsc#1228192 * bsc#1228193 * bsc#1228211 * bsc#1228269 * bsc#1228289 * bsc#1228327 * bsc#1228328 * bsc#1228403 * bsc#1228405 * bsc#1228408 * bsc#1228417 * jsc#PED-8644 * jsc#PED-8688 * jsc#PED-8701 * jsc#PED-8954 Cross-References: * CVE-2023-38417 * CVE-2023-47210 * CVE-2023-51780 * CVE-2023-52435 * CVE-2023-52472 * CVE-2023-52751 * CVE-2023-52775 * CVE-2024-25741 * CVE-2024-26615 * CVE-2024-26623 * CVE-2024-26633 * CVE-2024-26635 * CVE-2024-26636 * CVE-2024-26641 * CVE-2024-26663 * CVE-2024-26665 * CVE-2024-26691 * CVE-2024-26734 * CVE-2024-26785 * CVE-2024-26826 * CVE-2024-26863 * CVE-2024-26944 * CVE-2024-27012 * CVE-2024-27015 * CVE-2024-27016 * CVE-2024-27019 * CVE-2024-27020 * CVE-2024-27025 * CVE-2024-27064 * CVE-2024-27065 * CVE-2024-27402 * CVE-2024-27404 * CVE-2024-35805 * CVE-2024-35853 * CVE-2024-35854 * CVE-2024-35890 * CVE-2024-35893 * CVE-2024-35899 * CVE-2024-35908 * CVE-2024-35934 * CVE-2024-35942 * CVE-2024-36003 * CVE-2024-36004 * CVE-2024-36889 * CVE-2024-36901 * CVE-2024-36902 * CVE-2024-36909 * CVE-2024-36910 * CVE-2024-36911 * CVE-2024-36912 * CVE-2024-36913 * CVE-2024-36914 * CVE-2024-36922 * CVE-2024-36930 * CVE-2024-36940 * CVE-2024-36941 * CVE-2024-36942 * CVE-2024-36944 * CVE-2024-36946 * CVE-2024-36947 * CVE-2024-36949 * CVE-2024-36950 * CVE-2024-36951 * CVE-2024-36955 * CVE-2024-36959 * CVE-2024-36974 * CVE-2024-38558 * CVE-2024-38586 * CVE-2024-38598 * CVE-2024-38604 * CVE-2024-38659 * CVE-2024-39276 * CVE-2024-39468 * CVE-2024-39472 * CVE-2024-39473 *CVE-2024-39474 * CVE-2024-39475 * CVE-2024-39479 * CVE-2024-39481 * CVE-2024-39482 * CVE-2024-39487 * CVE-2024-39490 * CVE-2024-39494 * CVE-2024-39496 * CVE-2024-39498 * CVE-2024-39502 * CVE-2024-39504 * CVE-2024-39507 * CVE-2024-40901 * CVE-2024-40906 * CVE-2024-40908 * CVE-2024-40919 * CVE-2024-40923 * CVE-2024-40925 * CVE-2024-40928 * CVE-2024-40931 * CVE-2024-40935 * CVE-2024-40937 * CVE-2024-40940 * CVE-2024-40947 * CVE-2024-40948 * CVE-2024-40953 * CVE-2024-40960 * CVE-2024-40961 * CVE-2024-40966 * CVE-2024-40970 * CVE-2024-40972 * CVE-2024-40975 * CVE-2024-40979 * CVE-2024-40998 * CVE-2024-40999 * CVE-2024-41006 * CVE-2024-41011 * CVE-2024-41013 * CVE-2024-41014 * CVE-2024-41017 * CVE-2024-41090 * CVE-2024-41091 CVSS scores: * CVE-2023-38417 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-47210 ( SUSE ): 4.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L * CVE-2023-51780 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-51780 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52435 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52435 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52472 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2023-52472 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52751 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52775 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-25741 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L * CVE-2024-26615 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26623 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26633 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26635 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2024-26636 ( SUSE ): 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26641 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2024-26663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26665 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26691 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26734 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26785 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26826 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26944 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27012 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27015 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27015 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27016 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27016 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27019 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27019 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-27020 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27020 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27025 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-27064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-27402 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-27404 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2024-35805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-35853 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-35854 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-35890 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-35893 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-35899 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-35908 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-35934 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-35942 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-36003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36004 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36889 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-36901 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36901 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36902 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36902 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36909 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-36910 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N * CVE-2024-36911 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-36912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-36913 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-36914 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36922 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36940 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-36941 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36942 ( SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2024-36944 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36946 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2024-36947 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2024-36949 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36951 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36955 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-36959 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-36974 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-38558 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2024-38586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-38598 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-38604 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-38659 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H * CVE-2024-39276 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39468 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39472 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L * CVE-2024-39472 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39473 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39474 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39475 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39479 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-39479 (NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-39481 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39481 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39482 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L * CVE-2024-39482 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39487 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2024-39490 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-39494 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-39494 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-39496 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-39496 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-39498 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39502 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-39504 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39507 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40901 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L * CVE-2024-40906 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40908 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40919 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40923 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40925 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40928 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-40931 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2024-40935 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40937 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40947( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40948 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40953 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40960 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40961 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40966 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40970 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40972 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40975 ( SUSE ): 2.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-40979 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40998 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40999 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2024-41006 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2024-41011 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41013 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2024-41014 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-41017 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-41090 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2024-41091 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP6 * Development Tools Module 15-SP6 * Legacy Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Workstation Extension 15 SP6 An update that solves 118 vulnerabilities, contains four features and has31 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600). * CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138). * CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489). * CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088). * CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942). * CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057). * CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647). * CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656). * CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659). * CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654). * CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326). * CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328). * CVE-2024-26691: KVM: arm64: Fix circular locking dependency (bsc#1222463). * CVE-2024-26734: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438). * CVE-2024-26785: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (bsc#1222779). * CVE-2024-26826: mptcp: fix data re-injection from stale subflow (bsc#1223010). * CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021). * CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731). * CVE-2024-27012: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804). * CVE-2024-27015: netfilter:flowtable: incorrect pppoe tuple (bsc#1223806). * CVE-2024-27016: netfilter: flowtable: validate pppoe header (bsc#1223807). * CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813) * CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815) * CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778) * CVE-2024-27064: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (bsc#1223740). * CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836). * CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414). * CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422) * CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743). * CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604). * CVE-2024-35854: Fixed possible use-after-free during rehash (bsc#1224636). * CVE-2024-35890: gro: fix ownership transfer (bsc#1224516). * CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512) * CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499) * CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490) * CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641) * CVE-2024-35942: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (bsc#1224589). * CVE-2024-36003: ice: fix LAG and VF lock dependency in ice_reset_vf() (bsc#1224544). * CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545) * CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711) * CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719). * CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted (bsc#1225744). * CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717). * CVE-2024-36911: hv_netvsc: Do not free decrypted memory (bsc#1225745). * CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (bsc#1225752). * CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (bsc#1225753). * CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757). * CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851). * CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519). * CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783). * CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets (bsc#1226750). * CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757). * CVE-2024-38604: block: refine the EOF check in blkdev_iomap_begin (bsc#1226866). * CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883). * CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993). * CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103. * CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432). * CVE-2024-39474: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (bsc#1227434). * CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (bsc#1227447). * CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573) * CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626). * CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). * CVE-2024-39496: btrfs: zoned: fix use-after-free due to race withdev replace (bsc#1227719). * CVE-2024-39498: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (bsc#1227723) * CVE-2024-39502: ionic: fix use after netif_napi_del() (bsc#1227755). * CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757). * CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730). * CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non- allocated memory (bsc#1227762). * CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (bsc#1227763). * CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783). * CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779). * CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786). * CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789). * CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788). * CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780). * CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797). * CVE-2024-40937: gve: Clear napi-> skb before dev_kfree_skb_any() (bsc#1227836). * CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800). * CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803). * CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). * CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806). * CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813). * CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814). * CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886). * CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899). * CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910). * CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926). * CVE-2024-40998: ext4: fix uninitialized ratelimit_state-> lock access in __ext4_fill_super() (bsc#1227866). * CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913). * CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862). * CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405). * CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). * CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403). * CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328). * CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327). The following non-security bugs were fixed: * ACPI: EC: Abort address space access upon error (stable-fixes). * ACPI: EC: Avoid returning AE_OK on errors in address space handler (stable- fixes). * ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (git-fixes). * ALSA: PCM: Allow resume only for suspended streams (stable-fixes). * ALSA: dmaengine: Synchronize dma channel after drop() (stable-fixes). * ALSA: dmaengine_pcm: terminate dmaengine before synchronize (stable-fixes). * ALSA: emux: improve patch ioctl data validation (stable-fixes). * ALSA: hda/conexant: Mute speakers at suspend / shutdown (bsc#1228269). * ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (bsc#1228269). * ALSA: hda/realtek: Enable Mute LED on HP 250 G7 (stable-fixes). * ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (stable-fixes). * ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (stable-fixes). * ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (stable-fixes). * ALSA: hda/realtek: add quirk for Clevo V5[46]0TU (stable-fixes). * ALSA: hda/realtek: cs35l41: Fixup remaining asus strix models (git-fixes). * ALSA: hda/realtek: fix mute/micmute LEDs do not work for EliteBook 645/665 G11 (stable-fixes). * ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (stable-fixes). * ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop (stable-fixes). * ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x Gen4 (git-fixes). * ALSA: pcm_dmaengine: Do not synchronize DMA channel when DMA is paused (git- fixes). * ALSA: seq: ump: Skip useless ports for static blocks (git-fixes). * ALSA: ump: Do not update FB name for static blocks (git-fixes). * ALSA: ump: Force 1 Group for MIDI1 FBs (git-fixes). * ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (stable-fixes). * ALSA: usb-audio: Fix microphone sound on HD webcam (stable-fixes). * ALSA: usb-audio: Move HD Webcam quirk to the right place (git-fixes). * ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (git- fixes). * ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES (stable-fixes). * ASoC: SOF: Intel: hda: fix null deref on system suspend entry (git-fixes). * ASoC: SOF: imx8m: Fix DSP control regmap retrieval (git-fixes). * ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (git-fixes). * ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (stable-fixes). * ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback (stable-fixes). * ASoC: TAS2781: Fix tasdev_load_calibrated_data() (git-fixes). * ASoC: amd: Adjust error handling in case of absent codec device (git-fixes). * ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA (stable-fixes). * ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2 (bsc#1228269). *ASoC: cs35l56: Accept values greater than 0 as IRQ numbers (git-fixes). * ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value (git-fixes). * ASoC: max98088: Check for clk_prepare_enable() error (git-fixes). * ASoC: qcom: Adjust issues in case of DT error in asoc_qcom_lpass_cpu_platform_probe() (git-fixes). * ASoC: rt711-sdw: add missing readable registers (stable-fixes). * ASoC: rt722-sdca-sdw: add debounce time for type detection (stable-fixes). * ASoC: rt722-sdca-sdw: add silence detection register as volatile (stable- fixes). * ASoC: sof: amd: fix for firmware reload failure in Vangogh platform (git- fixes). * ASoC: ti: davinci-mcasp: Set min period size using FIFO config (stable- fixes). * ASoC: ti: omap-hdmi: Fix too long driver name (stable-fixes). * ASoC: topology: Do not assign fields that are already set (stable-fixes). * ASoC: topology: Fix references to freed memory (stable-fixes). * ASoc: tas2781: Enable RCA-based playback without DSP firmware download (git- fixes). * Bluetooth: ISO: Check socket flag instead of hcon (git-fixes). * Bluetooth: Ignore too large handle values in BIG (git-fixes). * Bluetooth: btintel: Refactor btintel_set_ppag() (git-fixes). * Bluetooth: btnxpuart: Add handling for boot-signature timeout errors (git- fixes). * Bluetooth: btnxpuart: Enable Power Save feature on startup (stable-fixes). * Bluetooth: hci_bcm4377: Fix msgid release (git-fixes). * Bluetooth: hci_bcm4377: Use correct unit for timeouts (git-fixes). * Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (stable- fixes). * Bluetooth: hci_event: Fix setting of unicast qos interval (git-fixes). * Bluetooth: hci_event: Set QoS encryption from BIGInfo report (git-fixes). * Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (git-fixes). * Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional() (git-fixes). * Enable CONFIG_SCHED_CLUSTER=y on arm64 (jsc#PED-8701). *HID: Ignore battery for ELAN touchscreens 2F2C and 4116 (stable-fixes). * HID: wacom: Modify pen IDs (git-fixes). * Input: ads7846 - use spi_device_id table (stable-fixes). * Input: elan_i2c - do not leave interrupt disabled on suspend failure (git- fixes). * Input: elantech - fix touchpad state on resume for Lenovo N24 (stable- fixes). * Input: ff-core - prefer struct_size over open coded arithmetic (stable- fixes). * Input: i8042 - add Ayaneo Kun to i8042 quirk table (stable-fixes). * Input: qt1050 - handle CHIP_ID reading error (git-fixes). * Input: silead - Always support 10 fingers (stable-fixes). * Input: xpad - add support for ASUS ROG RAIKIRI PRO (stable-fixes). * KVM: SEV-ES: Delegate LBR virtualization to the processor (git-fixes). * KVM: SEV-ES: Disallow SEV-ES guests when X86_FEATURE_LBRV is absent (git- fixes). * KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (git- fixes). * KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (git- fixes). * NFS: Fix READ_PLUS when server does not support OP_READ_PLUS (git-fixes). * NFS: add barriers when testing for NFS_FSDATA_BLOCKED (git-fixes). * NFSD: Fix checksum mismatches in the duplicate reply cache (git-fixes). * NFSv4.1 enforce rootpath check in fs_location query (git-fixes). * NFSv4.x: by default serialize open/close operations (bsc#1223863 bsc#1227362). * NFSv4: Fixup smatch warning for ambiguous return (git-fixes). * PCI/ASPM: Update save_state when configuration changes (bsc#1226915) * PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (git-fixes). * PCI: Do not wait for disconnected devices when resuming (git-fixes). * PCI: Extend ACS configurability (bsc#1228090). * PCI: Fix resource double counting on remove & rescan (git-fixes). * PCI: Introduce cleanup helpers for device reference counts and locks (stable-fixes). * PCI: dw-rockchip: Fix initial PERST# GPIO value (git-fixes). * PCI: dwc: Fix index 0 incorrectly beinginterpreted as a free ATU slot (git- fixes). * PCI: endpoint: Clean up error handling in vpci_scan_bus() (git-fixes). * PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup() (git-fixes). * PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init() (git-fixes). * PCI: keystone: Do not enable BAR 0 for AM654x (git-fixes). * PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() (git-fixes). * PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode() (git-fixes). * PCI: qcom-ep: Disable resources unconditionally during PERST# assert (git- fixes). * PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup() (git-fixes). * PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (git-fixes). * PCI: tegra194: Set EP alignment restriction for inbound ATU (git-fixes). * PCI: vmd: Create domain symlink before pci_bus_add_devices() (bsc#1227363). * RDMA/mana_ib: Ignore optional access flags for MRs (git-fixes). * RDMA/restrack: Fix potential invalid address access (git-fixes) * Revert "drm/bridge: tc358767: Set default CLRSIPO count" (stable-fixes). * Revert "gfs2: fix glock shrinker ref issues" (git-fixes). * Revert "leds: led-core: Fix refcount leak in of_led_get()" (git-fixes). * Revert "usb: musb: da8xx: Set phy in OTG mode by default" (stable-fixes). * Revert "wifi: ath11k: call ath11k_mac_fils_discovery() without condition" (bsc#1227149). * Revert "wifi: ath12k: use ATH12K_PCI_IRQ_DP_OFFSET for DP IRQ" (bsc#1227149). * Revert "wifi: iwlwifi: bump FW API to 90 for BZ/SC devices" (bsc#1227149). * SUNRPC: Fix gss_free_in_token_pages() (git-fixes). * SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (git- fixes). * SUNRPC: avoid soft lockup when transmitting UDP to reachable server (bsc#1225272). * SUNRPC: return proper error from gss_wrap_req_priv (git-fixes). * USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k(stable-fixes). * USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (git-fixes). * USB: serial: mos7840: fix crash on resume (git-fixes). * USB: serial: option: add Fibocom FM350-GL (stable-fixes). * USB: serial: option: add Netprisma LCUK54 series modules (stable-fixes). * USB: serial: option: add Rolling RW350-GL variants (stable-fixes). * USB: serial: option: add Telit FN912 rmnet compositions (stable-fixes). * USB: serial: option: add Telit generic core-dump composition (stable-fixes). * USB: serial: option: add support for Foxconn T99W651 (stable-fixes). * Update config files (bsc#1227282). Update the CONFIG_LSM option to include the selinux LSM in the default set of LSMs. The selinux LSM will not get enabled because it is preceded by apparmor, which is the first exclusive LSM. Updating CONFIG_LSM resolves failures that result in the system not booting up when "security=selinux selinux=1" is passed to the kernel and SELinux policies are installed. * Update config files for mt76 stuff (bsc#1227149) * Update config files: adjust for Arm CONFIG_MT798X_WMAC (bsc#1227149) * Update config files: update for the realtek wifi driver updates (bsc#1227149) * X.509: Fix the parser of extended key usage for length (bsc#1218820). * arm64/io: Provide a WC friendly __iowriteXX_copy() (bsc#1226502) * arm64/io: add constant-argument check (bsc#1226502 git-fixes) * arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input (git- fixes) * arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc (git-fixes) * arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property (git-fixes) * arm64: dts: rockchip: Add mdio and ethernet-phy nodes to (git-fixes) * arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu (git- fixes) * arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s (git-fixes) * arm64: dts: rockchip: Add sdmmc related properties on (git-fixes) * arm64: dts: rockchip: Addsound-dai-cells for RK3368 (git-fixes) * arm64: dts: rockchip: Drop invalid mic-in-differential on (git-fixes) * arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s (git- fixes) * arm64: dts: rockchip: Fix mic-in-differential usage on (git-fixes) * arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc (git- fixes) * arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 (git- fixes) * arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch (git- fixes) * arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes) * arm64: dts: rockchip: Rename LED related pinctrl nodes on (git-fixes) * arm64: dts: rockchip: Update WIFi/BT related nodes on (git-fixes) * arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E (git-fixes) * ata: libata-scsi: Fix offsets for the fixed format sense data (git-fixes). * auxdisplay: ht16k33: Drop reference after LED registration (git-fixes). * block: Move checking GENHD_FL_NO_PART to bdev_add_partition() (bsc#1226213). * bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX (git- fixes). * bus: mhi: host: allow MHI client drivers to provide the firmware via a pointer (bsc#1227149). * bytcr_rt5640 : inverse jack detect for Archos 101 cesium (stable-fixes). * cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd (git- fixes). * can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (git-fixes). * can: kvaser_usb: fix return value for hif_usb_send_regout (stable-fixes). * cdrom: rearrange last_media_change check to avoid unintentional overflow (stable-fixes). * ceph: fix incorrect kmalloc size of pagevec mempool (bsc#1228417). * char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (git- fixes). * checkpatch: really skip LONG_LINE_* when LONG_LINE is ignored (git-fixes). * cifs: Add a laundromat thread for cached directories (git-fixes, bsc#1225172). * clk: davinci:da8xx-cfgchip: Initialize clk_init_data before use (git- fixes). * clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg (git-fixes). * clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs (git- fixes). * clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents (git-fixes). * config/arm64: Enable CoreSight PMU drivers (bsc#1228289 jsc#PED-7859) * cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (git-fixes). * cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe() (git-fixes). * crypto/ecdh: make ecdh_compute_value() to zeroize the public key (bsc#1222768). * crypto/ecdsa: make ecdsa_ecc_ctx_deinit() to zeroize the public key (bsc#1222768). * crypto: aead,cipher - zeroize key buffer after use (stable-fixes). * crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked (git-fixes). * crypto: ecdh - explicitly zeroize private_key (stable-fixes). * crypto: ecdsa - Fix the public key format description (git-fixes). * crypto: hisilicon/debugfs - Fix debugfs uninit process issue (stable-fixes). * crypto: qat - extend scope of lock in adf_cfg_add_key_value_param() (git- fixes). * decompress_bunzip2: fix rare decompression failure (git-fixes). * devres: Fix devm_krealloc() wasting memory (git-fixes). * devres: Fix memory leakage caused by driver API devm_free_percpu() (git- fixes). * dlm: fix user space lock decision to copy lvb (git-fixes). * dma: fix call order in dmam_free_coherent (git-fixes). * dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels (git- fixes). * docs: crypto: async-tx-api: fix broken code example (git-fixes). * drivers/xen: Improve the late XenStore init protocol (git-fixes). * drivers: soc: xilinx: check return status of get_api_version() (git-fixes). * drm/amd/amdgpu: Fix uninitialized variable warnings (git-fixes). * drm/amd/display: ASSERT when failing to find index by plane/stream id (stable-fixes). * drm/amd/display:Account for cursor prefetch BW in DML1 mode support (stable-fixes). * drm/amd/display: Add refresh rate range check (stable-fixes). * drm/amd/display: Check index msg_id before read or write (stable-fixes). * drm/amd/display: Check pipe offset before setting vblank (stable-fixes). * drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport (stable-fixes). * drm/amd/display: Fix overlapping copy within dml_core_mode_programming (stable-fixes). * drm/amd/display: Fix refresh rate range for some panel (stable-fixes). * drm/amd/display: Fix uninitialized variables in DM (stable-fixes). * drm/amd/display: Move 'struct scaler_data' off stack (git-fixes). * drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present (stable-fixes). * drm/amd/display: Skip finding free audio for unknown engine_id (stable- fixes). * drm/amd/display: Skip pipe if the pipe idx not set properly (stable-fixes). * drm/amd/display: Update efficiency bandwidth for dcn351 (stable-fixes). * drm/amd/display: Workaround register access in idle race with cursor (stable-fixes). * drm/amd/display: change dram_clock_latency to 34us for dcn35 (stable-fixes). * drm/amd/pm: Fix aldebaran pcie speed reporting (git-fixes). * drm/amd/pm: remove logically dead code for renoir (git-fixes). * drm/amdgpu/atomfirmware: fix parsing of vram_info (stable-fixes). * drm/amdgpu/atomfirmware: silence UBSAN warning (stable-fixes). * drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (git- fixes). * drm/amdgpu: Fix memory range calculation (git-fixes). * drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (git-fixes). * drm/amdgpu: Fix uninitialized variable warnings (stable-fixes). * drm/amdgpu: Indicate CU havest info to CP (stable-fixes). * drm/amdgpu: Initialize timestamp for some legacy SOCs (stable-fixes). * drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1 (git-fixes). * drm/amdgpu: Using uninitialized value *size when callingamdgpu_vce_cs_reloc (stable-fixes). * drm/amdgpu: avoid using null object of framebuffer (stable-fixes). * drm/amdgpu: fix locking scope when flushing tlb (stable-fixes). * drm/amdgpu: fix the warning about the expression (int)size - len (stable- fixes). * drm/amdgpu: fix uninitialized scalar variable warning (stable-fixes). * drm/amdgpu: silence UBSAN warning (stable-fixes). * drm/amdkfd: Fix CU Masking for GFX 9.4.3 (git-fixes). * drm/amdkfd: Let VRAM allocations go to GTT domain on small APUs (stable- fixes). * drm/arm/komeda: Fix komeda probe failing if there are no links in the secondary pipeline (git-fixes). * drm/bridge: it6505: fix hibernate to resume no display issue (git-fixes). * drm/bridge: samsung-dsim: Set P divider based on min/max of fin pll (git- fixes). * drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (git- fixes). * drm/etnaviv: fix DMA direction handling for cached RW buffers (git-fixes). * drm/exynos: dp: drop driver owner initialization (stable-fixes). * drm/fbdev-dma: Fix framebuffer mode for big endian devices (git-fixes). * drm/fbdev-generic: Fix framebuffer on big endian devices (git-fixes). * drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (git- fixes). * drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (git- fixes). * drm/i915/dp: Do not switch the LTTPR mode on an active link (git-fixes). * drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (git-fixes). * drm/lima: Mark simple_ondemand governor as softdep (git-fixes). * drm/lima: fix shared irq handling on driver remove (stable-fixes). * drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property (git-fixes). * drm/mediatek: Add OVL compatible name for MT8195 (git-fixes). * drm/mediatek: Add missing plane settings when async update (git-fixes). * drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time (stable- fixes). * drm/mediatek: Fix XRGB settingerror in Mixer (git-fixes). * drm/mediatek: Fix XRGB setting error in OVL (git-fixes). * drm/mediatek: Fix bit depth overwritten for mtk_ovl_set bit_depth() (git- fixes). * drm/mediatek: Fix destination alpha error in OVL (git-fixes). * drm/mediatek: Remove less-than-zero comparison of an unsigned value (git- fixes). * drm/mediatek: Set DRM mode configs accordingly (git-fixes). * drm/mediatek: Support DRM plane alpha in Mixer (git-fixes). * drm/mediatek: Support DRM plane alpha in OVL (git-fixes). * drm/mediatek: Support RGBA8888 and RGBX8888 in OVL on MT8195 (git-fixes). * drm/mediatek: Turn off the layers with zero width or height (git-fixes). * drm/mediatek: Use 8-bit alpha in ETHDR (git-fixes). * drm/meson: fix canvas release in bind function (git-fixes). * drm/mgag200: Bind I2C lifetime to DRM device (git-fixes). * drm/mgag200: Set DDC timeout in milliseconds (git-fixes). * drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq() (git- fixes). * drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq() (git-fixes). * drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op (git- fixes). * drm/msm/dpu: fix encoder irq wait skip (git-fixes). * drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC (git-fixes). * drm/msm/mdp5: Remove MDP_CAP_SRC_SPLIT from msm8x53_config (git-fixes). * drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (stable-fixes). * drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (stable-fixes). * drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (git-fixes). * drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (git- fixes). * drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (git-fixes). * drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on() better (git-fixes). * drm/panel: ilitek-ili9881c: Fix warning with GPIOcontrollers that sleep (stable-fixes). * drm/panel: ilitek-ili9882t: Check for errors on the NOP in prepare() (git- fixes). * drm/panel: ilitek-ili9882t: If prepare fails, disable GPIO before regulators (git-fixes). * drm/panfrost: Mark simple_ondemand governor as softdep (git-fixes). * drm/qxl: Add check for drm_cvt_mode (git-fixes). * drm/radeon/radeon_display: Decrease the size of allocated memory (stable- fixes). * drm/radeon: check bo_va-> bo is non-NULL before using it (stable-fixes). * drm/rockchip: vop2: Fix the port mux of VP2 (git-fixes). * drm/ttm: Always take the bo delayed cleanup path for imported bos (git- fixes). * drm/udl: Remove DRM_CONNECTOR_POLL_HPD (git-fixes). * drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (stable-fixes). * drm: panel-orientation-quirks: Add quirk for Aya Neo KUN (stable-fixes). * drm: panel-orientation-quirks: Add quirk for Valve Galileo (stable-fixes). * drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe() (git- fixes). * drm: zynqmp_kms: Fix AUX bus not getting unregistered (git-fixes). * eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (stable-fixes). * eeprom: digsy_mtc: Fix 93xx46 driver probe failure (git-fixes). * erofs: ensure m_llen is reset to 0 if metadata is invalid (git-fixes). * exfat: fix potential deadlock on __exfat_get_dentry_set (git-fixes). * f2fs: fix error path of __f2fs_build_free_nids (git-fixes). * filelock: fix potential use-after-free in posix_lock_inode (git-fixes). * firmware: cs_dsp: Fix overflow checking of wmfw header (git-fixes). * firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (git-fixes). * firmware: cs_dsp: Return error if block header overflows file (git-fixes). * firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (git-fixes). * firmware: cs_dsp: Validate payload length before processing block (git- fixes). * firmware: dmi: Stop decoding on broken entry (stable-fixes). * firmware:turris-mox-rwtm: Do not complete if there are no waiters (git- fixes). * firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (git-fixes). * firmware: turris-mox-rwtm: Initialize completion before mailbox (git-fixes). * fs/file: fix the check in find_next_fd() (git-fixes). * fs/pipe: Fix lockdep false-positive in watchqueue pipe_write() (git-fixes). * fuse: verify {g,u}id mount options correctly (bsc#1228193). * gfs2: Do not forget to complete delayed withdraw (git-fixes). * gfs2: Fix "ignore unlock failures after withdraw" (git-fixes). * gfs2: Fix invalid metadata access in punch_hole (git-fixes). * gfs2: Get rid of gfs2_alloc_blocks generation parameter (git-fixes). * gfs2: Rename gfs2_lookup_{ simple => meta } (git-fixes). * gfs2: Use mapping-> gfp_mask for metadata inodes (git-fixes). * gfs2: convert to ctime accessor functions (git-fixes). * gpio: mc33880: Convert comma to semicolon (git-fixes). * gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (stable-fixes). * hfsplus: fix to avoid false alarm of circular locking (git-fixes). * hfsplus: fix uninit-value in copy_name (git-fixes). * hpet: Support 32-bit userspace (git-fixes). * hwmon: (adt7475) Fix default duty on fan is disabled (git-fixes). * hwmon: (max6697) Fix swapped temp{1,8} critical alarms (git-fixes). * hwmon: (max6697) Fix underflow when writing limit attributes (git-fixes). * hwrng: amd - Convert PCIBIOS_* return codes to errnos (git-fixes). * hwrng: core - Fix wrong quality calculation at hw rng registration (git- fixes). * i2c: i801: Annotate apanel_addr as __ro_after_init (stable-fixes). * i2c: mark HostNotify target address as used (git-fixes). * i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (git-fixes). * i2c: rcar: bring hardware to known state when probing (git-fixes). * i2c: testunit: avoid re-issued work after read message (git-fixes). * i2c: testunit: correct Kconfig description (git-fixes). *i40e: fix: remove needless retries of NVM update (bsc#1227736). * iio: Fix the sorting functionality in iio_gts_build_avail_time_table (git- fixes). * iio: frequency: adrf6780: rm clk provider include (git-fixes). * iio: pressure: bmp280: Fix BMP580 temperature reading (stable-fixes). * iio: pressure: fix some word spelling errors (stable-fixes). * input: Add event code for accessibility key (stable-fixes). * input: Add support for "Do Not Disturb" (stable-fixes). * interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID (git-fixes). * iommu/amd: Fix panic accessing amd_iommu_enable_faulting (bsc#1224767). * iommu/arm-smmu-v3: Free MSIs in case of ENOMEM (git-fixes). * iommu/vt-d: Allocate DMAR fault interrupts locally (bsc#1224767). * iommu/vt-d: Improve ITE fault handling if target device isn't present (git- fixes). * iommu: Fix compilation without CONFIG_IOMMU_INTEL (git-fixes). * ipmi: ssif_bmc: prevent integer overflow on 32bit systems (git-fixes). * iwlwifi: fw: fix more kernel-doc warnings (bsc#1227149). * iwlwifi: mvm: Drop unused fw_trips_index[] from iwl_mvm_thermal_device (bsc#1227149). * iwlwifi: mvm: Populate trip table before registering thermal zone (bsc#1227149). * iwlwifi: mvm: Use for_each_thermal_trip() for walking trip points (bsc#1227149). * jffs2: Fix potential illegal address access in jffs2_free_inode (git-fixes). * jfs: Fix array-index-out-of-bounds in diFree (git-fixes). * jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383). * kABI workaround for wireless updates (bsc#1227149). * kabi/severities: cleanup and update for WiFi driver entries (bsc#1227149) * kabi/severities: cover all ath/ _drivers (bsc#1227149) All symbols in ath/_ network drivers are local and can be ignored * kabi/severities: cover all mt76 modules (bsc#1227149) * kabi/severities: ignore amd pds internal symbols * kabi/severities: ignore kABI changes Realtek WiFi drivers (bsc#1227149) All those symbols are local and used forits own helpers * kabi: Use __iowriteXX_copy_inlined for in-kernel modules (bsc#1226502) * kbuild: avoid build error when single DTB is turned into composite DTB (git- fixes). * kconfig: gconf: give a proper initial state to the Save button (stable- fixes). * kconfig: remove wrong expr_trans_bool() (stable-fixes). * kernel-binary: vdso: Own module_dir * knfsd: LOOKUP can return an illegal error value (git-fixes). * kobject_uevent: Fix OOB access within zap_modalias_env() (git-fixes). * kprobe/ftrace: bail out if ftrace was killed (git-fixes). * kprobe/ftrace: fix build error due to bad function definition (git-fixes). * kunit: Fix checksum tests on big endian CPUs (git-fixed). * leds: flash: leds-qcom-flash: Test the correct variable in init (git-fixes). * leds: mt6360: Fix memory leak in mt6360_init_isnk_properties() (git-fixes). * leds: ss4200: Convert PCIBIOS_* return codes to errnos (git-fixes). * leds: trigger: Unregister sysfs attributes before calling deactivate() (git- fixes). * leds: triggers: Flush pending brightness before activating trigger (git- fixes). * lib: objagg: Fix general protection fault (git-fixes). * lib: objagg: Fix spelling (git-fixes). * lib: test_objagg: Fix spelling (git-fixes). * libceph: fix race between delayed_work() and ceph_monc_stop() (bsc#1228192). * mISDN: Fix a use after free in hfcmulti_tx() (git-fixes). * mISDN: fix MISDN_TIME_STAMP handling (git-fixes). * mac802154: fix time calculation in ieee802154_configure_durations() (git- fixes). * mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (git-fixes). * media: dvb-frontends: tda10048: Fix integer overflow (stable-fixes). * media: dvb-frontends: tda18271c2dd: Remove casting during div (stable- fixes). * media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (git-fixes). * media: dvb-usb: dib0700_devices: Add missing release_firmware() (stable- fixes). * media: dvb: as102-fe:Fix as10x_register_addr packing (stable-fixes). * media: dvbdev: Initialize sbuf (stable-fixes). * media: dw2102: Do not translate i2c read into write (stable-fixes). * media: dw2102: fix a potential buffer overflow (git-fixes). * media: i2c: Fix imx412 exposure control (git-fixes). * media: imon: Fix race getting ictx-> lock (git-fixes). * media: imx-jpeg: Drop initial source change event if capture has been setup (git-fixes). * media: imx-jpeg: Remove some redundant error logs (git-fixes). * media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() (git-fixes). * media: pci: ivtv: Add check for DMA map result (git-fixes). * media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2 (git-fixes). * media: renesas: vsp1: Fix _irqsave and _irq mix (git-fixes). * media: renesas: vsp1: Store RPF partition configuration per RPF instance (git-fixes). * media: s2255: Use refcount_t instead of atomic_t for num_channels (stable- fixes). * media: uvcvideo: Fix integer overflow calculating timestamp (git-fixes). * media: uvcvideo: Override default flags (git-fixes). * media: v4l: async: Fix NULL pointer dereference in adding ancillary links (git-fixes). * media: v4l: subdev: Fix typo in documentation (git-fixes). * media: venus: fix use after free in vdec_close (git-fixes). * media: venus: flush all buffers in output plane streamoff (git-fixes). * mei: demote client disconnect warning on suspend to debug (stable-fixes). * mfd: omap-usb-tll: Use struct_size to allocate tll (git-fixes). * mfd: pm8008: Fix regmap irq chip initialisation (git-fixes). * misc: fastrpc: Avoid updating PD type for capability request (git-fixes). * misc: fastrpc: Copy the complete capability structure to user (git-fixes). * misc: fastrpc: Fix DSP capabilities request (git-fixes). * misc: fastrpc: Fix memory leak in audio daemon attach operation (git-fixes). * misc: fastrpc: Fix ownership reassignment of remote heap (git-fixes). * misc: fastrpc: Restrict untrusted app to attach toprivileged PD (git- fixes). * mt76: connac: move more mt7921/mt7915 mac shared code in connac lib (bsc#1227149). * mt76: mt7996: rely on mt76_sta_stats in mt76_wcid (bsc#1227149). * mtd: partitions: redboot: Added conversion of operands to a larger type (stable-fixes). * net/dcb: check for detached device before executing callbacks (bsc#1215587). * net: ethernet: mtk_wed: introduce mtk_wed_buf structure (bsc#1227149). * net: ethernet: mtk_wed: rename mtk_rxbm_desc in mtk_wed_bm_desc (bsc#1227149). * net: fill in MODULE_DESCRIPTION()s in kuba@'s modules (bsc#1227149). * net: hns3: Remove io_stop_wc() calls after __iowrite64_copy() (bsc#1226502) * net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (stable-fixes). * net: mana: Fix possible double free in error handling path (git-fixes). * net: mana: Fix the extra HZ in mana_hwc_send_request (git-fixes). * net: phy: microchip: lan87xx: reinit PHY after cable test (git-fixes). * net: phy: phy_device: Fix PHY LED blinking code comment (git-fixes). * net: usb: qmi_wwan: add Telit FN912 compositions (stable-fixes). * nfc/nci: Add the inconsistency check between the input data length and count (stable-fixes). * nfs: Block on write congestion (bsc#1218442). * nfs: Drop pointless check from nfs_commit_release_pages() (bsc#1218442). * nfs: Fix up kabi after adding write_congestion_wait (bsc#1218442). * nfs: Handle error of rpc_proc_register() in nfs_net_init() (git-fixes). * nfs: Properly initialize server-> writeback (bsc#1218442). * nfs: drop the incorrect assertion in nfs_swap_rw() (git-fixes). * nfs: fix undefined behavior in nfs_block_bits() (git-fixes). * nfs: keep server info for remounts (git-fixes). * nfsd: hold a lighter-weight client reference over CB_RECALL_ANY (git-fixes). * nilfs2: add missing check for inode numbers on directory entries (stable- fixes). * nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (git-fixes). * nilfs2: convertpersistent object allocator to use kmap_local (git-fixes). * nilfs2: fix incorrect inode allocation from reserved inodes (git-fixes). * nilfs2: fix inode number range checks (stable-fixes). * ocfs2: fix DIO failure due to insufficient transaction credits (git-fixes). * ocfs2: fix races between hole punching and AIO+DIO (git-fixes). * ocfs2: use coarse time for new created files (git-fixes). * orangefs: fix out-of-bounds fsid access (git-fixes). * pNFS/filelayout: fixup pNfs allocation modes (git-fixes). * phy: cadence-torrent: Check return value on register read (git-fixes). * pinctrl: core: fix possible memory leak when pinctrl_enable() fails (git- fixes). * pinctrl: freescale: mxs: Fix refcount of child (git-fixes). * pinctrl: renesas: r8a779g0: FIX PWM suffixes (git-fixes). * pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes (git-fixes). * pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes (git-fixes). * pinctrl: renesas: r8a779g0: Fix CANFD5 suffix (git-fixes). * pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes (git-fixes). * pinctrl: renesas: r8a779g0: Fix IRQ suffixes (git-fixes). * pinctrl: renesas: r8a779g0: Fix TCLK suffixes (git-fixes). * pinctrl: renesas: r8a779g0: Fix TPU suffixes (git-fixes). * pinctrl: rockchip: update rk3308 iomux routes (git-fixes). * pinctrl: single: fix possible memory leak when pinctrl_enable() fails (git- fixes). * pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (git-fixes). * platform/chrome: cros_ec_debugfs: fix wrong EC message version (git-fixes). * platform/x86: lg-laptop: Change ACPI device id (stable-fixes). * platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (stable-fixes). * platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB (stable-fixes). * platform/x86: toshiba_acpi: Fix array out-of-bounds access (git-fixes). * platform/x86: toshiba_acpi: Fix quickstart quirk handling (git-fixes). * platform/x86: touchscreen_dmi: Add info forGlobalSpace SolT IVW 11.6" tablet (stable-fixes). * platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro (stable-fixes). * platform/x86: wireless-hotkey: Add support for LG Airplane Button (stable- fixes). * power: supply: ab8500: Fix error handling when calling iio_read_channel_processed() (git-fixes). * power: supply: ingenic: Fix some error handling paths in ingenic_battery_get_property() (git-fixes). * powerpc/64s/radix/kfence: map __kfence_pool at page granularity (bsc#1223570 ltc#205770). * powerpc/prom: Add CPU info to hardware description string later (bsc#1215199). * powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869). * powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487). * pwm: stm32: Always do lazy disabling (git-fixes). * regmap-i2c: Subtract reg size from max_write (stable-fixes). * remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init (git- fixes). * remoteproc: imx_rproc: Skip over memory region when node value is NULL (git- fixes). * remoteproc: k3-r5: Fix IPC-only mode detection (git-fixes). * remoteproc: stm32_rproc: Fix mailbox interrupts queuing (git-fixes). * rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL (git-fixes). * rtc: abx80x: Fix return value of nvmem callback on read (git-fixes). * rtc: cmos: Fix return value of nvmem callbacks (git-fixes). * rtc: interface: Add RTC offset to alarm after fix-up (git-fixes). * rtc: isl1208: Fix return value of nvmem callbacks (git-fixes). * s390: Implement __iowrite32_copy() (bsc#1226502) * s390: Stop using weak symbols for __iowrite64_copy() (bsc#1226502) * saa7134: Unchecked i2c_transfer function result fixed (git-fixes). * selftests/sigaltstack: Fix ppc64 GCC build (git-fixes). * selftests: fix OOM in msg_zerocopy selftest (git-fixes). * selftests: make order checking verbose in msg_zerocopy selftest (git-fixes). * serial: imx: Raise TX trigger level to 8 (stable-fixes). * smb3: allowcontrolling length of time directory entries are cached with dir leases (git-fixes, bsc#1225172). * smb3: allow controlling maximum number of cached directories (git-fixes, bsc#1225172). * smb3: do not start laundromat thread when dir leases disabled (git-fixes, bsc#1225172). * smb: client: do not start laundromat thread on nohandlecache (git-fixes, bsc#1225172). * smb: client: make laundromat a delayed worker (git-fixes, bsc#1225172). * smb: client: prevent new fids from being removed by laundromat (git-fixes, bsc#1225172). * soc: qcom: pdr: fix parsing of domains lists (git-fixes). * soc: qcom: pdr: protect locator_addr with the main mutex (git-fixes). * soc: qcom: pmic_glink: Handle the return value of pmic_glink_init (git- fixes). * soc: qcom: rpmh-rsc: Ensure irqs are not disabled by rpmh_rsc_send_data() callers (git-fixes). * soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (stable-fixes). * soc: xilinx: rename cpu_number1 to dummy_cpu_number (git-fixes). * spi: atmel-quadspi: Add missing check for clk_prepare (git-fixes). * spi: cadence: Ensure data lines set to low during dummy-cycle period (stable-fixes). * spi: imx: Do not expect DMA for i.MX{25,35,50,51,53} cspi devices (stable- fixes). * spi: microchip-core: defer asserting chip select until just before write to TX FIFO (git-fixes). * spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer (git-fixes). * spi: microchip-core: fix the issues in the isr (git-fixes). * spi: microchip-core: only disable SPI controller when register value change requires it (git-fixes). * spi: mux: set ctlr-> bits_per_word_mask (stable-fixes). * spi: spi-microchip-core: Fix the number of chip selects supported (git- fixes). * spi: spidev: add correct compatible for Rohm BH2228FV (git-fixes). * sunrpc: fix NFSACL RPC retry on soft mount (git-fixes). * supported.conf: Add support for v4l2-dv-timings (jsc#PED-8644) *supported.conf: mark vdpa modules supported (jsc#PED-8954) * supported.conf: update for mt76 stuff (bsc#1227149) * thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data (stable- fixes). * tools/memory-model: Fix bug in lock.cat (git-fixes). * tools/power turbostat: Remember global max_die_id (stable-fixes). * tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs (stable-fixes). * tracefs: Add missing lockdown check to tracefs_create_dir() (git-fixes). * tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() (git-fixes). * tracing: Build event generation tests only as modules (git-fixes). * usb: dwc3: core: Add DWC31 version 2.00a controller (stable-fixes). * usb: dwc3: core: Workaround for CSR read timeout (stable-fixes). * usb: dwc3: pci: add support for the Intel Panther Lake (stable-fixes). * usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (stable- fixes). * usb: gadget: printer: SS+ support (stable-fixes). * usb: typec: ucsi: Ack also failed Get Error commands (git-fixes). * usb: typec: ucsi: Never send a lone connector change ack (stable-fixes). * usb: ucsi: stm32: fix command completion handling (git-fixes). * usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (stable-fixes). * vmlinux.lds.h: catch .bss..L* sections into BSS") (git-fixes). * watchdog: rzg2l_wdt: Check return status of pm_runtime_put() (git-fixes). * watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get() (git-fixes). * watchdog: rzn1: Convert comma to semicolon (git-fixes). * wifi: add HAS_IOPORT dependencies (bsc#1227149). * wifi: ar5523: Remove unnecessary (void*) conversions (bsc#1227149). * wifi: ath10/11/12k: Use alloc_ordered_workqueue() to create ordered workqueues (bsc#1227149). * wifi: ath10k: Annotate struct ath10k_ce_ring with __counted_by (bsc#1227149). * wifi: ath10k: Convert to platform remove callback returning void (bsc#1227149). *wifi: ath10k: Drop checks that are always false (bsc#1227149). * wifi: ath10k: Drop cleaning of driver data from probe error path and remove (bsc#1227149). * wifi: ath10k: Fix a few spelling errors (bsc#1227149). * wifi: ath10k: Fix enum ath10k_fw_crash_dump_type kernel-doc (bsc#1227149). * wifi: ath10k: Fix htt_data_tx_completion kernel-doc warning (bsc#1227149). * wifi: ath10k: Remove unnecessary (void*) conversions (bsc#1227149). * wifi: ath10k: Remove unused struct ath10k_htc_frame (bsc#1227149). * wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights (bsc#1227149). * wifi: ath10k: Use DECLARE_FLEX_ARRAY() for ath10k_htc_record (bsc#1227149). * wifi: ath10k: Use list_count_nodes() (bsc#1227149). * wifi: ath10k: add missing wmi_10_4_feature_mask documentation (bsc#1227149). * wifi: ath10k: add support to allow broadcast action frame RX (bsc#1227149). * wifi: ath10k: consistently use kstrtoX_from_user() functions (bsc#1227149). * wifi: ath10k: correctly document enum wmi_tlv_tx_pause_id (bsc#1227149). * wifi: ath10k: drop HTT_DATA_TX_STATUS_DOWNLOAD_FAIL (bsc#1227149). * wifi: ath10k: fix Wvoid-pointer-to-enum-cast warning (bsc#1227149). * wifi: ath10k: fix htt_q_state_conf & htt_q_state kernel-doc (bsc#1227149). * wifi: ath10k: improve structure padding (bsc#1227149). * wifi: ath10k: indicate to mac80211 scan complete with aborted flag for ATH10K_SCAN_STARTING state (bsc#1227149). * wifi: ath10k: remove ath10k_htc_record::pauload[] (bsc#1227149). * wifi: ath10k: remove duplicate memset() in 10.4 TDLS peer update (bsc#1227149). * wifi: ath10k: remove struct wmi_pdev_chanlist_update_event (bsc#1227149). * wifi: ath10k: remove unused template structs (bsc#1227149). * wifi: ath10k: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149). * wifi: ath10k: replace deprecated strncpy with memcpy (bsc#1227149). * wifi: ath10k: simplify __ath10k_htt_tx_txq_recalc() (bsc#1227149). * wifi: ath10k: simplify ath10k_peer_create() (bsc#1227149). * wifi:ath10k: use flexible array in struct wmi_host_mem_chunks (bsc#1227149). * wifi: ath10k: use flexible array in struct wmi_tdls_peer_capabilities (bsc#1227149). * wifi: ath10k: use flexible arrays for WMI start scan TLVs (bsc#1227149). * wifi: ath11k: Add HTT stats for PHY reset case (bsc#1227149). * wifi: ath11k: Add coldboot calibration support for QCN9074 (bsc#1227149). * wifi: ath11k: Allow ath11k to boot without caldata in ftm mode (bsc#1227149). * wifi: ath11k: Consistently use ath11k_vif_to_arvif() (bsc#1227149). * wifi: ath11k: Consolidate WMI peer flags (bsc#1227149). * wifi: ath11k: Convert to platform remove callback returning void (bsc#1227149). * wifi: ath11k: Do not directly use scan_flags in struct scan_req_params (bsc#1227149). * wifi: ath11k: EMA beacon support (bsc#1227149). * wifi: ath11k: Fix a few spelling errors (bsc#1227149). * wifi: ath11k: Fix ath11k_htc_record flexible record (bsc#1227149). * wifi: ath11k: Introduce and use ath11k_sta_to_arsta() (bsc#1227149). * wifi: ath11k: MBSSID beacon support (bsc#1227149). * wifi: ath11k: MBSSID configuration during vdev create/start (bsc#1227149). * wifi: ath11k: MBSSID parameter configuration in AP mode (bsc#1227149). * wifi: ath11k: Really consistently use ath11k_vif_to_arvif() (bsc#1227149). * wifi: ath11k: Relocate the func ath11k_mac_bitrate_mask_num_ht_rates() and change hweight16 to hweight8 (bsc#1227149). * wifi: ath11k: Remove ath11k_base::bd_api (bsc#1227149). * wifi: ath11k: Remove cal_done check during probe (bsc#1227149). * wifi: ath11k: Remove obsolete struct wmi_peer_flags_map *peer_flags (bsc#1227149). * wifi: ath11k: Remove scan_flags union from struct scan_req_params (bsc#1227149). * wifi: ath11k: Remove struct ath11k::ops (bsc#1227149). * wifi: ath11k: Remove unneeded semicolon (bsc#1227149). * wifi: ath11k: Remove unused declarations (bsc#1227149). * wifi: ath11k: Remove unused struct ath11k_htc_frame (bsc#1227149). * wifi: ath11k: Send HTfixed rate in WMI peer fixed param (bsc#1227149). * wifi: ath11k: Split coldboot calibration hw_param (bsc#1227149). * wifi: ath11k: Update Qualcomm Innovation Center, Inc. copyrights (bsc#1227149). * wifi: ath11k: Use device_get_match_data() (bsc#1227149). * wifi: ath11k: Use list_count_nodes() (bsc#1227149). * wifi: ath11k: add WMI event debug messages (bsc#1227149). * wifi: ath11k: add WMI_TLV_SERVICE_EXT_TPC_REG_SUPPORT service bit (bsc#1227149). * wifi: ath11k: add chip id board name while searching board-2.bin for WCN6855 (bsc#1227149). * wifi: ath11k: add firmware-2.bin support (bsc#1227149). * wifi: ath11k: add handler for WMI_VDEV_SET_TPC_POWER_CMDID (bsc#1227149). * wifi: ath11k: add parse of transmit power envelope element (bsc#1227149). * wifi: ath11k: add parsing of phy bitmap for reg rules (bsc#1227149). * wifi: ath11k: add support for QCA2066 (bsc#1227149). * wifi: ath11k: add support to select 6 GHz regulatory type (bsc#1227149). * wifi: ath11k: ath11k_debugfs_register(): fix format-truncation warning (bsc#1227149). * wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay() (bsc#1227149). * wifi: ath11k: call ath11k_mac_fils_discovery() without condition (bsc#1227149). * wifi: ath11k: constify MHI channel and controller configs (bsc#1227149). * wifi: ath11k: debug: add ATH11K_DBG_CE (bsc#1227149). * wifi: ath11k: debug: remove unused ATH11K_DBG_ANY (bsc#1227149). * wifi: ath11k: debug: use all upper case in ATH11k_DBG_HAL (bsc#1227149). * wifi: ath11k: do not use %pK (bsc#1227149). * wifi: ath11k: document HAL_RX_BUF_RBM_SW4_BM (bsc#1227149). * wifi: ath11k: dp: cleanup debug message (bsc#1227149). * wifi: ath11k: driver settings for MBSSID and EMA (bsc#1227149). * wifi: ath11k: drop NULL pointer check in ath11k_update_per_peer_tx_stats() (bsc#1227149). * wifi: ath11k: drop redundant check in ath11k_dp_rx_mon_dest_process() (bsc#1227149). * wifi: ath11k: enable 36 bit mask for stream DMA(bsc#1227149). * wifi: ath11k: factory test mode support (bsc#1227149). * wifi: ath11k: fill parameters for vdev set tpc power WMI command (bsc#1227149). * wifi: ath11k: fix CAC running state during virtual interface start (bsc#1227149). * wifi: ath11k: fix IOMMU errors on buffer rings (bsc#1227149). * wifi: ath11k: fix RCU documentation in ath11k_mac_op_ipv6_changed() (git- fixes). * wifi: ath11k: fix WCN6750 firmware crash caused by 17 num_vdevs (bsc#1227149). * wifi: ath11k: fix Wvoid-pointer-to-enum-cast warning (bsc#1227149). * wifi: ath11k: fix a possible dead lock caused by ab-> base_lock (bsc#1227149). * wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage (bsc#1227149). * wifi: ath11k: fix connection failure due to unexpected peer delete (bsc#1227149). * wifi: ath11k: fix tid bitmap is 0 in peer rx mu stats (bsc#1227149). * wifi: ath11k: fix wrong definition of CE ring's base address (git-fixes). * wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (git-fixes). * wifi: ath11k: hal: cleanup debug message (bsc#1227149). * wifi: ath11k: htc: cleanup debug messages (bsc#1227149). * wifi: ath11k: initialize eirp_power before use (bsc#1227149). * wifi: ath11k: mac: fix struct ieee80211_sband_iftype_data handling (bsc#1227149). * wifi: ath11k: mhi: add a warning message for MHI_CB_EE_RDDM crash (bsc#1227149). * wifi: ath11k: move pci.ops registration ahead (bsc#1227149). * wifi: ath11k: move power type check to ASSOC stage when connecting to 6 GHz AP (bsc#1227149). * wifi: ath11k: move references from rsvd2 to info fields (bsc#1227149). * wifi: ath11k: pci: cleanup debug logging (bsc#1227149). * wifi: ath11k: print debug level in debug messages (bsc#1227149). * wifi: ath11k: provide address list if chip supports 2 stations (bsc#1227149). * wifi: ath11k: qmi: refactor ath11k_qmi_m3_load() (bsc#1227149). * wifi: ath11k: refactor ath11k_wmi_tlv_parse_alloc() (bsc#1227149). * wifi: ath11k:refactor setting country code logic (stable-fixes). * wifi: ath11k: refactor vif parameter configurations (bsc#1227149). * wifi: ath11k: rely on mac80211 debugfs handling for vif (bsc#1227149). * wifi: ath11k: remove ath11k_htc_record::pauload[] (bsc#1227149). * wifi: ath11k: remove invalid peer create logic (bsc#1227149). * wifi: ath11k: remove manual mask names from debug messages (bsc#1227149). * wifi: ath11k: remove unnecessary (void*) conversions (bsc#1227149). * wifi: ath11k: remove unsupported event handlers (bsc#1227149). * wifi: ath11k: remove unused function ath11k_tm_event_wmi() (bsc#1227149). * wifi: ath11k: remove unused members of 'struct ath11k_base' (bsc#1227149). * wifi: ath11k: remove unused scan_events from struct scan_req_params (bsc#1227149). * wifi: ath11k: rename MBSSID fields in wmi_vdev_up_cmd (bsc#1227149). * wifi: ath11k: rename ath11k_start_vdev_delay() (bsc#1227149). * wifi: ath11k: rename the sc naming convention to ab (bsc#1227149). * wifi: ath11k: rename the wmi_sc naming convention to wmi_ab (bsc#1227149). * wifi: ath11k: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149). * wifi: ath11k: restore country code during resume (git-fixes). * wifi: ath11k: save max transmit power in vdev start response event from firmware (bsc#1227149). * wifi: ath11k: save power spectral density(PSD) of regulatory rule (bsc#1227149). * wifi: ath11k: simplify ath11k_mac_validate_vht_he_fixed_rate_settings() (bsc#1227149). * wifi: ath11k: simplify the code with module_platform_driver (bsc#1227149). * wifi: ath11k: store cur_regulatory_info for each radio (bsc#1227149). * wifi: ath11k: support 2 station interfaces (bsc#1227149). * wifi: ath11k: update proper pdev/vdev id for testmode command (bsc#1227149). * wifi: ath11k: update regulatory rules when connect to AP on 6 GHz band for station (bsc#1227149). * wifi: ath11k: update regulatory rules when interface added (bsc#1227149). * wifi: ath11k: use RCU when accessing structinet6_dev::ac_list (bsc#1227149). * wifi: ath11k: use WMI_VDEV_SET_TPC_POWER_CMDID when EXT_TPC_REG_SUPPORT for 6 GHz (bsc#1227149). * wifi: ath11k: use kstrtoul_from_user() where appropriate (bsc#1227149). * wifi: ath11k: use select for CRYPTO_MICHAEL_MIC (bsc#1227149). * wifi: ath11k: wmi: add unified command debug messages (bsc#1227149). * wifi: ath11k: wmi: cleanup error handling in ath11k_wmi_send_init_country_cmd() (bsc#1227149). * wifi: ath11k: wmi: use common error handling style (bsc#1227149). * wifi: ath11k: workaround too long expansion sparse warnings (bsc#1227149). * wifi: ath12k: Add logic to write QRTR node id to scratch (bsc#1227149). * wifi: ath12k: Add missing qmi_txn_cancel() calls (bsc#1227149). * wifi: ath12k: Add support to parse new WMI event for 6 GHz regulatory (bsc#1227149). * wifi: ath12k: Consistently use ath12k_vif_to_arvif() (bsc#1227149). * wifi: ath12k: Consolidate WMI peer flags (bsc#1227149). * wifi: ath12k: Correct 6 GHz frequency value in rx status (git-fixes). * wifi: ath12k: Do not drop tx_status in failure case (git-fixes). * wifi: ath12k: Do not use scan_flags from struct ath12k_wmi_scan_req_arg (bsc#1227149). * wifi: ath12k: Enable Mesh support for QCN9274 (bsc#1227149). * wifi: ath12k: Fix a few spelling errors (bsc#1227149). * wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure (git-fixes). * wifi: ath12k: Fix uninitialized use of ret in ath12k_mac_allocate() (bsc#1227149). * wifi: ath12k: Introduce and use ath12k_sta_to_arsta() (bsc#1227149). * wifi: ath12k: Introduce the container for mac80211 hw (bsc#1227149). * wifi: ath12k: Make QMI message rules const (bsc#1227149). * wifi: ath12k: Optimize the mac80211 hw data access (bsc#1227149). * wifi: ath12k: Read board id to support split-PHY QCN9274 (bsc#1227149). * wifi: ath12k: Refactor the mac80211 hw access from link/radio (bsc#1227149). * wifi: ath12k: Remove ath12k_base::bd_api (bsc#1227149). * wifi: ath12k: Remove obsolete structwmi_peer_flags_map *peer_flags (bsc#1227149). * wifi: ath12k: Remove some dead code (bsc#1227149). * wifi: ath12k: Remove struct ath12k::ops (bsc#1227149). * wifi: ath12k: Remove unnecessary (void*) conversions (bsc#1227149). * wifi: ath12k: Remove unnecessary struct qmi_txn initializers (bsc#1227149). * wifi: ath12k: Remove unused declarations (bsc#1227149). * wifi: ath12k: Remove unused scan_flags from struct ath12k_wmi_scan_req_arg (bsc#1227149). * wifi: ath12k: Set default beacon mode to burst mode (bsc#1227149). * wifi: ath12k: Use initializers for QMI message buffers (bsc#1227149). * wifi: ath12k: Use msdu_end to check MCBC (bsc#1227149). * wifi: ath12k: Use pdev_id rather than mac_id to get pdev (bsc#1227149). * wifi: ath12k: WMI support to process EHT capabilities (bsc#1227149). * wifi: ath12k: add 320 MHz bandwidth enums (bsc#1227149). * wifi: ath12k: add CE and ext IRQ flag to indicate irq_handler (bsc#1227149). * wifi: ath12k: add EHT PHY modes (bsc#1227149). * wifi: ath12k: add MAC id support in WBM error path (bsc#1227149). * wifi: ath12k: add MLO header in peer association (bsc#1227149). * wifi: ath12k: add P2P IE in beacon template (bsc#1227149). * wifi: ath12k: add QMI PHY capability learn support (bsc#1227149). * wifi: ath12k: add WMI support for EHT peer (bsc#1227149). * wifi: ath12k: add ath12k_qmi_free_resource() for recovery (bsc#1227149). * wifi: ath12k: add fallback board name without variant while searching board-2.bin (bsc#1227149). * wifi: ath12k: add firmware-2.bin support (bsc#1227149). * wifi: ath12k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED (bsc#1227149). * wifi: ath12k: add keep backward compatibility of PHY mode to avoid firmware crash (bsc#1227149). * wifi: ath12k: add msdu_end structure for WCN7850 (bsc#1227149). * wifi: ath12k: add parsing of phy bitmap for reg rules (bsc#1227149). * wifi: ath12k: add processing for TWT disable event (bsc#1227149). * wifi: ath12k: add processing for TWT enableevent (bsc#1227149). * wifi: ath12k: add qmi_cnss_feature_bitmap field to hardware parameters (bsc#1227149). * wifi: ath12k: add rcu lock for ath12k_wmi_p2p_noa_event() (bsc#1227149). * wifi: ath12k: add read variant from SMBIOS for download board data (bsc#1227149). * wifi: ath12k: add string type to search board data in board-2.bin for WCN7850 (bsc#1227149). * wifi: ath12k: add support for BA1024 (bsc#1227149). * wifi: ath12k: add support for collecting firmware log (bsc#1227149). * wifi: ath12k: add support for hardware rfkill for WCN7850 (bsc#1227149). * wifi: ath12k: add support for peer meta data version (bsc#1227149). * wifi: ath12k: add support one MSI vector (bsc#1227149). * wifi: ath12k: add support to search regdb data in board-2.bin for WCN7850 (bsc#1227149). * wifi: ath12k: add wait operation for tx management packets for flush from mac80211 (bsc#1227149). * wifi: ath12k: advertise P2P dev support for WCN7850 (bsc#1227149). * wifi: ath12k: allow specific mgmt frame tx while vdev is not up (bsc#1227149). * wifi: ath12k: ath12k_start_vdev_delay(): convert to use ar (bsc#1227149). * wifi: ath12k: avoid deadlock by change ieee80211_queue_work for regd_update_work (bsc#1227149). * wifi: ath12k: avoid duplicated vdev stop (git-fixes). * wifi: ath12k: avoid explicit HW conversion argument in Rxdma replenish (bsc#1227149). * wifi: ath12k: avoid explicit RBM id argument in Rxdma replenish (bsc#1227149). * wifi: ath12k: avoid explicit mac id argument in Rxdma replenish (bsc#1227149). * wifi: ath12k: avoid repeated hw access from ar (bsc#1227149). * wifi: ath12k: avoid repeated wiphy access from hw (bsc#1227149). * wifi: ath12k: call ath12k_mac_fils_discovery() without condition (bsc#1227149). * wifi: ath12k: change DMA direction while mapping reinjected packets (git- fixes). * wifi: ath12k: change MAC buffer ring size to 2048 (bsc#1227149). * wifi: ath12k: change WLAN_SCAN_PARAMS_MAX_IE_LEN from 256 to 512 (bsc#1227149). * wifi: ath12k: change interface combination for P2P mode (bsc#1227149). * wifi: ath12k: change to initialize recovery variables earlier in ath12k_core_reset() (bsc#1227149). * wifi: ath12k: change to treat alpha code na as world wide regdomain (bsc#1227149). * wifi: ath12k: change to use dynamic memory for channel list of scan (bsc#1227149). * wifi: ath12k: check M3 buffer size as well whey trying to reuse it (bsc#1227149). * wifi: ath12k: check hardware major version for WCN7850 (bsc#1227149). * wifi: ath12k: configure RDDM size to MHI for device recovery (bsc#1227149). * wifi: ath12k: configure puncturing bitmap (bsc#1227149). * wifi: ath12k: correct the data_type from QMI_OPT_FLAG to QMI_UNSIGNED_1_BYTE for mlo_capable (bsc#1227149). * wifi: ath12k: delete the timer rx_replenish_retry during rmmod (bsc#1227149). * wifi: ath12k: designating channel frequency for ROC scan (bsc#1227149). * wifi: ath12k: disable QMI PHY capability learn in split-phy QCN9274 (bsc#1227149). * wifi: ath12k: do not drop data frames from unassociated stations (bsc#1227149). * wifi: ath12k: do not restore ASPM in case of single MSI vector (bsc#1227149). * wifi: ath12k: drop NULL pointer check in ath12k_update_per_peer_tx_stats() (bsc#1227149). * wifi: ath12k: drop failed transmitted frames from metric calculation (git- fixes). * wifi: ath12k: enable 320 MHz bandwidth for 6 GHz band in EHT PHY capability for WCN7850 (bsc#1227149). * wifi: ath12k: enable 802.11 power save mode in station mode (bsc#1227149). * wifi: ath12k: enable IEEE80211_HW_SINGLE_SCAN_ON_ALL_BANDS for WCN7850 (bsc#1227149). * wifi: ath12k: fetch correct pdev id from WMI_SERVICE_READY_EXT_EVENTID (bsc#1227149). * wifi: ath12k: fix PCI read and write (bsc#1227149). * wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan (bsc#1227149). * wifi: ath12k: fix broken structure wmi_vdev_create_cmd (bsc#1227149). * wifi: ath12k: fix conf_mutex inath12k_mac_op_unassign_vif_chanctx() (bsc#1227149). * wifi: ath12k: fix debug messages (bsc#1227149). * wifi: ath12k: fix fetching MCBC flag for QCN9274 (bsc#1227149). * wifi: ath12k: fix firmware assert during insmod in memory segment mode (bsc#1227149). * wifi: ath12k: fix firmware crash during reo reinject (git-fixes). * wifi: ath12k: fix invalid m3 buffer address (bsc#1227149). * wifi: ath12k: fix invalid memory access while processing fragmented packets (git-fixes). * wifi: ath12k: fix kernel crash during resume (bsc#1227149). * wifi: ath12k: fix license in p2p.c and p2p.h (bsc#1227149). * wifi: ath12k: fix peer metadata parsing (git-fixes). * wifi: ath12k: fix potential wmi_mgmt_tx_queue race condition (bsc#1227149). * wifi: ath12k: fix radar detection in 160 MHz (bsc#1227149). * wifi: ath12k: fix recovery fail while firmware crash when doing channel switch (bsc#1227149). * wifi: ath12k: fix the error handler of rfkill config (bsc#1227149). * wifi: ath12k: fix the issue that the multicast/broadcast indicator is not read correctly for WCN7850 (bsc#1227149). * wifi: ath12k: fix the problem that down grade phy mode operation (bsc#1227149). * wifi: ath12k: fix wrong definition of CE ring's base address (git-fixes). * wifi: ath12k: fix wrong definitions of hal_reo_update_rx_queue (bsc#1227149). * wifi: ath12k: get msi_data again after request_irq is called (bsc#1227149). * wifi: ath12k: implement handling of P2P NoA event (bsc#1227149). * wifi: ath12k: implement remain on channel for P2P mode (bsc#1227149). * wifi: ath12k: increase vdev setup timeout (bsc#1227149). * wifi: ath12k: indicate NON MBSSID vdev by default during vdev start (bsc#1227149). * wifi: ath12k: indicate scan complete for scan canceled when scan running (bsc#1227149). * wifi: ath12k: indicate to mac80211 scan complete with aborted flag for ATH12K_SCAN_STARTING state (bsc#1227149). * wifi: ath12k: move HE capabilities processing to a new function (bsc#1227149). * wifi: ath12k: move peer delete after vdev stop of station for WCN7850 (bsc#1227149). * wifi: ath12k: parse WMI service ready ext2 event (bsc#1227149). * wifi: ath12k: peer assoc for 320 MHz (bsc#1227149). * wifi: ath12k: prepare EHT peer assoc parameters (bsc#1227149). * wifi: ath12k: propagate EHT capabilities to userspace (bsc#1227149). * wifi: ath12k: refactor DP Rxdma ring structure (bsc#1227149). * wifi: ath12k: refactor QMI MLO host capability helper function (bsc#1227149). * wifi: ath12k: refactor ath12k_bss_assoc() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_allocate() and ath12k_mac_destroy() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_op_ampdu_action() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_op_conf_tx() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_op_config() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_op_configure_filter() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_op_flush() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_op_start() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_op_stop() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_op_update_vif_offload() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_register() and ath12k_mac_unregister() (bsc#1227149). * wifi: ath12k: refactor ath12k_mac_setup_channels_rates() (bsc#1227149). * wifi: ath12k: refactor ath12k_wmi_tlv_parse_alloc() (bsc#1227149). * wifi: ath12k: refactor multiple MSI vector implementation (bsc#1227149). * wifi: ath12k: refactor the rfkill worker (bsc#1227149). * wifi: ath12k: register EHT mesh capabilities (bsc#1227149). * wifi: ath12k: relax list iteration in ath12k_mac_vif_unref() (bsc#1227149). * wifi: ath12k: relocate ath12k_dp_pdev_pre_alloc() call (bsc#1227149). * wifi: ath12k: remove hal_desc_sz from hw params (bsc#1227149). * wifi: ath12k: remove redundant memset() in ath12k_hal_reo_qdesc_setup() (bsc#1227149). * wifi: ath12k: remove the unused scan_events fromath12k_wmi_scan_req_arg (bsc#1227149). * wifi: ath12k: remove unused ATH12K_BD_IE_BOARD_EXT (bsc#1227149). * wifi: ath12k: rename HE capabilities setup/copy functions (bsc#1227149). * wifi: ath12k: rename the sc naming convention to ab (bsc#1227149). * wifi: ath12k: rename the wmi_sc naming convention to wmi_ab (bsc#1227149). * wifi: ath12k: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149). * wifi: ath12k: send WMI_PEER_REORDER_QUEUE_SETUP_CMDID when ADDBA session starts (bsc#1227149). * wifi: ath12k: set IRQ affinity to CPU0 in case of one MSI vector (bsc#1227149). * wifi: ath12k: set PERST pin no pull request for WCN7850 (bsc#1227149). * wifi: ath12k: split hal_ops to support RX TLVs word mask compaction (bsc#1227149). * wifi: ath12k: subscribe required word mask from rx tlv (bsc#1227149). * wifi: ath12k: support default regdb while searching board-2.bin for WCN7850 (bsc#1227149). * wifi: ath12k: trigger station disconnect on hardware restart (bsc#1227149). * wifi: ath12k: use ATH12K_PCI_IRQ_DP_OFFSET for DP IRQ (bsc#1227149). * wifi: ath12k: use correct flag field for 320 MHz channels (bsc#1227149). * wifi: ath12k: use select for CRYPTO_MICHAEL_MIC (bsc#1227149). * wifi: ath5k: Convert to platform remove callback returning void (bsc#1227149). * wifi: ath5k: Remove redundant dev_err() (bsc#1227149). * wifi: ath5k: ath5k_hw_get_median_noise_floor(): use swap() (bsc#1227149). * wifi: ath5k: remove phydir check from ath5k_debug_init_device() (bsc#1227149). * wifi: ath5k: remove unnecessary (void*) conversions (bsc#1227149). * wifi: ath5k: remove unused ath5k_eeprom_info::ee_antenna (bsc#1227149). * wifi: ath5k: replace deprecated strncpy with strscpy (bsc#1227149). * wifi: ath6kl: Remove error checking for debugfs_create_dir() (bsc#1227149). * wifi: ath6kl: remove unnecessary (void*) conversions (bsc#1227149). * wifi: ath6kl: replace deprecated strncpy with memcpy (bsc#1227149). * wifi: ath9k: Convert to platform remove callbackreturning void (bsc#1227149). * wifi: ath9k: Remove unnecessary (void*) conversions (bsc#1227149). * wifi: ath9k: Remove unnecessary ternary operators (bsc#1227149). * wifi: ath9k: Remove unused declarations (bsc#1227149). * wifi: ath9k: avoid using uninitialized array (bsc#1227149). * wifi: ath9k: clean up function ath9k_hif_usb_resume (bsc#1227149). * wifi: ath9k: consistently use kstrtoX_from_user() functions (bsc#1227149). * wifi: ath9k: delete some unused/duplicate macros (bsc#1227149). * wifi: ath9k: fix parameter check in ath9k_init_debug() (bsc#1227149). * wifi: ath9k: remove redundant assignment to variable ret (bsc#1227149). * wifi: ath9k: reset survey of current channel after a scan started (bsc#1227149). * wifi: ath9k: simplify ar9003_hw_process_ini() (bsc#1227149). * wifi: ath9k: use u32 for txgain indexes (bsc#1227149). * wifi: ath9k: work around memset overflow warning (bsc#1227149). * wifi: ath9k_htc: fix format-truncation warning (bsc#1227149). * wifi: ath: Use is_multicast_ether_addr() to check multicast Ether address (bsc#1227149). * wifi: ath: dfs_pattern_detector: Use flex array to simplify code (bsc#1227149). * wifi: ath: remove unused-but-set parameter (bsc#1227149). * wifi: ath: work around false-positive stringop-overread warning (bsc#1227149). * wifi: atk10k: Do not opencode ath10k_pci_priv() in ath10k_ahb_priv() (bsc#1227149). * wifi: atmel: remove unused ioctl function (bsc#1227149). * wifi: b43: silence sparse warnings (bsc#1227149). * wifi: brcm80211: replace deprecated strncpy with strscpy (bsc#1227149). * wifi: brcmfmac: Annotate struct brcmf_gscan_config with __counted_by (bsc#1227149). * wifi: brcmfmac: Detect corner error case earlier with log (bsc#1227149). * wifi: brcmfmac: add linefeed at end of file (bsc#1227149). * wifi: brcmfmac: allow per-vendor event handling (bsc#1227149). * wifi: brcmfmac: do not cast hidden SSID attribute value to boolean (bsc#1227149). * wifi: brcmfmac: do notpass hidden SSID attribute as value directly (bsc#1227149). * wifi: brcmfmac: export firmware interface functions (bsc#1227149). * wifi: brcmfmac: firmware: Annotate struct brcmf_fw_request with __counted_by (bsc#1227149). * wifi: brcmfmac: fix format-truncation warnings (bsc#1227149). * wifi: brcmfmac: fix gnu_printf warnings (bsc#1227149). * wifi: brcmfmac: fweh: Add __counted_by for struct brcmf_fweh_queue_item and use struct_size() (bsc#1227149). * wifi: brcmfmac: fweh: Fix boot crash on Raspberry Pi 4 (bsc#1227149). * wifi: brcmfmac: move feature overrides before feature_disable (bsc#1227149). * wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (git-fixes). * wifi: brcmsmac: cleanup SCB-related data types (bsc#1227149). * wifi: brcmsmac: fix gnu_printf warnings (bsc#1227149). * wifi: brcmsmac: phy: Remove unreachable code (bsc#1227149). * wifi: brcmsmac: remove more unused data types (bsc#1227149). * wifi: brcmsmac: remove unused data type (bsc#1227149). * wifi: brcmsmac: replace deprecated strncpy with memcpy (bsc#1227149). * wifi: brcmsmac: silence sparse warnings (bsc#1227149). * wifi: brcmutil: use helper function pktq_empty() instead of open code (bsc#1227149). * wifi: carl9170: Remove redundant assignment to pointer super (bsc#1227149). * wifi: carl9170: remove unnecessary (void*) conversions (bsc#1227149). * wifi: cfg80211: Add support for setting TID to link mapping (bsc#1227149). * wifi: cfg80211: Allow AP/P2PGO to indicate port authorization to peer STA/P2PClient (bsc#1227149). * wifi: cfg80211: Extend support for scanning while MLO connected (bsc#1227149). * wifi: cfg80211: Fix typo in documentation (bsc#1227149). * wifi: cfg80211: Handle specific BSSID in 6GHz scanning (bsc#1227149). * wifi: cfg80211: Include operating class 137 in 6GHz band (bsc#1227149). * wifi: cfg80211: OWE DH IE handling offload (bsc#1227149). * wifi: cfg80211: Replace ENOTSUPP with EOPNOTSUPP (bsc#1227149). * wifi: cfg80211:Schedule regulatory check on BSS STA channel change (bsc#1227149). * wifi: cfg80211: Update the default DSCP-to-UP mapping (bsc#1227149). * wifi: cfg80211: add BSS usage reporting (bsc#1227149). * wifi: cfg80211: add RNR with reporting AP information (bsc#1227149). * wifi: cfg80211: add a flag to disable wireless extensions (bsc#1227149). * wifi: cfg80211: add local_state_change to deauth trace (bsc#1227149). * wifi: cfg80211: add locked debugfs wrappers (bsc#1227149). * wifi: cfg80211: add support for SPP A-MSDUs (bsc#1227149). * wifi: cfg80211: address several kerneldoc warnings (bsc#1227149). * wifi: cfg80211: allow reg update by driver even if wiphy-> regd is set (bsc#1227149). * wifi: cfg80211: annotate iftype_data pointer with sparse (bsc#1227149). * wifi: cfg80211: avoid double free if updating BSS fails (bsc#1227149). * wifi: cfg80211: call reg_call_notifier on beacon hints (bsc#1227149). * wifi: cfg80211: check RTNL when iterating devices (bsc#1227149). * wifi: cfg80211: check wiphy mutex is held for wdev mutex (bsc#1227149). * wifi: cfg80211: consume both probe response and beacon IEs (bsc#1227149). * wifi: cfg80211: detect stuck ECSA element in probe resp (bsc#1227149). * wifi: cfg80211: ensure cfg80211_bss_update frees IEs on error (bsc#1227149). * wifi: cfg80211: export DFS CAC time and usable state helper functions (bsc#1227149). * wifi: cfg80211: expose nl80211_chan_width_to_mhz for wide sharing (bsc#1227149). * wifi: cfg80211: fix 6 GHz scan request building (stable-fixes). * wifi: cfg80211: fix CQM for non-range use (bsc#1227149). * wifi: cfg80211: fix header kernel-doc typos (bsc#1227149). * wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() (bsc#1227149). * wifi: cfg80211: fix spelling & punctutation (bsc#1227149). * wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (git-fixes). * wifi: cfg80211: generate an ML element for per-STA profiles (bsc#1227149). * wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (git-fixes). * wifi: cfg80211: handle UHB AP and STA power type (bsc#1227149). * wifi: cfg80211: hold wiphy lock in cfg80211_any_wiphy_oper_chan() (bsc#1227149). * wifi: cfg80211: hold wiphy mutex for send_interface (bsc#1227149). * wifi: cfg80211: improve documentation for flag fields (bsc#1227149). * wifi: cfg80211: introduce cfg80211_ssid_eq() (bsc#1227149). * wifi: cfg80211: make RX assoc data const (bsc#1227149). * wifi: cfg80211: make read-only array centers_80mhz static const (bsc#1227149). * wifi: cfg80211: modify prototype for change_beacon (bsc#1227149). * wifi: cfg80211: reg: Support P2P operation on DFS channels (bsc#1227149). * wifi: cfg80211: reg: describe return values in kernel-doc (bsc#1227149). * wifi: cfg80211: reg: fix various kernel-doc issues (bsc#1227149). * wifi: cfg80211: reg: hold wiphy mutex for wdev iteration (bsc#1227149). * wifi: cfg80211: remove scan_width support (bsc#1227149). * wifi: cfg80211: remove wdev mutex (bsc#1227149). * wifi: cfg80211: rename UHB to 6 GHz (bsc#1227149). * wifi: cfg80211: report per-link errors during association (bsc#1227149). * wifi: cfg80211: report unprotected deauth/disassoc in wowlan (bsc#1227149). * wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (git-fixes). * wifi: cfg80211: save power spectral density(psd) of regulatory rule (bsc#1227149). * wifi: cfg80211: set correct param change count in ML element (bsc#1227149). * wifi: cfg80211: sme: hold wiphy lock for wdev iteration (bsc#1227149). * wifi: cfg80211: sort certificates in build (bsc#1227149). * wifi: cfg80211: split struct cfg80211_ap_settings (bsc#1227149). * wifi: cfg80211: validate HE operation element parsing (bsc#1227149). * wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (stable-fixes). * wifi: cfg80211: wext: convert return value to kernel-doc (bsc#1227149). * wifi: cfg80211: wext: set ssids=NULL for passive scans (git-fixes). * wifi: cw1200: Avoid processing an invalidTIM IE (bsc#1227149). * wifi: cw1200: Convert to GPIO descriptors (bsc#1227149). * wifi: cw1200: fix __le16 sparse warnings (bsc#1227149). * wifi: cw1200: restore endian swapping (bsc#1227149). * wifi: drivers: Explicitly include correct DT includes (bsc#1227149). * wifi: fill in MODULE_DESCRIPTION()s for Broadcom WLAN (bsc#1227149). * wifi: fill in MODULE_DESCRIPTION()s for ar5523 (bsc#1227149). * wifi: fill in MODULE_DESCRIPTION()s for mt76 drivers (bsc#1227149). * wifi: fill in MODULE_DESCRIPTION()s for p54spi (bsc#1227149). * wifi: fill in MODULE_DESCRIPTION()s for wcn36xx (bsc#1227149). * wifi: fill in MODULE_DESCRIPTION()s for wilc1000 (bsc#1227149). * wifi: fill in MODULE_DESCRIPTION()s for wl1251 and wl12xx (bsc#1227149). * wifi: fill in MODULE_DESCRIPTION()s for wl18xx (bsc#1227149). * wifi: fill in MODULE_DESCRIPTION()s for wlcore (bsc#1227149). * wifi: hostap: Add __counted_by for struct prism2_download_data and use struct_size() (bsc#1227149). * wifi: hostap: fix stringop-truncations GCC warning (bsc#1227149). * wifi: hostap: remove unused ioctl function (bsc#1227149). * wifi: ieee80211: add UL-bandwidth definition of trigger frame (bsc#1227149). * wifi: ieee80211: add definitions for negotiated TID to Link map (bsc#1227149). * wifi: ieee80211: check for NULL in ieee80211_mle_size_ok() (stable-fixes). * wifi: iwlmei: do not send SAP messages if AMT is disabled (bsc#1227149). * wifi: iwlmei: do not send nic info with invalid mac address (bsc#1227149). * wifi: iwlmei: send HOST_GOES_DOWN message even if wiamt is disabled (bsc#1227149). * wifi: iwlmei: send driver down SAP message only if wiamt is enabled (bsc#1227149). * wifi: iwlmvm: fw: Add new OEM vendor to tas approved list (bsc#1227149). * wifi: iwlwifi: Add rf_mapping of new wifi7 devices (bsc#1227149). * wifi: iwlwifi: Add support for PPAG cmd v5 and PPAG revision 3 (bsc#1227149). * wifi: iwlwifi: Add support for new 802.11be device (bsc#1227149). * wifi: iwlwifi: Do notmark DFS channels as NO-IR (bsc#1227149). * wifi: iwlwifi: Extract common prph mac/phy regions data dump logic (bsc#1227149). * wifi: iwlwifi: Fix spelling mistake "SESION" -> "SESSION" (bsc#1227149). * wifi: iwlwifi: Use request_module_nowait (bsc#1227149). * wifi: iwlwifi: abort scan when rfkill on but device enabled (bsc#1227149). * wifi: iwlwifi: add HONOR to PPAG approved list (bsc#1227149). * wifi: iwlwifi: add Razer to ppag approved list (bsc#1227149). * wifi: iwlwifi: add mapping of a periphery register crf for WH RF (bsc#1227149). * wifi: iwlwifi: add new RF support for wifi7 (bsc#1227149). * wifi: iwlwifi: add support for SNPS DPHYIP region type (bsc#1227149). * wifi: iwlwifi: add support for a wiphy_work rx handler (bsc#1227149). * wifi: iwlwifi: add support for activating UNII-1 in WW via BIOS (bsc#1227149). * wifi: iwlwifi: add support for new ini region types (bsc#1227149). * wifi: iwlwifi: adjust rx_phyinfo debugfs to MLO (bsc#1227149). * wifi: iwlwifi: always have 'uats_enabled' (bsc#1227149). * wifi: iwlwifi: api: clean up some kernel-doc/typos (bsc#1227149). * wifi: iwlwifi: api: dbg-tlv: fix up kernel-doc (bsc#1227149). * wifi: iwlwifi: api: fix a small upper/lower-case typo (bsc#1227149). * wifi: iwlwifi: api: fix center_freq label in PHY diagram (bsc#1227149). * wifi: iwlwifi: api: fix constant version to match FW (bsc#1227149). * wifi: iwlwifi: api: fix kernel-doc reference (bsc#1227149). * wifi: iwlwifi: bump FW API to 84 for AX/BZ/SC devices (bsc#1227149). * wifi: iwlwifi: bump FW API to 86 for AX/BZ/SC devices (bsc#1227149). * wifi: iwlwifi: bump FW API to 87 for AX/BZ/SC devices (bsc#1227149). * wifi: iwlwifi: bump FW API to 88 for AX/BZ/SC devices (bsc#1227149). * wifi: iwlwifi: cancel session protection only if there is one (bsc#1227149). * wifi: iwlwifi: change link id in time event to s8 (bsc#1227149). * wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware() (bsc#1227149). * wifi: iwlwifi:cleanup BT Shared Single Antenna code (bsc#1227149). * wifi: iwlwifi: cleanup sending PER_CHAIN_LIMIT_OFFSET_CMD (bsc#1227149). * wifi: iwlwifi: cleanup uefi variables loading (bsc#1227149). * wifi: iwlwifi: clear link_id in time_event (bsc#1227149). * wifi: iwlwifi: dbg-tlv: avoid extra allocation/copy (bsc#1227149). * wifi: iwlwifi: dbg-tlv: use struct_size() for allocation (bsc#1227149). * wifi: iwlwifi: disable 160 MHz based on subsystem device ID (bsc#1227149). * wifi: iwlwifi: disable eSR when BT is active (bsc#1227149). * wifi: iwlwifi: disable multi rx queue for 9000 (bsc#1227149). * wifi: iwlwifi: do not check TAS block list size twice (bsc#1227149). * wifi: iwlwifi: do not use TRUE/FALSE with bool (bsc#1227149). * wifi: iwlwifi: drop NULL pointer check in iwl_mvm_tzone_set_trip_temp() (bsc#1227149). * wifi: iwlwifi: dvm: remove kernel-doc warnings (bsc#1227149). * wifi: iwlwifi: error-dump: fix kernel-doc issues (bsc#1227149). * wifi: iwlwifi: fail NIC access fast on dead NIC (bsc#1227149). * wifi: iwlwifi: fix #ifdef CONFIG_ACPI check (bsc#1227149). * wifi: iwlwifi: fix iwl_mvm_get_valid_rx_ant() (git-fixes). * wifi: iwlwifi: fix opmode start/stop race (bsc#1227149). * wifi: iwlwifi: fix some kernel-doc issues (bsc#1227149). * wifi: iwlwifi: fix system commands group ordering (bsc#1227149). * wifi: iwlwifi: fix the rf step and flavor bits range (bsc#1227149). * wifi: iwlwifi: fw: Add support for UATS table in UHB (bsc#1227149). * wifi: iwlwifi: fw: Fix debugfs command sending (bsc#1227149). * wifi: iwlwifi: fw: allow vmalloc for PNVM image (bsc#1227149). * wifi: iwlwifi: fw: dbg: ensure correct config name sizes (bsc#1227149). * wifi: iwlwifi: fw: disable firmware debug asserts (bsc#1227149). * wifi: iwlwifi: fw: file: clean up kernel-doc (bsc#1227149). * wifi: iwlwifi: fw: file: do not use [0] for variable arrays (bsc#1227149). * wifi: iwlwifi: fw: fix compiler warning for NULL string print (bsc#1227149). * wifi: iwlwifi: fw: increasefw_version string size (bsc#1227149). * wifi: iwlwifi: fw: reconstruct the API/CAPA enum number (bsc#1227149). * wifi: iwlwifi: fw: replace deprecated strncpy with strscpy_pad (bsc#1227149). * wifi: iwlwifi: handle per-phy statistics from fw (bsc#1227149). * wifi: iwlwifi: implement GLAI ACPI table loading (bsc#1227149). * wifi: iwlwifi: implement can_activate_links callback (bsc#1227149). * wifi: iwlwifi: implement enable/disable for China 2022 regulatory (bsc#1227149). * wifi: iwlwifi: iwl-fh.h: fix kernel-doc issues (bsc#1227149). * wifi: iwlwifi: iwl-trans.h: clean up kernel-doc (bsc#1227149). * wifi: iwlwifi: iwlmvm: handle unprotected deauth/disassoc in d3 (bsc#1227149). * wifi: iwlwifi: load b0 version of ucode for HR1/HR2 (bsc#1227149). * wifi: iwlwifi: make TB reallocation a debug message (bsc#1227149). * wifi: iwlwifi: make time_events MLO aware (bsc#1227149). * wifi: iwlwifi: mei: return error from register when not built (bsc#1227149). * wifi: iwlwifi: mvm: Add basic link selection logic (bsc#1227149). * wifi: iwlwifi: mvm: Add support for removing responder TKs (bsc#1227149). * wifi: iwlwifi: mvm: Allow DFS concurrent operation (bsc#1227149). * wifi: iwlwifi: mvm: Configure the link mapping for non-MLD FW (bsc#1227149). * wifi: iwlwifi: mvm: Correctly report TSF data in scan complete (bsc#1227149). * wifi: iwlwifi: mvm: Declare support for secure LTF measurement (bsc#1227149). * wifi: iwlwifi: mvm: Do not warn if valid link pair was not found (bsc#1227149). * wifi: iwlwifi: mvm: Do not warn on invalid link on scan complete (bsc#1227149). * wifi: iwlwifi: mvm: Extend support for P2P service discovery (bsc#1227149). * wifi: iwlwifi: mvm: Fix FTM initiator flags (bsc#1227149). * wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill (stable-fixes). * wifi: iwlwifi: mvm: Fix unreachable code path (bsc#1227149). * wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (stable-fixes). * wifi: iwlwifi: mvm: Keepconnection in case of missed beacons during RX (bsc#1227149). * wifi: iwlwifi: mvm: Return success if link could not be removed (bsc#1227149). * wifi: iwlwifi: mvm: Use the link ID provided in scan request (bsc#1227149). * wifi: iwlwifi: mvm: add US/Canada MCC to API (bsc#1227149). * wifi: iwlwifi: mvm: add a debug print when we get a BAR (bsc#1227149). * wifi: iwlwifi: mvm: add a debugfs hook to clear the monitor data (bsc#1227149). * wifi: iwlwifi: mvm: add a per-link debugfs (bsc#1227149). * wifi: iwlwifi: mvm: add a print when sending RLC command (bsc#1227149). * wifi: iwlwifi: mvm: add start mac ctdp sum calculation debugfs handler (bsc#1227149). * wifi: iwlwifi: mvm: add support for TID to link mapping neg request (bsc#1227149). * wifi: iwlwifi: mvm: add support for new wowlan_info_notif (bsc#1227149). * wifi: iwlwifi: mvm: advertise MLO only if EHT is enabled (bsc#1227149). * wifi: iwlwifi: mvm: advertise support for SCS traffic description (bsc#1227149). * wifi: iwlwifi: mvm: advertise support for protected ranging negotiation (bsc#1227149). * wifi: iwlwifi: mvm: always update keys in D3 exit (bsc#1227149). * wifi: iwlwifi: mvm: avoid garbage iPN (bsc#1227149). * wifi: iwlwifi: mvm: calculate EMLSR mode after connection (bsc#1227149). * wifi: iwlwifi: mvm: check AP supports EMLSR (bsc#1227149). * wifi: iwlwifi: mvm: check for iwl_mvm_mld_update_sta() errors (bsc#1227149). * wifi: iwlwifi: mvm: check link more carefully (bsc#1227149). * wifi: iwlwifi: mvm: check own capabilities for EMLSR (bsc#1227149). * wifi: iwlwifi: mvm: cleanup MLO and non-MLO unification code (bsc#1227149). * wifi: iwlwifi: mvm: combine condition/warning (bsc#1227149). * wifi: iwlwifi: mvm: consider having one active link (bsc#1227149). * wifi: iwlwifi: mvm: const-ify chandef pointers (bsc#1227149). * wifi: iwlwifi: mvm: cycle FW link on chanctx removal (bsc#1227149). * wifi: iwlwifi: mvm: d3: avoid intermediate/early mutex unlock (bsc#1227149). *wifi: iwlwifi: mvm: d3: disconnect on GTK rekey failure (bsc#1227149). * wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (stable-fixes). * wifi: iwlwifi: mvm: d3: implement suspend with MLO (bsc#1227149). * wifi: iwlwifi: mvm: debugfs for fw system stats (bsc#1227149). * wifi: iwlwifi: mvm: define RX queue sync timeout as a macro (bsc#1227149). * wifi: iwlwifi: mvm: disable MLO for the time being (bsc#1227149). * wifi: iwlwifi: mvm: disallow puncturing in US/Canada (bsc#1227149). * wifi: iwlwifi: mvm: disconnect long CSA only w/o alternative (bsc#1227149). * wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (bsc#1227149). * wifi: iwlwifi: mvm: do not abort queue sync in CT-kill (bsc#1227149). * wifi: iwlwifi: mvm: do not add dummy phy context (bsc#1227149). * wifi: iwlwifi: mvm: do not always disable EMLSR due to BT coex (bsc#1227149). * wifi: iwlwifi: mvm: do not do duplicate detection for nullfunc packets (bsc#1227149). * wifi: iwlwifi: mvm: do not limit VLP/AFC to UATS-enabled (git-fixes). * wifi: iwlwifi: mvm: do not send BT_COEX_CI command on new devices (bsc#1227149). * wifi: iwlwifi: mvm: do not send NDPs for new tx devices (bsc#1227149). * wifi: iwlwifi: mvm: do not send STA_DISABLE_TX_CMD for newer firmware (bsc#1227149). * wifi: iwlwifi: mvm: do not send the smart fifo command if not needed (bsc#1227149). * wifi: iwlwifi: mvm: do not set trigger frame padding in AP mode (bsc#1227149). * wifi: iwlwifi: mvm: do not support reduced tx power on ack for new devices (bsc#1227149). * wifi: iwlwifi: mvm: do not wake up rx_sync_waitq upon RFKILL (git-fixes). * wifi: iwlwifi: mvm: enable FILS DF Tx on non-PSC channel (bsc#1227149). * wifi: iwlwifi: mvm: enable HE TX/RX
Aug 07, 2024
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!