===================================================================== CERT-Renater Note d'Information No. 2021/VULN042 _____________________________________________________________________ DATE : 27/01/2022 HARDWARE PLATFORM(S): / OPERATING SYSTEM(S): Linux kernel. ===================================================================== https://www.suse.com/support/update/announcement/2022/suse-su-20220169-1 https://www.suse.com/support/update/announcement/2022/suse-su-20220181-1 _____________________________________________________________________ SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0169-1 Rating: important References: #1065729 #1071995 #1154353 #1154492 #1156395 #1167773 #1176447 #1176774 #1177437 #1190256 #1191271 #1191929 #1192931 #1193255 #1193328 #1193660 #1193669 #1193727 #1193901 #1193927 #1194001 #1194027 #1194087 #1194094 #1194302 #1194493 #1194516 #1194517 #1194518 #1194529 #1194578 #1194580 #1194584 #1194586 #1194587 #1194589 #1194590 #1194591 #1194592 #1194888 #1194953 #1194985 Cross-References: CVE-2021-4083 CVE-2021-4135 CVE-2021-4149 CVE-2021-4197 CVE-2021-4202 CVE-2021-45485 CVE-2021-45486 CVE-2021-46283 CVE-2022-0185 CVE-2022-0322 Affected Products: SUSE Linux Enterprise Module for Public Cloud 15-SP3 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has 32 fixes is now available. Description: The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: o CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). o CVE-2022-0322: Fixed a denial of service in SCTP sctp_addto_chunk (bsc# 1194985). o CVE-2021-4197: Fixed a cgroup issue where lower privileged processes could write to fds of lower privileged ones that could lead to privilege escalation (bsc#1194302). o CVE-2021-46283: nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace (bnc#1194518). o CVE-2021-4135: Fixed an information leak in the nsim_bpf_map_alloc function (bsc#1193927). o CVE-2021-4202: Fixed a race condition during NFC device remove which could lead to a use-after-free memory corruption (bsc#1194529) o CVE-2021-4083: A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allowed a local user to crash the system or escalate their privileges on the system. (bnc#1193727). o CVE-2021-4149: Fixed a locking condition in btrfs which could lead to system deadlocks (bsc#1194001). o CVE-2021-45485: In the IPv6 implementation net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses (bnc#1194094). o CVE-2021-45486: In the IPv4 implementation net/ipv4/route.c has an information leak because the hash table is very small (bnc#1194087). The following non-security bugs were fixed: o ACPI: APD: Check for NULL pointer after calling devm_ioremap() (git-fixes). o ACPI: Add stubs for wakeup handler functions (git-fixes). o ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes (git-fixes). o ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls (git-fixes). o ALSA: ctl: Fix copy of updated id with element read/write (git-fixes). o ALSA: drivers: opl3: Fix incorrect use of vp->state (git-fixes). o ALSA: hda/hdmi: Disable silent stream on GLK (git-fixes). o ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform (git-fixes). o ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows (git-fixes). o ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED (git-fixes). o ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100 (git-fixes). o ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 (git-fixes). o ALSA: hda/realtek: Fix quirk for Clevo NJ51CU (git-fixes). o ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 (git-fixes). o ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers (git-fixes). o ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ (git-fixes). o ALSA: hda: Add missing rwsem around snd_ctl_remove() calls (git-fixes). o ALSA: hda: Make proper use of timecounter (git-fixes). o ALSA: jack: Add missing rwsem around snd_ctl_remove() calls (git-fixes). o ALSA: jack: Check the return value of kstrdup() (git-fixes). o ALSA: oss: fix compile error when OSS_DEBUG is enabled (git-fixes). o ALSA: pcm: oss: Fix negative period/buffer sizes (git-fixes). o ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() (git-fixes). o ALSA: pcm: oss: Limit the period size to 16MB (git-fixes). o ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID (git-fixes). o ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk (git-fixes). o ASoC: codecs: wcd934x: handle channel mappping list correctly (git-fixes). o ASoC: codecs: wcd934x: return correct value from mixer put (git-fixes). o ASoC: codecs: wcd934x: return error code correctly from hw_params (git-fixes). o ASoC: codecs: wsa881x: fix return values from kcontrol put (git-fixes). o ASoC: cs42l42: Correct configuring of switch inversion from ts-inv (git-fixes). o ASoC: cs42l42: Disable regulators if probe fails (git-fixes). o ASoC: cs42l42: Use device_property API instead of of_property (git-fixes). o ASoC: fsl_asrc: refine the check of available clock divider (git-fixes). o ASoC: fsl_mqs: fix MODULE_ALIAS (git-fixes). o ASoC: mediatek: Check for error clk pointer (git-fixes). o ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s (git-fixes). o ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent() (git-fixes). o ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer (git-fixes). o ASoC: rt5663: Handle device_property_read_u32_array error codes (git-fixes). o ASoC: samsung: idma: Check of ioremap return value (git-fixes). o ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked() (git-fixes). o ASoC: sunxi: fix a sound binding broken reference (git-fixes). o ASoC: tegra: Fix kcontrol put callback in ADMAIF (git-fixes). o ASoC: tegra: Fix kcontrol put callback in AHUB (git-fixes). o ASoC: tegra: Fix kcontrol put callback in DMIC (git-fixes). o ASoC: tegra: Fix kcontrol put callback in DSPK (git-fixes). o ASoC: tegra: Fix kcontrol put callback in I2S (git-fixes). o ASoC: tegra: Fix wrong value type in ADMAIF (git-fixes). o ASoC: tegra: Fix wrong value type in DMIC (git-fixes). o ASoC: tegra: Fix wrong value type in DSPK (git-fixes). o ASoC: tegra: Fix wrong value type in I2S (git-fixes). o ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA (git-fixes). o Add cherry-picked IDs for qemu fw_cfg patches o Bluetooth: L2CAP: Fix using wrong mode (git-fixes). o Bluetooth: bfusb: fix division by zero in send path (git-fixes). o Bluetooth: btmtksdio: fix resume failure (git-fixes). o Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() (git-fixes). o Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails (git-fixes). o Bluetooth: hci_bcm: Check for error irq (git-fixes). o Bluetooth: hci_qca: Stop IBS timer during BT OFF (git-fixes). o Bluetooth: stop proccessing malicious adv data (git-fixes). o Documentation: ACPI: Fix data node reference documentation (git-fixes). o Documentation: dmaengine: Correctly describe dmatest with channel unset (git-fixes). o Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization (git-fixes). o HID: add USB_HID dependancy to hid-chicony (git-fixes). o HID: add USB_HID dependancy to hid-prodikeys (git-fixes). o HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option (git-fixes). o HID: bigbenff: prevent null pointer dereference (git-fixes). o HID: google: add eel USB id (git-fixes). o HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad (git-fixes). o HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc (git-fixes). o HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init (git-fixes). o HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init (git-fixes). o HID: quirks: Add quirk for the Microsoft Surface 3 type-cover (git-fixes). o Input: appletouch - initialize work before device registration (git-fixes). o Input: atmel_mxt_ts - fix double free in mxt_read_info_block (git-fixes). o Input: elantech - fix stack out of bound access in elantech_change_report_id() (git-fixes). o Input: i8042 - add deferred probe support (bsc#1190256). o Input: i8042 - enable deferred probe quirk for ASUS UM325UA (bsc#1190256). o Input: max8925_onkey - do not mark comment as kernel-doc (git-fixes). o Input: spaceball - fix parsing of movement data packets (git-fixes). o Input: ti_am335x_tsc - fix STEPCONFIG setup for Z2 (git-fixes). o Input: ti_am335x_tsc - set ADCREFM for X configuration (git-fixes). o Move upstreamed patches into sorted section o NFC: st21nfca: Fix memory leak in device probe and remove (git-fixes). o NFSD: Fix zero-length NFSv3 WRITEs (git-fixes). o NFSv42: Do not fail clone() unless the OP_CLONE operation failed (git-fixes). o NFSv42: Fix pagecache invalidation after COPY/CLONE (git-fixes). o PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (git-fixes). o PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error (git-fixes). o PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() (git-fixes). o PCI/MSI: Mask MSI-X vectors only on success (git-fixes). o PCI: cadence: Add cdns_plat_pcie_probe() missing return (git-fixes). o PCI: dwc: Do not remap invalid res (git-fixes). o PCI: mvebu: Check for errors from pci_bridge_emul_init() call (git-fixes). o PCI: mvebu: Do not modify PCI IO type bits in conf_write (git-fixes). o PCI: mvebu: Fix support for DEVCAP2, DEVCTL2 and LNKCTL2 registers on emulated bridge (git-fixes). o PCI: mvebu: Fix support for PCI_EXP_DEVCTL on emulated bridge (git-fixes). o PCI: mvebu: Fix support for PCI_EXP_RTSTA on emulated bridge (git-fixes). o PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space (git-fixes). o PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device (git-fixes). o PCI: pciehp: Fix infinite loop in IRQ handler upon power fault (git-fixes). o PCI: xgene: Fix IB window setup (git-fixes). o PM: runtime: Defer suspending suppliers (git-fixes). o PM: sleep: Do not assume that "mem" is always present (git-fixes). o RDMA/hns: Replace kfree() with kvfree() (jsc#SLE-14777). o Rename colliding patches before the next SLE15-SP2 -> SLE15-SP3 merge o Rename colliding patches before the next cve/linux-5.3 -> SLE15-SP3 merge o Revert "PM: sleep: Do not assume that "mem" is always present" (git-fixes). o Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" (git-fixes). o Revert "net/mlx5: Add retry mechanism to the command entry index allocation" (jsc#SLE-15172). o USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status (git-fixes). o USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub (git-fixes). o USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) (git-fixes). o USB: cdc-acm: fix break reporting (git-fixes). o USB: cdc-acm: fix racy tty buffer accesses (git-fixes). o USB: chipidea: fix interrupt deadlock (git-fixes). o USB: core: Fix bug in resuming hub's handling of wakeup requests (git-fixes). o USB: gadget: bRequestType is a bitfield, not a enum (git-fixes). o USB: gadget: detect too-big endpoint 0 requests (git-fixes). o USB: gadget: zero allocate endpoint 0 buffers (git-fixes). o USB: serial: cp210x: fix CP2105 GPIO registration (git-fixes). o USB: serial: option: add Telit FN990 compositions (git-fixes). o Update patches.suse/ tpm-fix-potential-NULL-pointer-access-in-tpm_del_cha.patch (git-fixes bsc# 1193660 ltc#195634). o Updated mpi3mr entry in supported.conf (bsc#1194578 jsc#SLE-18120) Moving this driver into the "supported" package. o amd/display: downgrade validation failure log level (git-fixes). o ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile (git-fixes). o atlantic: Fix buff_ring OOB in aq_ring_rx_clean (git-fixes). o ax25: NPD bug when detaching AX25 device (git-fixes). o backlight: qcom-wled: Fix off-by-one maximum with default num_strings (git-fixes). o backlight: qcom-wled: Override default length with qcom,enabled-strings (git-fixes). o backlight: qcom-wled: Pass number of elements to read to read_u32_array (git-fixes). o backlight: qcom-wled: Validate enabled string indices in DT (git-fixes). o batman-adv: mcast: do not send link-local multicast to mcast routers (git-fixes). o blk-cgroup: synchronize blkg creation against policy deactivation (bsc# 1194584). o block/scsi-ioctl: Fix kernel-infoleak in scsi_put_cdrom_generic_arg() (git-fixes). o block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) (bsc#1194586). o can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data (git-fixes). o can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} (git-fixes). o can: kvaser_usb: get CAN clock frequency from device (git-fixes). o can: sja1000: fix use after free in ems_pcmcia_add_card() (git-fixes). o can: softing: softing_startstop(): fix set but not used variable warning (git-fixes). o can: softing_cs: softingcs_probe(): fix memleak on registration failure (git-fixes). o can: usb_8dev: remove unused member echo_skb from struct usb_8dev_priv (git-fixes). o can: xilinx_can: xcan_probe(): check for error irq (git-fixes). o char/mwave: Adjust io port register size (git-fixes). o clk: Do not parent clks until the parent is fully registered (git-fixes). o clk: Gemini: fix struct name in kernel-doc (git-fixes). o clk: bcm-2835: Pick the closest clock rate (git-fixes). o clk: bcm-2835: Remove rounding up the dividers (git-fixes). o clk: imx8mn: Fix imx8mn_clko1_sels (git-fixes). o clk: imx: pllv1: fix kernel-doc notation for struct clk_pllv1 (git-fixes). o clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk (git-fixes). o clk: qcom: regmap-mux: fix parent clock lookup (git-fixes). o clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell (git-fixes). o crypto: caam - replace this_cpu_ptr with raw_cpu_ptr (git-fixes). o crypto: mxs-dcp - Use sg_mapping_iter to copy data (git-fixes). o crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() (git-fixes). o crypto: qat - do not ignore errors from enable_vf2pf_comms() (git-fixes). o crypto: qat - fix reuse of completion variable (git-fixes). o crypto: qat - handle both source of interrupt in VF ISR (git-fixes). o crypto: qce - fix uaf on qce_ahash_register_one (git-fixes). o crypto: stm32/crc32 - Fix kernel BUG triggered in probe() (git-fixes). o crypto: stm32/cryp - fix double pm exit (git-fixes). o crypto: stm32/cryp - fix lrw chaining mode (git-fixes). o crypto: stm32/cryp - fix xts and race condition in crypto_engine requests (git-fixes). o debugfs: lockdown: Allow reading debugfs files that are not world readable (bsc#1193328 ltc#195566). o device property: Fix documentation for FWNODE_GRAPH_DEVICE_DISABLED (git-fixes). o dm crypt: document encrypted keyring key option (git-fixes). o dm writecache: add "cleaner" and "max_age" to Documentation (git-fixes). o dm writecache: advance the number of arguments when reporting max_age (git-fixes). o dm writecache: fix performance degradation in ssd mode (git-fixes). o dm writecache: flush origin device when writing and cache is full (git-fixes). o dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() (git-fixes). o dmaengine: at_xdmac: Do not start transactions at tx_submit level (git-fixes). o dmaengine: at_xdmac: Fix at_xdmac_lld struct definition (git-fixes). o dmaengine: at_xdmac: Fix concurrency over xfers_list (git-fixes). o dmaengine: at_xdmac: Fix lld view setting (git-fixes). o dmaengine: at_xdmac: Print debug message after realeasing the lock (git-fixes). o dmaengine: bestcomm: fix system boot lockups (git-fixes). o dmaengine: idxd: add module parameter to force disable of SVA (bsc# 1192931). o dmaengine: idxd: enable SVA feature for IOMMU (bsc#1192931). o dmaengine: pxa/mmp: stop referencing config->slave_id (git-fixes). o dmaengine: st_fdma: fix MODULE_ALIAS (git-fixes). o drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (git-fixes). o drm/amd/display: Fix for the no Audio bug with Tiled Displays (git-fixes). o drm/amd/display: Update bounding box states (v2) (git-fixes). o drm/amd/display: Update number of DCN3 clock states (git-fixes). o drm/amd/display: add connector type check for CRC source set (git-fixes). o drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled (git-fixes). o drm/amd/display: fix incorrect CM/TF programming sequence in dwb (git-fixes). o drm/amd/display: fix missing writeback disablement if plane is removed (git-fixes). o drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() (git-fixes). o drm/amdgpu: Fix a printing message (git-fixes). o drm/amdgpu: Fix amdgpu_ras_eeprom_init() (git-fixes). o drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE (git-fixes). o drm/amdgpu: revert "Add autodump debugfs node for gpu reset v8" (git-fixes). o drm/amdkfd: Account for SH/SE count when setting up cu masks (git-fixes). o drm/amdkfd: Check for null pointer after calling kmemdup (git-fixes). o drm/ast: potential dereference of null pointer (git-fixes). o drm/atomic: Check new_crtc_state->active to determine if CRTC needs disable in self refresh mode (git-fixes). o drm/bridge: analogix_dp: Make PSR-exit block less (git-fixes). o drm/bridge: display-connector: fix an uninitialized pointer in probe() (git-fixes). o drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit (git-fixes). o drm/bridge: ti-sn65dsi86: Set max register for regmap (git-fixes). o drm/display: fix possible null-pointer dereference in dcn10_set_clock() (git-fixes). o drm/exynos: Always initialize mapping in exynos_drm_register_dma() (git-fixes). o drm/i915/fb: Fix rounding error in subsampled plane size calculation (git-fixes). o drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() (git-fixes). o drm/mediatek: Check plane visibility in atomic_update (git-fixes). o drm/msm/dpu: fix safe status debugfs file (git-fixes). o drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660 (git-fixes). o drm/msm/dsi: set default num_data_lanes (git-fixes). o drm/msm/mdp5: fix cursor-related warnings (git-fixes). o drm/msm: mdp4: drop vblank get/put from prepare/complete_commit (git-fixes). o drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture() (git-fixes). o drm/panel: innolux-p079zca: Delete panel on attach() failure (git-fixes). o drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure (git-fixes). o drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() (git-fixes). o drm/rockchip: dsi: Disable PLL clock on bind error (git-fixes). o drm/rockchip: dsi: Fix unbalanced clock on probe error (git-fixes). o drm/rockchip: dsi: Hold pm-runtime across bind/unbind (git-fixes). o drm/rockchip: dsi: Reconfigure hardware on resume() (git-fixes). o drm/sun4i: dw-hdmi: Fix missing put_device() call in sun8i_hdmi_phy_get (git-fixes). o drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY (git-fixes). o drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence (git-fixes). o drm/tegra: vic: Fix DMA API misuse (git-fixes). o drm/vboxvideo: fix a NULL vs IS_ERR() check (git-fixes). o drm/vc4: hdmi: Make sure the controller is powered up during bind (git-fixes). o drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET (git-fixes). o drm/vc4: hdmi: Set a default HSM rate (git-fixes). o drm: fix null-ptr-deref in drm_dev_init_release() (git-fixes). o drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers (git-fixes). o drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock (git-fixes). o eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (git-fixes). o eeprom: idt_89hpesx: Restore printing the unsupported fwnode name (git-fixes). o ext4: Avoid trim error on fs with small groups (bsc#1191271). o ext4: fix lazy initialization next schedule time computation in more granular unit (bsc#1194580). o fget: clarify and improve __fget_files() implementation (bsc#1193727). o firmware: Update Kconfig help text for Google firmware (git-fixes). o firmware: arm_scmi: pm: Propagate return value to caller (git-fixes). o firmware: arm_scpi: Fix string overflow in SCPI genpd driver (git-fixes). o firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available() (git-fixes). o firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries (git-fixes). o firmware: qemu_fw_cfg: fix kobject leak in probe error path (git-fixes). o firmware: qemu_fw_cfg: fix sysfs information leak (git-fixes). o firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()' (git-fixes). o firmware: smccc: Fix check for ARCH_SOC_ID not implemented (git-fixes). o firmware: tegra: Fix error application of sizeof() to pointer (git-fixes). o firmware: tegra: Reduce stack usage (git-fixes). o firmware_loader: fix pre-allocated buf built-in firmware use (git-fixes). o floppy: Fix hang in watchdog when disk is ejected (git-fixes). o flow_offload: return EOPNOTSUPP for the unsupported mpls action type (bsc# 1154353). o fuse: Pass correct lend value to filemap_write_and_wait_range() (bsc# 1194953). o gpiolib: acpi: Make set-debounce-timeout failures non fatal (git-fixes). o gpu: host1x: Add back arm_iommu_detach_device() (git-fixes). o hwmon: (lm90) Add basic support for TI TMP461 (git-fixes). o hwmon: (lm90) Add max6654 support to lm90 driver (git-fixes). o hwmon: (lm90) Do not report 'busy' status bit as alarm (git-fixes). o hwmon: (lm90) Drop critical attribute support for MAX6654 (git-fixes). o hwmon: (lm90) Fix usage of CONFIG2 register in detect function (git-fixes). o hwmon: (lm90) Introduce flag indicating extended temperature support (git-fixes). o i2c: rk3x: Handle a spurious start completion interrupt flag (git-fixes). o i2c: validate user data in compat ioctl (git-fixes). o i3c: fix incorrect address slot lookup on 64-bit (git-fixes). o i3c: master: dw: check return of dw_i3c_master_get_free_pos() (git-fixes). o i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (git-fixes). o i40e: Fix for displaying message regarding NVM version (git-fixes). o i40e: Fix incorrect netdev's real number of RX/TX queues (git-fixes). o i40e: Fix to not show opcode msg on unsuccessful VF MAC change (git-fixes). o i40e: fix use-after-free in i40e_sync_filters_subtask() (git-fixes). o iavf: Fix limit of total number of queues to active queues of VF (git-fixes). o iavf: restore MSI state on reset (git-fixes). o ieee802154: atusb: fix uninit value in atusb_set_extended_addr (git-fixes). o ieee802154: fix error return code in ieee802154_llsec_getparams() (git-fixes). o ieee802154: fix error return code in ieee802154_add_iface() (git-fixes). o ieee802154: hwsim: Fix memory leak in hwsim_add_one (git-fixes). o ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others (git-fixes). o ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() (git-fixes). o ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi (git-fixes). o igb: Fix removal of unicast MAC filters of VFs (git-fixes). o igbvf: fix double free in `igbvf_probe` (git-fixes). o igc: Fix typo in i225 LTR functions (jsc#SLE-13533). o iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove (git-fixes). o iio: ad7768-1: Call iio_trigger_notify_done() on error (git-fixes). o iio: adc: axp20x_adc: fix charging current reporting on AXP22x (git-fixes). o iio: at91-sama5d2: Fix incorrect sign extension (git-fixes). o iio: dln2-adc: Fix lockdep complaint (git-fixes). o iio: dln2: Check return value of devm_iio_trigger_register() (git-fixes). o iio: itg3200: Call iio_trigger_notify_done() on error (git-fixes). o iio: kxsd9: Do not return error code in trigger handler (git-fixes). o iio: ltr501: Do not return error code in trigger handler (git-fixes). o iio: mma8452: Fix trigger reference couting (git-fixes). o iio: stk3310: Do not return error code in interrupt handler (git-fixes). o iio: trigger: Fix reference counting (git-fixes). o iio: trigger: stm32-timer: fix MODULE_ALIAS (git-fixes). o ionic: Initialize the 'lif->dbid_inuse' bitmap (bsc#1167773). o isofs: Fix out of bound access for corrupted isofs image (bsc#1194591). o iwlwifi: fw: correctly limit to monitor dump (git-fixes). o iwlwifi: mvm: Fix scan channel flags settings (git-fixes). o iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() (git-fixes). o iwlwifi: mvm: avoid static queue number aliasing (git-fixes). o iwlwifi: mvm: disable RX-diversity in powersave (git-fixes). o iwlwifi: mvm: fix 32-bit build in FTM (git-fixes). o iwlwifi: mvm: fix access to BSS elements (git-fixes). o iwlwifi: mvm: test roc running status bits before removing the sta (git-fixes). o iwlwifi: pcie: free RBs during configure (git-fixes). o ixgbe: set X550 MDIO speed before talking to PHY (git-fixes). o kmod: make request_module() return an error when autoloading is disabled (git-fixes). o kobject: Restore old behaviour of kobject_del(NULL) (git-fixes). o kobject_uevent: remove warning in init_uevent_argv() (git-fixes). o kprobes: Limit max data_size of the kretprobe instances (bsc#1193669). o libata: add horkage for ASMedia 1092 (git-fixes). o libata: if T_LENGTH is zero, dma direction should be DMA_NONE (git-fixes). o livepatch: Avoid CPU hogging with cond_resched (bsc#1071995). o lockdown: Allow unprivileged users to see lockdown status (git-fixes). o mISDN: change function names to avoid conflicts (git-fixes). o mac80211: Fix monitor MTU limit so that A-MSDUs get through (git-fixes). o mac80211: agg-tx: do not schedule_and_wake_txq() under sta->lock (git-fixes). o mac80211: do not access the IV when it was stripped (git-fixes). o mac80211: fix lookup when adding AddBA extension element (git-fixes). o mac80211: fix regression in SSN handling of addba tx (git-fixes). o mac80211: initialize variable have_higher_than_11mbit (git-fixes). o mac80211: mark TX-during-stop for TX in in_reconfig (git-fixes). o mac80211: send ADDBA requests using the tid/queue of the aggregation session (git-fixes). o mac80211: track only QoS data frames for admission control (git-fixes). o mac80211: validate extended element ID is present (git-fixes). o mailbox: hi3660: convert struct comments to kernel-doc notation (git-fixes). o media: Revert "media: uvcvideo: Set unique vdev name based in type" (bsc# 1193255). o media: aspeed: Update signal status immediately to ensure sane hw state (git-fixes). o media: aspeed: fix mode-detect always time out at 2nd run (git-fixes). o media: cpia2: fix control-message timeouts (git-fixes). o media: dib0700: fix undefined behavior in tuner shutdown (git-fixes). o media: dib8000: Fix a memleak in dib8000_init() (git-fixes). o media: dmxdev: fix UAF when dvb_register_device() fails (git-fixes). o media: dw2102: Fix use after free (git-fixes). o media: em28xx: fix control-message timeouts (git-fixes). o media: em28xx: fix memory leak in em28xx_init_dev (git-fixes). o media: flexcop-usb: fix control-message timeouts (git-fixes). o media: hantro: Fix probe func error path (git-fixes). o media: i2c: imx274: fix trivial typo expsoure/exposure (git-fixes). o media: i2c: imx274: fix trivial typo obainted/obtained (git-fixes). o media: imx-pxp: Initialize the spinlock prior to using it (git-fixes). o media: mceusb: fix control-message timeouts (git-fixes). o media: msi001: fix possible null-ptr-deref in msi001_probe() (git-fixes). o media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released (git-fixes). o media: pvrusb2: fix control-message timeouts (git-fixes). o media: rcar-csi2: Correct the selection of hsfreqrange (git-fixes). o media: rcar-csi2: Optimize the selection PHTW register (git-fixes). o media: redrat3: fix control-message timeouts (git-fixes). o media: s2255: fix control-message timeouts (git-fixes). o media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() (git-fixes). o media: si2157: Fix "warm" tuner state detection (git-fixes). o media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() (git-fixes). o media: stk1160: fix control-message timeouts (git-fixes). o media: streamzap: remove unnecessary ir_raw_event_reset and handle (git-fixes). o media: uvcvideo: fix division by zero at stream start (git-fixes). o media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' (git-fixes). o memblock: ensure there is no overflow in memblock_overlaps_region() (git-fixes). o memory: emif: Remove bogus debugfs error handling (git-fixes). o mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() (git-fixes). o misc: fastrpc: Add missing lock before accessing find_vma() (git-fixes). o misc: fastrpc: fix improper packet size calculation (git-fixes). o misc: lattice-ecp3-config: Fix task hung when firmware load failed (git-fixes). o mmc: meson-mx-sdio: add IRQ check (git-fixes). o mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (git-fixes). o mmc: sdhci-esdhc-imx: disable CMDQ support (git-fixes). o mmc: sdhci-pci: Add PCI ID for Intel ADL (git-fixes). o mmc: sdhci-tegra: Fix switch to HS400ES mode (git-fixes). o moxart: fix potential use-after-free on remove path (bsc#1194516). o mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode (git-fixes). o mt76: mt7915: fix an off-by-one bound check (git-fixes). o mtd: rawnand: fsmc: Fix timing computation (git-fixes). o mtd: rawnand: fsmc: Take instruction delay into account (git-fixes). o mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() (git-fixes). o mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (git-fixes). o mwifiex: Fix possible ABBA deadlock (git-fixes). o mwifiex: Try waking the firmware until we get an interrupt (git-fixes). o net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources (jsc# SLE-8464). o net/mlx5: Set command entry semaphore up once got index free (jsc# SLE-15172). o net/mlx5e: Fix wrong features assignment in case of error (git-fixes). o net/mlx5e: Wrap the tx reporter dump callback to extract the sq (jsc# SLE-15172). o net/sched: fq_pie: prevent dismantle issue (jsc#SLE-15172). o net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1176774). o net: create netdev->dev_addr assignment helpers (git-fixes). o net: ena: Fix error handling when calculating max IO queues number (bsc# 1154492). o net: ena: Fix undefined state when tx request id is out of bounds (bsc# 1154492). o net: ena: Fix wrong rx request id by resetting device (git-fixes). o net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (jsc#SLE-14777). o net: usb: lan78xx: add Allied Telesis AT29M2-AF (git-fixes). o net: usb: pegasus: Do not drop long Ethernet frames (git-fixes). o netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone (bsc# 1176447). o nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (git-fixes). o nfc: fix segfault in nfc_genl_dump_devices_done (git-fixes). o nfsd: Fix nsfd startup race (again) (git-fixes). o nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups (bsc#1176447). o nvme-tcp: block BH in sk state_change sk callback (git-fixes). o nvme-tcp: can't set sk_user_data without write_lock (git-fixes). o nvme-tcp: check sgl supported by target (git-fixes). o nvme-tcp: do not update queue count when failing to set io queues (git-fixes). o nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU (git-fixes). o nvme-tcp: fix crash triggered with a dataless request submission (git-fixes). o nvme-tcp: fix error codes in nvme_tcp_setup_ctrl() (git-fixes). o nvme-tcp: fix io_work priority inversion (git-fixes). o nvme-tcp: fix possible data corruption with bio merges (git-fixes). o nvme-tcp: fix possible req->offset corruption (git-fixes). o nvme-tcp: fix wrong setting of request iov_iter (git-fixes). o nvme-tcp: get rid of unused helper function (git-fixes). o nvme-tcp: pair send_mutex init with destroy (git-fixes). o nvme-tcp: pass multipage bvec to request iov_iter (git-fixes). o nvme-tcp: remove incorrect Kconfig dep in BLK_DEV_NVME (git-fixes). o pcmcia: fix setting of kthread task states (git-fixes). o pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() (git-fixes). o pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() (git-fixes). o pcnet32: Use pci_resource_len to validate PCI resource (git-fixes). o pinctrl: mediatek: fix global-out-of-bounds issue (git-fixes). o pinctrl: qcom: spmi-gpio: correct parent irqspec translation (git-fixes). o pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines (git-fixes). o pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() (git-fixes). o pipe: increase minimum default pipe size to 2 pages (bsc#1194587). o platform/x86: apple-gmux: use resource_size() with res (git-fixes). o platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep (git-fixes). o power: reset: ltc2952: Fix use of floating point literals (git-fixes). o power: supply: core: Break capacity loop (git-fixes). o power: supply: max17042_battery: Clear status bits in interrupt handler (git-fixes). o powerpc/64s: fix program check interrupt emergency stack path (bsc# 1156395). o powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic (bsc#1193901 ltc#194976). o powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC (bsc#1156395). o powerpc/perf: Fix data source encodings for L2.1 and L3.1 accesses (bsc# 1065729). o powerpc/prom_init: Fix improper check of prom_getprop() (bsc#1065729). o powerpc/pseries/cpuhp: cache node corrections (bsc#1065729). o powerpc/pseries/cpuhp: delete add/remove_by_count code (bsc#1065729). o powerpc/pseries/mobility: ignore ibm, platform-facilities updates (bsc# 1065729). o powerpc/traps: do not enable irqs in _exception (bsc#1065729). o powerpc/xive: Add missing null check after calling kmalloc (bsc#1177437 ltc #188522 jsc#SLE-13294 git-fixes). o powerpc: add interrupt_cond_local_irq_enable helper (bsc#1065729). o powerpc: handle kdump appropriately with crash_kexec_post_notifiers option (bsc#1193901 ltc#194976). o pwm: mxs: Do not modify HW state in .probe() after the PWM chip was registered (git-fixes). o pwm: tiecap: Drop .free() callback (git-fixes). o qlcnic: potential dereference null pointer of rx_queue->page_ring (git-fixes). o quota: check block number when reading the block in quota file (bsc# 1194589). o quota: correct error number in free_dqentry() (bsc#1194590). o random: fix data race on crng init time (git-fixes). o random: fix data race on crng_node_pool (git-fixes). o regmap: Call regmap_debugfs_exit() prior to _init() (git-fixes). o rndis_host: support Hytera digital radios (git-fixes). o rpmsg: core: Clean up resources on announce_create failure (git-fixes). o rtl8xxxu: Fix the handling of TX A-MPDU aggregation (git-fixes). o rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled (git-fixes). o rtw88: use read_poll_timeout instead of fixed sleep (git-fixes). o rtw88: wow: build wow function only if CONFIG_PM is on (git-fixes). o rtw88: wow: fix size access error of probe request (git-fixes). o sata: nv: fix debug format string mismatch (git-fixes). o select: Fix indefinitely sleeping task in poll_schedule_timeout() (bsc# 1194027). o selftests: KVM: Explicitly use movq to read xmm registers (git-fixes). o selinux: fix potential memleak in selinux_add_opt() (git-fixes). o seq_buf: Fix overflow in seq_buf_putmem_hex() (git-fixes). o seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (git-fixes). o serial: pl011: Add ACPI SBSA UART match id (git-fixes). o serial: tty: uartlite: fix console setup (git-fixes). o sfc: Check null pointer of rx_queue->page_ring (git-fixes). o sfc: The RX page_ring is optional (git-fixes). o sfc: falcon: Check null pointer of rx_queue->page_ring (git-fixes). o sfc_ef100: potential dereference of null pointer (jsc#SLE-16683). o shmem: shmem_writepage() split unlikely i915 THP (git-fixes). o slimbus: qcom: fix potential NULL dereference in qcom_slim_prg_slew() (git-fixes). o soc/tegra: fuse: Fix bitwise vs. logical OR warning (git-fixes). o soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (git-fixes). o soc: fsl: dpio: rename the enqueue descriptor variable (git-fixes). o soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id (git-fixes). o soc: fsl: dpio: use an explicit NULL instead of 0 (git-fixes). o soc: fsl: dpio: use the combined functions to protect critical zone (git-fixes). o spi: change clk_disable_unprepare to clk_unprepare (git-fixes). o spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe (git-fixes). o spi: spi-rspi: Drop redeclaring ret variable in qspi_transfer_in() (git-fixes). o staging: emxx_udc: Fix passing of NULL to dma_alloc_coherent() (git-fixes). o staging: fbtft: Do not spam logs when probe is deferred (git-fixes). o staging: fbtft: Rectify GPIO handling (git-fixes). o staging: fieldbus: anybuss: jump to correct label in an error path (git-fixes). o staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (git-fixes). o staging: rtl8192e: return error code from rtllib_softmac_init() (git-fixes). o staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() (git-fixes). o staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() (git-fixes). o string.h: fix incompatibility between FORTIFY_SOURCE and KASAN (git-fixes). o thermal/drivers/imx8mm: Enable ADC when enabling monitor (git-fixes). o thermal/drivers/int340x: Do not set a wrong tcc offset on resume (git-fixes). o thermal: core: Reset previous low and high trip during thermal zone init (git-fixes). o tpm: add request_locality before write TPM_INT_ENABLE (git-fixes). o tpm: fix potential NULL pointer access in tpm_del_char_device (git-fixes). o tracing/kprobes: 'nmissed' not showed correctly for kretprobe (git-fixes). o tracing/uprobes: Check the return value of kstrdup() for tu->filename (git-fixes). o tracing: Add test for user space strings when filtering on string pointers (git-fixes). o tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() (git-fixes). o tty: max310x: fix flexible_array.cocci warnings (git-fixes). o tty: serial: atmel: Call dma_async_issue_pending() (git-fixes). o tty: serial: atmel: Check return code of dmaengine_submit() (git-fixes). o tty: serial: earlycon dependency (git-fixes). o tty: serial: qcom_geni_serial: Drop __init from qcom_geni_console_setup (git-fixes). o tty: serial: uartlite: allow 64 bit address (git-fixes). o tty: synclink_gt: rename a conflicting function name (git-fixes). o udf: Fix crash after seekdir (bsc#1194592). o uio: uio_dmem_genirq: Catch the Exception (git-fixes). o usb: core: config: fix validation of wMaxPacketValue entries (git-fixes). o usb: core: config: using bit mask instead of individual bits (git-fixes). o usb: dwc2: check return value after calling platform_get_resource() (git-fixes). o usb: dwc3: gadget: Continue to process pending requests (git-fixes). o usb: dwc3: gadget: Ignore EP queue requests during bus reset (git-fixes). o usb: dwc3: gadget: Reclaim extra TRBs after request completion (git-fixes). o usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield (git-fixes). o usb: dwc3: ulpi: Fix USB2.0 HS/FS/LS PHY suspend regression (git-fixes). o usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one (git-fixes). o usb: dwc3: ulpi: fix checkpatch warning (git-fixes). o usb: ftdi-elan: fix memory leak on device disconnect (git-fixes). o usb: gadget: composite: Allow bMaxPower=0 if self-powered (git-fixes). o usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear (git-fixes). o usb: gadget: u_ether: fix race in setting MAC address in setup phase (git-fixes). o usb: mtu3: add memory barrier before set GPD's HWO (git-fixes). o usb: mtu3: fix interval value for intr and isoc (git-fixes). o usb: mtu3: fix list_head check warning (git-fixes). o usb: mtu3: set interval of FS intr and isoc endpoint (git-fixes). o usb: typec: tcpm: handle SRC_STARTUP state if cc changes (git-fixes). o usb: xhci: Extend support for runtime power management for AMD's Yellow carp (git-fixes). o usermodehelper: reset umask to default before executing user process (git-fixes). o vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888). o video: backlight: Drop maximum brightness override for brightness zero (git-fixes). o watchdog: Fix OMAP watchdog early handling (git-fixes). o watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (git-fixes). o wcn36xx: Fix missing frame timestamp for beacon/probe-resp (git-fixes). o wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND (git-fixes). o wcn36xx: Release DMA channel descriptor allocations (git-fixes). o wcn36xx: handle connection loss indication (git-fixes). o wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma (git-fixes). o x86/platform/uv: Add more to secondary CPU kdump info (bsc#1194493). o xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set (git-fixes). o xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending (git-fixes). o xhci: avoid race between disable slot command and host runtime suspend (git-fixes). o xhci: fix unsafe memory usage in xhci tracing (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: o SUSE Linux Enterprise Module for Public Cloud 15-SP3: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2022-169=1 Package List: o SUSE Linux Enterprise Module for Public Cloud 15-SP3 (noarch): kernel-devel-azure-5.3.18-150300.38.37.1 kernel-source-azure-5.3.18-150300.38.37.1 o SUSE Linux Enterprise Module for Public Cloud 15-SP3 (x86_64): kernel-azure-5.3.18-150300.38.37.1 kernel-azure-debuginfo-5.3.18-150300.38.37.1 kernel-azure-debugsource-5.3.18-150300.38.37.1 kernel-azure-devel-5.3.18-150300.38.37.1 kernel-azure-devel-debuginfo-5.3.18-150300.38.37.1 kernel-syms-azure-5.3.18-150300.38.37.1 References: o https://www.suse.com/security/cve/CVE-2021-4083.html o https://www.suse.com/security/cve/CVE-2021-4135.html o https://www.suse.com/security/cve/CVE-2021-4149.html o https://www.suse.com/security/cve/CVE-2021-4197.html o https://www.suse.com/security/cve/CVE-2021-4202.html o https://www.suse.com/security/cve/CVE-2021-45485.html o https://www.suse.com/security/cve/CVE-2021-45486.html o https://www.suse.com/security/cve/CVE-2021-46283.html o https://www.suse.com/security/cve/CVE-2022-0185.html o https://www.suse.com/security/cve/CVE-2022-0322.html o https://bugzilla.suse.com/1065729 o https://bugzilla.suse.com/1071995 o https://bugzilla.suse.com/1154353 o https://bugzilla.suse.com/1154492 o https://bugzilla.suse.com/1156395 o https://bugzilla.suse.com/1167773 o https://bugzilla.suse.com/1176447 o https://bugzilla.suse.com/1176774 o https://bugzilla.suse.com/1177437 o https://bugzilla.suse.com/1190256 o https://bugzilla.suse.com/1191271 o https://bugzilla.suse.com/1191929 o https://bugzilla.suse.com/1192931 o https://bugzilla.suse.com/1193255 o https://bugzilla.suse.com/1193328 o https://bugzilla.suse.com/1193660 o https://bugzilla.suse.com/1193669 o https://bugzilla.suse.com/1193727 o https://bugzilla.suse.com/1193901 o https://bugzilla.suse.com/1193927 o https://bugzilla.suse.com/1194001 o https://bugzilla.suse.com/1194027 o https://bugzilla.suse.com/1194087 o https://bugzilla.suse.com/1194094 o https://bugzilla.suse.com/1194302 o https://bugzilla.suse.com/1194493 o https://bugzilla.suse.com/1194516 o https://bugzilla.suse.com/1194517 o https://bugzilla.suse.com/1194518 o https://bugzilla.suse.com/1194529 o https://bugzilla.suse.com/1194578 o https://bugzilla.suse.com/1194580 o https://bugzilla.suse.com/1194584 o https://bugzilla.suse.com/1194586 o https://bugzilla.suse.com/1194587 o https://bugzilla.suse.com/1194589 o https://bugzilla.suse.com/1194590 o https://bugzilla.suse.com/1194591 o https://bugzilla.suse.com/1194592 o https://bugzilla.suse.com/1194888 o https://bugzilla.suse.com/1194953 o https://bugzilla.suse.com/1194985 _____________________________________________________________________ SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0181-1 Rating: important References: #1139944 #1151927 #1152489 #1154353 #1154355 #1161907 #1164565 #1166780 #1176242 #1176536 #1176544 #1176545 #1176546 #1176548 #1176558 #1176559 #1176956 #1177440 #1178270 #1179211 #1179426 #1179427 #1179960 #1181148 #1181507 #1181710 #1183534 #1183540 #1183897 #1185726 #1185902 #1187541 #1189126 #1191793 #1191876 #1192267 #1192507 #1192511 #1192569 #1192606 #1192845 #1192847 #1192877 #1192946 #1192969 #1192990 #1193042 #1193169 #1193318 #1193349 #1193440 #1193442 Cross-References: CVE-2021-28711 CVE-2021-28712 CVE-2021-28713 CVE-2021-28714 CVE-2021-28715 CVE-2021-33098 CVE-2021-4001 CVE-2021-4002 CVE-2021-43975 CVE-2021-43976 Affected Products: SUSE MicroOS 5.0 SUSE Linux Enterprise Module for Realtime 15-SP2 ______________________________________________________________________________ An update that solves 10 vulnerabilities, contains one feature and has 42 fixes is now available. Description: The SUSE MicroOS 5.0 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: o CVE-2021-4001: Fixed a race condition when the EBPF map is frozen. (bsc# 1192990) o CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in hugetlbfs. (bsc#1192946) o CVE-2021-28711: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening blkfront against event channel storms. (bsc#1193440) o CVE-2021-28712: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening netfront against event channel storms. (bsc#1193440) o CVE-2021-28713: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening hvc_xen against event channel storms. (bsc#1193440) o CVE-2021-28714: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by fixing rx queue stall detection. (bsc#1193442) o CVE-2021-28715: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by do not queueing unlimited number of packages. (bsc#1193442) o CVE-2021-33098: Fixed improper input validation in the Intel(R) Ethernet ixgbe driver that could allow an authenticate user to cause a denial of service (bnc#1192877). o CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bnc#1192845) o CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bnc#1192847) The following non-security bugs were fixed: o acpi: battery: Accept charges over the design capacity as full (git-fixes). o acpi: pmic: Fix intel_pmic_regs_handler() read accesses (git-fixes). o acpica: Avoid evaluating methods too early during system resume (git-fixes). o alsa: ISA: not for M68K (git-fixes). o alsa: ctxfi: Fix out-of-range access (git-fixes). o alsa: gus: fix null pointer dereference on pointer block (git-fixes). o alsa: hda/realtek: Add a quirk for Acer Spin SP513-54N (git-fixes). o alsa: hda/realtek: Add quirk for ASUS UX550VE (git-fixes). o alsa: hda/realtek: Add quirk for Clevo PC70HS (git-fixes). o alsa: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (git-fixes). o alsa: hda: hdac_ext_stream: fix potential locking issues (git-fixes). o alsa: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() (git-fixes). o alsa: synth: missing check for possible NULL after the call to kstrdup (git-fixes). o alsa: timer: Fix use-after-free problem (git-fixes). o alsa: timer: Unconditionally unlink slave instances, too (git-fixes). o alsa: usb-audio: Add registration quirk for JBL Quantum 400 (git-fixes). o arm: 8986/1: hw_breakpoint: Do not invoke overflow handler on uaccess watchpoints (git-fixes) o arm: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT (git-fixes) o arm: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe (git-fixes) o arm: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores (git-fixes) o arm: 9064/1: hw_breakpoint: Do not directly check the event's (git-fixes) o arm: 9071/1: uprobes: Do not hook on thumb instructions (git-fixes) o arm: 9081/1: fix gcc-10 thumb2-kernel regression (git-fixes) o arm: 9091/1: Revert "mm: qsd8x50: Fix incorrect permission faults" (git-fixes) o arm: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (git-fixes) o arm: 9134/1: remove duplicate memcpy() definition (git-fixes) o arm: 9139/1: kprobes: fix arch_init_kprobes() prototype (git-fixes) o arm: 9141/1: only warn about XIP address when not compile testing (git-fixes) o arm: 9155/1: fix early early_iounmap() (git-fixes) o arm: OMAP2+: Fix legacy mode dss_reset (git-fixes) o arm: OMAP2+: omap_device: fix idling of devices during probe (git-fixes) o arm: at91: pm: add missing put_device() call in at91_pm_sram_init() (git-fixes) o arm: at91: pm: of_node_put() after its usage (git-fixes) o arm: bcm: Select ARM_TIMER_SP804 for ARCH_BCM_NSP (git-fixes) o arm: dts sunxi: Relax a bit the CMA pool allocation range (git-fixes) o arm: dts: BCM5301X: Add interrupt properties to GPIO node (git-fixes) o arm: dts: BCM5301X: Fix I2C controller interrupt (git-fixes) o arm: dts: BCM5301X: Fixed QSPI compatible string (git-fixes) o arm: dts: Configure missing thermal interrupt for 4430 (git-fixes) o arm: dts: Fix dcan driver probe failed on am437x platform (git-fixes) o arm: dts: Fix duovero smsc interrupt for suspend (git-fixes) o arm: dts: NSP: Correct FA2 mailbox node (git-fixes) o arm: dts: NSP: Disable PL330 by default, add dma-coherent property (git-fixes) o arm: dts: NSP: Fixed QSPI compatible string (git-fixes) o arm: dts: Remove non-existent i2c1 from 98dx3236 (git-fixes) o arm: dts: am335x-pocketbeagle: Fix mmc0 Write Protect (git-fixes) o arm: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (git-fixes) o arm: dts: am437x-l4: fix typo in can@0 node (git-fixes) o arm: dts: armada-38x: fix NETA lockup when repeatedly switching speeds (git-fixes) o arm: dts: armada388-helios4: assign pinctrl to LEDs (git-fixes) o arm: dts: armada388-helios4: assign pinctrl to each fan (git-fixes) o arm: dts: aspeed: s2600wf: Fix VGA memory region location (git-fixes) o arm: dts: aspeed: tiogapass: Remove vuart (git-fixes) o arm: dts: at91-sama5d27_som1: fix phy address to 7 (git-fixes) o arm: dts: at91: add pinctrl-{names, 0} for all gpios (git-fixes) o arm: dts: at91: at91sam9rl: fix ADC triggers (git-fixes) o arm: dts: at91: sama5d2: fix CAN message ram offset and size (git-fixes) o arm: dts: at91: sama5d2: map securam as device (git-fixes) o arm: dts: at91: sama5d2_ptc_ek: fix sdmmc0 node description (git-fixes) o arm: dts: at91: sama5d2_ptc_ek: fix vbus pin (git-fixes) o arm: dts: at91: sama5d2_xplained: classd: pull-down the R1 and R3 lines (git-fixes) o arm: dts: at91: sama5d3_xplained: add pincontrol for USB Host (git-fixes) o arm: dts: at91: sama5d4: fix pinctrl muxing (git-fixes) o arm: dts: at91: sama5d4_xplained: add pincontrol for USB Host (git-fixes) o arm: dts: at91: tse850: the emac<->phy interface is rmii (git-fixes) o arm: dts: bcm: HR2: Fixed QSPI compatible string (git-fixes) o arm: dts: colibri-imx6ull: limit SDIO clock to 25MHz (git-fixes) o arm: dts: dra76x: m_can: fix order of clocks (git-fixes) o arm: dts: exynos: correct MUIC interrupt trigger level on Midas (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on Arndale (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on Artik 5 (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on Midas (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on Monk (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on Odroid XU3 (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on Rinato (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on Snow (git-fixes) o arm: dts: exynos: correct PMIC interrupt trigger level on Spring (git-fixes) o arm: dts: exynos: correct fuel gauge interrupt trigger level on Midas (git-fixes) o arm: dts: exynos: fix PWM LED max brightness on Odroid HC1 (git-fixes) o arm: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (git-fixes) o arm: dts: exynos: fix PWM LED max brightness on Odroid XU4 (git-fixes) o arm: dts: exynos: fix USB 3.0 VBUS control and over-current pins on (git-fixes) o arm: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid (git-fixes) o arm: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (git-fixes) o arm: dts: gemini-rut1xx: remove duplicate ethernet node (git-fixes) o arm: dts: gose: Fix ports node name for adv7180 (git-fixes) o arm: dts: gose: Fix ports node name for adv7612 (git-fixes) o arm: dts: imx50-evk: Fix the chip select 1 IOMUX (git-fixes) o arm: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (git-fixes) o arm: dts: imx6dl-yapp4: Fix RGMII connection to QCA8334 switch (git-fixes) o arm: dts: imx6q-dhcom: Add PU,VDD1P1,VDD2P5 regulators (git-fixes) o arm: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery (git-fixes) o arm: dts: imx6q-dhcom: Fix ethernet plugin detection problems (git-fixes) o arm: dts: imx6q-dhcom: Fix ethernet reset time properties (git-fixes) o arm: dts: imx6qdl-gw52xx: fix duplicate regulator naming (git-fixes) o arm: dts: imx6qdl-gw551x: Do not use 'simple-audio-card,dai-link' (git-fixes) o arm: dts: imx6qdl-gw551x: fix audio SSI (git-fixes) o arm: dts: imx6qdl-icore: Fix OTG_ID pin and sdcard detect (git-fixes) o arm: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (git-fixes) o arm: dts: imx6qdl-kontron-samx6i: fix i2c_lcd/cam default status (git-fixes) o arm: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms (git-fixes) o arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy (git-fixes) o arm: dts: imx6sl: fix rng node (git-fixes) o arm: dts: imx6sx-sabreauto: Fix the phy-mode on fec2 (git-fixes) o arm: dts: imx6sx-sdb: Fix the phy-mode on fec2 (git-fixes) o arm: dts: imx6sx: Add missing UART RTS/CTS pins mux (git-fixes) o arm: dts: imx6sx: Improve UART pins macro defines (git-fixes) o arm: dts: imx6sx: fix the pad QSPI1B_SCLK mux mode for uart3 (git-fixes) o arm: dts: imx7d-meerkat96: Fix the 'tuning-step' property (git-fixes) o arm: dts: imx7d-pico: Fix the 'tuning-step' property (git-fixes) o arm: dts: imx7ulp: Correct gpio ranges (git-fixes) o arm: dts: imx: Fix USB host power regulator polarity on M53Menlo (git-fixes) o arm: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out (git-fixes) o arm: dts: imx: emcon-avari: Fix nxp,pca8574 #gpio-cells (git-fixes) o arm: dts: logicpd-som-lv-baseboard: Fix broken audio (git-fixes) o arm: dts: logicpd-som-lv-baseboard: Fix missing video (git-fixes) o arm: dts: logicpd-torpedo-baseboard: Fix broken audio (git-fixes) o arm: dts: lpc32xx: Revert set default clock rate of HCLK PLL (git-fixes) o arm: dts: ls1021a: fix QuadSPI-memory reg range (git-fixes) o arm: dts: meson8: Use a higher default GPU clock frequency (git-fixes) o arm: dts: meson8: remove two invalid interrupt lines from the GPU (git-fixes) o arm: dts: meson8b: ec100: Fix the pwm regulator supply properties (git-fixes) o arm: dts: meson8b: mxq: Fix the pwm regulator supply properties (git-fixes) o arm: dts: meson8b: odroidc1: Fix the pwm regulator supply properties (git-fixes) o arm: dts: meson: fix PHY deassert timing requirements (git-fixes) o arm: dts: mt7623: add missing pause for switchport (git-fixes) o arm: dts: omap3-gta04a4: accelerometer irq fix (git-fixes) o arm: dts: omap3430-sdp: Fix NAND device node (git-fixes) o arm: dts: owl-s500: Fix incorrect PPI interrupt specifiers (git-fixes) o arm: dts: pandaboard: fix pinmux for gpio user button of Pandaboard (git-fixes) o arm: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference (git-fixes) o arm: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY (git-fixes) o arm: dts: r8a7779, marzen: Fix DU clock names (git-fixes) o arm: dts: s5pv210: Set keep-power-in-suspend for SDHCI1 on Aries (git-fixes) o arm: dts: socfpga: Align L2 cache-controller nodename with dtschema (git-fixes) o arm: dts: socfpga: fix register entry for timer3 on Arria10 (git-fixes) o arm: dts: stm32: fix a typo for DAC io-channel-cells on stm32f429 (git-fixes) o arm: dts: stm32: fix a typo for DAC io-channel-cells on stm32h743 (git-fixes) o arm: dts: sun6i: a31-hummingbird: Enable RGMII RX/TX delay on (git-fixes) o arm: dts: sun7i: a20: bananapro: Fix ethernet phy-mode (git-fixes) o arm: dts: sun7i: bananapi-m1-plus: Enable RGMII RX/TX delay on (git-fixes) o arm: dts: sun7i: bananapi: Enable RGMII RX/TX delay on Ethernet PHY (git-fixes) o arm: dts: sun7i: cubietruck: Enable RGMII RX/TX delay on Ethernet PHY (git-fixes) o arm: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (git-fixes) o arm: dts: sun8i-h2-plus-bananapi-m2-zero: Fix led polarity (git-fixes) o arm: dts: sun8i: a83t: Enable both RGMII RX/TX delay on Ethernet PHY (git-fixes) o arm: dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on (git-fixes) o arm: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (git-fixes) o arm: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator (git-fixes) o arm: dts: sun8i: r40: bananapi-m2-ultra: Fix ethernet node (git-fixes) o arm: dts: sun8i: v3s: fix GIC node memory range (git-fixes) o arm: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (git-fixes) o arm: dts: sun9i: Enable both RGMII RX/TX delay on Ethernet PHY (git-fixes) o arm: dts: sunxi: bananapi-m2-plus-v1.2: Fix CPU supply voltages (git-fixes) o arm: dts: sunxi: bananapi-m2-plus: Enable RGMII RX/TX delay on (git-fixes) o arm: dts: turris-omnia: add SFP node (git-fixes) o arm: dts: turris-omnia: add comphy handle to eth2 (git-fixes) o arm: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (git-fixes) o arm: dts: turris-omnia: describe switch interrupt (git-fixes) o arm: dts: turris-omnia: enable HW buffer management (git-fixes) o arm: dts: turris-omnia: fix hardware buffer management (git-fixes) o arm: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins (git-fixes) o arm: dts: vf610-zii-dev-rev-b: Remove #address-cells and #size-cells (git-fixes) o arm: dts: vfxxx: Add syscon compatible with OCOTP (git-fixes) o arm: exynos: MCPM: Restore big.LITTLE cpuidle support (git-fixes) o arm: exynos: add missing of_node_put for loop iteration (git-fixes) o arm: footbridge: fix PCI interrupt mapping (git-fixes) o arm: imx5: add missing put_device() call in imx_suspend_alloc_ocram() (git-fixes) o arm: imx6: disable the GIC CPU interface before calling stby-poweroff (git-fixes) o arm: imx: add missing clk_disable_unprepare() (git-fixes) o arm: imx: add missing iounmap() (git-fixes) o arm: imx: build suspend-imx6.S with arm instruction set (git-fixes) o arm: imx: fix missing 3rd argument in macro imx_mmdc_perf_init (git-fixes) o arm: mvebu: drop pointless check for coherency_base (git-fixes) o arm: p2v: fix handling of LPAE translation in BE mode (git-fixes) o arm: s3c24xx: fix missing system reset (git-fixes) o arm: s3c24xx: fix mmc gpio lookup tables (git-fixes) o arm: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (git-fixes) o arm: samsung: do not build plat/pm-common for Exynos (git-fixes) o arm: samsung: fix PM debug build with DEBUG_LL but !MMU (git-fixes) o arm: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh() (git-fixes) o asoc: DAPM: Cover regression by kctl change notification fix (git-fixes). o asoc: SOF: Intel: hda-dai: fix potential locking issue (git-fixes). o asoc: nau8824: Add DMI quirk mechanism for active-high jack-detect (git-fixes). o asoc: qdsp6: q6routing: Conditionally reset FrontEnd Mixer (git-fixes). o asoc: topology: Add missing rwsem around snd_ctl_remove() calls (git-fixes). o ath10k: fix invalid dma_addr_t token assignment (git-fixes). o ath10k: high latency fixes for beacon buffer (git-fixes). o ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (git-fixes). o block: Fix use-after-free issue accessing struct io_cq (bsc#1193042). o bluetooth: fix use-after-free error in lock_sock_nested() (git-fixes). o bpf, arm: Fix register clobbering in div/mod implementation (git-fixes) o brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (git-fixes). o cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (git-fixes). o cifs/smb3: Fix data inconsistent when punch hole (bsc#1176544). o cifs/smb3: Fix data inconsistent when zero file range (bsc#1176536). o cifs: Add SMB 2 support for getting and setting SACLs (bsc#1192606). o cifs: Add get_security_type_str function to return sec type (bsc#1192606). o cifs: Add missing sentinel to smb3_fs_parameters (bsc#1192606). o cifs: Add new mount parameter "acdirmax" to allow caching directory metadata (bsc#1192606). o cifs: Add new parameter "acregmax" for distinct file and directory metadata timeout (bsc#1192606). o cifs: Add support for setting owner info, dos attributes, and create time (bsc#1164565). o cifs: Add tracepoints for errors on flush or fsync (bsc#1164565). o cifs: Add witness information to debug data dump (bsc#1192606). o cifs: Adjust indentation in smb2_open_file (bsc#1164565). o cifs: Adjust key sizes and key generation routines for AES256 encryption (bsc#1192606). o cifs: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1192606). o cifs: Allocate encryption header through kmalloc (bsc#1192606). o cifs: Always update signing key of first channel (bsc#1192606). o cifs: Avoid doing network I/O while holding cache lock (bsc#1164565). o cifs: Avoid error pointer dereference (bsc#1192606). o cifs: Avoid field over-reading memcpy() (bsc#1192606). o cifs: Change SIDs in ACEs while transferring file ownership (bsc#1192606). o cifs: Clarify SMB1 code for POSIX Create (bsc#1192606). o cifs: Clarify SMB1 code for POSIX Lock (bsc#1192606). o cifs: Clarify SMB1 code for POSIX delete file (bsc#1192606). o cifs: Clarify SMB1 code for SetFileSize (bsc#1192606). o cifs: Clarify SMB1 code for UnixCreateSymLink (bsc#1192606). o cifs: Clarify SMB1 code for UnixSetPathInfo (bsc#1192606). o cifs: Clarify SMB1 code for delete (bsc#1192606). o cifs: Clarify SMB1 code for rename open file (bsc#1192606). o cifs: Clean up DFS referral cache (bsc#1164565). o cifs: Close cached root handle only if it had a lease (bsc#1164565). o cifs: Close open handle after interrupted close (bsc#1164565). o cifs: Constify static struct genl_ops (bsc#1192606). o cifs: Convert to use the fallthrough macro (bsc#1192606). o cifs: Create a new shared file holding smb2 pdu definitions (bsc#1192606). o cifs: Deal with some warnings from W=1 (bsc#1192606). o cifs: Delete a stray unlock in cifs_swn_reconnect() (bsc#1192606). o cifs: Display local UID details for SMB sessions in DebugData (bsc# 1192606). o cifs: Do not display RDMA transport on reconnect (bsc#1164565). o cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED (bsc#1192606). o cifs: Do not miss cancelled OPEN responses (bsc#1164565). o cifs: Do not use iov_iter::type directly (bsc#1192606). o cifs: Do not use the original cruid when following DFS links for multiuser mounts (bsc#1192606). o cifs: Enable sticky bit with cifsacl mount option (bsc#1192606). o cifs: Fix NULL pointer dereference in mid callback (bsc#1164565). o cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks (bnc# 1151927 5.3.16). o cifs: Fix SMB2 oplock break processing (bsc#1154355 bnc#1151927 5.3.16). o cifs: Fix an error pointer dereference in cifs_mount() (bsc#1178270). o cifs: Fix bug which the return value by asynchronous read is error (bsc# 1192606). o cifs: Fix cached_fid refcnt leak in open_shroot (bsc#1192606). o cifs: Fix chmod with modefromsid when an older ACE already exists (bsc# 1192606). o cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bnc# 1151927 5.3.10). o cifs: Fix cifsacl ACE mask for group and others (bsc#1192606). o cifs: Fix double add page to memcg when cifs_readpages (bsc#1192606). o cifs: Fix fall-through warnings for Clang (bsc#1192606). o cifs: Fix in error types returned for out-of-credit situations (bsc# 1192606). o cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211). o cifs: Fix inconsistent IS_ERR and PTR_ERR (bsc#1192606). o cifs: Fix inconsistent indenting (bsc#1192606). o cifs: Fix leak when handling lease break for cached root fid (bsc#1176242). o cifs: Fix lookup of SMB connections on multichannel (bsc#1192606). o cifs: Fix lookup of root ses in DFS referral cache (bsc#1164565). o cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1164565). o cifs: Fix missed free operations (bnc#1151927 5.3.8). o cifs: Fix mode output in debugging statements (bsc#1164565). o cifs: Fix mount options set in automount (bsc#1164565). o cifs: Fix null pointer check in cifs_read (bsc#1192606). o cifs: Fix oplock handling for SMB 2.1+ protocols (bnc#1151927 5.3.4). o cifs: Fix potential deadlock when updating vol in cifs_reconnect() (bsc# 1164565). o cifs: Fix potential softlockups while refreshing DFS cache (bsc#1164565). o cifs: Fix preauth hash corruption (git-fixes). o cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1164565). o cifs: Fix retry mid list corruption on reconnects (bnc#1151927 5.3.10). o cifs: Fix return value in __update_cache_entry (bsc#1164565). o cifs: Fix some error pointers handling detected by static checker (bsc# 1192606). o cifs: Fix spelling of 'security' (bsc#1192606). o cifs: Fix support for remount when not changing rsize/wsize (bsc#1192606). o cifs: Fix task struct use-after-free on reconnect (bsc#1164565). o cifs: Fix the target file was deleted when rename failed (bsc#1192606). o cifs: Fix unix perm bits to cifsacl conversion for "other" bits (bsc# 1192606). o cifs: Fix use after free of file info structures (bnc#1151927 5.3.8). o cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1164565). o cifs: Force reval dentry if LOOKUP_REVAL flag is set (bnc#1151927 5.3.7). o cifs: Force revalidate inode when dentry is stale (bnc#1151927 5.3.7). o cifs: Get rid of kstrdup_const()'d paths (bsc#1164565). o cifs: Grab a reference for the dentry of the cached directory during the lifetime of the cache (bsc#1192606). o cifs: Gracefully handle QueryInfo errors during open (bnc#1151927 5.3.7). o cifs: Handle witness client move notification (bsc#1192606). o cifs: Identify a connection by a conn_id (bsc#1192606). o cifs: If a corrupted DACL is returned by the server, bail out (bsc# 1192606). o cifs: In the new mount api we get the full devname as source= (bsc# 1192606). o cifs: Increment num_remote_opens stats counter even in case of smb2_query_dir_first (bsc#1192606). o cifs: Introduce helpers for finding TCP connection (bsc#1164565). o cifs: Make extract_hostname function public (bsc#1192606). o cifs: Make extract_sharename function public (bsc#1192606). o cifs: Merge is_path_valid() into get_normalized_path() (bsc#1164565). o cifs: Move SMB2_Create definitions to the shared area (bsc#1192606). o cifs: Move more definitions into the shared area (bsc#1192606). o cifs: New optype for session operations (bsc#1181507). o cifs: On cifs_reconnect, resolve the hostname again (bsc#1192606). o cifs: Optimize readdir on reparse points (bsc#1164565). o cifs: Print the address and port we are connecting to in generic_ip_connect () (bsc#1192606). o cifs: Properly process SMB3 lease breaks (bsc#1164565). o cifs: Re-indent cifs_swn_reconnect() (bsc#1192606). o cifs: Reformat DebugData and index connections by conn_id (bsc#1192606). o cifs: Register generic netlink family (bsc#1192606). Update configs with CONFIG_SWN_UPCALL unset. o cifs: Remove the superfluous break (bsc#1192606). o cifs: Remove unused inline function is_sysvol_or_netlogon() (bsc#1185902). o cifs: Remove useless variable (bsc#1192606). o cifs: Replace HTTP links with HTTPS ones (bsc#1192606). o cifs: Respect O_SYNC and O_DIRECT flags during reconnect (bsc#1164565). o cifs: Retain old ACEs when converting between mode bits and ACL (bsc# 1192606). o cifs: Return correct error code from smb2_get_enc_key (git-fixes). o cifs: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1164565). o cifs: Return the error from crypt_message when enc/dec key not found (bsc# 1179426). o cifs: Send witness register and unregister commands to userspace daemon (bsc#1192606). o cifs: Send witness register messages to userspace daemon in echo task (bsc# 1192606). o cifs: Set cifs_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath (bsc# 1192606). o cifs: Set witness notification handler for messages from userspace daemon (bsc#1192606). o cifs: Silently ignore unknown oplock break handle (bsc#1192606). o cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1192606). o cifs: Spelling s/EACCESS/EACCES/ (bsc#1192606). o cifs: Standardize logging output (bsc#1192606). o cifs: To match file servers, make sure the server hostname matches (bsc# 1192606). o cifs: Tracepoints and logs for tracing credit changes (bsc#1181507). o cifs: Unlock on errors in cifs_swn_reconnect() (bsc#1192606). o cifs: Use #define in cifs_dbg (bsc#1164565). o cifs: Use common error handling code in smb2_ioctl_query_info() (bsc# 1164565). o cifs: Use memdup_user() rather than duplicating its implementation (bsc# 1164565). o cifs: Warn less noisily on default mount (bsc#1192606). o cifs: add FALLOC_FL_INSERT_RANGE support (bsc#1192606). o cifs: add NULL check for ses->tcon_ipc (bsc#1178270). o cifs: add SMB2_open() arg to return POSIX data (bsc#1164565). o cifs: add SMB3 change notification support (bsc#1164565). o cifs: add a debug macro that prints \\server\share for errors (bsc# 1164565). o cifs: add a function to get a cached dir based on its dentry (bsc#1192606). o cifs: add a helper to find an existing readable handle to a file (bsc# 1154355). o cifs: add a timestamp to track when the lease of the cached dir was taken (bsc#1192606). o cifs: add an smb3_fs_context to cifs_sb (bsc#1192606). o cifs: add files to host new mount api (bsc#1192606). o cifs: add fs_context param to parsing helpers (bsc#1192606). o cifs: add initial reconfigure support (bsc#1192606). o cifs: add missing mount option to /proc/mounts (bsc#1164565). o cifs: add missing parsing of backupuid (bsc#1192606). o cifs: add mount parameter tcpnodelay (bsc#1192606). o cifs: add multichannel mount options and data structs (bsc#1192606). o cifs: add new debugging macro cifs_server_dbg (bsc#1164565). o cifs: add passthrough for smb2 setinfo (bsc#1164565). o cifs: add server param (bsc#1192606). o cifs: add shutdown support (bsc#1192606). o cifs: add smb2 POSIX info level (bsc#1164565). o cifs: add support for FALLOC_FL_COLLAPSE_RANGE (bsc#1192606). o cifs: add support for fallocate mode 0 for non-sparse files (bsc#1164565). o cifs: add support for flock (bsc#1164565). o cifs: add witness mount option and data structs (bsc#1192606). o cifs: added WARN_ON for all the count decrements (bsc#1192606). o cifs: allocate buffer in the caller of build_path_from_dentry() (bsc# 1192606). o cifs: allow chmod to set mode bits using special sid (bsc#1164565). o cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956). o cifs: allow unlock flock and OFD lock across fork (bsc#1192606). o cifs: ask for more credit on async read/write code paths (bsc#1192606). o cifs: avoid extra calls in posix_info_parse (bsc#1192606). o cifs: avoid starvation when refreshing dfs cache (bsc#1185902). o cifs: avoid using MID 0xFFFF (bnc#1151927 5.3.8). o cifs: call wake_up(&server->response_q) inside of cifs_reconnect() (bsc# 1164565). o cifs: change confusing field serverName (to ip_addr) (bsc#1192606). o cifs: change format of cifs_FULL_KEY_DUMP ioctl (bsc#1192606). o cifs: change noisy error message to FYI (bsc#1181507). o cifs: check all path components in resolved dfs target (bsc#1181710). o cifs: check new file size when extending file by fallocate (bsc#1192606). o cifs: check pointer before freeing (bsc#1183534). o cifs: check the timestamp for the cached dirent when deciding on revalidate (bsc#1192606). o cifs: cifs_atomic_open(): fix double-put on late allocation failure (bsc# 1192606). o cifs: cifs_debug: use %pd instead of messing with ->d_name (bsc#1192606). o cifs: cifs_md4 convert to SPDX identifier (bsc#1192606). o cifs: cifspdu.h: Replace one-element array with flexible-array member (bsc# 1192606). o cifs: cifspdu.h: Replace zero-length array with flexible-array member (bsc# 1192606). o cifs: clarify SMB1 code for UnixCreateHardLink (bsc#1192606). o cifs: clarify comment about timestamp granularity for old servers (bsc# 1192606). o cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (bsc# 1192606). o cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (bsc#1192606). o cifs: cleanup misc.c (bsc#1192606). o cifs: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1192606). o cifs: close the shared root handle on tree disconnect (bsc#1164565). o cifs: compute full_path already in cifs_readdir() (bsc#1192606). o cifs: connect individual channel servers to primary channel server (bsc# 1192606). o cifs: connect: style: Simplify bool comparison (bsc#1192606). o cifs: constify get_normalized_path() properly (bsc#1185902). o cifs: constify path argument of ->make_node() (bsc#1192606). o cifs: constify pathname arguments in a bunch of helpers (bsc#1192606). o cifs: convert list_for_each to entry variant (bsc#1192606, jsc#SLE-20042). o cifs: convert list_for_each to entry variant in cifs_debug.c (bsc#1192606). o cifs: convert list_for_each to entry variant in smb2misc.c (bsc#1192606). o cifs: convert revalidate of directories to using directory metadata cache timeout (bsc#1192606). o cifs: convert to use be32_add_cpu() (bsc#1192606). o cifs: correct comments explaining internal semaphore usage in the module (bsc#1192606). o cifs: correct four aliased mount parms to allow use of previous names (bsc# 1192606). o cifs: create a MD4 module and switch cifs.ko to use it (bsc#1192606). o cifs: create a helper function to parse the query-directory response buffer (bsc#1164565). o cifs: create a helper to find a writeable handle by path name (bsc# 1154355). o cifs: create sd context must be a multiple of 8 (bsc#1192606). o cifs: delete duplicated words in header files (bsc#1192606). o cifs: detect dead connections only when echoes are enabled (bsc#1192606). o cifs: do d_move in rename (bsc#1164565). o cifs: do not allow changing posix_paths during remount (bsc#1192606). o cifs: do not cargo-cult strndup() (bsc#1185902). o cifs: do not create a temp nls in cifs_setup_ipc (bsc#1192606). o cifs: do not disable noperm if multiuser mount option is not provided (bsc# 1192606). o cifs: do not duplicate fscache cookie for secondary channels (bsc#1192606). o cifs: do not fail __smb_send_rqst if non-fatal signals are pending (git-fixes). o cifs: do not ignore the SYNC flags in getattr (bsc#1164565). o cifs: do not leak -EAGAIN for stat() during reconnect (bsc#1164565). o cifs: do not negotiate session if session already exists (bsc#1192606). o cifs: do not send close in compound create+close requests (bsc#1181507). o cifs: do not send tree disconnect to ipc shares (bsc#1185902). o cifs: do not share tcons with DFS (bsc#1178270). o cifs: do not share tcp servers with dfs mounts (bsc#1185902). o cifs: do not share tcp sessions of dfs connections (bsc#1185902). o cifs: do not use 'pre:' for MODULE_SOFTDEP (bsc#1164565). o cifs: do_cifs_create(): do not set ->i_mode of something we had not created (bsc#1192606). o cifs: document and cleanup dfs mount (bsc#1178270). o cifs: dump Security Type info in DebugData (bsc#1192606). o cifs: dump channel info in DebugData (bsc#1192606). o cifs: dump the session id and keys also for SMB2 sessions (bsc#1192606). o cifs: enable change notification for SMB2.1 dialect (bsc#1164565). o cifs: enable extended stats by default (bsc#1192606). o cifs: ensure correct super block for DFS reconnect (bsc#1178270). o cifs: escape spaces in share names (bsc#1192606). o cifs: export supported mount options via new mount_params /proc file (bsc# 1192606). o cifs: fail i/o on soft mounts if sessionsetup errors out (bsc#1164565). o cifs: fiemap: do not return EINVAL if get nothing (bsc#1192606). o cifs: fix DFS failover (bsc#1192606). o cifs: fix DFS mount with cifsacl/modefromsid (bsc#1178270). o cifs: fix NULL dereference in match_prepath (bsc#1164565). o cifs: fix NULL dereference in smb2_check_message() (bsc#1192606). o cifs: fix SMB1 error path in cifs_get_file_info_unix (bsc#1192606). o cifs: fix a comment for the timeouts when sending echos (bsc#1164565). o cifs: fix a memleak with modefromsid (bsc#1192606). o cifs: fix a sign extension bug (bsc#1192606). o cifs: fix a white space issue in cifs_get_inode_info() (bsc#1164565). o cifs: fix allocation size on newly created files (bsc#1192606). o cifs: fix channel signing (bsc#1192606). o cifs: fix check of dfs interlinks (bsc#1185902). o cifs: fix check of tcon dfs in smb1 (bsc#1178270). o cifs: fix chown and chgrp when idsfromsid mount option enabled (bsc# 1192606). o cifs: fix credit accounting for extra channel (bsc#1192606). o cifs: fix dereference on ses before it is null checked (bsc#1164565). o cifs: fix dfs domain referrals (bsc#1192606). o cifs: fix dfs-links (bsc#1192606). o cifs: fix doc warnings in cifs_dfs_ref.c (bsc#1192606). o cifs: fix double free error on share and prefix (bsc#1178270). o cifs: fix fallocate when trying to allocate a hole (bsc#1192606). o cifs: fix handling of escaped ',' in the password mount argument (bsc# 1192606). o cifs: fix incorrect check for null pointer in header_assemble (bsc# 1192606). o cifs: fix incorrect kernel doc comments (bsc#1192606). o cifs: fix interrupted close commands (git-fixes). o cifs: fix ipv6 formating in cifs_ses_add_channel (bsc#1192606). o cifs: fix leak in cifs_smb3_do_mount() ctx (bsc#1192606). o cifs: fix leaked reference on requeued write (bsc#1178270). o cifs: fix max ea value size (bnc#1151927 5.3.4). o cifs: fix memory leak in smb2_copychunk_range (git-fixes). o cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc# 1192606). o cifs: fix minor typos in comments and log messages (bsc#1192606). o cifs: fix missing null session check in mount (bsc#1192606). o cifs: fix missing spinlock around update to ses->status (bsc#1192606). o cifs: fix mode bits from dir listing when mounted with modefromsid (bsc# 1164565). o cifs: fix mount option display for sec=krb5i (bsc#1161907). o cifs: fix mounts to subdirectories of target (bsc#1192606). o cifs: fix nodfs mount option (bsc#1181710). o cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (bsc#1192606). o cifs: fix path comparison and hash calc (bsc#1185902). o cifs: fix possible uninitialized access and race on iface_list (bsc# 1192606). o cifs: fix potential mismatch of UNC paths (bsc#1164565). o cifs: fix potential use-after-free bugs (bsc#1192606, jsc#SLE-20042). o cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944). o cifs: fix print of hdr_flags in dfscache_proc_show() (bsc#1192606, jsc# SLE-20042). o cifs: fix reference leak for tlink (bsc#1192606). o cifs: fix regression when mounting shares with prefix paths (bsc#1192606). o cifs: fix rename() by ensuring source handle opened with DELETE bit (bsc# 1164565). o cifs: fix rsize/wsize to be negotiated values (bsc#1192606). o cifs: fix soft mounts hanging in the reconnect code (bsc#1164565). o cifs: fix soft mounts hanging in the reconnect code (bsc#1164565). o cifs: fix string declarations and assignments in tracepoints (bsc#1192606). o cifs: fix the out of range assignment to bit fields in parse_server_interfaces (bsc#1192606). o cifs: fix trivial typo (bsc#1192606). o cifs: fix uninitialised lease_key in open_shroot() (bsc#1178270). o cifs: fix uninitialized variable in smb3_fs_context_parse_param (bsc# 1192606). o cifs: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1164565). o cifs: fix unneeded null check (bsc#1192606). o cifs: fix use after free in cifs_smb3_do_mount() (bsc#1192606). o cifs: fix wrong release in sess_alloc_buffer() failed path (bsc#1192606). o cifs: for compound requests, use open handle if possible (bsc#1192606). o cifs: fork arc4 and create a separate module for it for cifs and other users (bsc#1192606). o cifs: get mode bits from special sid on stat (bsc#1164565). o cifs: get rid of @noreq param in __dfs_cache_find() (bsc#1185902). o cifs: get rid of cifs_sb->mountdata (bsc#1192606). o cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc# 1178270). o cifs: handle "guest" mount parameter (bsc#1192606). o cifs: handle "nolease" option for vers=1.0 (bsc#1192606). o cifs: handle -EINTR in cifs_setattr (bsc#1192606). o cifs: handle ERRBaduid for SMB1 (bsc#1192606). o cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1178270). o cifs: handle different charsets in dfs cache (bsc#1185902). o cifs: handle empty list of targets in cifs_reconnect() (bsc#1178270). o cifs: handle hostnames that resolve to same ip in failover (bsc#1178270). o cifs: handle prefix paths in reconnect (bsc#1164565). o cifs: handle reconnect of tcon when there is no cached dfs referral (bsc# 1192606). o cifs: have ->mkdir() handle race with another client sanely (bsc#1192606). o cifs: have cifs_fattr_to_inode() refuse to change type on live inode (bsc# 1192606). o cifs: ignore auto and noauto options if given (bsc#1192606). o cifs: ignore cached share root handle closing errors (bsc#1166780). o cifs: improve fallocate emulation (bsc#1192606). o cifs: improve read performance for page size 64KB & cache=strict & vers= 2.1+ (bsc#1192606). o cifs: introduce cifs_ses_mark_for_reconnect() helper (bsc#1192606). o cifs: introduce helper for finding referral server (bsc#1181710). o cifs: introduce new helper for cifs_reconnect() (bsc#1192606, jsc# SLE-20042). o cifs: keep referral server sessions alive (bsc#1185902). o cifs: log mount errors using cifs_errorf() (bsc#1192606). o cifs: log warning message (once) if out of disk space (bsc#1164565). o cifs: make build_path_from_dentry() return const char * (bsc#1192606). o cifs: make const array static, makes object smaller (bsc#1192606). o cifs: make fs_context error logging wrapper (bsc#1192606). o cifs: make locking consistent around the server session status (bsc# 1192606). o cifs: make multichannel warning more visible (bsc#1192606). o cifs: make sure we do not overflow the max EA buffer size (bsc#1164565). o cifs: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1164565). o cifs: map STATUS_ACCOUNT_LOCKED_OUT to -EACCES (bsc#1192606). o cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect() (bsc# 1178270). o cifs: minor fix to two debug messages (bsc#1192606). o cifs: minor kernel style fixes for comments (bsc#1192606). o cifs: minor simplification to smb2_is_network_name_deleted (bsc#1192606). o cifs: minor update to comments around the cifs_tcp_ses_lock mutex (bsc# 1192606). o cifs: minor updates to Kconfig (bsc#1192606). o cifs: misc: Use array_size() in if-statement controlling expression (bsc# 1192606). o cifs: missed ref-counting smb session in find (bsc#1192606). o cifs: missing null check for newinode pointer (bsc#1192606). o cifs: missing null pointer check in cifs_mount (bsc#1185902). o cifs: modefromsid: make room for 4 ACE (bsc#1164565). o cifs: modefromsid: write mode ACE first (bsc#1164565). o cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (bsc# 1192606). o cifs: move SMB FSCTL definitions to common code (bsc#1192606). o cifs: move [brw]size from cifs_sb to cifs_sb->ctx (bsc#1192606). o cifs: move cache mount options to fs_context.ch (bsc#1192606). o cifs: move cifsFileInfo_put logic into a work-queue (bsc#1154355). o cifs: move cifs_cleanup_volume_info[_content] to fs_context.c (bsc# 1192606). o cifs: move cifs_parse_devname to fs_context.c (bsc#1192606). o cifs: move debug print out of spinlock (bsc#1192606). o cifs: move security mount options into fs_context.ch (bsc#1192606). o cifs: move smb version mount options into fs_context.c (bsc#1192606). o cifs: move some variables off the stack in smb2_ioctl_query_info (bsc# 1192606). o cifs: move the check for nohandlecache into open_shroot (bsc#1192606). o cifs: move the enum for cifs parameters into fs_context.h (bsc#1192606). o cifs: move update of flags into a separate function (bsc#1192606). o cifs: multichannel: always zero struct cifs_io_parms (bsc#1192606). o cifs: multichannel: move channel selection above transport layer (bsc# 1192606). o cifs: multichannel: move channel selection in function (bsc#1192606). o cifs: multichannel: try to rebind when reconnecting a channel (bsc# 1192606). o cifs: multichannel: use pointer for binding channel (bsc#1192606). o cifs: nosharesock should be set on new server (bsc#1192606). o cifs: nosharesock should not share socket with future sessions (bsc# 1192606). o cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc# 1178270). o cifs: only write 64kb at a time when fallocating a small region of a file (bsc#1192606). o cifs: pass a path to open_shroot and check if it is the root or not (bsc# 1192606). o cifs: pass the dentry instead of the inode down to the revalidation check functions (bsc#1192606). o cifs: plumb smb2 POSIX dir enumeration (bsc#1164565). o cifs: populate server_hostname for extra channels (bsc#1192606). o cifs: potential unintitliazed error code in cifs_getattr() (bsc#1164565). o cifs: prepare SMB2_Flush to be usable in compounds (bsc#1154355). o cifs: prepare SMB2_query_directory to be used with compounding (bsc# 1164565). o cifs: prevent NULL deref in cifs_compose_mount_options() (bsc#1185902). o cifs: prevent truncation from long to int in wait_for_free_credits (bsc# 1192606). o cifs: print MIDs in decimal notation (bsc#1181507). o cifs: print warning mounting with vers=1.0 (bsc#1164565). o cifs: properly invalidate cached root handle when closing it (bsc#1192606). o cifs: protect session channel fields with chan_lock (bsc#1192606). o cifs: protect srv_count with cifs_tcp_ses_lock (bsc#1192606). o cifs: protect updating server->dstaddr with a spinlock (bsc#1192606). o cifs: reduce number of referral requests in DFS link lookups (bsc#1178270). o cifs: reduce stack use in smb2_compound_op (bsc#1192606). o cifs: refactor cifs_get_inode_info() (bsc#1164565). o cifs: refactor create_sd_buf() and and avoid corrupting the buffer (bsc# 1192606). o cifs: release lock earlier in dequeue_mid error case (bsc#1192606). o cifs: remove [gu]id/backup[gu]id/file_mode/dir_mode from cifs_sb (bsc# 1192606). o cifs: remove actimeo from cifs_sb (bsc#1192606). o cifs: remove bogus debug code (bsc#1179427). o cifs: remove ctx argument from cifs_setup_cifs_sb (bsc#1192606). o cifs: remove duplicated prototype (bsc#1192606). o cifs: remove old dead code (bsc#1192606). o cifs: remove pathname for file from SPDX header (bsc#1192606). o cifs: remove redundant assignment to pointer pneg_ctxt (bsc#1164565). o cifs: remove redundant assignment to variable rc (bsc#1164565). o cifs: remove redundant initialization of variable rc (bsc#1192606). o cifs: remove redundant initialization of variable rc (bsc#1192606). o cifs: remove set but not used variable 'server' (bsc#1164565). o cifs: remove set but not used variables 'cinode' and 'netfid' (bsc# 1164565). o cifs: remove set but not used variables (bsc#1164565). o cifs: remove some minor warnings pointed out by kernel test robot (bsc# 1192606). o cifs: remove the devname argument to cifs_compose_mount_options (bsc# 1192606). o cifs: remove the retry in cifs_poxis_lock_set (bsc#1192606). o cifs: remove two cases where rc is set unnecessarily in sid_to_id (bsc# 1192606). o cifs: remove unnecessary copies of tcon->crfid.fid (bsc#1192606). o cifs: remove unused variable 'server' (bsc#1192606). o cifs: remove unused variable 'sid_user' (bsc#1164565). o cifs: remove unused variable (bsc#1164565). o cifs: remove various function description warnings (bsc#1192606). o cifs: rename a variable in SendReceive() (bsc#1164565). o cifs: rename cifs_common to smbfs_common (bsc#1192606). o cifs: rename dup_vol to smb3_fs_context_dup and move it into fs_context.c (bsc#1192606). o cifs: rename posix create rsp (bsc#1164565). o cifs: rename reconn_inval_dfs_target() (bsc#1178270). o cifs: rename smb_vol as smb3_fs_context and move it to fs_context.h (bsc# 1192606). o cifs: rename the *_shroot* functions to *_cached_dir* (bsc#1192606). o cifs: report error instead of invalid when revalidating a dentry fails (bsc #1177440). o cifs: retry lookup and readdir when EAGAIN is returned (bsc#1192606). o cifs: return cached_fid from open_shroot (bsc#1192606). o cifs: return proper error code in statfs(2) (bsc#1181507). o cifs: returning mount parm processing errors correctly (bsc#1192606). o cifs: revalidate mapping when we open files for SMB1 POSIX (bsc#1192606). o cifs: send workstation name during ntlmssp session setup (bsc#1192606). o cifs: set a minimum of 120s for next dns resolution (bsc#1192606). o cifs: set a minimum of 2 minutes for refreshing dfs cache (bsc#1185902). o cifs: set correct max-buffer-size for smb2_ioctl_init() (bsc#1164565). o cifs: set server->cipher_type to AES-128-CCM for SMB3.0 (bsc#1192606). o cifs: set up next DFS target before generic_ip_connect() (bsc#1178270). o cifs: simplify SWN code with dummy funcs instead of ifdefs (bsc#1192606). o cifs: simplify handling of cifs_sb/ctx->local_nls (bsc#1192606). o cifs: smb1: Try failing back to SetFileInfo if SetPathInfo fails (bsc# 1192606). o cifs: smb2pdu.h: Replace zero-length array with flexible-array member (bsc# 1192606). o cifs: smbd: Add messages on RDMA session destroy and reconnection (bsc# 1164565). o cifs: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1192606). o cifs: smbd: Check and extend sender credits in interrupt context (bsc# 1192606). o cifs: smbd: Check send queue size before posting a send (bsc#1192606). o cifs: smbd: Do not schedule work to send immediate packet on every receive (bsc#1192606). o cifs: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1164565). o cifs: smbd: Merge code to track pending packets (bsc#1192606). o cifs: smbd: Only queue work for error recovery on memory registration (bsc# 1164565). o cifs: smbd: Properly process errors on ib_post_send (bsc#1192606). o cifs: smbd: Return -EAGAIN when transport is reconnecting (bsc#1164565). o cifs: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1164565). o cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1164565). o cifs: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1192606). o cifs: sort interface list by speed (bsc#1192606). o cifs: split out dfs code from cifs_reconnect() (bsc#1192606, jsc# SLE-20042). o cifs: store a pointer to the root dentry in cifs_sb_info once we have completed mounting the share (bsc#1192606). o cifs: style: replace one-element array with flexible-array (bsc#1192606). o cifs: support nested dfs links over reconnect (bsc#1192606, jsc#SLE-20042). o cifs: support share failover when remounting (bsc#1192606, jsc#SLE-20042). o cifs: switch build_path_from_dentry() to using dentry_path_raw() (bsc# 1192606). o cifs: switch servers depending on binding state (bsc#1192606). o cifs: switch to new mount api (bsc#1192606). o cifs: try harder to open new channels (bsc#1192606). o cifs: try opening channels after mounting (bsc#1192606). o cifs: uncomplicate printing the iocharset parameter (bsc#1192606). o cifs: update FSCTL definitions (bsc#1192606). o cifs: update ctime and mtime during truncate (bsc#1192606). o cifs: update internal module version number (bsc#1192606). o cifs: update internal module version number (bsc#1192606). o cifs: update internal module version number (bsc#1192606). o cifs: update internal module version number (bsc#1192606). o cifs: update internal module version number (bsc#1192606). o cifs: update internal module version number (bsc#1192606). o cifs: update internal module version number (bsc#1192606). o cifs: update internal module version number (bsc#1192606). o cifs: update internal version number (bsc#1192606). o cifs: update internal version number (bsc#1192606). o cifs: update internal version number (bsc#1192606). o cifs: update internal version number (bsc#1192606). o cifs: update mnt_cifs_flags during reconfigure (bsc#1192606). o cifs: update new ACE pointer after populate_new_aces (bsc#1192606). o cifs: update super_operations to show_devname (bsc#1192606). o cifs: use PTR_ERR_OR_ZERO() to simplify code (bsc#1164565). o cifs: use SPDX-Licence-Identifier (bsc#1192606). o cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic (bnc#1151927 5.3.7). o cifs: use compounding for open and first query-dir for readdir() (bsc# 1164565). o cifs: use discard iterator to discard unneeded network data more efficiently (bsc#1192606). o cifs: use echo_interval even when connection not ready (bsc#1192606). o cifs: use existing handle for compound_op(OP_SET_INFO) when possible (bsc# 1154355). o cifs: use helpers when parsing uid/gid mount options and validate them (bsc #1192606). o cifs: use mod_delayed_work() for &server->reconnect if already queued (bsc# 1164565). o cifs: use the expiry output of dns_query to schedule next resolution (bsc# 1192606). o cifs: warn and fail if trying to use rootfs without the config option (bsc# 1192606). o cifs: we do not allow changing username/password/unc/... during remount (bsc#1192606). o clk: imx: imx6ul: Move csi_sel mux to correct base register (git-fixes). o clk: ingenic: Fix bugs with divided dividers (git-fixes). o crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency (git-fixes). o crypto: s5p-sss - Add error handling in s5p_aes_probe() (git-fixes). o dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (git-fixes). o dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` (git-fixes). o drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors (git-fixes). o drm/msm: Do hw_init() before capturing GPU state (git-fixes). o drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame (git-fixes). o drm/panel-orientation-quirks: add Valve Steam Deck (git-fixes). o drm/plane-helper: fix uninitialized variable reference (git-fixes). o drm/vc4: fix error code in vc4_create_object() (git-fixes). o drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 (git-fixes). o drm: panel-orientation-quirks: Add quirk for GPD Win3 (git-fixes). o drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 (git-fixes). o drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 (git-fixes). o drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) (git-fixes). o edac/amd64: Handle three rank interleaving mode (bsc#1152489). o elfcore: correct reference to CONFIG_UML (git-fixes). o fs: cifs: Assign boolean values to a bool variable (bsc#1192606). o fs: cifs: Fix atime update check vs mtime (bsc#1164565). o fs: cifs: Fix resource leak (bsc#1192606). o fs: cifs: Initialize filesystem timestamp ranges (bsc#1164565). o fs: cifs: Remove repeated struct declaration (bsc#1192606). o fs: cifs: Remove unnecessary struct declaration (bsc#1192606). o fs: cifs: Simplify bool comparison (bsc#1192606). o fs: cifs: cifssmb.c: use true,false for bool variable (bsc#1164565). o fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc# 1164565). o fs: cifs: fix gcc warning in sid_to_id (bsc#1192606). o fs: cifs: fix misspellings using codespell tool (bsc#1192606). o fs: cifs: mute -Wunused-const-variable message (bnc#1151927 5.3.9). o fs: cifs: remove unneeded variable in smb3_fs_context_dup (bsc#1192606). o fs: cifs: sess.c: Remove set but not used variable 'capabilities' (bsc# 1164565). o fs: cifs: smb2ops.c: use true,false for bool variable (bsc#1164565). o fs: cifs: smb2pdu.c: Make SMB2_notify_init static (bsc#1164565). o fuse: release pipe buf after last use (bsc#1193318). o i2c: cbus-gpio: set atomic transfer callback (git-fixes). o i2c: stm32f7: flush TX FIFO upon transfer errors (git-fixes). o i2c: stm32f7: recover the bus on access timeout (git-fixes). o i2c: stm32f7: stop dma transfer in case of NACK (git-fixes). o i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe ()' (git-fixes). o i40e: Fix failed opcode appearing if handling messages from VF (git-fixes). o i40e: Fix ping is lost after configuring ADq on VF (git-fixes). o i40e: Fix pre-set max number of queues for VF (git-fixes). o iavf: Fix reporting when setting descriptor count (git-fixes). o iavf: Prevent changing static ITR values if adaptive moderation is on (git-fixes). o iavf: Restore VLAN filters after link down (git-fixes). o iavf: do not clear a lock we do not hold (git-fixes). o ibmvnic: drop bad optimization in reuse_rx_pools() (bsc#1193349 ltc# 195568). o ibmvnic: drop bad optimization in reuse_tx_pools() (bsc#1193349 ltc# 195568). o ice: avoid bpf_prog refcount underflow (jsc#SLE-7926). o ice: fix vsi->txq_map sizing (jsc#SLE-7926). o ice: ignore dropped packets during init (git-fixes). o igb: fix netpoll exit with traffic (git-fixes). o igc: Remove _I_PHY_ID checking (bsc#1193169). o igc: Remove phy->type checking (bsc#1193169). o iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr () (git-fixes). o input: iforce - fix control-message timeout (git-fixes). o iommu/amd: Relocate GAMSup check to early_enable_iommus (git-fixes). o iommu/amd: Remove iommu_init_ga() (git-fixes). o iommu: Check if group is NULL before remove device (git-fixes). o ipmi: Disable some operations during a panic (git-fixes). o kabi: hide changes to struct uv_info (git-fixes). o kernel-obs-build: include the preferred kernel parameters Currently the Open Build Service hardcodes the kernel boot parameters globally. Recently functionality was added to control the parameters by the kernel-obs-build package, so make use of that. parameters here will overwrite what is used by OBS otherwise. o kernel-obs-build: inform build service about virtio-serial Inform the build worker code that this kernel supports virtio-serial, which improves performance and relability of logging. o kernel-obs-build: remove duplicated/unused parameters lbs=0 - this parameters is just giving "unused parameter" and it looks like I can not find any version that implemented this. rd.driver.pre=binfmt_misc is not needed when setup_obs is used, it alread loads the kernel module. quiet and panic=1 will now be also always added by OBS, so we do not have to set it here anymore. o lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (git-fixes). o lib/xz: Validate the value before assigning it to an enum variable (git-fixes). o libata: fix checking of DMA state (git-fixes). o linux/parser.h: add include guards (bsc#1192606). o lpfc: Reintroduce old IRQ probe logic (bsc#1183897). o md: fix a lock order reversal in md_alloc (git-fixes). o media: imx: set a media_device bus_info string (git-fixes). o media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info (git-fixes). o media: ipu3-imgu: imgu_fmt: Handle properly try (git-fixes). o media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (git-fixes). o media: mceusb: return without resubmitting URB in case of -EPROTO error (git-fixes). o media: mt9p031: Fix corrupted frame after restarting stream (git-fixes). o media: netup_unidvb: handle interrupt properly according to the firmware (git-fixes). o media: rcar-csi2: Add checking to rcsi2_start_receiver() (git-fixes). o media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (git-fixes). o media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() (git-fixes). o media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (git-fixes). o media: uvcvideo: Return -EIO for control errors (git-fixes). o media: uvcvideo: Set capability in s_param (git-fixes). o media: uvcvideo: Set unique vdev name based in type (git-fixes). o memstick: r592: Fix a UAF bug when removing the driver (git-fixes). o mm: reclaim mustn't enter FS for swap-over-NFS (bsc#1191876). o mmc: dw_mmc: Dont wait for DRTO on Write RSP error (git-fixes). o mmc: winbond: do not build on M68K (git-fixes). o mtd: core: do not remove debugfs directory if device is in use (git-fixes). o mwifiex: Properly initialize private structure on interface type changes (git-fixes). o mwifiex: Read a PCI register after writing the TX ring write pointer (git-fixes). o mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (git-fixes). o mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (git-fixes). o net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() (git-fixes). o net/mlx5: Update error handler for UCTX and UMEM (git-fixes). o net/mlx5e: reset XPS on error flow if netdev isn't registered yet (git-fixes). o net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero (git-fixes). o net: linkwatch: fix failure to restore device state across suspend/resume (bsc#1192511). o net: mana: Allow setting the number of queues while the NIC is down (jsc# SLE-18779, bsc#1185726). o net: mana: Fix memory leak in mana_hwc_create_wq (jsc#SLE-18779, bsc# 1185726). o net: mana: Fix spelling mistake "calledd" -> "called" (jsc#SLE-18779, bsc# 1185726). o net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (jsc# SLE-18779, bsc#1185726). o net: mana: Improve the HWC error handling (jsc#SLE-18779, bsc#1185726). o net: mana: Support hibernation and kexec (jsc#SLE-18779, bsc#1185726). o net: mana: Use kcalloc() instead of kzalloc() (jsc#SLE-18779, bsc#1185726). o net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() (git-fixes). o net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available (git-fixes). o net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available (git-fixes). o nfc: add NCI_UNREG flag to eliminate the race (git-fixes). o nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (git-fixes). o nfc: reorder the logic in nfc_{un,}register_device (git-fixes). o nfc: reorganize the functions in nci_request (git-fixes). o nfp: Fix memory leak in nfp_cpp_area_cache_add() (git-fixes). o nfp: checking parameter process for rx-usecs/tx-usecs is invalid (git-fixes). o nfs: Do not set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA (git-fixes). o nfs: Fix a regression in nfs_set_open_stateid_locked() (git-fixes). o nfs: Fix deadlocks in nfs_scan_commit_list() (git-fixes). o nfs: Fix up commit deadlocks (git-fixes). o nfs: do not take i_rwsem for swap IO (bsc#1191876). o nfs: move generic_write_checks() call from nfs_file_direct_write() to nfs_file_write() (bsc#1191876). o nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero (git-fixes). o nfsd: do not alloc under spinlock in rpc_parse_scope_id (git-fixes). o nfsd: fix error handling of register_pernet_subsys() in init_nfsd() (git-fixes). o nvme-multipath: Skip not ready namespaces when revalidating paths (bsc# 1191793 bsc#1192507 bsc#1192969). o nvme-pci: add NO APST quirk for Kioxia device (git-fixes). o pci/msi: Deal with devices lying about their MSI mask capability (git-fixes). o pci: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (git-fixes). o pci: Mark Atheros QCA6174 to avoid bus reset (git-fixes). o perf/x86/intel/uncore: Fix Intel ICX IIO event constraints (git-fixes). o perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server (git-fixes). o perf/x86/intel/uncore: Fix the scale of the IMC free-running events (git-fixes). o perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server (git-fixes). o perf: Correctly handle failed perf_get_aux_event() (git-fixes). o platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (git-fixes). o platform/x86: wmi: do not fail if disabling fails (git-fixes). o pm: hibernate: Get block device exclusively in swsusp_check() (git-fixes). o pm: hibernate: use correct mode for swsusp_close() (git-fixes). o pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (git-fixes). o powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted() (bsc# 1181148 ltc#190702 git-fixes). o powerpc/paravirt: vcpu_is_preempted() commentary (bsc#1181148 ltc#190702 git-fixes). o powerpc/pseries: Move some PAPR paravirt functions to their own file (bsc# 1181148 ltc#190702 git-fixes). o powerpc/watchdog: Avoid holding wd_smp_lock over printk and smp_send_nmi_ipi (bsc#1187541 ltc#192129). o powerpc/watchdog: Fix missed watchdog reset due to memory ordering race (bsc#1187541 ltc#192129). o powerpc/watchdog: Fix wd_smp_last_reset_tb reporting (bsc#1187541 ltc# 192129). o powerpc/watchdog: read TB close to where it is used (bsc#1187541 ltc# 192129). o powerpc/watchdog: tighten non-atomic read-modify-write access (bsc#1187541 ltc#192129). o powerpc: fix unbalanced node refcount in check_kvm_guest() (jsc#SLE-15869 jsc#SLE-16321 git-fixes). o qede: validate non LSO skb length (git-fixes). o r8169: Add device 10ec:8162 to driver r8169 (git-fixes). o recordmcount.pl: fix typo in s390 mcount regex (bsc#1192267). o recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (bsc# 1192267). o reset: socfpga: add empty driver allowing consumers to probe (git-fixes). o ring-buffer: Protect ring_buffer_reset() from reentrancy (bsc#1179960). o rt2x00: do not mark device gone on EPROTO errors during start (git-fixes). o rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1154353 bnc#1151927 5.3.9). o s390/uv: fully validate the VMA before calling follow_page() (git-fixes). o s390: mm: Fix secure storage access exception handling (git-fixes). o scsi: iscsi: Adjust iface sysfs attr detection (git-fixes). o scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (bsc#1189126). o scsi: mpt3sas: Fix kernel panic during drive powercycle test (git-fixes). o scsi: mpt3sas: Fix system going into read-only mode (git-fixes). o scsi: qla2xxx: Fix gnl list corruption (git-fixes). o scsi: qla2xxx: Relogin during fabric disturbance (git-fixes). o scsi: qla2xxx: Turn off target reset during issue_lip (git-fixes). o serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array (git-fixes). o serial: 8250_pci: rewrite pericom_do_set_divisor() (git-fixes). o serial: core: fix transmit-buffer reset and memleak (git-fixes). o smb2: clarify rc initialization in smb2_reconnect (bsc#1192606). o smb2: fix use-after-free in smb2_ioctl_query_info() (bsc#1192606). o smb3: Add debug message for new file creation with idsfromsid mount option (bsc#1192606). o smb3: Add defines for new information level, FileIdInformation (bsc# 1164565). o smb3: Add missing reparse tags (bsc#1164565). o smb3: Add new compression flags (bsc#1192606). o smb3: Add new info level for query directory (bsc#1192606). o smb3: Add new parm "nodelete" (bsc#1192606). o smb3: Add support for SMB311 query info (non-compounded) (bsc#1192606). o smb3: Add support for getting and setting SACLs (bsc#1192606). o smb3: Add support for lookup with posix extensions query info (bsc# 1192606). o smb3: Add support for negotiating signing algorithm (bsc#1192606). o smb3: Add support for query info using posix extensions (level 100) (bsc# 1192606). o smb3: Add tracepoints for new compound posix query info (bsc#1192606). o smb3: Additional compression structures (bsc#1192606). o smb3: Avoid Mid pending list corruption (bsc#1192606). o smb3: Backup intent flag missing from some more ops (bsc#1164565). o smb3: Call cifs reconnect from demultiplex thread (bsc#1192606). o smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path (bsc#1164565). o smb3: Fix ids returned in POSIX query dir (bsc#1192606). o smb3: Fix mkdir when idsfromsid configured on mount (bsc#1192606). o smb3: Fix out-of-bounds bug in SMB2_negotiate() (bsc#1183540). o smb3: Fix persistent handles reconnect (bnc#1151927 5.3.11). o smb3: Fix regression in time handling (bsc#1164565). o smb3: Handle error case during offload read path (bsc#1192606). o smb3: Honor 'handletimeout' flag for multiuser mounts (bsc#1176558). o smb3: Honor 'posix' flag for multiuser mounts (bsc#1176559). o smb3: Honor 'seal' flag for multiuser mounts (bsc#1176545). o smb3: Honor lease disabling for multiuser mounts (git-fixes). o smb3: Honor persistent/resilient handle flags for multiuser mounts (bsc# 1176546). o smb3: Incorrect size for netname negotiate context (bsc#1154355). o smb3: Minor cleanup of protocol definitions (bsc#1192606). o smb3: Resolve data corruption of TCP server info fields (bsc#1192606). o smb3: add additional null check in SMB2_ioctl (bsc#1192606). o smb3: add additional null check in SMB2_open (bsc#1192606). o smb3: add additional null check in SMB2_tcon (bsc#1192606). o smb3: add additional null check in SMB311_posix_mkdir (bsc#1192606). o smb3: add debug messages for closing unmatched open (bsc#1164565). o smb3: add defines for new crypto algorithms (bsc#1192606). o smb3: add defines for new signing negotiate context (bsc#1192606). o smb3: add dynamic trace point to trace when credits obtained (bsc#1181507). o smb3: add dynamic trace points for socket connection (bsc#1192606). o smb3: add dynamic tracepoints for flush and close (bsc#1164565). o smb3: add indatalen that can be a non-zero value to calculation of credit charge in smb2 ioctl (bsc#1192606). o smb3: add missing flag definitions (bsc#1164565). o smb3: add missing worker function for SMB3 change notify (bsc#1164565). o smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1164565). o smb3: add mount option to allow forced caching of read only share (bsc# 1164565). o smb3: add new module load parm enable_gcm_256 (bsc#1192606). o smb3: add new module load parm require_gcm_256 (bsc#1192606). o smb3: add one more dynamic tracepoint missing from strict fsync path (bsc# 1164565). o smb3: add rasize mount parameter to improve readahead performance (bsc# 1192606). o smb3: add some missing definitions from MS-FSCC (bsc#1192606). o smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1164565). o smb3: add support for recognizing WSL reparse tags (bsc#1192606). o smb3: add support for stat of WSL reparse points for special file types (bsc#1192606). o smb3: add support for using info level for posix extensions query (bsc# 1192606). o smb3: allow decryption keys to be dumped by admin for debugging (bsc# 1164565). o smb3: allow disabling requesting leases (bnc#1151927 5.3.4). o smb3: allow dumping GCM256 keys to improve debugging of encrypted shares (bsc#1192606). o smb3: allow dumping keys for multiuser mounts (bsc#1192606). o smb3: allow parallelizing decryption of reads (bsc#1164565). o smb3: allow skipping signature verification for perf sensitive configurations (bsc#1164565). o smb3: allow uid and gid owners to be set on create with idsfromsid mount option (bsc#1192606). o smb3: avoid confusing warning message on mount to Azure (bsc#1192606). o smb3: change noisy error message to FYI (bsc#1192606). o smb3: cleanup some recent endian errors spotted by updated sparse (bsc# 1164565). o smb3: correct server pointer dereferencing check to be more consistent (bsc #1192606). o smb3: correct smb3 ACL security descriptor (bsc#1192606). o smb3: default to minimum of two channels when multichannel specified (bsc# 1192606). o smb3: display max smb3 requests in flight at any one time (bsc#1164565). o smb3: do not attempt multichannel to server which does not support it (bsc# 1192606). o smb3: do not error on fsync when readonly (bsc#1192606). o smb3: do not fail if no encryption required but server does not support it (bsc#1192606). o smb3: do not log warning message if server does not populate salt (bsc# 1192606). o smb3: do not setup the fscache_super_cookie until fsinfo initialized (bsc# 1192606). o smb3: do not try to cache root directory if dir leases not supported (bsc# 1192606). o smb3: dump in_send and num_waiters stats counters by default (bsc#1164565). o smb3: enable negotiating stronger encryption by default (bsc#1192606). o smb3: enable offload of decryption of large reads via mount option (bsc# 1164565). o smb3: enable swap on SMB3 mounts (bsc#1192606). o smb3: extend fscache mount volume coherency check (bsc#1192606). o smb3: fix access denied on change notify request to some servers (bsc# 1192606). o smb3: fix cached file size problems in duplicate extents (reflink) (bsc# 1192606). o smb3: fix crediting for compounding when only one request in flight (bsc# 1181507). o smb3: fix default permissions on new files when mounting with modefromsid (bsc#1164565). o smb3: fix incorrect number of credits when ioctl MaxOutputResponse > 64K (bsc#1192606). o smb3: fix leak in "open on server" perf counter (bnc#1151927 5.3.4). o smb3: fix mode passed in on create for modetosid mount option (bsc# 1164565). o smb3: fix mount failure to some servers when compression enabled (bsc# 1192606). o smb3: fix performance regression with setting mtime (bsc#1164565). o smb3: fix posix extensions mount option (bsc#1192606). o smb3: fix possible access to uninitialized pointer to DACL (bsc#1192606). o smb3: fix potential null dereference in decrypt offload (bsc#1164565). o smb3: fix problem with null cifs super block with previous patch (bsc# 1164565). o smb3: fix readpage for large swap cache (bsc#1192606). o smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1164565). o smb3: fix signing verification of large reads (bsc#1154355). o smb3: fix stat when special device file and mounted with modefromsid (bsc# 1192606). o smb3: fix typo in compression flag (bsc#1192606). o smb3: fix typo in header file (bsc#1192606). o smb3: fix typo in mount options displayed in /proc/mounts (bsc#1192606). o smb3: fix uninitialized value for port in witness protocol move (bsc# 1192606). o smb3: fix unmount hang in open_shroot (bnc#1151927 5.3.4). o smb3: fix unneeded error message on change notify (bsc#1192606). o smb3: if max_channels set to more than one channel request multichannel (bsc#1192606). o smb3: improve check for when we send the security descriptor context on create (bsc#1164565). o smb3: improve handling of share deleted (and share recreated) (bsc# 1154355). o smb3: incorrect file id in requests compounded with open (bsc#1192606). o smb3: limit noisy error (bsc#1192606). o smb3: log warning if CSC policy conflicts with cache mount option (bsc# 1164565). o smb3: minor update to compression header definitions (bsc#1192606). o smb3: missing ACL related flags (bsc#1164565). o smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (bsc#1192606). o smb3: only offload decryption of read responses if multiple requests (bsc# 1164565). o smb3: pass mode bits into create calls (bsc#1164565). o smb3: prevent races updating CurrentMid (bsc#1192606). o smb3: print warning if server does not support requested encryption type (bsc#1192606). o smb3: print warning once if posix context returned on open (bsc#1164565). o smb3: query attributes on file close (bsc#1164565). o smb3: rc uninitialized in one fallocate path (bsc#1192606). o smb3: remind users that witness protocol is experimental (bsc#1192606). o smb3: remove confusing dmesg when mounting with encryption ("seal") (bsc# 1164565). o smb3: remove confusing mount warning when no SPNEGO info on negprot rsp (bsc#1192606). o smb3: remove dead code for non compounded posix query info (bsc#1192606). o smb3: remove noisy debug message and minor cleanup (bsc#1164565). o smb3: remove overly noisy debug line in signing errors (bsc#1192606). o smb3: remove static checker warning (bsc#1192606). o smb3: remove trivial dfs compile warning (bsc#1192606, jsc#SLE-20042). o smb3: remove two unused variables (bsc#1192606). o smb3: remove unused flag passed into close functions (bsc#1164565). o smb3: rename nonces used for GCM and CCM encryption (bsc#1192606). o smb3: set COMPOUND_FID to FileID field of subsequent compound request (bsc# 1192606). o smb3: set gcm256 when requested (bsc#1192606). o smb3: smbdirect support can be configured by default (bsc#1192606). o smb3: update comments clarifying SPNEGO info in negprot response (bsc# 1192606). o smb3: update protocol header definitions based to include new flags (bsc# 1192606). o smb3: update structures for new compression protocol definitions (bsc# 1192606). o smb3: use SMB2_SIGNATURE_SIZE define (bsc#1192606). o smb3: warn on confusing error scenario with sec=krb5 (bsc#1176548). o smb3: when mounting with multichannel include it in requested capabilities (bsc#1192606). o smbdirect: missing rc checks while waiting for rdma events (bsc#1192606). o soc/tegra: Fix an error handling path in tegra_powergate_power_up() (git-fixes). o soc/tegra: pmc: Fix imbalanced clock disabling in error code path (git-fixes). o spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (git-fixes). o spi: spl022: fix Microwire full duplex mode (git-fixes). o sunrpc/auth: async tasks mustn't block waiting for memory (bsc#1191876). o sunrpc/call_alloc: async tasks mustn't block waiting for memory (bsc# 1191876). o sunrpc/xprt: async tasks mustn't block waiting for memory (bsc#1191876). o sunrpc: improve 'swap' handling: scheduling and PF_MEMALLOC (bsc#1191876). o sunrpc: remove scheduling boost for "SWAPPER" tasks (bsc#1191876). o swiotlb: Fix the type of index (git-fixes). o tlb: mmu_gather: add tlb_flush_*_range APIs o tracing: Add length protection to histogram string copies (git-fixes). o tracing: Change STR_VAR_MAX_LEN (git-fixes). o tracing: Check pid filtering when creating events (git-fixes). o tracing: Fix pid filtering when triggers are attached (git-fixes). o tty: hvc: replace BUG_ON() with negative return value (git-fixes). o tty: serial: msm_serial: Deactivate RX DMA for polling support (git-fixes). o tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (git-fixes). o update structure definitions from updated protocol documentation (bsc# 1192606). o usb-storage: Add compatibility quirk flags for iODD 2531/2541 (git-fixes). o usb: dwc2: gadget: Fix ISOC flow for elapsed frames (git-fixes). o usb: dwc2: hcd_queue: Fix use of floating point literal (git-fixes). o usb: host: ohci-tmio: check return value after calling platform_get_resource() (git-fixes). o usb: musb: tusb6010: check return value after calling platform_get_resource () (git-fixes). o usb: serial: option: add Fibocom FM101-GL variants (git-fixes). o usb: serial: option: add Telit LE910S1 0x9200 composition (git-fixes). o usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts (git-fixes). o usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect (git-fixes). o usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect (git-fixes). o usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (git-fixes). o vfs: do not parse forbidden flags (bsc#1192606). o x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (bsc#1152489). o x86/pkey: Fix undefined behaviour with PKRU_WD_BIT (bsc#1152489). o x86/pvh: add prototype for xen_pvh_init() (git-fixes). o x86/xen: Add xenpv_restore_regs_and_return_to_usermode() (bsc#1152489). o xen/blkfront: do not take local copy of a request from the ring page (git-fixes). o xen/blkfront: do not trust the backend response data blindly (git-fixes). o xen/blkfront: read response from backend only once (git-fixes). o xen/netfront: disentangle tx_skb_freelist (git-fixes). o xen/netfront: do not read data from request on the ring page (git-fixes). o xen/netfront: do not trust the backend response data blindly (git-fixes). o xen/netfront: read response from backend only once (git-fixes). o xen/pvh: add missing prototype to header (git-fixes). o xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes). o xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (git-fixes). o xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc# 1192569). o xhci: Fix commad ring abort, write all 64 bits to CRCR register (git-fixes). o zram: fix return value on writeback_store (git-fixes). o zram: off by one in read_block_state() (git-fixes). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: o SUSE MicroOS 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2022-181=1 o SUSE Linux Enterprise Module for Realtime 15-SP2: zypper in -t patch SUSE-SLE-Module-RT-15-SP2-2022-181=1 Package List: o SUSE MicroOS 5.0 (x86_64): kernel-rt-5.3.18-65.2 kernel-rt-debuginfo-5.3.18-65.2 kernel-rt-debugsource-5.3.18-65.2 o SUSE Linux Enterprise Module for Realtime 15-SP2 (noarch): kernel-devel-rt-5.3.18-65.2 kernel-source-rt-5.3.18-65.2 o SUSE Linux Enterprise Module for Realtime 15-SP2 (x86_64): cluster-md-kmp-rt-5.3.18-65.2 cluster-md-kmp-rt-debuginfo-5.3.18-65.2 dlm-kmp-rt-5.3.18-65.2 dlm-kmp-rt-debuginfo-5.3.18-65.2 gfs2-kmp-rt-5.3.18-65.2 gfs2-kmp-rt-debuginfo-5.3.18-65.2 kernel-rt-5.3.18-65.2 kernel-rt-debuginfo-5.3.18-65.2 kernel-rt-debugsource-5.3.18-65.2 kernel-rt-devel-5.3.18-65.2 kernel-rt-devel-debuginfo-5.3.18-65.2 kernel-rt_debug-5.3.18-65.2 kernel-rt_debug-debuginfo-5.3.18-65.2 kernel-rt_debug-debugsource-5.3.18-65.2 kernel-rt_debug-devel-5.3.18-65.2 kernel-rt_debug-devel-debuginfo-5.3.18-65.2 kernel-syms-rt-5.3.18-65.1 ocfs2-kmp-rt-5.3.18-65.2 ocfs2-kmp-rt-debuginfo-5.3.18-65.2 References: o https://www.suse.com/security/cve/CVE-2021-28711.html o https://www.suse.com/security/cve/CVE-2021-28712.html o https://www.suse.com/security/cve/CVE-2021-28713.html o https://www.suse.com/security/cve/CVE-2021-28714.html o https://www.suse.com/security/cve/CVE-2021-28715.html o https://www.suse.com/security/cve/CVE-2021-33098.html o https://www.suse.com/security/cve/CVE-2021-4001.html o https://www.suse.com/security/cve/CVE-2021-4002.html o https://www.suse.com/security/cve/CVE-2021-43975.html o https://www.suse.com/security/cve/CVE-2021-43976.html o https://bugzilla.suse.com/1139944 o https://bugzilla.suse.com/1151927 o https://bugzilla.suse.com/1152489 o https://bugzilla.suse.com/1154353 o https://bugzilla.suse.com/1154355 o https://bugzilla.suse.com/1161907 o https://bugzilla.suse.com/1164565 o https://bugzilla.suse.com/1166780 o https://bugzilla.suse.com/1176242 o https://bugzilla.suse.com/1176536 o https://bugzilla.suse.com/1176544 o https://bugzilla.suse.com/1176545 o https://bugzilla.suse.com/1176546 o https://bugzilla.suse.com/1176548 o https://bugzilla.suse.com/1176558 o https://bugzilla.suse.com/1176559 o https://bugzilla.suse.com/1176956 o https://bugzilla.suse.com/1177440 o https://bugzilla.suse.com/1178270 o https://bugzilla.suse.com/1179211 o https://bugzilla.suse.com/1179426 o https://bugzilla.suse.com/1179427 o https://bugzilla.suse.com/1179960 o https://bugzilla.suse.com/1181148 o https://bugzilla.suse.com/1181507 o https://bugzilla.suse.com/1181710 o https://bugzilla.suse.com/1183534 o https://bugzilla.suse.com/1183540 o https://bugzilla.suse.com/1183897 o https://bugzilla.suse.com/1185726 o https://bugzilla.suse.com/1185902 o https://bugzilla.suse.com/1187541 o https://bugzilla.suse.com/1189126 o https://bugzilla.suse.com/1191793 o https://bugzilla.suse.com/1191876 o https://bugzilla.suse.com/1192267 o https://bugzilla.suse.com/1192507 o https://bugzilla.suse.com/1192511 o https://bugzilla.suse.com/1192569 o https://bugzilla.suse.com/1192606 o https://bugzilla.suse.com/1192845 o https://bugzilla.suse.com/1192847 o https://bugzilla.suse.com/1192877 o https://bugzilla.suse.com/1192946 o https://bugzilla.suse.com/1192969 o https://bugzilla.suse.com/1192990 o https://bugzilla.suse.com/1193042 o https://bugzilla.suse.com/1193169 o https://bugzilla.suse.com/1193318 o https://bugzilla.suse.com/1193349 o https://bugzilla.suse.com/1193440 o https://bugzilla.suse.com/1193442 ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 23/25 Rue Daviel | fax : 01-53-94-20-41 + + 75013 Paris | email:cert@support.renater.fr + =========================================================