SUSE-SU-2018:2981-1

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2018-14617: Prevent NULL pointer dereference and panic in hfsplus_lookup() when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory (bsc#1102870)
• CVE-2018-14613: Prevent invalid pointer dereference in ioctlmappage() when mounting and operating a crafted btrfs image, caused by a lack of block group item validation in checkleaf_item (bsc#1102896).
• CVE-2018-10940: The cdromioctlmediachanged function allowed local attackers to use a incorrect bounds check in the CDROM driver CDROMMEDIA_CHANGED ioctl to read out kernel memory (bsc#1092903)
• CVE-2018-13093: Prevent NULL pointer dereference and panic in lookupslow() on a NULL inode->iops pointer when doing pathwalks on a corrupted xfs image. This occured because of a lack of proper validation that cached inodes are free during allocation (bnc#1100001)
• CVE-2018-13094: Prevent OOPS that may have occured for a corrupted xfs image after xfsdashrink_inode() is called with a NULL bp (bnc#1100000)
• CVE-2018-13095: Prevent denial of service (memory corruption and BUG) that could have occurred for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork (bnc#1099999)
• CVE-2018-12896: Prevent integer overflow in the POSIX timer code that was caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INTMAX, but the accounting is int based. This basically made the accounting values, which are visible to user space via timergetoverrun(2) and siginfo::sioverrun, random. This allowed a local user to cause a denial of service (signed integer overflow) via crafted mmap, futex, timercreate, and timer_settime system calls (bnc#1099922)
• CVE-2018-16658: Prevent information leak in cdromioctldrive_status that could have been used by local attackers to read kernel memory (bnc#1107689)
• CVE-2018-6555: The irdasetsockopt function allowed local users to cause a denial of service (iasobject use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket (bnc#1106511)
• CVE-2018-6554: Prevent memory leak in the irdabind function that allowed local users to cause a denial of service (memory consumption) by repeatedly binding an AFIRDA socket (bnc#1106509)
• CVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol (bnc#1096748)
• CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service (bnc#1096748)
• CVE-2018-10938: A crafted network packet sent remotely by an attacker forced the kernel to enter an infinite loop in the cipsov4optptr() function leading to a denial-of-service (bnc#1106016)

The following non-security bugs were fixed:

• /dev/mem: Add bounce buffer for copy-out (git-fixes).
• /dev/mem: Avoid overwriting 'err' in read_mem() (git-fixes).
• 9p/net: Fix zero-copy path in the 9p virtio transport (bsc#1051510).
• 9p/virtio: fix off-by-one error in sg list bounds check (bsc#1051510).
• 9p: fix multiple NULL-pointer-dereferences (bsc#1051510).
• ACPI / EC: Add another entry for Thinkpad X1 Carbon 6th (bsc#1051510).
• ACPI / EC: Add parameter to force disable the GPE on suspend (bsc#1051510).
• ACPI / EC: Use ecnowakeup on ThinkPad X1 Yoga 3rd (bsc#1051510).
• ACPI / EC: Use ecnowakeup on Thinkpad X1 Carbon 6th (bsc#1051510).
• ACPI / EC: Use ecnowakeup on more Thinkpad X1 Carbon 6th systems (bsc#1051510).
• ACPI / PCI: pci_link: Allow the absence of _PRS and change log level (bsc#1104172).
• ACPI / bus: Only call dmichecksystem on X86 (bsc#1105597, bsc#1106178).
• ACPI / scan: Initialize status to ACPISTADEFAULT (bsc#1051510).
• ACPI/IORT: Remove temporary iortgetidmappingindex() ACPICA guard (bsc#1103387).
• ACPI/PCI: pci_link: reduce verbosity when IRQ is enabled (bsc#1104172).
• ACPICA: iasl: Add SMMUv3 device ID mapping index support (bsc#1103387).
• ALSA: cs46xx: Deliver indirect-PCM transfer error.
• ALSA: emu10k1: Deliver indirect-PCM transfer error.
• ALSA: fireface: fix memory leak in ff400switchfetching_mode() (bsc#1051510).
• ALSA: firewire-digi00x: fix memory leak of private data (bsc#1051510).
• ALSA: firewire-tascam: fix memory leak of private data (bsc#1051510).
• ALSA: hda - Fix cancelworksync() stall from jackpoll work (bsc#1051510).
• ALSA: mips: Deliver indirect-PCM transfer error.
• ALSA: oxfw: fix memory leak for model-dependent data at error path (bsc#1051510).
• ALSA: oxfw: fix memory leak of discovered stream formats at error path (bsc#1051510).
• ALSA: oxfw: fix memory leak of private data (bsc#1051510).
• ALSA: pcm: Call ack() whenever appl_ptr is updated.
• ALSA: pcm: Fix negative appl_ptr handling in pcm-indirect helpers.
• ALSA: pcm: Fix possible inconsistent appl_ptr update via mmap.
• ALSA: pcm: Simplify forward/rewind codes.
• ALSA: pcm: Skip ack callback without actual appl_ptr update.
• ALSA: pcm: Use a common helper for PCM state check and hwsync.
• ALSA: pcm: Workaround for weird PulseAudio behavior on rewind error.
• ALSA: rme32: Deliver indirect-PCM transfer error.
• ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot (bsc#1051510).
• ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary cores (bsc#1051510).
• ARM: hisi: fix error handling and missing ofnodeput (bsc#1051510).
• ARM: hisi: handle ofiomap and fix missing ofnode_put (bsc#1051510).
• ARM: imx: flag failure of of_iomap (bsc#1051510).
• ARM: imxv4v5_defconfig: Select ULPI support (bsc#1051510).
• ARM: imxv6v7_defconfig: Select ULPI support (bsc#1051510).
• ARM: pxa: irq: fix handling of ICMR registers in suspend/resume (bsc#1051510).
• ASoC: rsnd: fixup not to call clk_get/set under non-atomic (bsc#1051510).
• ASoC: rsnd: move rsndssiconfig_init() execute condition into it (bsc#1051510).
• ASoC: rsnd: update pointer more accurate (bsc#1051510).
• ASoC: wm8994: Fix missing break in switch (bsc#1051510).
• Apply e666d4e9ceec crypto: vmx - Use skcipher for ctr fallback to SLE12-SP4 (bsc#1106464).
• Bluetooth: h5: Fix missing dependency on BTHCIUARTSERDEV (bsc#1051510).
• Bluetooth: hidp: Fix handling of strncpy for hid->name information (bsc#1051510).
• Prevent errors at reboot (bsc#1093389)
• Documentation: add some docs for errseq_t (bsc#1107008).
• Fix buggy backport of patches.drivers/libnvdimm-btt-fix-an-incompatibility-in-the-log-layout.patch (bsc#1103961).
• Fix kABI breakage due to enum addition for ath10k (bsc#1051510).
• HID: add quirk for another PIXART OEM mouse used by HP (bsc#1051510).
• HID: i2c-hid: Add no-irq-after-reset quirk for 0911:5288 device.
• IB/core: type promotion bug in rdmarwinitonemr() (bsc#1046306).
• IB/hfi1: Invalid NUMA node information can cause a divide by zero (bsc#1060463).
• IB/hfi1: Remove incorrect call to do_interrupt callback (bsc#1060463).
• IB/hfi1: Set inusectxts bits for user ctxts only (bsc#1060463 ).
• IB/ipoib: Avoid a race condition between startxmit and cmrep_handler (bsc#1046307).
• IB/ipoib: Fix error return code in ipoibdevinit() (bsc#1046307 ).
• IB/mlx4: Test port number before querying type (bsc#1046302 ).
• IB/mlx4: Use 4K pages for kernel QP's WQE buffer (bsc#1046302 ).
• Input: atmelmxtts - only use first T9 instance (bsc#1051510).
• Input: edt-ft5x06 - fix error handling for factory mode on non-M06 (bsc#1051510).
• Input: edt-ft5x06 - implement support for the EDT-M12 series (bsc#1051510).
• Input: edt-ft5x06 - make distinction between m06/m09/generic more clear (bsc#1051510).
• Input: synaptics-rmi4 - fix axis-swap behavior (bsc#1051510).
• KABI: tpm: change relinquish_locality return value back to void (bsc#1082555).
• KABI: tpm: do keep the cmdready and goidle as pm ops (bsc#1082555).
• KVM/x86: remove WARNON() for when vmmunmap() fails (bsc#1106240).
• KVM: Enforce error in ioctl for compat tasks when !KVM_COMPAT (bsc#1106240).
• KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages (bsc#1077761, git-fixes, bsc#1103948, bsc#1103949).
• KVM: VMX: Work around kABI breakage in 'enum vmxl1dflush_state' (bsc#1106369).
• KVM: VMX: fixes for vmentryl1dflush module parameter (bsc#1106369).
• KVM: nVMX: Do not flush TLB when vmcs12 uses VPID (bsc#1106240).
• KVM: nVMX: Fix injection to L2 when L1 do not intercept external-interrupts (bsc#1106240).
• KVM: nVMX: Fix races when sending nested PI while dest enters/leaves L2 (bsc#1106240).
• KVM: nVMX: Re-evaluate L1 pending events when running L2 and L1 got posted-interrupt (bsc#1106240).
• KVM: s390: add etoken support for guests (bsc#1106948, LTC#171029).
• KVM: s390: force bp isolation for VSIE (bsc#1103421).
• KVM: s390: implement CPU model only facilities (bsc#1106948, LTC#171029).
• KVM: x86: Change _kvmapicupdateirr() to also return if max IRR updated (bsc#1106240).
• KVM: x86: SVM: Call x86specctrlsetguest/host() with interrupts disabled (git-fixes 1f50ddb4f418).
• KVM: x86: fix APIC page invalidation (bsc#1106240).
• NET: stmmac: align DMA stuff to largest cache line length (netfilter-stable-180801).
• NFSv4 client live hangs after live data migration recovery (git-fixes).
• NFSv4: Fix a sleep in atomic context in nfs4callbacksequence() (git-fixes).
• NFSv4: Fix possible 1-byte stack overflow in nfsidmapreadandverify_message (git-fixes).
• Netperf performance issue due to AppArmor net mediation (bsc#1108520)
• PCI: Match Root Port's MPS to endpoint's MPSS as necessary (bsc#1109269).
• PCI: OF: Fix I/O space page leak (git-fixes).
• PCI: aardvark: Fix I/O space page leak (git-fixes).
• PCI: hotplug: Do not leak pci_slot on registration failure (bsc#1051510).
• PCI: hv: Make sure the bus domain is really unique (git-fixes).
• PCI: mvebu: Fix I/O space end address calculation (bsc#1051510).
• PCI: pciehp: Fix use-after-free on unplug (bsc#1051510).
• PM / Domains: Fix error path during attach in genpd (bsc#1051510).
• PM / clk: signedness bug in ofpmclkaddclks() (bsc#1051510).
• PM / runtime: Drop usage count for suppliers at device link removal (bsc#1100132).
• RDMA/bnxtre: Fix a bunch of off by one bugs in qplibfp.c (bsc#1050244).
• RDMA/bnxt_re: Fix a couple off by one bugs (bsc#1050244 ).
• RDMA/i40w: Hold read semaphore while looking after VMA (bsc#1058659).
• Refresh with the upstream patches for lan78xx fixes (bsc#1085262)
• Replace magic for trusting the secondary keyring with #define (bsc#1051510).
• Revert 'PCI: Add ACS quirk for Intel 300 series' (bsc#1051510).
• Revert 'UBIFS: Fix potential integer overflow in allocation' (bsc#1051510).
• Revert 'mm: page_alloc: skip over regions of invalid pfns where possible' (bnc#1107078).
• Revert 'vhost: cache used event for better performance' (bsc#1090528).
• Revert 'vmalloc: back off when the current task is killed' (bnc#1107073).
• Staging: vc04_services: remove unused variables.
• Tools: hv: vss: fix loop device detection.
• USB: net2280: Fix erroneous synchronization change (bsc#1051510).
• USB: serial: io_ti: fix array underflow in completion handler (bsc#1051510).
• USB: serial: tiusb3410_5052: fix array underflow in completion handler (bsc#1051510).
• Update patches.drivers/0016-arm64-vgic-v2-Fix-proxying-of-cpuif-access.patch (bsc#1106901, bsc#1107265).
• Update patches.fixes/4.4.139-043-powerpc-mm-hash-Add-missing-isync-prior-to-ke.patch (bnc#1012382, bsc#1094244).
• Update config files, make CRYPTOCRCT10DIFPCLMUL built-in (bsc#1105603).
• Update patch tag of dmi fix (bsc#1105597) Also moved to the sorted section.
• Update patch tags of recent security fixes (bsc#1106426)
• Update references (bsc#1064232)
• Workaround kABI breakage by _mustcheck drop of strscpy() (bsc#1051510).
• ahci: Add Intel Ice Lake LP PCI ID (bsc#1051510).
• apparmor: Fix regression in profile conflict logic (bsc#1106427)
• apparmor: ensure that undecidable profile attachments fail (bsc#1106427).
• apparmor: fix an error code in _aacreate_ns() (bsc#1106427).
• apparmor: remove no-op permission check in policy_unpack (bsc#1106427).
• arm64/acpi: Create arch specific cpu to acpi id helper (bsc#1106903).
• arm64/kasan: do not allocate extra shadow memory (bsc#1106897).
• arm64/mm/kasan: do not use vmemmap_populate() to initialize shadow (bsc#1106898).
• arm64: Enforce BBM for huge IO/VMAP mappings (bsc#1106890).
• arm64: Ignore hardware dirty bit updates in ptepsetwrprotect() (bsc#1108010).
• arm64: Make sure permission updates happen for pmd/pud (bsc#1106891).
• arm64: dma-mapping: clear buffers allocated with FORCE_CONTIGUOUS flag (bsc#1106902).
• arm64: export memblock_reserve()d regions via /proc/iomem (bsc#1106892).
• arm64: fix unwind_frame() for filtered out fn for function graph tracing (bsc#1106900).
• arm64: fix vmemmap BUILDBUGON() triggering on !vmemmap setups (bsc#1106896).
• arm64: fpsimd: Avoid FPSIMD context leakage for the init task (bsc#1106894).
• arm64: kasan: avoid pfntonid() before page array is initialized (bsc#1106899).
• arm64: mm: Ensure writes to swapper are ordered wrt subsequent cache maintenance (bsc#1106906).
• arm64: mm: check for upper PAGESHIFT bits in pfnvalid() (bsc#1106893).
• arm64: numa: rework ACPI NUMA initialization (bsc#1106905).
• arm64: vgic-v2: Fix proxying of cpuif access (bsc#1106901).
• ata: libahci: Allow reconfigure of DEVSLP register (bsc#1051510).
• ata: libahci: Correct setting of DEVSLP register (bsc#1051510).
• ath10k: disable bundle mgmt tx completion event support (bsc#1051510).
• ath10k: update the phymode along with bandwidth change request (bsc#1051510).
• ath9k: add MSI support.
• ath9k: report tx status on EOSP (bsc#1051510).
• ath9k_hw: fix channel maximum power level test (bsc#1051510).
• b43/leds: Ensure NUL-termination of LED name string (bsc#1051510).
• b43legacy/leds: Ensure NUL-termination of LED name string (bsc#1051510).
• bcache: avoid unncessary cache prefetch bchbtreenode_get().
• bcache: calculate the number of incremental GC nodes according to the total of btree nodes.
• bcache: display rate debug parameters to 0 when writeback is not running.
• bcache: do not check return value of debugfscreatedir().
• bcache: finish incremental GC.
• bcache: fix I/O significant decline while backend devices registering.
• bcache: fix error setting writeback_rate through sysfs interface.
• bcache: free heap cacheset->flushbtree in bchjournalfree.
• bcache: make the prerr statement used for ENOENT only in sysfsattatch section.
• bcache: release dc->writebacklock properly in bchwriteback_thread().
• bcache: set max writeback rate when I/O request is idle.
• bcache: simplify the calculation of the total amount of flash dirty data.
• Add a blacklist entry for the reverted patch (bsc#1106743)
• blk-mq: avoid to synchronize rcu inside blkcleanupqueue() (bsc#1077989).
• blkdev: _blkdevdirectIOsimple: fix leak in error case (bsc#1083663).
• block, bfq: return nbytes and not zero from struct cftype .write() method (bsc#1106238).
• block: bioiovitergetpages: fix size of last iovec (bsc#1083663).
• block: bioiovitergetpages: pin more pages for multi-segment IOs (bsc#1083663).
• block: do not print a message when the device went away (bsc#1098459).
• block: do not warn for flush on read-only device (bsc#1107756).
• bnxt_en: Clean up unused functions (bsc#1086282).
• bnxten: Do not adjust maxcp_rings by the ones used by RDMA (bsc#1086282).
• bnxt_en: Fix VF mac address regression (bsc#1086282 ).
• bnxt_re: Fix couple of memory leaks that could lead to IOMMU call traces (bsc#1050244).
• bonding: avoid lockdep confusion in bondgetstats() (netfilter-stable-180804).
• bpf, s390: fix potential memleak when later bpfjitprog fails (bsc#1083647).
• bpf: fix references to freebpfprog_info() in comments (bsc#1083647).
• bpf: fix uninitialized variable in bpf tools (bsc#1083647).
• bpf: hash map: decrement counter on error (bsc#1083647).
• bpf: powerpc64: pad function address loads with NOPs (bsc#1083647).
• bpf: use GFPATOMIC instead of GFPKERNEL in bpfparseprog() (bsc#1083647).
• brcmfmac: stop watchdog before detach and free everything (bsc#1051510).
• btrfs: Add checker for EXTENT_CSUM (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Add sanity check for EXTENT_DATA when reading out leaf (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Check if item pointer overlaps with the item itself (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Check that each block group has corresponding chunk at mount time (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Fix use-after-free when cleaning up fs_devs with a single stale device (bsc#1097105).
• btrfs: Handle error from btrfsuuidtreerem call in _btrfsioctlsetreceived_subvol (bsc#1097105).
• btrfs: Introduce mount time chunk <-> dev extent mapping check (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Manually implement devicetotalbytes getter/setter (bsc#1043912).
• btrfs: Move leaf and node validation checker to tree-checker.c (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: Round down values which are written for totalbytessize (bsc#1043912).
• btrfs: Verify that every chunk has corresponding block group at mount time (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: fix error handling in btrfsdevreplace_start (bsc#1107535).
• btrfs: round down size diff when shrinking/growing device (bsc#1097105).
• btrfs: tree-checker: Add checker for dir item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Detect invalid and empty essential trees (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Enhance btrfschecknode output (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Enhance output for checkextentdata_item (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Enhance output for btrfscheckleaf (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Enhance output for checkcsumitem (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Fix false panic for sanity test (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Replace root parameter with fs_info (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: Verify blockgroupitem (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: use %zu format string for size_t (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• btrfs: tree-checker: use %zu format string for size_t (bsc#1102882, bsc#1102896, bsc#1102879, bsc#1102877, bsc#1102875,).
• cdrom: Fix info leak/OOB read in cdromioctldrive_status (bsc#1051510).
• ceph: fix incorrect use of strncpy (bsc#1107319).
• ceph: return errors from posixaclequiv_mode() correctly (bsc#1107320).
• cfg80211: nl80211updatefties() to validate NL80211ATTR_IE (bsc#1051510).
• cgroup: avoid copying strings longer than the buffers (bsc#1051510).
• cifs: Fix stack out-of-bounds in smb{2,3}createlease_buf() (bsc#1051510).
• cifs: check kmalloc before use (bsc#1051510).
• cifs: store the leaseKey in the fid on SMB2_open (bsc#1051510).
• clsmatchall: fix tcfunbindfilter missing (networking-stable-1808_21).
• crypto: caam/jr - fix descriptor DMA unmapping (bsc#1051510).
• crypto: caam/qi - fix error path in xts setkey (bsc#1051510).
• crypto: vmx - Fix sleep-in-atomic bugs (bsc#1051510).
• cxl: Configure PSL to not use APC virtual machines (bsc#1055014, git-fixes).
• cxl: Fix wrong comparison in cxladaptercontext_get() (bsc#1055014, git-fixes).
• dax: remove VM_MIXEDMAP for fsdax and device dax (bsc#1106007).
• dccp: fix undefined behavior with 'cwnd' shift in ccid2cwndrestart() (netfilter-stable-180817).
• drm/amd/pp/Polaris12: Fix a chunk of registers missed to program (bsc#1051510).
• drm/amdgpu: Fix RLC safe mode test in gfxv90enterrlcsafemode (bsc#1051510).
• drm/amdgpu: fix swapped emitibsize in vce3 (bsc#1051510).
• drm/amdgpu: update tmr mc address (bsc#1100132).
• drm/amdgpu:add new firmware id for VCN (bsc#1051510).
• drm/amdgpu:add tmr mc address into amdgpufirmwareinfo (bsc#1051510).
• drm/arm/malidp: Preserve LAYER_FORMAT contents when setting format (bsc#1051510).
• drm/armada: fix colorkey mode property (bsc#1051510).
• drm/armada: fix irq handling (bsc#1051510).
• drm/bridge/sii8620: Fix display of packed pixel modes (bsc#1051510).
• drm/bridge/sii8620: fix display of packed pixel modes in MHL2 (bsc#1051510).
• drm/bridge/sii8620: fix loops in EDID fetch logic (bsc#1051510).
• drm/bridge: adv7511: Reset registers on hotplug (bsc#1051510).
• drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80 (bsc#1051510).
• drm/exynos: decon5433: Fix WINCONx reset value (bsc#1051510).
• drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes (bsc#1051510).
• drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes (bsc#1051510).
• drm/i915/audio: Fix audio enumeration issue on BXT.
• drm/i915/gvt: Fix the incorrect length of childdeviceconfig issue (bsc#1051510).
• drm/i915/gvt: clear ggtt entries when destroy vgpu (bsc#1051510).
• drm/i915/gvt: request srcureadlock before checking if one gfn is valid (bsc#1051510).
• drm/i915/kvmgt: Fix potential Spectre v1 (bsc#1051510).
• drm/i915/lpe: Mark LPE audio runtime pm as 'no callbacks' (bsc#1051510).
• drm/i915/overlay: Allocate physical registers from stolen (bsc#1051510).
• drm/i915: Increase LSPCON timeout (bsc#1051510).
• drm/i915: set DP Main Stream Attribute for color range on DDI platforms (bsc#1051510).
• drm/imx: imx-ldb: check if channel is enabled before printing warning (bsc#1051510).
• drm/imx: imx-ldb: disable LDB on driver bind (bsc#1051510).
• drm/modes: Introduce drmmodematch().
• drm/nouveau/drm/nouveau: Fix bogus drmkmshelperpollenable() placement (bsc#1051510).
• drm/tegra: Check for malformed offsets and sizes in the 'submit' IOCTL (bsc#1106170).
• drm/tegra: Fix comparison operator for buffer size (bsc#1100132).
• drm/vc4: Fix the 'no scaling' case on multi-planar YUV formats (bsc#1051510).
• drm: Add DRM client cap for aspect-ratio.
• drm: Add and handle new aspect ratios in DRM layer.
• drm: Add aspect ratio parsing in DRM layer.
• drm: Expose modes with aspect ratio, only if requested.
• drm: Handle aspect ratio info in legacy modeset path.
• drm: mali-dp: Enable Global SE interrupts mask for DP500 (bsc#1051510).
• dwc2: gadget: Fix ISOC IN DDMA PID bitfield value calculation (bsc#1051510).
• errseq: Add to documentation tree (bsc#1107008).
• errseq: Always report a writeback error once (bsc#1107008).
• ext4: sysfs: print ext4superblock fields as little-endian (bsc#1106229).
• f2fs: remove unneeded memory footprint accounting (bsc#1106233).
• f2fs: remove unneeded memory footprint accounting (bsc#1106297).
• f2fs: validate before set/clear free nat bitmap (bsc#1106231).
• f2fs: validate before set/clear free nat bitmap (bsc#1106297).
• fat: fix memory allocation failure handling of match_strdup() (bsc#1051510).
• fb: fix lost console when the user unplugs a USB adapter (bsc#1051510).
• fbdev: omapfb: off by one in omapfbregisterclient() (bsc#1051510).
• fix _legitimizemnt()/mntput() race (bsc#1106297).
• fix a page leak in vhostscsiiovtosgl() error recovery (bsc#1051510).
• fix mntput/mntput race (bsc#1106297).
• fs/9p/xattr.c: catch the error of p9clientclunk when setting xattr failed (bsc#1051510).
• fs/proc/proc_sysctl.c: fix potential page fault while unregistering sysctl table (bsc#1106297).
• fuse: Add missed unlockpage() to fusereadpages_fill() (bsc#1106291).
• fuse: Fix oops at processinitreply() (bsc#1106291).
• fuse: fix double request_end() (bsc#1106291).
• fuse: fix initial parallel dirops (bsc#1106291).
• fuse: fix unlocked access to processing queue (bsc#1106291).
• fuse: umount should wait for all requests (bsc#1106291).
• getxattr: use correct xattr length (bsc#1106235).
• getxattr: use correct xattr length (bsc#1106297).
• gpio: ml-ioh: Fix buffer underwrite on probe error path (bsc#1051510).
• gpio: tegra: Move driver registration to subsys_init level (bsc#1051510).
• gpiolib-acpi: make sure we trigger edge events at least once on boot (bsc#1051510).
• gpiolib: acpi: Switch to cansleep version of GPIO library call (bsc#1051510).
• gpu: host1x: Check whether size of unpin isn't 0 (bsc#1051510).
• gpu: ipu-v3: default to id 0 on missing OF alias (bsc#1051510).
• i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes (bsc#1051510).
• i2c: davinci: Avoid zero value of CLKH (bsc#1051510).
• i2c: i801: Add missing documentation entries for Braswell and Kaby Lake (bsc#1051510).
• i2c: i801: Add support for Intel Cedar Fork (bsc#1051510).
• i2c: i801: Add support for Intel Ice Lake (bsc#1051510).
• i2c: i801: Consolidate chipset names in documentation and Kconfig (bsc#1051510).
• i2c: i801: fix DNV's SMBCTRL register offset (bsc#1051510).
• i2c: imx: Fix race condition in dma read (bsc#1051510).
• i2c: uniphier-f: issue STOP only for last message or I2CMSTOP (bsc#1051510).
• i2c: uniphier: issue STOP only for last message or I2CMSTOP (bsc#1051510).
• i2c: xiic: Make the start and the byte count write atomic (bsc#1051510).
• i2c: xlp9xx: Fix case where SSIF read transaction completes early (bsc#1105907).
• i2c: xlp9xx: Fix issue seen when updating receive length (bsc#1105907).
• i2c: xlp9xx: Make sure the transfer size is not more than I2CSMBUSBLOCK_SIZE (bsc#1105907).
• i40e: fix condition of WARN_ONCE for stat strings (bsc#1107522).
• ibsrpt: Fix a use-after-free in srptclose_ch() (bsc#1046306 ).
• ibmvnic: Include missing return code checks in reset function (bnc#1107966).
• iommu/amd: Add support for IOMMU XT mode.
• iommu/amd: Add support for higher 64-bit IOMMU Control Register.
• iommu/amd: Finish TLB flush in amdiommuunmap() (bsc#1106105).
• iommu/amd: make sure TLB to be flushed before IOVA freed (bsc#1106105).
• iommu/arm-smmu-v3: Do not free page table ops twice (bsc#1106237).
• iommu/vt-d: Fix a potential memory leak (bsc#1106105).
• iommu/vt-d: Ratelimit each dmar fault printing (bsc#1106105).
• ipmi/powernv: Fix error return code in ipmipowernvprobe() (git-fixes).
• ipmi: Fix some counter issues (bsc#1105907).
• ipmi: Move BT capabilities detection to the detect call (bsc#1106779).
• ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver (bsc#1105907).
• ipmi:bt: Set the timeout before doing a capabilities check (bsc#1051510).
• ipv4: remove BUGON() from fibcomputespecdst (netfilter-stable-180801).
• irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP (bsc#1051510).
• iwcxgb4: remove duplicate memcpy() in c4iwcreate_listen() (bsc#1046543).
• ixgbe: Refactor queue disable logic to take completion time into account (bsc#1101557).
• ixgbe: Reorder Tx/Rx shutdown to reduce time needed to stop device (bsc#1101557).
• kabi fix for checkdisksize_change() (bsc#1098459).
• kabi protect hnaeaeops (bsc#1107924).
• kabi protect struct kvmsyncregs (bsc#1106948).
• kabi/severities: Whitelist libceph, rbd, and ceph (bsc#1096748).
• kabi: move s390 mmcontextt lock to mm_struct and ignore the change (bsc#1103421).
• kabi: x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (bnc#1105536).
• kvm: arm64: Convert kvmsets2pte_readonly() from inline asm to cmpxchg() (bsc#1108010).
• kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 (bsc#1106105).
• kvm: nVMX: Use nestedrunpending rather than from_vmentry (bsc#1106240).
• kvm: x86: vmx: fix vpid leak (bsc#1106240).
• l2tp: use skdstcheck() to avoid race on sk->skdstcache (netfilter-stable-180817).
• lan78xx: Lan7801 Support for Fixed PHY (bsc#1085262).
• lan78xx: Set ASD in MAC_CR when EEE is enabled (bsc#1085262).
• lan78xx: remove redundant initialization of pointer 'phydev' (bsc#1085262).
• lib/test_hexdump.c: fix failure on big endian cpu (bsc#1051510).
• libahci: Fix possible Spectre-v1 pmp indexing in ahciledstore() (bsc#1051510).
• libbpf: Makefile set specified permission mode (bsc#1083647).
• libceph: check authorizer reply/challenge length before reading (bsc#1096748).
• libceph: factor out _cephx_decrypt() (bsc#1096748).
• libceph: factor out _preparewrite_connect() (bsc#1096748).
• libceph: factor out encrypt_authorizer() (bsc#1096748).
• libceph: store cephauthhandshake pointer in ceph_connection (bsc#1096748).
• libceph: weaken sizeof check in cephxverifyauthorizerreply() (bsc#1096748).
• libnvdimm, btt: fix uninitialized err_lock (bsc#1103961).
• libnvdimm, nfit: enable support for volatile ranges (bsc#1103961).
• libnvdimm, nfit: move the check on nd_reserved2 to the endpoint (bsc#1103961).
• libnvdimm: Use max contiguous area for namespace size (git-fixes).
• libnvdimm: rename ndsectorsize{show,store} to ndsizeselect{show,store} (bsc#1103961).
• livepatch: Remove reliable stacktrace check in klptryswitch_task() (bsc#1071995).
• livepatch: Validate module/old func name length (bsc#1071995).
• llc: use refcountincnotzero() for llcsapfind() (netfilter-stable-1808_17).
• mac80211: add stations tied to AP_VLANs during hw reconfig (bsc#1051510).
• mac80211: always account for A-MSDU header changes (bsc#1051510).
• mac80211: avoid kernel panic when building AMSDU from non-linear SKB (bsc#1051510).
• mac80211: fix an off-by-one issue in A-MSDU max_subframe computation (bsc#1051510).
• macros.kernel-source: pass -b properly in kernel module package (bsc#1107870).
• md-cluster: clear another node's suspend_area after the copy is finished (bsc#1106333).
• md-cluster: do not send msg if array is closing (bsc#1106333).
• md-cluster: release RESYNC lock after the last resync message (bsc#1106688).
• md-cluster: show array's status more accurate (bsc#1106333).
• media: Revert '[media] tvp5150: fix pad format frame height' (bsc#1051510).
• mei: do not update offset in write (bsc#1051510).
• mei: me: enable asynchronous probing.
• memcg, thp: do not invoke oom killer on thp charges (bnc#1089663).
• memory: tegra: Apply interrupts mask per SoC (bsc#1051510).
• memory: tegra: Do not handle spurious interrupts (bsc#1051510).
• mfd: intel-lpss: Add Ice Lake PCI IDs (bsc#1051510).
• mfd: lpc_ich: Do not touch SPI-NOR write protection bit on Apollo Lake (bsc#1051510).
• mlxsw: coreaclflexactions: Return error for conflicting actions (netfilter-stable-1808_17).
• mm/huge_memory.c: fix data loss when splitting a file pmd (bnc#1107074).
• mm/hugetlb: filter out hugetlb pages if HUGEPAGE migration is not supported (bnc#1106697).
• mm/vmscan: wake up flushers for legacy cgroups too (bnc#1107061).
• mm: fix devmemisallowed() for sub-page System RAM intersections (bsc#1106800).
• mm: memcg: fix use after free in memcgroupiter() (bnc#1107065).
• mmc: omap_hsmmc: fix wakeirq handling on removal (bsc#1051510).
• module: exclude SHN_UNDEF symbols from kallsyms api (bsc#1071995).
• net/9p/client.c: version pointer uninitialized (bsc#1051510).
• net/9p/trans_fd.c: fix race by holding the lock (bsc#1051510).
• net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree() (bsc#1051510).
• net/9p: Switch to waiteventkillable() (bsc#1051510).
• net/9p: fix error path of p9virtioprobe (bsc#1051510).
• net: dsa: Do not suspend/resume closed slavedev (netfilter-stable-1808_04).
• net: ena: Eliminate duplicate barriers on weakly-ordered archs (bsc#1108093).
• net: ena: Fix use of uninitialized DMA address bits field (netfilter-stable-180801).
• net: ena: fix device destruction to gracefully free resources (bsc#1108093).
• net: ena: fix driver when PAGE_SIZE == 64kB (bsc#1108093).
• net: ena: fix incorrect usage of memory barriers (bsc#1108093).
• net: ena: fix missing calls to READ_ONCE (bsc#1108093).
• net: ena: fix missing lock during device destruction (bsc#1108093).
• net: ena: fix potential double enadestroydevice() (bsc#1108093).
• net: ena: fix surprise unplug NULL dereference kernel crash (bsc#1108093).
• net: ethernet: mvneta: Fix napi structure mixup on armada 3700 (networking-stable-180821).
• net: fix amd-xgbe flow-control issue (netfilter-stable-180801).
• net: hns3: Fix for waterline not setting correctly (bsc#1104353 ).
• net: hns3: fix pageoffset overflow when CONFIGARM6464KPAGES (bsc#1104353).
• net: hns: add netifcarrieroff before change speed and duplex (bsc#1107924).
• net: hns: add the code for cleaning pkt in chip (bsc#1107924).
• net: mdio-mux: bcm-iproc: fix wrong getter and setter pair (netfilter-stable-180801).
• net: mvneta: fix mvnetaconfigrss on armada 3700 (networking-stable-180821).
• net: rtnlconfigurelink: fix dev flags changes arg to _devnotify_flags (git-fixes).
• net: stmmac: Fix WoL for PCI-based setups (netfilter-stable-180804).
• net: stmmac: mark PM functions as _maybeunused (git-fixes).
• netsched: Fix missing res info when create new tcindex filter (netfilter-stable-180817).
• netfilter: ip6trpfilter: set FIFACE for linklocal addresses (git-fixes).
• netlink: Do not shift on 64 for ngroups (git-fixes).
• netlink: Do not shift with UB on nlk->ngroups (netfilter-stable-180801).
• netlink: Do not subscribe to non-existent groups (netfilter-stable-180801).
• netlink: Fix spectre v1 gadget in netlinkcreate() (netfilter-stable-1808_04).
• nfs/pnfs: fix nfsdirectreq ref leak when i/o falls back to the mds (git-fixes).
• nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (git-fixes).
• nfsd: remove blocked locks on client teardown (git-fixes).
• nl80211: Add a missing break in parsestationflags (bsc#1051510).
• nl80211: check nlaparsenested() return values (bsc#1051510).
• nvme: register ns_id attributes as default sysfs groups (bsc#1105247).
• nvmefc: add 'nvmediscovery' sysfs attribute to fc transport device (bsc#1044189).
• pinctrl/amd: only handle irq if it is pending and unmasked (bsc#1051510).
• pipe: actually allow root to exceed the pipe buffer limits (bsc#1106297).
• platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 (bsc#1051510).
• pnfs/blocklayout: off by one in blmapstripe() (git-fixes).
• powerpc/64s: Default l1d_size to 64K in RFI fallback flush (bsc#1068032, git-fixes).
• powerpc/64s: Fix DT CPU features Power9 DD2.1 logic (bsc#1055117).
• powerpc/64s: Fix compiler store ordering to SLB shadow area (bsc#1094244).
• powerpc/64s: move machine check SLB flushing to mm/slb.c (bsc#1094244).
• powerpc/kprobes: Fix call trace due to incorrect preempt count (bsc#1065729).
• powerpc/lib: Fix the feature fixup tests to actually work (bsc#1065729).
• powerpc/mce: Fix SLB rebolting during MCE recovery path (bsc#1094244).
• powerpc/perf: Fix IMC allocation routine (bsc#1054914).
• powerpc/perf: Fix memory allocation for core-imc based on numpossiblecpus() (bsc#1054914).
• powerpc/perf: Remove sched_task function defined for thread-imc (bsc#1054914).
• powerpc/pseries: Avoid using the size greater than RTASERRORLOG_MAX (bsc#1094244).
• powerpc/pseries: Fix endianness while restoring of r3 in MCE handler (bsc#1094244).
• powerpc/pseries: fix EEH recovery of some IOV devices (bsc#1078720, git-fixes).
• powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (bsc#1068032, bsc#1080157, git-fixes).
• powerpc: Avoid code patching freed init sections (bnc#1107735).
• powerpc: make feature-fixup tests fortify-safe (bsc#1065729).
• pstore: Fix incorrect persistent ram buffer mapping (bsc#1051510).
• pwm: tiehrpwm: Fix disabling of output of PWMs (bsc#1051510).
• qlge: Fix netdev features configuration (bsc#1098822).
• r8169: add support for NCube 8168 network card (bsc#1051510).
• reiserfs: fix broken xattr handling (heap corruption, bad retval) (bsc#1106236).
• rhashtable: add schedule points (bsc#1051510).
• root dentries need RCU-delayed freeing (bsc#1106297).
• rsi: Fix 'invalid vdd' warning in mmc (bsc#1051510).
• rxrpc: Fix user call ID check in rxrpcservicepreallocone (netfilter-stable-1808_04).
• s390/entry.S: use assembler alternatives (bsc#1103421).
• s390/lib: use expoline for all bcr instructions (git-fixes, bsc#1103421).
• s390/mm: fix local TLB flushing vs. detach of an mm address space (bsc#1103421).
• s390/mm: fix race on mm->context.flush_mm (bsc#1103421).
• s390/runtime instrumentation: simplify task exit handling (bsc#1103421).
• s390: always save and restore all registers on context switch (bsc#1103421).
• s390: detect etoken facility (bsc#1103421).
• s390: fix brr1trampoline for machines without exrl (git-fixes, bsc#1103421).
• s390: fix compat system call table (bsc#1103421).
• s390: fix handling of -1 in set{,fs}id16 syscalls (bsc#1103421).
• s390: use expoline thunks for all branches generated by the BPF JIT (bsc#1103421).
• samples/bpf: adjust rlimit RLIMIT_MEMLOCK for xdp1 (bsc#1083647).
• sched/fair: Fix vruntime_normalized() for remote non-migration wakeup (git-fixes).
• sched/numa: Do not move imbalanced load purely on the basis of an idle CPU (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: Evaluate move once per node (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: Remove numahascapacity() (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: Remove unused taskcapacity from 'struct numastats' (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: Stop comparing tasks for NUMA placement after selecting an idle core (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: remove unused code from updatenumastats() (bnc#1101669 optimise numa balancing for fast migrate).
• sched/numa: remove unused nr_running field (bnc#1101669 optimise numa balancing for fast migrate).
• scripts/gitsort/gitsort.py: Add fixes branch from mkp/scsi.git.
• scripts/gitsort/gitsort.py: add mkp 4.20/scsi-queue
• scripts/tar-up.sh: Do not package gitlog-excludes file Also fix the evaluation of gitlog-excludes file, too
• scripts: modpost: check memory allocation results (bsc#1051510).
• scsi: fcoe: hold disc_mutex when traversing rport lists (bsc#1077989).
• scsi: hpsa: limit transfer length to 1MB, not 512kB (bsc#1102346).
• scsi: libfc: Add lockdep annotations (bsc#1077989).
• scsi: libfc: fixup 'sleeping function called from invalid context' (bsc#1077989).
• scsi: libfc: fixup lockdep annotations (bsc#1077989).
• scsi: libfc: hold discmutex in fcdiscstoprports() (bsc#1077989).
• scsi: lpfc: Correct MDS diag and nvmet configuration (bsc#1106636).
• scsi: mpt3sas: Fix calltrace observed while running IO and reset (bsc#1077989).
• scsi: qla2xxx: Add appropriate debug info for invalid RX_ID (bsc#1108870).
• scsi: qla2xxx: Add logic to detect ABTS hang and response completion (bsc#1108870).
• scsi: qla2xxx: Add mode control for each physical port (bsc#1108870).
• scsi: qla2xxx: Add support for ZIO6 interrupt threshold (bsc#1108870).
• scsi: qla2xxx: Allow FC-NVMe underrun to be handled by transport (bsc#1108870).
• scsi: qla2xxx: Check for Register disconnect (bsc#1108870).
• scsi: qla2xxx: Decrement login retry count for only plogi (bsc#1108870).
• scsi: qla2xxx: Defer chip reset until target mode is enabled (bsc#1108870).
• scsi: qla2xxx: Fix Remote port registration (bsc#1108870).
• scsi: qla2xxx: Fix deadlock between ATIO and HW lock (bsc#1108870).
• scsi: qla2xxx: Fix double increment of switch scan retry count (bsc#1108870).
• scsi: qla2xxx: Fix dropped srb resource (bsc#1108870).
• scsi: qla2xxx: Fix duplicate switch's Nport ID entries (bsc#1108870).
• scsi: qla2xxx: Fix early srb free on abort (bsc#1108870).
• scsi: qla2xxx: Fix iIDMA error (bsc#1108870).
• scsi: qla2xxx: Fix incorrect port speed being set for FC adapters (bsc#1108870).
• scsi: qla2xxx: Fix out of order Termination and ABTS response (bsc#1108870).
• scsi: qla2xxx: Fix port speed display on chip reset (bsc#1108870).
• scsi: qla2xxx: Fix premature command free (bsc#1108870).
• scsi: qla2xxx: Fix process response queue for ISP26XX and above (bsc#1108870).
• scsi: qla2xxx: Fix race condition for resource cleanup (bsc#1108870).
• scsi: qla2xxx: Fix stuck session in PLOGI state (bsc#1108870).
• scsi: qla2xxx: Force fw cleanup on ADISC error (bsc#1108870).
• scsi: qla2xxx: Increase abort timeout value (bsc#1108870).
• scsi: qla2xxx: Move ABTS code behind qpair (bsc#1108870).
• scsi: qla2xxx: Move rport registration out of internal work_list (bsc#1108870).
• scsi: qla2xxx: Move {get|rel}sp to baseqpair struct (bsc#1108870).
• scsi: qla2xxx: Reduce holding sess_lock to prevent CPU lock-up (bsc#1108870).
• scsi: qla2xxx: Reject bsg request if chip is down (bsc#1108870).
• scsi: qla2xxx: Remove ASYNC GIDPN switch command (bsc#1108870).
• scsi: qla2xxx: Remove all rports if fabric scan retry fails (bsc#1108870).
• scsi: qla2xxx: Remove redundant check for fcport deletion (bsc#1108870).
• scsi: qla2xxx: Remove stale ADISC_DONE event (bsc#1108870).
• scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx (bsc#1108870).
• scsi: qla2xxx: Serialize mailbox request (bsc#1108870).
• scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0 (bsc#1108870).
• scsi: qla2xxx: Turn off IOCB timeout timer on IOCB completion (bsc#1108870).
• scsi: qla2xxx: Update driver to version 10.00.00.09-k (bsc#1108870).
• scsi: qla2xxx: Update driver version to 10.00.00.10-k (bsc#1108870).
• scsi: qla2xxx: Update driver version to 10.00.00.11-k (bsc#1108870).
• scsi: qla2xxx: Update rscnrcvd field to more meaningful scanneeded (bsc#1108870).
• scsi: qla2xxx: Use correct qpair for ABTS/CMD (bsc#1108870).
• scsi: qla2xxx: shutdown chip if reset fail (bsc#1108870).
• scsidebug: call respXXX function after setting host_scribble (bsc#1069138).
• scsidebug: reset injection flags for everynth > 0 (bsc#1069138).
• selftests/bpf/test_maps: exit child process without error in ENOMEM case (bsc#1083647).
• selftests/bpf: fix a typo in map in map test (bsc#1083647).
• serial: enable spi in sc16is7xx driver References: bsc#1105672
• serial: make sc16is7xx driver supported References: bsc#1105672
• slab: _GFPZERO is incompatible with a constructor (bnc#1107060).
• spi-nor: intel-spi: Fix number of protected range registers for BYT/LPT.
• spi: cadence: Change usleep_range() to udelay(), for atomic context (bsc#1051510).
• spi: davinci: fix a NULL pointer dereference (bsc#1051510).
• spi: pxa2xx: Add support for Intel Ice Lake (bsc#1051510).
• staging: bcm2835-audio: Check if workqueue allocation failed.
• staging: bcm2835-audio: Deliver indirect-PCM transfer error.
• staging: bcm2835-audio: Disconnect and free vchiinstance on moduleexit().
• staging: bcm2835-audio: Do not leak workqueue if open fails.
• staging: bcm2835-audio: constify sndpcmops structures.
• staging: bcm2835-audio: make sndpcmhardware const.
• staging: comedi: nimiocommon: fix subdevice flags for PFI subdevice (bsc#1051510).
• staging: lustre: Use 'kvfree()' for memory allocated by 'kvzalloc()' (bsc#1051510).
• staging: lustre: disable preempt while sampling processor id (bsc#1051510).
• staging: lustre: fix bug in oscentercache_try (bsc#1051510).
• staging: lustre: ldlm: free resource when ldlmlockcreate() fails (bsc#1051510).
• staging: lustre: libcfs: Prevent harmless read underflow (bsc#1051510).
• staging: lustre: libcfs: fix test for libcfsioctlhdr minimum size (bsc#1051510).
• staging: lustre: llite: correct removexattr detection (bsc#1051510).
• staging: lustre: llite: initialize xattr->xe_namelen (bsc#1051510).
• staging: lustre: lmv: correctly iput lmo_root (bsc#1051510).
• staging: lustre: lov: use correct env in loviodataversionend() (bsc#1051510).
• staging: lustre: o2iblnd: Fix FastReg map/unmap for MLX5 (bsc#1051510).
• staging: lustre: o2iblnd: Fix crash in kiblndhandleearly_rxs() (bsc#1051510).
• staging: lustre: o2iblnd: fix race at kiblndconnectpeer (bsc#1051510).
• staging: lustre: obd_mount: use correct niduuid suffix (bsc#1051510).
• staging: lustre: obdclass: return -EFAULT if copyfromuser() fails (bsc#1051510).
• staging: lustre: ptlrpc: kfree used instead of kvfree (bsc#1051510).
• staging: lustre: remove invariant in clioread_ahead() (bsc#1051510).
• staging: lustre: statahead: remove incorrect test on agllistempty() (bsc#1051510).
• staging: vc04services: Fix platformnodrvowner.cocci warnings.
• staging: vc04_services: bcm2835-audio Format multiline comment.
• staging: vc04_services: bcm2835-audio: Add blank line after declaration.
• staging: vc04_services: bcm2835-audio: Change to unsigned int *.
• staging: vc04_services: bcm2835-audio: add SPDX identifiers.
• staging: vc04_services: bcm2835-audio: remove redundant license text.
• staging: vc04_services: please do not use multiple blank lines.
• string: drop _mustcheck from strscpy() and restore strscpy() usages in cgroup (bsc#1051510).
• sunxi-rsb: Include OF based modalias in device uevent (bsc#1051510).
• sys: do not hold uts_sem while accessing userspace memory (bnc#1106995).
• targetcorerbd: break up free_device callback (bsc#1105524).
• targetcorerbd: use RCU in free_device (bsc#1105524).
• tcp: add maxquickacks param to tcpincrquickack and tcpenterquickackmode (netfilter-stable-180801).
• tcp: add one more quick ack after after ECN events (netfilter-stable-180801).
• tcp: do not aggressively quick ack after ECN events (netfilter-stable-180801).
• tcp: do not force quickack when receiving out-of-order packets (netfilter-stable-180801).
• tcp: refactor tcpecncheckce to remove sk type cast (netfilter-stable-1808_01).
• tcpbbr: fix bw probing to raise in-flight data for very small BDPs (netfilter-stable-1808_01).
• thermal: thermalhwmon: Convert to hwmondeviceregisterwith_info() (bsc#1103363).
• thermalhwmon: Pass the originating device down to hwmondeviceregisterwith_info (bsc#1103363).
• thermal_hwmon: Sanitize attribute name passed to hwmon (bsc#1103363).
• ti: ethernet: cpdma: Use correct format for genpool_* (bsc#1051510).
• tools/power turbostat: Read extended processor family from CPUID (bsc#1051510).
• tools/power turbostat: fix -S on UP systems (bsc#1051510).
• tools: usb: ffs-test: Fix build on big endian systems (bsc#1051510).
• tpm: Introduce flag TPMTRANSMITRAW (bsc#1082555).
• tpm: cmd_ready command can be issued only after granting locality (bsc#1082555).
• tpm: fix race condition in tpmcommonwrite() (bsc#1082555).
• tpm: fix use after free in tpm2loadcontext() (bsc#1082555).
• tpm: separate cmdready/goidle from runtime_pm (bsc#1082555).
• tpm: tpm_crb: relinquish locality on error path (bsc#1082555).
• tpm: vtpmproxy: Implement requestlocality function (bsc#1082555).
• tracepoint: Do not warn on ENOMEM (bsc#1051510).
• uart: fix race between uartputchar() and uart_shutdown() (bsc#1051510).
• ubifs: Check data node size before truncate (bsc#1051510).
• ubifs: Fix directory size calculation for symlinks (bsc#1106230).
• ubifs: Fix memory leak in lprobs self-check (bsc#1051510).
• ubifs: Fix syncedisize calculation for xattr inodes (bsc#1051510).
• ubifs: xattr: Do not operate on deleted inodes (bsc#1051510).
• udl-kms: avoid division (bsc#1051510).
• udl-kms: change down_interruptible to down (bsc#1051510).
• udl-kms: fix crash due to uninitialized memory (bsc#1051510).
• udl-kms: handle allocation failure (bsc#1051510).
• udlfb: set optimal write delay (bsc#1051510).
• usb/phy: fix PPC64 build errors in phy-fsl-usb.c (bsc#1051510).
• usb: Do not die twice if PCI xhci host is not responding in resume (bsc#1051510).
• usb: dwc2: fix isoc split in transfer with no data (bsc#1051510).
• usb: dwc2: gadget: Fix issue in dwc2gadgetstart_isoc() (bsc#1051510).
• usb: dwc3: pci: add support for Intel IceLake (bsc#1051510).
• usb: gadget: composite: fix delayedstatus race condition when setinterface (bsc#1051510).
• usb: gadget: dwc2: fix memory leak in gadget_init() (bsc#1051510).
• usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in r8a66597_queue() (bsc#1051510).
• usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in init_controller() (bsc#1051510).
• usb: gadget: udc: renesas_usb3: fix maxpacket size of ep0 (bsc#1051510).
• usb: xhci: increase CRS timeout value (bsc#1051510).
• userns: move user access out of the mutex (bsc#1051510).
• vfio/pci: Virtualize Maximum Payload Size (bsc#1051510).
• vfio/pci: Virtualize Maximum Read Request Size (bsc#1051510).
• vfio/type1: Fix task tracking for QEMU vCPU hotplug (bsc#1051510).
• vhost: correctly check the iova range when waking virtqueue (bsc#1051510).
• vhost: do not try to access device IOTLB when not initialized (bsc#1051510).
• vhost: reset metadata cache when initializing new IOTLB (netfilter-stable-180817).
• vhost: use mutexlocknested() in vhostdevlock_vqs() (bsc#1051510).
• video: fbdev: pxafb: clear allocated memory for video modes (bsc#1051510).
• vsock: split dwork to avoid reinitializations (netfilter-stable-180817).
• wlcore: Set rxstatus boottimens field on rx (bsc#1051510).
• x86/CPU/AMD: Derive CPU topology from CPUID function 0xB when available.
• x86/CPU: Modify detectextendedtopology() to return result.
• x86/events/intel/ds: Fix btsinterruptthreshold alignment (git-fixes c1961a4631da).
• x86/init: fix build with CONFIG_SWAP=n (bnc#1106121).
• x86/kasan/64: Teach KASAN about the cpuentryarea (kasan).
• x86/kvm: fix LAPIC timer drift when guest uses periodic mode (bsc#1106240).
• x86/mcelog: Get rid of RCU remnants (git-fixes 5de97c9f6d85).
• x86/mm/kasan: Do not use vmemmap_populate() to initialize shadow (kasan).
• x86/mm/memory_hotplug: determine block size based on the end of boot memory (bsc#1108243).
• x86/platform/UV: Add adjustable set memory block size function (bsc#1108243).
• x86/platform/UV: Add kernel parameter to set memory block size (bsc#1108243).
• x86/platform/UV: Mark memblock related init code and data correctly (bsc#1108243).
• x86/platform/UV: Use new set memory block size function (bsc#1108243).
• x86/spectre: Add missing family 6 check to microcode check (git-fixes a5b296636453).
• x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (bnc#1105536).
• x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (bnc#1105536).
• x86/speculation/l1tf: Suggest what to do on systems with too much RAM (bnc#1105536).
• x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (bsc#1106369).
• x86/vdso: Fix vDSO build if a retpoline is emitted (git-fixes 76b043848fd2).
• x86/xen/efi: Initialize only the EFI struct members used by Xen (bnc#1107945).
• x86: irq_remapping: Move irq remapping mode enum.
• xen-netfront-dont-bug-in-case-of-too-many-frags.patch: (bnc#1104824).
• xen-netfront: fix queue name setting (bnc#1065600).
• xen-netfront: fix warn message as irq device name has '/' (bnc#1065600).
• xen/blkback: do not keep persistent grants too long (bsc#1085042).
• xen/blkback: move persistent grants flags to bool (bsc#1085042).
• xen/blkback: remove unused persgntslock from struct (bsc#1085042).
• xen/blkfront: cleanup stale persistent grants (bsc#1085042).
• xen/blkfront: reorder tests in xlblk_init() (bsc#1085042).
• xen: avoid crash in disablehotplugcpu (bsc#1106594).
• xen: xenbusdevfrontend: Fix XSTRANSACTIONEND handling (bnc#1065600).
• xen: xenbusdevfrontend: Really return response string (bnc#1065600).
• xenbus: track caller request id (bnc#1065600).
• xfs: Fix per-inode DAX flag inheritance (Git-fixes bsc#1109511).
• xfs: add a new xfsiextlookupextentbefore helper (bsc#1095344).
• xfs: add a xfsbmapforktostate helper (bsc#1095344).
• xfs: add a xfsiextupdate_extent helper (bsc#1095344).
• xfs: add asserts for the mmap lock in xfs{insert,collapse}file_space (bsc#1095344).
• xfs: add comments documenting the rebalance algorithm (bsc#1095344).
• xfs: add some comments to xfsiextinsert/xfsiextinsert_node (bsc#1095344).
• xfs: allow unaligned extent records in xfsbmbtdisksetall (bsc#1095344).
• xfs: do not create overlapping extents in xfsbmapaddextentdelay_real (bsc#1095344).
• xfs: do not rely on extent indices in xfsbmapcollapse_extents (bsc#1095344).
• xfs: do not rely on extent indices in xfsbmapinsert_extents (bsc#1095344).
• xfs: do not set XFSBTCURBPRVWASDEL in xfsbunmapi (bsc#1095344).
• xfs: fix memory leak in xfsiextfreelastleaf (bsc#1095344).
• xfs: fix number of records handling in xfsiextsplit_leaf (bsc#1095344).
• xfs: fix type usage (bsc#1095344).
• xfs: handle zero entries case in xfsiextrebalance_leaf (bsc#1095344).
• xfs: inline xfsshiftfile_space into callers (bsc#1095344).
• xfs: introduce the xfsiextcursor abstraction (bsc#1095344).
• xfs: iterate backwards in xfsreflinkcancelcowblocks (bsc#1095344).
• xfs: iterate over extents in xfsbmapextentstobtree (bsc#1095344).
• xfs: iterate over extents in xfsiextentscopy (bsc#1095344).
• xfs: make better use of the 'state' variable in xfsbmapdelextentreal (bsc#1095344).
• xfs: merge xfsbmapreadextents into xfsiread_extents (bsc#1095344).
• xfs: move pre/post-bmap tracing into xfsiextupdate_extent (bsc#1095344).
• xfs: move some code around inside xfsbmapshift_extents (bsc#1095344).
• xfs: move some more code into xfsbmapdelextentreal (bsc#1095344).
• xfs: move xfsbmbtirec and xfsexntstt to xfs_types.h (bsc#1095344).
• xfs: move xfsiextinsert tracepoint to report useful information (bsc#1095344).
• xfs: pass a struct xfsbmbtirec to xfsbmbtlookup_eq (bsc#1095344).
• xfs: pass a struct xfsbmbtirec to xfsbmbtupdate (bsc#1095344).
• xfs: pass an on-disk extent to xfsbmbtvalidate_extent (bsc#1095344).
• xfs: pass struct xfsbmbtirec to xfsbmbtvalidate_extent (bsc#1095344).
• xfs: preserve i_rdev when recycling a reclaimable inode (bsc#1095344).
• xfs: refactor delalloc accounting in xfsbmapaddextentdelay_real (bsc#1095344).
• xfs: refactor dir2 leaf readahead shadow buffer cleverness (bsc#1095344).
• xfs: refactor xfsbmapaddextentdelay_real (bsc#1095344).
• xfs: refactor xfsbmapaddextenthole_delay (bsc#1095344).
• xfs: refactor xfsbmapaddextenthole_real (bsc#1095344).
• xfs: refactor xfsbmapaddextentunwritten_real (bsc#1095344).
• xfs: refactor xfsdelextent_real (bsc#1095344).
• xfs: remove XFSBMAPMAXSHIFTEXTENTS (bsc#1095344).
• xfs: remove XFSBMAPTRACE_EXLIST (bsc#1095344).
• xfs: remove a duplicate assignment in xfsbmapaddextentdelay_real (bsc#1095344).
• xfs: remove a superflous assignment in xfsiextremove_node (bsc#1095344).
• xfs: remove all xfsbmbtset* helpers except for xfsbmbtsetall (bsc#1095344).
• xfs: remove if_rdev (bsc#1095344).
• xfs: remove post-bmap tracing in xfsbmaplocaltoextents (bsc#1095344).
• xfs: remove support for inlining data/extents into the inode fork (bsc#1095344).
• xfs: remove the never fully implemented UUID fork format (bsc#1095344).
• xfs: remove the nrextents argument to xfsiext_insert (bsc#1095344).
• xfs: remove the nrextents argument to xfsiext_remove (bsc#1095344).
• xfs: remove xfsbmbtget_state (bsc#1095344).
• xfs: remove xfsbmseshift_one (bsc#1095344).
• xfs: rename bno to end in _xfsbunmapi (bsc#1095344).
• xfs: replace xfsbmbtlookupge with xfsbmbtlookupfirst (bsc#1095344).
• xfs: replace xfsqmgetrtblks with a direct call to xfsbmapcountleaves (bsc#1095344).
• xfs: rewrite getbmap using the xfsiext* helpers (bsc#1095344).
• xfs: rewrite xfsbmapcountleaves using xfsiextgetextent (bsc#1095344).
• xfs: rewrite xfsbmapfirstunused to make better use of xfsiextgetextent (bsc#1095344).
• xfs: simplify the xfs_getbmap interface (bsc#1095344).
• xfs: simplify xfsreflinkconvert_cow (bsc#1095344).
• xfs: split xfsbmapshift_extents (bsc#1095344).
• xfs: switch xfsbmaplocaltoextents to use xfsiextinsert (bsc#1095344).
• xfs: treat idx as a cursor in xfsbmapaddextentdelay_real (bsc#1095344).
• xfs: treat idx as a cursor in xfsbmapaddextenthole_delay (bsc#1095344).
• xfs: treat idx as a cursor in xfsbmapaddextenthole_real (bsc#1095344).
• xfs: treat idx as a cursor in xfsbmapaddextentunwritten_real (bsc#1095344).
• xfs: treat idx as a cursor in xfsbmapcollapse_extents (bsc#1095344).
• xfs: treat idx as a cursor in xfsbmapdelextent* (bsc#1095344).
• xfs: trivial indentation fixup for xfsiextremove_node (bsc#1095344).
• xfs: update got in xfsbmapshiftupdateextent (bsc#1095344).
• xfs: use a b+tree for the in-core extent list (bsc#1095344).
• xfs: use correct state defines in xfsbmapdelextent{cow,delay} (bsc#1095344).
• xfs: use the state defines in xfsbmapdelextentreal (bsc#1095344).
• xfs: use xfsbmapdelextentdelay for the data fork as well (bsc#1095344).
• xfs: use xfsiext*extent helpers in xfsbmapshiftextents (bsc#1095344).
• xfs: use xfsiext*extent helpers in xfsbmapsplitextent_at (bsc#1095344).
• xfs: use xfsiextgetextent in xfsbmapfirstunused (bsc#1095344).
• xfs: use xfsiextget_extent instead of open coding it (bsc#1095344).