SUSE-SU-2020:2980-1

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
• CVE-2020-24490: Fixed a heap buffer overflow when processing extended advertising report events aka 'BleedingTooth' aka 'BadVibes' (bsc#1177726).
• CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' aka 'BadChoice' (bsc#1177725).
• CVE-2020-25641: Fixed a zero-length biovec request issued by the block subsystem could have caused the kernel to enter an infinite loop, causing a denial of service (bsc#1177121).
• CVE-2020-25643: Fixed a memory corruption and a read overflow which could have caused by improper input validation in the pppcpparse_cr function (bsc#1177206).
• CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177511).

The following non-security bugs were fixed:

• 9p: Fix memory leak in v9fs_mount (git-fixes).
• ACPI: EC: Reference count query handlers under lock (git-fixes).
• airo: Fix read overflows sending packets (git-fixes).
• ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).
• arm64: Enable PCI write-combine resources under sysfs (bsc#1175807).
• ASoC: img-i2s-out: Fix runtime PM imbalance on error (git-fixes).
• ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1 (git-fixes).
• ASoC: kirkwood: fix IRQ error handling (git-fixes).
• ASoC: wm8994: Ensure the device is resumed in wm89xxmicdetect functions (git-fixes).
• ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811 (git-fixes).
• ata: ahci: mvebu: Make SATA PHY optional for Armada 3720 (git-fixes).
• ath10k: fix array out-of-bounds access (git-fixes).
• ath10k: fix memory leak for tpcstatsfinal (git-fixes).
• ath10k: use kzalloc to read for ath10ksdiohifdiagread (git-fixes).
• Bluetooth: Fix refcount use-after-free issue (git-fixes).
• Bluetooth: guard against controllers sending zero'd events (git-fixes).
• Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).
• Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).
• Bluetooth: prefetch channel before killing sock (git-fixes).
• brcmfmac: Fix double freeing in the fmac usb data path (git-fixes).
• btrfs: block-group: do not set the wrong READA flag for btrfsreadblock_groups() (bsc#1176019).
• btrfs: block-group: fix free-space bitmap threshold (bsc#1176019).
• btrfs: block-group: refactor how we delete one block group item (bsc#1176019).
• btrfs: block-group: refactor how we insert a block group item (bsc#1176019).
• btrfs: block-group: refactor how we read one block group item (bsc#1176019).
• btrfs: block-group: rename writeonecache_group() (bsc#1176019).
• btrfs: check the right error variable in btrfsdeldirentriesin_log (bsc#1177687).
• btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).
• btrfs: do not take an extra root ref at allocation time (bsc#1176019).
• btrfs: drop logs when we've aborted a transaction (bsc#1176019).
• btrfs: fix a race between scrub and block group removal/allocation (bsc#1176019).
• Btrfs: fix crash during unmount due to race with delayed inode workers (bsc#1176019).
• btrfs: fix race between page release and a fast fsync (bsc#1177687).
• btrfs: free block groups after free'ing fs trees (bsc#1176019).
• btrfs: hold a ref on the root on the dead roots list (bsc#1176019).
• btrfs: kill the subvol_srcu (bsc#1176019).
• btrfs: make btrfscleanupfs_roots use the radix tree lock (bsc#1176019).
• btrfs: make inodes hold a ref on their roots (bsc#1176019).
• btrfs: make the extent buffer leak check per fs info (bsc#1176019).
• btrfs: move inocacheinode dropping out of btrfsfreefs_root (bsc#1176019).
• btrfs: move the block group freeze/unfreeze helpers into block-group.c (bsc#1176019).
• btrfs: move the root freeing stuff into btrfsputroot (bsc#1176019).
• btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687).
• btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687).
• btrfs: reduce contention on log trees when logging checksums (bsc#1177687).
• btrfs: release old extent maps during page release (bsc#1177687).
• btrfs: remove no longer necessary chunk mutex locking cases (bsc#1176019).
• btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687).
• btrfs: rename member 'trimming' of block group to a more generic name (bsc#1176019).
• btrfs: scrub, only lookup for csums if we are dealing with a data extent (bsc#1176019).
• btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687).
• bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal (git-fixes).
• clk: samsung: exynos4: mark 'chipid' clock as CLKIGNOREUNUSED (git-fixes).
• clk: socfpga: stratix10: fix the divider for the emacptpfree_clk (git-fixes).
• clk: tegra: Always program PLL_E when enabled (git-fixes).
• clk/ti/adpll: allocate room for terminating null (git-fixes).
• clocksource/drivers/h8300timer8: Fix wrong return value in h83008timer_init() (git-fixes).
• clocksource/drivers/timer-gx6605s: Fixup counter reload (git-fixes).
• create Storage / NVMe subsection
• crypto: algifaead - Do not set MAYBACKLOG on the async path (git-fixes).
• crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).
• crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).
• crypto: ixp4xx - Fix the size used in a 'dmafreecoherent()' call (git-fixes).
• crypto: mediatek - Fix wrong return value in mtkdescring_alloc() (git-fixes).
• crypto: omap-sham - fix digcnt register handling with export/import (git-fixes).
• crypto: picoxcell - Fix potential race condition bug (git-fixes).
• crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA (git-fixes).
• cypto: mediatek - fix leaks in mtkdescring_alloc (git-fixes).
• Disable CONFIGLIVEPATCHIPACLONES where not needed Explicitly disable CONFIGLIVEPATCHIPACLONES in configs where it is not needed to avoid confusion and unwanted values due to fragment config files.
• dmaengine: mediatek: hsdmaprobe: fixed a memory leak when devmrequest_irq fails (git-fixes).
• dmaengine: stm32-dma: use vchanterminatevdesc() in .terminate_all (git-fixes).
• dmaengine: stm32-mdma: use vchanterminatevdesc() in .terminate_all (git-fixes).
• dmaengine: tegra-apb: Prevent race conditions on channel's freeing (git-fixes).
• dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).
• dma-fence: Serialise signal enabling (dmafenceenableswsignaling) (git-fixes).
• drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).
• drm/amdgpu: restore proper ref count in amdgpudisplaycrtcsetconfig (git-fixes).
• drm/radeon: revert 'Prefer lower feedback dividers' (bsc#1177384).
• drop Storage / bsc#1171688 subsection No effect on expanded tree.
• e1000: Do not perform reset in reset_task if we are already down (git-fixes).
• ftrace: Move RCU is watching check after recursion check (git-fixes).
• fuse: do not ignore errors from fusewritepagesfill() (bsc#1177193).
• gpio: mockup: fix resource leak in error path (git-fixes).
• gpio: rcar: Fix runtime PM imbalance on error (git-fixes).
• gpio: siox: explicitly support only threaded irqs (git-fixes).
• gpio: sprd: Clear interrupt when setting the type as edge (git-fixes).
• gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).
• hwmon: (applesmc) check status earlier (git-fixes).
• hwmon: (mlxreg-fan) Fix double 'Mellanox' (git-fixes).
• hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61} (git-fixes).
• i2c: aspeed: Mask IRQ status to relevant bits (git-fixes).
• i2c: core: Call i2cacpiinstallspacehandler() before i2cacpiregister_devices() (git-fixes).
• i2c: cpm: Fix i2c_ram structure (git-fixes).
• i2c: i801: Exclude device from suspend direct complete optimization (git-fixes).
• i2c: meson: fix clock setting overwrite (git-fixes).
• i2c: meson: fixup rate calculation with filter delay (git-fixes).
• i2c: owl: Clear NACK and BUS error bits (git-fixes).
• i2c: tegra: Prevent interrupt triggering after transfer timeout (git-fixes).
• i2c: tegra: Restore pinmux on system resume (git-fixes).
• ieee802154/adf7242: check status of adf7242readreg (git-fixes).
• ieee802154: fix one possible memleak in ca8210devcom_init (git-fixes).
• iio: adc: qcom-spmi-adc5: fix driver name (git-fixes).
• ima: extend boot_aggregate with kernel measurements (bsc#1177617).
• Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (bsc#954532).
• iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177297).
• iommu/amd: Fix potential @entry null deref (bsc#1177283).
• iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177284).
• iommu/amd: Restore IRTE.RemapEn bit for amdiommuactivateguestmode (bsc#1177285).
• iommu/exynos: add missing putdevice() call in exynosiommuofxlate() (bsc#1177286).
• iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).
• kabi fix for NFS: Fix flexfiles read failover (git-fixes).
• kabi: Fix kABI for 12856e7acde4 PCI/IOV: Mark VFs as not implementing PCICOMMANDMEMORY (bsc#1176979).
• kabi/severities: ignore kABI for targetcorerbd Match behaviour for all other Ceph specific modules.
• kernel-binary.spec.in: Exclude .config.old from kernel-devel - use tar excludes for .kernel-binary.spec.buildenv
• kernel-binary.spec.in: Package the objinstalldir as explicit filelist.
• leds: mlxreg: Fix possible buffer overflow (git-fixes).
• libceph-add-support-for-CMPEXT-compare-extent-reques.patch: (bsc#1177090).
• mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).
• mac80211: skip mpath lookup also for control port tx (git-fixes).
• mac802154: tx: fix use-after-free (git-fixes).
• macsec: avoid use-after-free in macsechandleframe() (git-fixes).
• media: camss: Fix a reference count leak (git-fixes).
• media: m5mols: Check function pointer in m5molssensorpower (git-fixes).
• media: mc-device.c: fix memleak in mediadeviceregister_entity (git-fixes).
• media: mx2emmaprp: Fix memleak in emmaprpprobe (git-fixes).
• media: omap3isp: Fix memleak in isp_probe (git-fixes).
• media: ov5640: Correct Bit Div register in clock tree diagram (git-fixes).
• media: platform: fcp: Fix a reference count leak (git-fixes).
• media: rcar-csi2: Allocate v4l2asyncsubdev dynamically (git-fixes).
• media: rcar-vin: Fix a reference count leak (git-fixes).
• media: rc: do not access device via sysfs after rcunregisterdevice() (git-fixes).
• media: rc: uevent sysfs file races with rcunregisterdevice() (git-fixes).
• media: Revert 'media: exynos4-is: Add missed check for pinctrllookupstate()' (git-fixes).
• media: rockchip/rga: Fix a reference count leak (git-fixes).
• media: s5p-mfc: Fix a reference count leak (git-fixes).
• media: smiapp: Fix error handling at NVM reading (git-fixes).
• media: staging/intel-ipu3: css: Correctly reset some memory (git-fixes).
• media: stm32-dcmi: Fix a reference count leak (git-fixes).
• media: tc358743: cleanup tc358743cecisr (git-fixes).
• media: tc358743: initialize variable (git-fixes).
• media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).
• media: ti-vpe: Fix a missing check and reference count leak (git-fixes).
• media: tuner-simple: fix regression in simplesetradio_freq (git-fixes).
• media: usbtv: Fix refcounting mixup (git-fixes).
• media: uvcvideo: Set media controller entity functions (git-fixes).
• media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
• media: v4l2-async: Document asd allocation requirements (git-fixes).
• mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).
• mm: call condresched() from deferredinit_memmap() (git fixes (mm/init), bsc#1177697).
• mmc: core: do not set limits.discard_granularity as 0 (git-fixes).
• mmc: core: Rework wp-gpio handling (git-fixes).
• mm, compaction: fully assume capture is not NULL in compactzoneorder() (git fixes (mm/compaction), bsc#1177681).
• mm, compaction: make capture control handling safe wrt interrupts (git fixes (mm/compaction), bsc#1177681).
• mmc: sdhci-acpi: AMDI0040: Set SDHCIQUIRK2PRESETVALUEBROKEN (git-fixes).
• mmc: sdhci: Add LTR support for some Intel BYT based controllers (git-fixes).
• mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).
• mm/debug.c: always print flags in dump_page() (git fixes (mm/debug)).
• mm: initialize deferred pages with interrupts enabled (git fixes (mm/init), bsc#1177697).
• mm/memcontrol.c: lost cssput in memcgexpandshrinkermaps() (bsc#1177694).
• mm/migrate.c: also overwrite error when it is bigger than zero (git fixes (mm/move_pages), bsc#1177683).
• mm: movepages: report the number of non-attempted pages (git fixes (mm/movepages), bsc#1177683).
• mm: movepages: return valid node id in status if the page is already on the target node (git fixes (mm/movepages), bsc#1177683).
• mm/pagealloc.c: call touchnmiwatchdog() on max order boundaries in deferred init (git fixes (mm/init), bsc#1177697).
• mm, slab/slub: move and improve cachefromobj() (mm/slub bsc#1165692). mm, slab/slub: improve error reporting and overhead of cachefromobj() (mm/slub bsc#1165692).
• mm, slub: extend checks guarded by slub_debug static key (mm/slub bsc#1165692).
• mm, slub: extend slub_debug syntax for multiple blocks (mm/slub bsc#1165692).
• mm, slub: introduce kmemcachedebug_flags() (mm/slub bsc#1165692).
• mm, slub: introduce static key for slub_debug() (mm/slub bsc#1165692).
• mm, slub: make reclaim_account attribute read-only (mm/slub bsc#1165692).
• mm, slub: make remaining slub_debug related attributes read-only (mm/slub bsc#1165692).
• mm, slub: make some slub_debug related attributes read-only (mm/slub bsc#1165692).
• mm, slub: remove runtime allocation order changes (mm/slub bsc#1165692).
• mm, slub: restore initial kmem_cache flags (mm/slub bsc#1165692).
• Move upstreamed intel-vbtn patch into sorted section
• mt76: add missing locking around ampdu action (git-fixes).
• mt76: clear skb pointers from rx aggregation reorder buffer during cleanup (git-fixes).
• mt76: do not use devm API for led classdev (git-fixes).
• mt76: fix handling full tx queues in mt76dmatxqueueskb_raw (git-fixes).
• mt76: fix LED link time failure (git-fixes).
• mtd: cficmdset0002: do not free cfi->cfiq in error path of cfiamdstdsetup() (git-fixes).
• mtd: rawnand: gpmi: Fix runtime PM imbalance on error (git-fixes).
• mtd: rawnand: omap_elm: Fix runtime PM imbalance on error (git-fixes).
• net: phy: realtek: fix rtl8211e rx/tx delay config (git-fixes).
• nfsd4: fix NULL dereference in nfsd/clients display code (git-fixes).
• NFS: Do not move layouts to plhreturnsegs list while in use (git-fixes).
• NFS: Do not return layout segments that are in use (git-fixes).
• NFS: ensure correct writeback errors are returned on close() (git-fixes).
• NFS: Fix flexfiles read failover (git-fixes).
• NFS: Fix security label length not being reset (bsc#1176381).
• NFS: nfsfilewrite() should check for writeback errors (git-fixes).
• NFSv4.2: fix client's attribute cache management for copyfilerange (git-fixes).
• nvme-multipath: retry commands for dying queues (bsc#1171688).
• patches.suse/target-compare-and-write-backend-driver-sense-handli.patch: (bsc#1177719).
• patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch (bsc#1177090).
• patches.suse/target-rbd-support-COMPAREANDWRITE.patch: (fate#318836, bsc#1177090).
• PCI: Avoid double hpmemsize MMIO window assignment (git-fixes).
• PCI/IOV: Mark VFs as not implementing PCICOMMANDMEMORY (bsc#1176979).
• PCI: tegra194: Fix runtime PM imbalance on error (git-fixes).
• PCI: tegra: Fix runtime PM imbalance on error (git-fixes).
• phy: ti: am654: Fix a leak in serdesam654probe() (git-fixes).
• pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB (git-fixes).
• pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).
• Platform: OLPC: Fix memleak in olpcecprobe (git-fixes).
• platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP (git-fixes).
• platform/x86: fix kconfig dependency warning for LG_LAPTOP (git-fixes).
• platform/x86: intelpmccore: do not create a static struct device (git-fixes).
• platform/x86: intel-vbtn: Switch to an allow-list for SWTABLETMODE reporting (bsc#1175599).
• platform/x86: thinkpadacpi: initialize tpnvram_state variable (git-fixes).
• platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse (git-fixes).
• pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly on read (git-fixes).
• powerpc/dma: Fix dmamapops::getrequiredmask (bsc#1065729).
• power: supply: max17040: Correct voltage reading (git-fixes).
• qla2xxx: Return EBUSY on fcport deletion (bsc#1171688).
• r8169: fix data corruption issue on RTL8402 (bsc#1174098).
• rbd-add-rbdimgfillcmpandwritefrom_bvecs.patch: (bsc#1177090).
• rbd-add-support-for-COMPAREANDWRITE-CMPEXT.patch: (bsc#1177090).
• RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request (bsc#1175621).
• Refresh patches.suse/fnic-to-not-call-scsi_done-for-unhandled-commands.patch (bsc#1168468, bsc#1171675).
• regulator: axp20x: fix LDO2/4 description (git-fixes).
• regulator: resolve supply after creating regulator (git-fixes).
• rename Other drivers / Intel IOMMU subsection to IOMMU
• Rename patches to the same name as in SLE15-SP3.
• Rename scsi-fnic-do-not-call-scsi_done-for-unhandled-commands.patch Fix typo in patch file name.
• rtc: ds1374: fix possible race condition (git-fixes).
• rtc: sa1100: fix possible race condition (git-fixes).
• s390/pci: Mark all VFs as not implementing PCICOMMANDMEMORY (bsc#1176979).
• sched/fair: Ignore cache hotness for SMT migration (bnc#1155798 (CPU scheduler functional and performance backports)).
• sched/fair: Use dst group while checking imbalance for NUMA balancer (bnc#1155798 (CPU scheduler functional and performance backports)).
• sched/numa: Use runnable_avg to classify node (bnc#1155798 (CPU scheduler functional and performance backports)).
• scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).
• scsi: qla2xxx: Add IOCB resource tracking (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Add rport fields in debugfs (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Add SLER and PI control support (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Allow devlosstmo setting for FC-NVMe devices (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix memory size truncation (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix MPI reset needed message (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Fix reset of MPI firmware (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Make tgtportdatabase available in initiator mode (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Performance tweak (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1171688 bsc#1174003).
• scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1171688 bsc#1174003).
• serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).
• serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).
• serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).
• serial: uartps: Wait for tx_empty in console setup (git-fixes).
• spi: dw-pci: free previously allocated IRQs if desc->setup() fails (git-fixes).
• spi: fsl-espi: Only process interrupts for expected events (git-fixes).
• spi: omap2-mcspi: Improve performance waiting for CHSTAT (git-fixes).
• spi: sprd: Release DMA channel also on probe deferral (git-fixes).
• spi: stm32: Rate-limit the 'Communication suspended' message (git-fixes).
• svcrdma: Fix page leak in svcrdmarecvreadchunk() (git-fixes).
• target-rbd-add-emulatelegacycapacity-dev-attribute.patch: (bsc#1177109).
• target-rbd-add-WRITE-SAME-support.patch: (bsc#1177090).
• target-rbd-conditionally-fix-off-by-one-bug-in-get_b.patch: (bsc#1177109).
• target-rbd-fix-unmap-discard-block-size-conversion.patch: (bsc#1177271).
• target-rbd-fix-unmap-handling-with-unmapzeroesdata.patch: (bsc#1177271).
• thermal: rcar_thermal: Handle probe error gracefully (git-fixes).
• Update config files. Enable ACPIPCISLOT and HOTPLUGPCIACPI (bsc#1177194).
• USB: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).
• USB: EHCI: ehci-mv: fix error handling in mvehciprobe() (git-fixes).
• USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).
• USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).
• vfio/pci: Decouple PCICOMMANDMEMORY bit checks from is_virtfn (bsc#1176979).
• virtio-net: do not disable guest csum when disable LRO (git-fixes).
• vmxnet3: fix cksum offload issues for non-udp tunnels (git-fixes).
• wlcore: fix runtime pm imbalance in wl1271txwork (git-fixes).
• wlcore: fix runtime pm imbalance in wlcoreregdomainconfig (git-fixes).
• x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1176907).
• xen/events: do not use chip_data for legacy IRQs (bsc#1065600).
• xprtrdma: fix incorrect header size calculations (git-fixes).
• yam: fix possible memory leak in yaminitdriver (git-fixes).