SUSE-SU-2021:3447-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3447-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2021:3447-1
Related
Published
2021-10-15T07:05:48Z
Modified
2021-10-15T07:05:48Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 15 SP2 kernel was updated.

The following security bugs were fixed:

  • CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bnc#1191193)
  • CVE-2021-3752: Fixed a use after free vulnerability in the Linux kernel's bluetooth module. (bsc#1190023)
  • CVE-2021-40490: Fixed a race condition discovered in the ext4 subsystem that could leat to local priviledge escalation. (bnc#1190159)
  • CVE-2021-3744: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1189884)
  • CVE-2021-3764: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1190534)
  • CVE-2021-3669: Fixed a bug that doesn't allow /proc/sysvipc/shm to scale with large shared memory segment counts which could lead to resource exhaustion and DoS. (bsc#1188986)

The following non-security bugs were fixed:

  • ALSA: firewire-motu: fix truncated bytes in message tracepoints (git-fixes).
  • apparmor: remove duplicate macro listentryis_head() (git-fixes).
  • ASoC: fsl_micfil: register platform component before registering cpu dai (git-fixes).
  • ASoC: mediatek: common: handle NULL case in suspend/resume function (git-fixes).
  • ASoC: rockchip: i2s: Fix regmap_ops hang (git-fixes).
  • ASoC: rockchip: i2s: Fixup config for DAIFMTDSPA/B (git-fixes).
  • ASoC: SOF: Fix DSP oops stack dump output contents (git-fixes).
  • ath9k: fix OOB read ar9300eepromrestore_internal (git-fixes).
  • ath9k: fix sleeping in atomic context (git-fixes).
  • blk-mq: do not deactivate hctx if managed irq isn't used (bsc#1185762).
  • blk-mq: kABI fixes for blkmqqueue_map (bsc#1185762).
  • blk-mq: mark if one queue map uses managed irq (bsc#1185762).
  • Bluetooth: skip invalid hcisyncconncompleteevt (git-fixes).
  • bnx2x: fix an error code in bnx2xnicload() (git-fixes).
  • bnxt_en: Add missing DMA memory barriers (git-fixes).
  • bnxt_en: Disable aRFS if running on 212 firmware (git-fixes).
  • bnxt_en: Do not enable legacy TX push on older firmware (git-fixes).
  • bnxt_en: Store the running firmware version code (git-fixes).
  • bnxt: count Tx drops (git-fixes).
  • bnxt: disable napi before canceling DIM (git-fixes).
  • bnxt: do not lock the tx queue from napi poll (git-fixes).
  • bnxt: make sure xmit_more + errors does not miss doorbells (git-fixes).
  • btrfs: prevent rename2 from exchanging a subvol with a directory from different parents (bsc#1190626).
  • clk: at91: clk-generated: Limit the requested rate to our range (git-fixes).
  • clk: at91: clk-generated: pass the id of changeable parent at registration (git-fixes).
  • console: consume APC, DM, DCS (git-fixes).
  • cuse: fix broken release (bsc#1190596).
  • cxgb4: dont touch blocked freelist bitmap after free (git-fixes).
  • debugfs: Return error during {full/open}proxyopen() on rmmod (bsc#1173746).
  • devlink: Break parameter notification sequence to be before/after unload/load driver (bsc#1154353).
  • dmaengine: ioat: depends on !UML (git-fixes).
  • dmaengine: sprd: Add missing MODULEDEVICETABLE (git-fixes).
  • dmaengine: xilinx_dma: Set DMA mask for coherent APIs (git-fixes).
  • docs: Fix infiniband uverbs minor number (git-fixes).
  • drivers: gpu: amd: Initialize amdgpudmbacklightcaps object to 0 in amdgpudmupdatebacklight_caps (git-fixes).
  • drm: avoid blocking in drmclientsinfo's rcu section (git-fixes).
  • drm/amd/amdgpu: Update debugfs linksettings output linkrate field in hex (git-fixes).
  • drm/amd/display: Fix timerperpixel unit error (git-fixes).
  • drm/amdgpu: Fix BUG_ON assert (git-fixes).
  • drm/gma500: Fix end of loop tests for listforeach_entry (git-fixes).
  • drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (git-fixes).
  • drm/panfrost: Clamp lock region to Bifrost minimum (git-fixes).
  • e1000e: Do not take care about recovery NVM checksum (jsc#SLE-8100).
  • e1000e: Fix the max snoop/no-snoop latency for 10M (git-fixes).
  • EDAC/i10nm: Fix NVDIMM detection (bsc#1152489).
  • EDAC/synopsys: Fix wrong value type assignment for edac_mode (bsc#1152489).
  • erofs: fix up erofs_lookup tracepoint (git-fixes).
  • fbmem: do not allow too huge resolutions (git-fixes).
  • fpga: machxo2-spi: Fix missing error code in machxo2writecomplete() (git-fixes).
  • fpga: machxo2-spi: Return an error on failure (git-fixes).
  • fuse: flush extending writes (bsc#1190595).
  • fuse: truncate pagecache on atomicotrunc (bsc#1190705).
  • genirq: add devicehasmanagedmsiirq (bsc#1185762).
  • gpio: uniphier: Fix void functions to remove return value (git-fixes).
  • gpu: drm: amd: amdgpu: amdgpui2c: fix possible uninitialized-variable access in amdgpui2crouterselectddcport() (git-fixes).
  • gve: fix the wrong AdminQ buffer overflow check (bsc#1176940).
  • hv_netvsc: Make netvsc/VF binding check both MAC and serial number (jsc#SLE-18779, bsc#1185726).
  • hv: mana: remove netdevlockdepset_classes usage (jsc#SLE-18779, bsc#1185726).
  • hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (git-fixes).
  • hwmon: (tmp421) fix rounding for negative values (git-fixes).
  • hwmon: (tmp421) report /PVLD condition as fault (git-fixes).
  • i40e: Add additional info to PHY type error (git-fixes).
  • i40e: Fix firmware LLDP agent related warning (git-fixes).
  • i40e: Fix log TC creation failure when max num of queues is exceeded (git-fixes).
  • i40e: Fix logic of disabling queues (git-fixes).
  • i40e: Fix queue-to-TC mapping on Tx (git-fixes).
  • iavf: Fix ping is lost after untrusted VF had tried to change MAC (jsc#SLE-7940).
  • iavf: Set RSS LUT and key in reset handle path (git-fixes).
  • ibmvnic: check failover_pending in login response (bsc#1190523 ltc#194510).
  • ibmvnic: Consolidate code in replenishrxpool() (bsc#1190758 ltc#191943).
  • ibmvnic: Fix up some comments and messages (bsc#1190758 ltc#191943).
  • ibmvnic: inittxpools move loop-invariant code (bsc#1190758 ltc#191943).
  • ibmvnic: Reuse LTB when possible (bsc#1190758 ltc#191943).
  • ibmvnic: Reuse rx pools when possible (bsc#1190758 ltc#191943).
  • ibmvnic: Reuse tx pools when possible (bsc#1190758 ltc#191943).
  • ibmvnic: Use bitmap for LTB map_ids (bsc#1190758 ltc#191943).
  • ibmvnic: Use/rename local vars in initrxpools (bsc#1190758 ltc#191943).
  • ibmvnic: Use/rename local vars in inittxpools (bsc#1190758 ltc#191943).
  • ice: Prevent probing virtual functions (git-fixes).
  • iio: dac: ad5624r: Fix incorrect handling of an optional regulator (git-fixes).
  • include/linux/list.h: add a macro to test if entry is pointing to the head (git-fixes).
  • iomap: Fix negative assignment to unsigned sis->pages in iomapswapfileactivate (bsc#1190784).
  • ionic: cleanly release devlink instance (bsc#1167773).
  • ionic: count csum_none when offload enabled (bsc#1167773).
  • ipc: remove memcg accounting for sops objects in do_semtimedop() (bsc#1190115).
  • ipc/util.c: use binary search for max_idx (bsc#1159886).
  • ipvs: allow connection reuse for unconfirmed conntrack (bsc#1190467).
  • ipvs: avoid expiring many connections from timer (bsc#1190467).
  • ipvs: Fix up kabi for expirenodestconn_work addition (bsc#1190467).
  • ipvs: queue delayed work to expire no destination connections if expirenodestconn=1 (bsc#1190467).
  • iwlwifi: mvm: fix a memory leak in iwlmvmmacctxtbeacon_changed (git-fixes).
  • kernel-binary.spec: Check for no kernel signing certificates. Also remove unused variable.
  • kernel-binary.spec: Do not fail silently when KMP is empty (bsc#1190358). Copy the code from kernel-module-subpackage that deals with empty KMPs.
  • kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167 bsc#1191240 ltc#194716).
  • kernel-binary.spec.in Stop templating the scriptlets for subpackages (bsc#1190358). The script part for base package case is completely separate from the part for subpackages. Remove the part for subpackages from the base package script and use the KMP scripts for subpackages instead.
  • libata: fix atahoststart() (git-fixes).
  • mac80211-hwsim: fix late beacon hrtimer handling (git-fixes).
  • mac80211: Fix ieee80211amsduaggregate frag_tail bug (git-fixes).
  • mac80211: fix use-after-free in CCMP/GCMP RX (git-fixes).
  • mac80211: limit injected vht mcs/nss in ieee80211parsetx_radiotap (git-fixes).
  • mac80211: mesh: fix potentially unaligned access (git-fixes).
  • media: cedrus: Fix SUNXI tile size calculation (git-fixes).
  • media: coda: fix framememctrl for YUV420 and YVU420 formats (git-fixes).
  • media: dib8000: rewrite the init prbs logic (git-fixes).
  • media: imx258: Limit the max analogue gain to 480 (git-fixes).
  • media: imx258: Rectify mismatch of VTS value (git-fixes).
  • media: rc-loopback: return number of emitters rather than error (git-fixes).
  • media: TDA1997x: fix tda1997xquerydv_timings() return value (git-fixes).
  • media: uvc: do not do DMA on stack (git-fixes).
  • media: v4l2-dv-timings.c: fix wrong condition in two for-loops (git-fixes).
  • mfd: Do not use irqcreatemapping() to resolve a mapping (git-fixes).
  • mlx4: Fix missing error code in mlx4loadone() (git-fixes).
  • mm: always have ioremappfnrange() set pgprotdecrypted() (git-fixes).
  • mm/swap: consider max pages in iomapswapfileadd_extent (bsc#1190785).
  • mmc: core: Return correct emmc response in case of ioctl error (git-fixes).
  • mmc: rtsx_pci: Fix long reads when clock is prescaled (git-fixes).
  • mmc: sdhci-of-arasan: Check return value of non-void funtions (git-fixes).
  • net: mana: Add a driver for Microsoft Azure Network Adapter (MANA) (jsc#SLE-18779, bsc#1185726).
  • net: mana: Add support for EQ sharing (jsc#SLE-18779, bsc#1185726).
  • net: mana: Add WARNONONCE in case of CQE read overflow (jsc#SLE-18779, bsc#1185726).
  • net: mana: Fix a memory leak in an error handling path in (jsc#SLE-18779, bsc#1185726).
  • net: mana: fix PCI_HYPERV dependency (jsc#SLE-18779, bsc#1185726).
  • net: mana: Move NAPI from EQ to CQ (jsc#SLE-18779, bsc#1185726).
  • net: mana: Prefer struct_size over open coded arithmetic (jsc#SLE-18779, bsc#1185726).
  • net: mana: remove redundant initialization of variable err (jsc#SLE-18779, bsc#1185726).
  • net: mana: Use int to check the return value of managdpoll_cq() (jsc#SLE-18779, bsc#1185726).
  • net: mana: Use struct_size() in kzalloc() (jsc#SLE-18779, bsc#1185726).
  • net: qlcnic: add missed unlock in qlcnic83xxflash_read32 (git-fixes).
  • net: sched: sch_teql: fix null-pointer dereference (bsc#1190717).
  • net/mlx5: E-Switch, handle devcom events only for ports on the same device (git-fixes).
  • net/mlx5: Fix flow table chaining (git-fixes).
  • net/mlx5: Fix return value from tracer initialization (git-fixes).
  • net/mlx5: Unload device upon firmware fatal error (git-fixes).
  • net/mlx5e: Avoid creating tunnel headers for local route (git-fixes).
  • net/mlx5e: Fix nullptr in mlx5ehairpinget_mdev() (git-fixes).
  • net/mlx5e: Prohibit inner indir TIRs in IPoIB (git-fixes).
  • netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (bsc#1190062).
  • nfp: update ethtool reporting of pauseframe control (git-fixes).
  • NFS: change nfsaccessget_cached to only report the mask (bsc#1190746).
  • NFS: do not store 'struct cred *' in struct nfsaccessentry (bsc#1190746).
  • NFS: pass cred explicitly for access tests (bsc#1190746).
  • nvme: avoid race in shutdown namespace removal (bsc#1188067).
  • nvme: fix refcounting imbalance when all paths are down (bsc#1188067).
  • parport: remove non-zero check on count (git-fixes).
  • PCI: aardvark: Fix checking for PIO status (git-fixes).
  • PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (git-fixes).
  • PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (git-fixes).
  • PCI: Add ACS quirks for Cavium multi-function devices (git-fixes).
  • PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (git-fixes).
  • PCI: Add AMD GPU multi-function power dependencies (git-fixes).
  • PCI: ibmphp: Fix double unmap of io_mem (git-fixes).
  • PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (git-fixes).
  • PCI: pci-bridge-emul: Fix array overruns, improve safety (git-fixes).
  • PCI: pci-bridge-emul: Fix big-endian support (git-fixes).
  • PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (git-fixes).
  • PCI: Use pciupdatecurrentstate() in pcienabledeviceflags() (git-fixes).
  • PM: base: power: do not try to use non-existing RTC for storing data (git-fixes).
  • PM: EM: Increase energy calculation precision (git-fixes).
  • power: supply: axp288fuelgauge: Report register-address on readb / writeb errors (git-fixes).
  • power: supply: max17042battery: fix typo in MAx17042TOFF (git-fixes).
  • powercap: intel_rapl: add support for Sapphire Rapids (jsc#SLE-15289).
  • powerpc: fix function annotations to avoid section mismatch warnings with gcc-10 (bsc#1148868).
  • powerpc/drmem: Make LMB walk a bit more flexible (bsc#1190543 ltc#194523).
  • powerpc/perf: Drop the case of returning 0 as instruction pointer (bsc#1065729).
  • powerpc/perf: Fix crash in perfinstructionpointer() when ppmu is not set (bsc#1065729).
  • powerpc/perf: Fix the check for SIAR value (bsc#1065729).
  • powerpc/perf: Use regs->nip when SIAR is zero (bsc#1065729).
  • powerpc/perf: Use stack siar instead of mfspr (bsc#1065729).
  • powerpc/perf: Use the address from SIAR register to set cpumode flags (bsc#1065729).
  • powerpc/perf/hv-gpci: Fix counter value parsing (bsc#1065729).
  • powerpc/powernv: Fix machine check reporting of async store errors (bsc#1065729).
  • powerpc/pseries: Prevent free CPU ids being reused on another node (bsc#1190620 ltc#194498).
  • powerpc/pseries/dlpar: use rtasgetsensor() (bsc#1065729).
  • pseries/drmem: update LMBs after LPM (bsc#1190543 ltc#194523).
  • pwm: img: Do not modify HW state in .remove() callback (git-fixes).
  • pwm: rockchip: Do not modify HW state in .remove() callback (git-fixes).
  • pwm: stm32-lp: Do not modify HW state in .remove() callback (git-fixes).
  • qlcnic: Remove redundant unlock in qlcnicpinitfrom_rom (git-fixes).
  • RDMA/bnxtre: Remove unpaired rtnl unlock in bnxtredevinit() (bsc#1170774).
  • Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (git-fixes).
  • regmap: fix page selection for noinc reads (git-fixes).
  • regmap: fix page selection for noinc writes (git-fixes).
  • regmap: fix the offset of register error log (git-fixes).
  • Restore kabi after NFS: pass cred explicitly for access tests (bsc#1190746).
  • rpm: Abolish scritplet templating (bsc#1189841). Outsource kernel-binary and KMP scriptlets to suse-module-tools. This allows fixing bugs in the scriptlets as well as defining initrd regeneration policy independent of the kernel packages.
  • rpm/kernel-binary.spec: Use only non-empty certificates.
  • rpm/kernel-binary.spec.in: avoid conflicting suse-release suse-release had arbitrary values in staging, we can't use it for dependencies. The filesystem one has to be enough (boo#1184804).
  • rtc: rx8010: select REGMAP_I2C (git-fixes).
  • rtc: tps65910: Correct driver module alias (git-fixes).
  • s390/unwind: use currentframeaddress() to unwind current task (bsc#1185677).
  • sched/fair: Add ancestors of unthrottled undecayed cfs_rq (bsc#1191292).
  • scsi: core: Add helper to return number of logical blocks in a request (bsc#1190576).
  • scsi: core: Introduce the scsicmdto_rq() function (bsc#1190576).
  • scsi: fc: Add EDC ELS definition (bsc#1190576).
  • scsi: fc: Update formal FPIN descriptor definitions (bsc#1190576).
  • scsi: lpfc: Add bsg support for retrieving adapter cmf data (bsc#1190576).
  • scsi: lpfc: Add cm statistics buffer support (bsc#1190576).
  • scsi: lpfc: Add cmf_info sysfs entry (bsc#1190576).
  • scsi: lpfc: Add cmfsync WQE support (bsc#1190576).
  • scsi: lpfc: Add debugfs support for cm framework buffers (bsc#1190576).
  • scsi: lpfc: Add EDC ELS support (bsc#1190576).
  • scsi: lpfc: Add MIB feature enablement support (bsc#1190576).
  • scsi: lpfc: Add rx monitoring statistics (bsc#1190576).
  • scsi: lpfc: Add SETHOSTDATA mbox cmd to pass date/time info to firmware (bsc#1190576).
  • scsi: lpfc: Add support for cm enablement buffer (bsc#1190576).
  • scsi: lpfc: Add support for maintaining the cm statistics buffer (bsc#1190576).
  • scsi: lpfc: Add support for the CM framework (bsc#1190576).
  • scsi: lpfc: Adjust bytes received vales during cmf timer interval (bsc#1190576).
  • scsi: lpfc: Copyright updates for 14.0.0.1 patches (bsc#1190576).
  • scsi: lpfc: Do not release final kref on Fport node while ABTS outstanding (bsc#1190576).
  • scsi: lpfc: Do not remove ndlp on PRLI errors in P2P mode (bsc#1190576).
  • scsi: lpfc: Expand FPIN and RDF receive logging (bsc#1190576).
  • scsi: lpfc: Fix compilation errors on kernels with no CONFIGDEBUGFS (bsc#1190576).
  • scsi: lpfc: Fix CPU to/from endian warnings introduced by ELS processing (bsc#1190576).
  • scsi: lpfc: Fix EEH support for NVMe I/O (bsc#1190576).
  • scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (bsc#1190576).
  • scsi: lpfc: Fix gcc -Wstringop-overread warning, again (bsc#1190576).
  • scsi: lpfc: Fix hang on unload due to stuck fport node (bsc#1190576).
  • scsi: lpfc: Fix I/O block after enabling managed congestion mode (bsc#1190576).
  • scsi: lpfc: Fix listadd() corruption in lpfcdrain_txq() (bsc#1190576).
  • scsi: lpfc: Fix NVMe I/O failover to non-optimized path (bsc#1190576).
  • scsi: lpfc: Fix premature rpi release for unsolicited TPLS and LS_RJT (bsc#1190576).
  • scsi: lpfc: Fix rediscovery of tape device after LIP (bsc#1190576).
  • scsi: lpfc: Fix sprintf() overflow in lpfcdisplayfpin_wwpn() (bsc#1190576).
  • scsi: lpfc: Improve PBDE checks during SGL processing (bsc#1190576).
  • scsi: lpfc: Remove unneeded variable (bsc#1190576).
  • scsi: lpfc: Update lpfc version to 14.0.0.1 (bsc#1190576).
  • scsi: lpfc: Update lpfc version to 14.0.0.2 (bsc#1190576).
  • scsi: lpfc: Use correct scnprintf() limit (bsc#1190576).
  • scsi: lpfc: Use scsicmdtorq() instead of scsicmnd.request (bsc#1190576).
  • scsi: lpfc: Use the proper SCSI midlayer interfaces for PI (bsc#1190576).
  • scsi: lpfc: Zero CGN stats only during initial driver load and stat reset (bsc#1190576).
  • scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V (bsc#1189297).
  • serial: 8250pci: make setupport() parameters explicitly unsigned (git-fixes).
  • serial: 8250: Define RX trigger levels for OxSemi 950 devices (git-fixes).
  • serial: mvebu-uart: fix driver's tx_empty callback (git-fixes).
  • serial: sh-sci: fix break handling for sysrq (git-fixes).
  • spi: Fix tegra20 build with CONFIG_PM=n (git-fixes).
  • staging: board: Fix uninitialized spinlock when attaching genpd (git-fixes).
  • staging: ks7010: Fix the initialization of the 'sleep_status' structure (git-fixes).
  • staging: rts5208: Fix getmsinformation() heap buffer size (git-fixes).
  • thermal/core: Potential buffer overflow in thermalbuildlistofpolicies() (git-fixes).
  • time: Handle negative seconds correctly in timespec64tons() (git-fixes).
  • tty: Fix data race between tiocsti() and flushtoldisc() (git-fixes).
  • tty: serial: jsm: hold port lock when reporting modem line changes (git-fixes).
  • tty: synclink_gt, drop unneeded forward declarations (git-fixes).
  • usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (git-fixes).
  • usb: core: hcd: Add support for deferring roothub registration (git-fixes).
  • usb: dwc2: Add missing cleanups when usbaddgadget_udc() fails (git-fixes).
  • usb: dwc2: Avoid leaving the error_debugfs label unused (git-fixes).
  • usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave (git-fixes).
  • usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA (git-fixes).
  • usb: EHCI: ehci-mv: improve error handling in mvehcienable() (git-fixes).
  • usb: gadget: r8a66597: fix a loop in set_feature() (git-fixes).
  • usb: gadget: u_ether: fix a potential null pointer dereference (git-fixes).
  • usb: host: fotg210: fix the actual_length of an iso packet (git-fixes).
  • usb: host: fotg210: fix the endpoint's transactional opportunities calculation (git-fixes).
  • usb: musb: musbdsps: requestirq() after initializing musb (git-fixes).
  • usb: musb: tusb6010: uninitialized data in tusbfifowrite_unaligned() (git-fixes).
  • usb: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (git-fixes).
  • usb: serial: option: add device id for Foxconn T99W265 (git-fixes).
  • usb: serial: option: add Telit LN920 compositions (git-fixes).
  • usb: serial: option: remove duplicate USB device ID (git-fixes).
  • usbip: give back URBs for unsent unlink requests during cleanup (git-fixes).
  • usbip:vhci_hcd USB port can get stuck in the disabled state (git-fixes).
  • video: fbdev: asiliantfb: Error out if 'pixclock' equals zero (git-fixes).
  • video: fbdev: kyro: Error out if 'pixclock' equals zero (git-fixes).
  • video: fbdev: kyro: fix a DoS bug by restricting user input (git-fixes).
  • video: fbdev: riva: Error out if 'pixclock' equals zero (git-fixes).
  • vmxnet3: add support for 32 Tx/Rx queues (bsc#1190406).
  • vmxnet3: add support for ESP IPv6 RSS (bsc#1190406).
  • vmxnet3: increase maximum configurable mtu to 9190 (bsc#1190406).
  • vmxnet3: prepare for version 6 changes (bsc#1190406).
  • vmxnet3: remove power of 2 limitation on the queues (bsc#1190406).
  • vmxnet3: set correct hash type based on rss information (bsc#1190406).
  • vmxnet3: update to version 6 (bsc#1190406).
  • watchdog/sbwatchdog: fix compilation problem due to COMPILETEST (git-fixes).
  • x86/alternatives: Teach textpokebp() to emulate instructions (bsc#1185302).
  • x86/apic/msi: Plug non-maskable MSI affinity race (bsc#1184439).
  • x86/cpu: Fix core name for Sapphire Rapids (jsc#SLE-15289).
  • x86/mm: Fix kernaddrvalid() to cope with existing but not present entries (bsc#1152489).
  • x86/resctrl: Fix a maybe-uninitialized build warning treated as error (bsc#1152489).
  • x86/resctrl: Fix default monitoring groups reporting (bsc#1152489).
  • xfs: allow mount/remount when stripe width alignment is zero (bsc#1188651).
  • xfs: sync lazy sb accounting on quiesce of read-only mounts (bsc#1190679).
  • xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' (git-fixes).
  • xhci: Set HCD flag to defer primary roothub registration (git-fixes).
References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP2 / kernel-default

Package

Name
kernel-default
Purl
purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "5.3.18-24.86.2",
            "kernel-devel": "5.3.18-24.86.2",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "libkmod2": "25-6.10.1",
            "libkmod-devel": "25-6.10.1",
            "kmod-bash-completion": "25-6.10.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1",
            "kernel-preempt": "5.3.18-24.86.2",
            "kernel-default-devel": "5.3.18-24.86.2",
            "perl-Bootloader": "0.931-3.5.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP2 / kernel-default-base

Package

Name
kernel-default-base
Purl
purl:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2.9.40.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "5.3.18-24.86.2",
            "kernel-devel": "5.3.18-24.86.2",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "libkmod2": "25-6.10.1",
            "libkmod-devel": "25-6.10.1",
            "kmod-bash-completion": "25-6.10.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1",
            "kernel-preempt": "5.3.18-24.86.2",
            "kernel-default-devel": "5.3.18-24.86.2",
            "perl-Bootloader": "0.931-3.5.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP2 / kernel-preempt

Package

Name
kernel-preempt
Purl
purl:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "5.3.18-24.86.2",
            "kernel-devel": "5.3.18-24.86.2",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "libkmod2": "25-6.10.1",
            "libkmod-devel": "25-6.10.1",
            "kmod-bash-completion": "25-6.10.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1",
            "kernel-preempt": "5.3.18-24.86.2",
            "kernel-default-devel": "5.3.18-24.86.2",
            "perl-Bootloader": "0.931-3.5.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP2 / kernel-source

Package

Name
kernel-source
Purl
purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "5.3.18-24.86.2",
            "kernel-devel": "5.3.18-24.86.2",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "libkmod2": "25-6.10.1",
            "libkmod-devel": "25-6.10.1",
            "kmod-bash-completion": "25-6.10.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1",
            "kernel-preempt": "5.3.18-24.86.2",
            "kernel-default-devel": "5.3.18-24.86.2",
            "perl-Bootloader": "0.931-3.5.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP2 / kmod

Package

Name
kmod
Purl
purl:rpm/suse/kmod&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
25-6.10.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "5.3.18-24.86.2",
            "kernel-devel": "5.3.18-24.86.2",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "libkmod2": "25-6.10.1",
            "libkmod-devel": "25-6.10.1",
            "kmod-bash-completion": "25-6.10.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1",
            "kernel-preempt": "5.3.18-24.86.2",
            "kernel-default-devel": "5.3.18-24.86.2",
            "perl-Bootloader": "0.931-3.5.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP2 / perl-Bootloader

Package

Name
perl-Bootloader
Purl
purl:rpm/suse/perl-Bootloader&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.931-3.5.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-macros": "5.3.18-24.86.2",
            "kernel-devel": "5.3.18-24.86.2",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "libkmod2": "25-6.10.1",
            "libkmod-devel": "25-6.10.1",
            "kmod-bash-completion": "25-6.10.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1",
            "kernel-preempt": "5.3.18-24.86.2",
            "kernel-default-devel": "5.3.18-24.86.2",
            "perl-Bootloader": "0.931-3.5.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP2 / kernel-docs

Package

Name
kernel-docs
Purl
purl:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "5.3.18-24.86.2",
            "kernel-syms": "5.3.18-24.86.1",
            "kernel-preempt-devel": "5.3.18-24.86.2",
            "perl-Bootloader-YAML": "0.931-3.5.1",
            "kernel-source": "5.3.18-24.86.2",
            "kernel-obs-build": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP2 / kernel-obs-build

Package

Name
kernel-obs-build
Purl
purl:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "5.3.18-24.86.2",
            "kernel-syms": "5.3.18-24.86.1",
            "kernel-preempt-devel": "5.3.18-24.86.2",
            "perl-Bootloader-YAML": "0.931-3.5.1",
            "kernel-source": "5.3.18-24.86.2",
            "kernel-obs-build": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP2 / kernel-preempt

Package

Name
kernel-preempt
Purl
purl:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "5.3.18-24.86.2",
            "kernel-syms": "5.3.18-24.86.1",
            "kernel-preempt-devel": "5.3.18-24.86.2",
            "perl-Bootloader-YAML": "0.931-3.5.1",
            "kernel-source": "5.3.18-24.86.2",
            "kernel-obs-build": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP2 / kernel-source

Package

Name
kernel-source
Purl
purl:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "5.3.18-24.86.2",
            "kernel-syms": "5.3.18-24.86.1",
            "kernel-preempt-devel": "5.3.18-24.86.2",
            "perl-Bootloader-YAML": "0.931-3.5.1",
            "kernel-source": "5.3.18-24.86.2",
            "kernel-obs-build": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP2 / kernel-syms

Package

Name
kernel-syms
Purl
purl:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "5.3.18-24.86.2",
            "kernel-syms": "5.3.18-24.86.1",
            "kernel-preempt-devel": "5.3.18-24.86.2",
            "perl-Bootloader-YAML": "0.931-3.5.1",
            "kernel-source": "5.3.18-24.86.2",
            "kernel-obs-build": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP2 / perl-Bootloader

Package

Name
perl-Bootloader
Purl
purl:rpm/suse/perl-Bootloader&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.931-3.5.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-docs": "5.3.18-24.86.2",
            "kernel-syms": "5.3.18-24.86.1",
            "kernel-preempt-devel": "5.3.18-24.86.2",
            "perl-Bootloader-YAML": "0.931-3.5.1",
            "kernel-source": "5.3.18-24.86.2",
            "kernel-obs-build": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Legacy 15 SP2 / kernel-default

Package

Name
kernel-default
Purl
purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "reiserfs-kmp-default": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 SP2 / kernel-default

Package

Name
kernel-default
Purl
purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-livepatch": "5.3.18-24.86.2",
            "kernel-livepatch-5_3_18-24_86-default": "1-5.3.2",
            "kernel-default-livepatch-devel": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 SP2 / kernel-livepatch-SLE15-SP2_Update_20

Package

Name
kernel-livepatch-SLE15-SP2_Update_20
Purl
purl:rpm/suse/kernel-livepatch-SLE15-SP2_Update_20&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1-5.3.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-livepatch": "5.3.18-24.86.2",
            "kernel-livepatch-5_3_18-24_86-default": "1-5.3.2",
            "kernel-default-livepatch-devel": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise High Availability Extension 15 SP2 / kernel-default

Package

Name
kernel-default
Purl
purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "dlm-kmp-default": "5.3.18-24.86.2",
            "gfs2-kmp-default": "5.3.18-24.86.2",
            "ocfs2-kmp-default": "5.3.18-24.86.2",
            "cluster-md-kmp-default": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Workstation Extension 15 SP2 / kernel-default

Package

Name
kernel-default
Purl
purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-extra": "5.3.18-24.86.2",
            "kernel-preempt-extra": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Workstation Extension 15 SP2 / kernel-preempt

Package

Name
kernel-preempt
Purl
purl:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-default-extra": "5.3.18-24.86.2",
            "kernel-preempt-extra": "5.3.18-24.86.2"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.0 / kernel-default

Package

Name
kernel-default
Purl
purl:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2

Ecosystem specific

{
    "binaries": [
        {
            "libkmod2": "25-6.10.1",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "perl-Bootloader": "0.931-3.5.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.0 / kernel-default-base

Package

Name
kernel-default-base
Purl
purl:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.3.18-24.86.2.9.40.2

Ecosystem specific

{
    "binaries": [
        {
            "libkmod2": "25-6.10.1",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "perl-Bootloader": "0.931-3.5.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.0 / kmod

Package

Name
kmod
Purl
purl:rpm/suse/kmod&distro=SUSE%20Linux%20Enterprise%20Micro%205.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
25-6.10.1

Ecosystem specific

{
    "binaries": [
        {
            "libkmod2": "25-6.10.1",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "perl-Bootloader": "0.931-3.5.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.0 / perl-Bootloader

Package

Name
perl-Bootloader
Purl
purl:rpm/suse/perl-Bootloader&distro=SUSE%20Linux%20Enterprise%20Micro%205.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.931-3.5.1

Ecosystem specific

{
    "binaries": [
        {
            "libkmod2": "25-6.10.1",
            "kernel-default-base": "5.3.18-24.86.2.9.40.2",
            "kmod-compat": "25-6.10.1",
            "perl-Bootloader": "0.931-3.5.1",
            "kernel-default": "5.3.18-24.86.2",
            "kmod": "25-6.10.1"
        }
    ]
}