SUSE-SU-2022:2079-1

The SUSE Linux Enterprise 15 SP3 kernel was updated.

The following security bugs were fixed:

• CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
• CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
• CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
• CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
• CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
• CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. (bsc#1200019)
• CVE-2022-1729: Fixed a sysperfevent_open() race condition against self (bsc#1199507).
• CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
• CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
• CVE-2022-30594: Fixed restriction bypass on setting the PTSUSPENDSECCOMP flag (bnc#1199505).
• CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
• CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
• CVE-2022-20008: Fixed bug that allows to read kernel heap memory due to uninitialized data in mmcblkread_single of block.c. (bnc#1199564)
• CVE-2022-0168: Fixed a NULL pointer dereference in smb2ioctlquery_info. (bsc#1197472)
• CVE-2022-24448: Fixed an issue if an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).

The following non-security bugs were fixed:

• ACPI: property: Release subnode properties with data nodes (git-fixes).
• ALSA: ctxfi: Add SB046x PCI ID (git-fixes).
• ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (git-fixes).
• ALSA: hda - fix unused Realtek function when PM is not enabled (git-fixes).
• ALSA: hda/realtek - Add new type for ALC245 (git-fixes).
• ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (git-fixes).
• ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop (git-fixes).
• ALSA: hda/realtek: Enable headset mic on Lenovo P360 (git-fixes).
• ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (git-fixes).
• ALSA: usb-audio: Add missing ep_idx in fixed EP quirks (git-fixes).
• ALSA: usb-audio: Clear MIDI port active flag after draining (git-fixes).
• ALSA: usb-audio: Configure sync endpoints before data (git-fixes).
• ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (git-fixes).
• ALSA: usb-audio: Restore Rane SL-1 quirk (git-fixes).
• ALSA: wavefront: Proper check of get_user() error (git-fixes).
• ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling (git-fixes)
• ARM: 9170/1: fix panic when kasan and kprobe are enabled (git-fixes)
• ARM: 9187/1: JIVE: fix return value of __setup handler (git-fixes)
• ARM: config: u8500: Re-enable AB8500 battery charging (git-fixes)
• ARM: davinci: da850-evm: Avoid NULL pointer dereference (git-fixes)
• ARM: dts: am3517-evm: Fix misc pinmuxing (git-fixes)
• ARM: dts: armada-38x: Add generic compatible to UART nodes (git-fixes)
• ARM: dts: at91: fix pinctrl phandles (git-fixes)
• ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (git-fixes)
• ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (git-fixes)
• ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name (git-fixes)
• ARM: dts: bcm2835-rpi-b: Fix GPIO line names (git-fixes)
• ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT (git-fixes)
• ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED (git-fixes)
• ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C (git-fixes)
• ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (git-fixes)
• ARM: dts: Fix OpenBMC flash layout label addresses (git-fixes)
• ARM: dts: imx: Add missing LVDS decoder on M53Menlo (git-fixes)
• ARM: dts: imx23-evk: Remove MX23PADSSP1_DETECT from hog group (git-fixes)
• ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (git-fixes)
• ARM: dts: imx6qdl-udoo: Properly describe the SD card detect (git-fixes)
• ARM: dts: imx6ull-colibri: fix vqmmc regulator (git-fixes)
• ARM: dts: imx6ull-pinfunc: Fix CSIDATA07ESAITX0 pad name (git-fixes)
• ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (git-fixes)
• ARM: dts: meson: Fix the UART compatible strings (git-fixes)
• ARM: dts: meson8: Fix the UART device-tree schema validation (git-fixes)
• ARM: dts: meson8b: Fix the UART device-tree schema validation (git-fixes)
• ARM: dts: qcom: ipq4019: fix sleep clock (git-fixes)
• ARM: dts: qcom: msm8974: Drop flags for mdss irqs (git-fixes)
• ARM: dts: suniv: F1C100: fix watchdog compatible (git-fixes)
• ARM: ftrace: ensure that ADR takes the Thumb bit into account (git-fixes)
• ARM: mediatek: select arch timer for mt7629 (git-fixes)
• ARM: omap: remove debug-leds driver (git-fixes)
• ARM: OMAP2+: Fix refcount leak in omapgicof_init (git-fixes)
• ARM: socfpga: dts: fix qspi node compatible (git-fixes)
• ARM: socfpga: fix missing RESET_CONTROLLER (git-fixes)
• ARM: tegra: Move panels to AUX bus (git-fixes)
• arm64: dts: broadcom: Fix sata nodename (git-fixes)
• arm64: dts: ns2: Fix spi-cpol and spi-cpha property (git-fixes)
• arm64: dts: rockchip: Fix SDIO regulator supply properties on (git-fixes)
• arm64: paravirt: Use RCU read locks to guard stolen_time (git-fixes).
• arm64: pgtable: make ptetophys/phystopte_val inline functions (git-fixes)
• arm64/mm: avoid fixmap race condition when create pud mapping (git-fixes)
• ASoC: atmel-classd: Remove endianness flag on class d component (git-fixes).
• ASoC: atmel-pdmic: Remove endianness flag on pdmic component (git-fixes).
• ASoC: da7219: Fix change notifications for tone generator frequency (git-fixes).
• ASoC: dmaengine: Restore NULL prepareslaveconfig() callback (git-fixes).
• ASoC: fslsai: Fix FSLSAI_xDR/xFR definition (git-fixes).
• ASoC: max98090: Generate notifications on changes for custom control (git-fixes).
• ASoC: max98090: Move check for invalid values before casting in max98090putenab_tlv() (git-fixes).
• ASoC: max98090: Reject invalid values in custom control put() (git-fixes).
• ASoC: mediatek: Fix error handling in mt8173max98090dev_probe (git-fixes).
• ASoC: mediatek: Fix missing ofnodeput in mt2701wm8960machine_probe (git-fixes).
• ASoC: meson: Fix event generation for G12A tohdmi mux (git-fixes).
• ASoC: mxs-saif: Fix refcount leak in mxssaifprobe (git-fixes).
• ASoC: ops: Validate input values in sndsocputvolswrange() (git-fixes).
• ASoC: rk3328: fix disabling mclk on pclk probe failure (git-fixes).
• ASoC: rt5514: Fix event generation for 'DSP Voice Wake Up' control (git-fixes).
• ASoC: ti: j721e-evm: Fix refcount leak in j721esocprobe_* (git-fixes).
• ASoC: wm2000: fix missing clkdisableunprepare() on error in wm2000anctransition() (git-fixes).
• ASoC: wm8958: Fix change notifications for DSP controls (git-fixes).
• assocarray: Fix BUGON during garbage collect (git-fixes).
• ata: pata_hpt37x: fix PCI clock detection (git-fixes).
• ata: patamarvell: Check the 'bmdmaaddr' beforing reading (git-fixes).
• ath9khtc: fix potential out of bounds access with invalid rxstatus->rskeyix (git-fixes).
• ath9k: fix ar9003geteepmisc (git-fixes).
• backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
• batman-adv: Do not skbsplit skbuffs with fraglist (git-fixes).
• blk-cgroup: move blkcg{get,set}fc_appid out of line (bsc#1200045).
• Bluetooth: call hcileconnfailed with hdev lock in hcileconnfailed (git-fixes).
• Bluetooth: fix dangling scoconn and use-after-free in scosock_timeout (git-fixes).
• Bluetooth: Fix the creation of hdev->name (git-fixes).
• Bluetooth: hciqca: Use deltimer_sync() before freeing (git-fixes).
• bnxten: Fix possible bnxtopen() failure caused by wrong RFS flag (jsc#SLE-8371 bsc#1153274).
• bnxt_en: Fix unnecessary dropping of RX packets (jsc#SLE-15075).
• brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (git-fixes).
• bus: sunxi-rsb: Fix the return value of sunxirsbdevice_create() (git-fixes).
• bus: ti-sysc: Fix warnings for unbind for serial (git-fixes).
• can: grcan: grcan_close(): fix deadlock (git-fixes).
• can: grcan: use ofdev->dev when allocating DMA memory (git-fixes).
• carl9170: tx: fix an incorrect use of list iterator (git-fixes).
• ceph: fix setting of xattrs on async created inodes (bsc#1200192).
• cgroup/cpuset: Remove cpusallowed/memsallowed setup in cpusetinitsmp() (bsc#1199839).
• clk: at91: generated: consider range when calculating best rate (git-fixes).
• clk: bcm2835: fix bcm2835clockchoose_div (git-fixes).
• clk: imx8mp: fix usbrootclk parent (git-fixes).
• clk: renesas: r9a06g032: Fix the RTC hclock description (git-fixes).
• clk: sunxi: sun9i-mmc: check return value after calling platformgetresource() (git-fixes).
• copyprocess(): Move fdinstall() out of sighand->siglock critical section (bsc#1199626).
• crypto: caam - fix i.MX6SX entropy delay value (git-fixes).
• crypto: ecrdsa - Fix incorrect use of vli_cmp (git-fixes).
• crypto: stm32 - fix reference leak in stm32crcremove (git-fixes).
• crypto: x86 - eliminate anonymous moduleinit & moduleexit (git-fixes).
• crypto: x86/chacha20 - Avoid spurious jumps to other functions (git-fixes).
• dim: initialize all struct fields (git-fixes).
• dmaengine: idxd: Fix the error handling path in idxdcdevregister() (git-fixes).
• dmaengine: stm32-mdma: remove GISR1 register (git-fixes).
• docs: powerpc: Fix misspellings and grammar errors (bsc#1055117 ltc#159753).
• docs: submitting-patches: Fix crossref to 'The canonical patch format' (git-fixes).
• drbd: fix an invalid memory access caused by incorrect use of list iterator (git-fixes).
• drbd: fix duplicate array initializer (git-fixes).
• drbd: Fix five use after free bugs in getinitialstate (git-fixes).
• drbd: remove assignpsizes_qlim (git-fixes).
• drbd: use bdev based limit helpers in drbdsendsizes (git-fixes).
• drbd: use bdevalignmentoffset instead of queuealignmentoffset (git-fixes).
• driver core: fix deadlock in _deviceattach (git-fixes).
• driver: base: fix UAF when driver_attach failed (git-fixes).
• drivers: base: cacheinfo: Get rid of DEFINESMPCALLCACHEFUNCTION() (git-fixes)
• drivers/base/memory: fix an unlikely reference counting issue in _addmemory_block() (git-fixes).
• drivers/base/node.c: fix compaction sysfs file leak (git-fixes).
• drm: mali-dp: potential dereference of null pointer (git-fixes).
• drm: msm: fix possible memory leak in mdp5crtccursor_set() (git-fixes).
• drm: sti: do not use kernel-doc markers (git-fixes).
• drm/amd/display: Fix memory leak in dcn21clocksource_create (bsc#1152472)
• drm/amd/display/dc/gpio/gpioservice: Pass around correct dce{version, environment} types (git-fixes).
• drm/amdgpu: fix amdgpurasblocklateinit error handler (bsc#1152489)
• drm/amdkfd: Fix GWS queue count (git-fixes).
• drm/blend: fix typo in the comment (git-fixes).
• drm/bridge: adv7511: clean up CEC adapter when probe fails (git-fixes).
• drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX (git-fixes).
• drm/bridge: Fix error handling in analogixdpprobe (git-fixes).
• drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
• drm/edid: fix invalid EDID extension block filtering (git-fixes).
• drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
• drm/i915: Drop all references to DRM IRQ midlayer (bsc#1152489)
• drm/i915: Fix CFI violation with showdynamicid() (git-fixes).
• drm/i915: Fix SELFETCHPLANE*(PIPEB+) register addresses (git-fixes).
• drm/i915: Keep gem ctx->vm alive until the final put (bsc#1152489)
• drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
• drm/komeda: Fix an undefined behavior bug in komedaplaneadd() (git-fixes).
• drm/mediatek: Fix mtkcecmask() (git-fixes).
• drm/msm: return an error pointer in msmgemprimegetsg_table() (git-fixes).
• drm/msm/a6xx: Fix refcount leak in a6xxgpuinit (git-fixes).
• drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume (git-fixes).
• drm/msm/dpu: adjust displayvend for eDP and DP (git-fixes).
• drm/msm/dsi: fix error checks and return values for DSI xmit functions (git-fixes).
• drm/msm/hdmi: check return value after calling platformgetresource_byname() (git-fixes).
• drm/msm/hdmi: fix error check return value of irqofparseandmap() (git-fixes).
• drm/msm/mdp5: check the return of kzalloc() (git-fixes).
• drm/msm/mdp5: Return error code in mdp5mixerrelease when deadlock is detected (git-fixes).
• drm/msm/mdp5: Return error code in mdp5piperelease when deadlock is detected (git-fixes).
• drm/nouveau: Fix a potential theorical leak in nouveaugetbacklight_name() (git-fixes).
• drm/nouveau/clk: Fix an incorrect NULL check on list iterator (git-fixes).
• drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator (git-fixes).
• drm/nouveau/tegra: Stop using iommu_present() (git-fixes).
• drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 (git-fixes).
• drm/prime: Fix use after free in mmap with drmgemttm_mmap (bsc#1152472)
• drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (git-fixes).
• drm/vc4: crtc: Lookup the encoder from the register at boot (bsc#1198534)
• drm/vc4: hvs: Reset muxes at probe time (git-fixes).
• drm/vc4: txp: Do not set TXPVSTARTAT_EOF (git-fixes).
• drm/vc4: txp: Force alpha to be 0xff if it's disabled (git-fixes).
• drm/vmwgfx: Initialize drmmodefb_cmd2 (git-fixes).
• drm/vmwgfx: Remove unused compile options (bsc#1152472)
• EDAC/synopsys: Read the error count from the correct register (bsc#1178134).
• firewire: core: extend card->lock in fwcorehandlebusreset (git-fixes).
• firewire: fix potential uaf in outboundphypacket_callback() (git-fixes).
• firewire: remove check of list iterator against head past the loop body (git-fixes).
• firmware: arm_scmi: Fix list protocols enumeration in the base protocol (git-fixes).
• firmware: armscmi: Validate BASEDISCOVERLISTPROTOCOLS response (git-fixes).
• firmware: dmi-sysfs: Fix memory leak in dmisysfsregister_handle (git-fixes).
• firmware: stratix10-svc: fix a missing check on list iterator (git-fixes).
• Fix double fget() in vhostnetset_backend() (git-fixes).
• genirq: Fix reference leaks on irq affinity notifiers (git-fixes)
• genirq: Let GENERICIRQIPI select IRQDOMAINHIERARCHY (git-fixes)
• genirq/affinity: Consider that CPUs on nodes can be (git-fixes)
• genirq/affinity: Handle affinity setting on inactive (git-fixes)
• genirq/msi: Ensure deactivation on teardown (git-fixes)
• genirq/proc: Reject invalid affinity masks (again) (git-fixes)
• genirq/timings: Fix error return code in (git-fixes)
• genirq/timings: Prevent potential array overflow in (git-fixes)
• gma500: fix an incorrect NULL check on list iterator (git-fixes).
• gpio: adp5588: Remove support for platform setup and teardown callbacks (git-fixes).
• gpio: gpio-vf610: do not touch other bits when set the target bit (git-fixes).
• gpio: mvebu/pwm: Refuse requests with inverted polarity (git-fixes).
• gpio: pca953x: fix irqstat not updated when irq is disabled (irqmask not set) (git-fixes).
• gpio: pca953x: use the correct register address to do regcache sync (git-fixes).
• gpiolib: of: fix bounds check for 'gpio-reserved-ranges' (git-fixes).
• hex2bin: fix access beyond string end (git-fixes).
• HID: elan: Fix potential double free in elaninputconfigured (git-fixes).
• HID: hid-led: fix maximum brightness for Dream Cheeky (git-fixes).
• hinic: fix bug of wq out of bound access (bsc#1176447).
• hwmon: (f71882fg) Fix negative temperature (git-fixes).
• hwmon: (ltq-cputemp) restrict it to SOC_XWAY (git-fixes).
• hwmon: (tmp401) Add OF device ID table (git-fixes).
• i2c: at91: Initialize dmabuf in at91twi_xfer() (git-fixes).
• i2c: at91: use dma safe buffers (git-fixes).
• i2c: mt7621: fix missing clkdisableunprepare() on error in mtki2cprobe() (git-fixes).
• i40e: stop disabling VFs due to PF error responses (git-fixes).
• ice: arfs: fix use-after-free when freeing @rxcpurmap (jsc#SLE-12878).
• ice: Clear default forwarding VSI during VSI release (jsc#SLE-12878).
• ice: Do not skip not enabled queues in icevcdisqsmsg (jsc#SLE-7926).
• ice: Fix race conditions between virtchnl handling and VF ndo ops (git-fixes).
• ice: synchronize_rcu() when terminating rings (jsc#SLE-7926).
• iio: adc: ad7124: Remove shift from scan_type (git-fixes).
• iio: adc: sc27xx: Fine tune the scale calibration values (git-fixes).
• iio: adc: sc27xx: fix read big scale voltage not right (git-fixes).
• iio: adc: stmpe-adc: Fix waitforcompletion_timeout return value check (git-fixes).
• iio: dac: ad5446: Fix read_raw not returning set value (git-fixes).
• iio: dac: ad5592r: Fix the missing return value (git-fixes).
• iio: magnetometer: ak8975: Fix the error handling in ak8975poweron() (git-fixes).
• Input: add bounds checking to inputsetcapability() (git-fixes).
• Input: ili210x - fix reset timing (git-fixes).
• Input: sparcspkr - fix refcount leak in bbcbeepprobe (git-fixes).
• Input: stmfts - do not leave device disabled in stmftsinputopen (git-fixes).
• Input: stmfts - fix reference leak in stmftsinputopen (git-fixes).
• iommu/amd: Increase timeout waiting for GA log enablement (bsc#1199052).
• ionic: avoid races in ionicheartbeatcheck (bsc#1167773).
• ionic: Cleanups in the Tx hotpath code (bsc#1167773).
• ionic: disable napi when ioniclifinit() fails (bsc#1167773).
• ionic: Do not send reset commands if FW isn't running (bsc#1167773).
• ionic: fix missing pcireleaseregions() on error in ionic_probe() (bsc#1167773).
• ionic: fix type complaint in ionicdevcmd_clean() (jsc#SLE-16649).
• ionic: monitor fw status generation (bsc#1167773).
• ionic: remove the dbid_inuse bitmap (bsc#1167773).
• ionic: start watchdog after all is setup (bsc#1167773).
• ivtv: fix incorrect device_caps for ivtvfb (git-fixes).
• iwlwifi: iwl-dbg: Use deltimersync() before freeing (git-fixes).
• iwlwifi: mvm: fix the return type for DSM functions 1 and 2 (git-fixes).
• jbd2: Fake symbols defined under CONFIGJBD2DEBUG (bsc#1198971).
• kABI: ivtv: restore caps member (git-fixes).
• Kconfig.debug: drop selecting non-existing HARDLOCKUPDETECTORARCH (git-fixes).
• KVM: PPC: Fix TCE handling for VFIO (bsc#1061840 git-fixes).
• KVM: VMX: Fix stale docs for kvm-intel.emulateinvalidguest_state (git-fixes).
• lan743x: fix rxnapipoll/interrupt ping-pong (git-fixes).
• lan743x: remove redundant assignment to variable rxprocessresult (git-fixes).
• lib/raid6/test: fix multiple definition linking error (git-fixes).
• lpfc: Readd update to version 14.2.0.1 (bsc#1197675 bsc#1196478 bsc#1198989) The update was reverted due to some regression on older hardware. These have been fixed in the meantime, thus update the driver.
• mac80211hwsim: call ieee80211txprepareskb under RCU protection (git-fixes).
• mac80211: fix rx reordering with non explicit / psmp ack policy (git-fixes).
• mac80211: Reset MBSSID parameters upon connection (git-fixes).
• media: davinci: Make use of the helper function devmplatformioremap_resource() (git-fixes).
• media: davinci: vpif: fix unbalanced runtime PM enable (git-fixes).
• media: davinci: vpif: fix use-after-free on driver unbind (git-fixes).
• media: media-entity.h: Fix documentation for mediacreateintf_link (git-fixes).
• media: ov7670: remove ov7670poweroff from ov7670_remove (git-fixes).
• media: platform: add missing putdevice() call in mtkjpegprobe() and mtkjpeg_remove() (git-fixes).
• media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccore_init (git-fixes).
• media: saa7134: fix incorrect use to determine if list is empty (git-fixes).
• media: uvcvideo: Fix missing check to determine if element is found in list (git-fixes).
• media: videobuf2: Fix the size printk format (git-fixes).
• media: vim2m: Register video device after setting up internals (git-fixes).
• mfd: ipaq-micro: Fix error check return value of platformgetirq() (git-fixes).
• misc: ocxl: fix possible double free in ocxlfileregister_afu (git-fixes).
• mm, pagealloc: fix buildzonerefs_node() (git-fixes).
• mm/mmunotifier.c: fix race in mmuintervalnotifierremove() (jsc#SLE-15176, jsc#SLE-16387).
• mmc: block: Use genericcmd6time when modifying INANDCMD38ARGEXTCSD (git-fixes).
• mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC (git-fixes).
• mt76: Fix undefined behavior due to shift overflowing the constant (git-fixes).
• mt76: mt7663s: fix rx buffer refcounting (git-fixes).
• mtd: rawnand: fix ecc parameters for mt7622 (git-fixes).
• mtd: rawnand: Fix return value check of waitforcompletion_timeout (git-fixes).
• mtd: spi-nor: core: Check written SR value in spinorwrite16bitsrandcheck() (git-fixes).
• net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (git-fixes).
• net: dsa: lantiqgswip: Enable GSWIPMIICFGEN also for internal PHYs (git-fixes).
• net: dsa: lantiqgswip: Fix GSWIPMII_CFG(p) register access (git-fixes).
• net: ethernet: Fix memleak in ethoc_probe (git-fixes).
• net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (git-fixes).
• net: hdlcppp: Fix issues when modtimer is called while timer is running (git-fixes).
• net: hns3: add a check for index in hclgegetrss_key() (git-fixes).
• net: hns3: clear inited state and stop client after failed to register netdev (bsc#1154353).
• net: hns3: fix bug when PF set the duplicate MAC address for VFs (jsc#SLE-14777).
• net: hns3: fix kernel crash when unload VF while it is being reset (git-fixes).
• net: korina: fix return value (git-fixes).
• net: mana: Add counter for packet dropped by XDP (bsc#1195651).
• net: mana: Add counter for XDP_TX (bsc#1195651).
• net: mana: Add handling of CQERXTRUNCATED (bsc#1195651).
• net: mana: Remove unnecessary check of cqetype in manaprocessrxcqe() (bsc#1195651).
• net: mana: Reuse XDP dropped page (bsc#1195651).
• net: mana: Use structsize() helper in managdcreatedma_region() (bsc#1195651).
• net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1183405).
• net: stmmac: dwmac-sun8i: Balance internal PHY power (git-fixes).
• net: stmmac: dwmac-sun8i: Balance internal PHY resource references (git-fixes).
• net: stmmac: dwmac-sun8i: Balance syscon (de)initialization (git-fixes).
• net: stmmac: dwmac-sun8i: Fix probe error handling (git-fixes).
• net/mlx5: Fix a race on command flush flow (jsc#SLE-15172).
• net/mlx5e: Fix the calling of updatebufferlossy() API (jsc#SLE-15172).
• netdevice: demote the type of some devaddrset() helpers (bsc#1200216).
• netfilter: conntrack: connection timeout after re-register (bsc#1199035).
• netfilter: conntrack: move synack init code to helper (bsc#1199035).
• netfilter: conntrack: re-init state for retransmitted syn-ack (bsc#1199035).
• netfilter: nfconntracktcp: preserve liberal flag in tcp options (bsc#1199035).
• netfilter: nfconntracktcp: re-init for syn packets only (bsc#1199035).
• netfilter: nftsetrbtree: overlap detection with element re-addition after deletion (bsc#1176447).
• NFC: hci: fix sleep in atomic context bugs in nfchcihcpmessagetx (git-fixes).
• NFC: nci: fix sleep in atomic context bugs caused by nciskballoc (git-fixes).
• NFC: netlink: fix sleep in atomic bug when firmware download timeout (git-fixes).
• NFC: nfcmrvl: main: reorder destructive operations in nfcmrvlnciunregister_dev to avoid bugs (git-fixes).
• NFC: NULL out the dev->rfkill to prevent UAF (git-fixes).
• NFS: limit use of ACCESS cache for negative responses (bsc#1196570).
• NFSv4: Do not invalidate inode attributes on delegation return (git-fixes).
• nl80211: show SSID for P2P_GO interfaces (git-fixes).
• nvdimm/region: always show the 'align' attribute (bsc#1199114).
• nvme-tcp: allow selecting the network interface for connections (bsc#1199670).
• nvme-tcp: use _devgetbyname instead devgetbyname for OPTHOST_IFACE (bsc#1199670).
• objtool: Fix type of reloc::addend (git-fixes).
• PCI: aardvark: Clear all MSIs at setup (git-fixes).
• PCI: cadence: Fix findfirstzero_bit() limit (git-fixes).
• PCI: Do not enable AtomicOps on VFs (git-fixes).
• PCI: dwc: Fix setting error return on MSI DMA mapping failure (git-fixes).
• PCI: hv: Do not set PCICOMMANDMEMORY to reduce VM boot time (bsc#1199314).
• PCI: imx6: Fix PERST# start-up sequence (git-fixes).
• PCI: iproc: Set affinity mask on MSI interrupts (git-fixes).
• PCI: qcom: Fix runtime PM imbalance on probe errors (git-fixes).
• PCI: qcom: Fix unbalanced PHY init on probe errors (git-fixes).
• PCI: rockchip: Fix findfirstzero_bit() limit (git-fixes).
• PCI/AER: Clear MULTIERRCOR/UNCOR_RCV bits (git-fixes).
• PCI/PM: Power up all devices during runtime resume (git-fixes).
• phy: mapphone-mdm6600: Fix PM error handling in phymdm6600probe (git-fixes).
• phy: qcom-qmp: fix pipe-clock imbalance on power-on failure (git-fixes).
• phy: qcom-qmp: fix reset-controller leak on probe errors (git-fixes).
• phy: qcom-qmp: fix struct clk leak on probe errors (git-fixes).
• phy: samsung: exynos5250-sata: fix missing device put in probe error paths (git-fixes).
• phy: samsung: Fix missing ofnodeput() in exynossataphy_probe (git-fixes).
• phy: ti: Add missing pmruntimedisable() in serdesam654probe (git-fixes).
• phy: ti: omap-usb2: Fix error handling in omapusb2enable_clocks (git-fixes).
• pinctrl: mvebu: Fix irqofparseandmap() return value (git-fixes).
• pinctrl: pistachio: fix use of irqofparseandmap() (git-fixes).
• pinctrl: rockchip: fix RK3308 pinmux bits (git-fixes).
• pinctrl/rockchip: support deferring other gpio params (git-fixes).
• ping: fix the skbounddevif match in pinglookup (bsc#1195826).
• ping: remove prerr from pinglookup (bsc#1195826).
• platform/chrome: crosecdebugfs: detach log reader wq from devm (git-fixes).
• platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (git-fixes).
• powerpc: Enable the DAWR on POWER9 DD2.3 and above (bsc#1055117 ltc#159753).
• powerpc/64s: Add CPUFTRSPOWER10 to ALWAYS mask (jsc#SLE-13521 git-fixes).
• powerpc/64s: Add CPUFTRSPOWER9DD22 to CPUFTRSALWAYS mask (bsc#1061840 git-fixes).
• powerpc/64s/radix: Fix huge vmap false positive (bsc#1156395).
• powerpc/fadump: fix PT_LOAD segment for boot memory area (bsc#1103269 ltc#169948 git-fixes).
• powerpc/powernv: Add __init attribute to eligible functions (bsc#1188885 ltc#193722 git-fixes).
• powerpc/powernv: Get L1D flush requirements from device-tree (bsc#1188885 ltc#193722 git-fixes).
• powerpc/powernv: Get STF barrier requirements from device-tree (bsc#1188885 ltc#193722 git-fixes).
• powerpc/powernv: Remove POWER9 PVR version check for entry and uaccess flushes (bsc#1188885 ltc#193722 git-fixes).
• powerpc/xive: Add some error handling code to 'xivespaprinit()' (git-fixes).
• powerpc/xive: Fix refcount leak in xivespaprinit (git-fixes).
• pwm: lp3943: Fix duty calculation in case period was clamped (git-fixes).
• pwm: raspberrypi-poe: Fix endianness in firmware struct (git-fixes).
• qlcnic: Fix error code in probe (git-fixes).
• regulator: core: Fix enablecount imbalance with EXCLUSIVEGET (git-fixes).
• regulator: pfuze100: Fix refcount leak in pfuzeparseregulators_dt (git-fixes).
• reset: tegra-bpmp: Restore Handle errors in BPMP response (git-fixes).
• rtc: fix use-after-free on device removal (git-fixes).
• rtc: mc146818-lib: Fix the AltCentury for AMD platforms (git-fixes).
• rtc: mt6397: check return value after calling platformgetresource() (git-fixes).
• satafsl: fix UAF in satafslportstop when rmmod sata_fsl (git-fixes).
• satafsl: fix warning in removeprocentry when rmmod satafsl (git-fixes).
• sched/pelt: Fix attachentityload_avg() corner case (git-fixes)
• sched/topology: Skip updating masks for non-online nodes (bsc#1197446 ltc#183000).
• scsi: dc395x: Fix a missing check on list iterator (git-fixes).
• scsi: fnic: Fix a tracing statement (git-fixes).
• scsi: fnic: Replace DMA mask of 64 bits with 47 bits (bsc#1199631).
• scsi: hisisas: Change permission of parameter protmask (git-fixes).
• scsi: lpfc: Alter FPIN stat accounting logic (bsc#1200045).
• scsi: lpfc: Change FA-PWWN detection methodology (bsc#1200045).
• scsi: lpfc: Change VMID registration to be based on fabric parameters (bsc#1200045).
• scsi: lpfc: Clear fabric topology flag before initiating a new FLOGI (bsc#1200045).
• scsi: lpfc: Copyright updates for 14.2.0.2 patches (bsc#1200045).
• scsi: lpfc: Correct BDE DMA address assignment for GENREQWQE (bsc#1200045 bsc#1198989 bsc#1197675).
• scsi: lpfc: Correct CRC32 calculation for congestion stats (bsc#1200045).
• scsi: lpfc: Decrement outstanding gidftinp counter if lpfcerrlostlink() (bsc#1200045).
• scsi: lpfc: Expand setting ELSID field in ELSREQUEST64_WQE (bsc#1200045).
• scsi: lpfc: Fill in missing ndlp kref puts in error paths (bsc#1200045).
• scsi: lpfc: Fix additional reference counting in lpfcbsgrport_els() (bsc#1200045).
• scsi: lpfc: Fix call trace observed during I/O with CMF enabled (bsc#1200045).
• scsi: lpfc: Fix diagnostic fw logging after a function reset (bsc#1200045).
• scsi: lpfc: Fix dmabuf ptr assignment in lpfcctreject_event() (bsc#1200045).
• scsi: lpfc: Fix element offset in _lpfcslireleaseiocbq_s4() (bsc#1200045).
• scsi: lpfc: Fix field overload in lpfc_iocbq data structure (bsc#1200045).
• scsi: lpfc: Fix ndlp put following a LOGO completion (bsc#1200045).
• scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI (bsc#1200045).
• scsi: lpfc: Fix resource leak in lpfcsli4sendseqto_ulp() (bsc#1200045).
• scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock (bsc#1200045).
• scsi: lpfc: Fix split code for FLOGI on FCoE (bsc#1200045 bsc#1198989 bsc#1197675).
• scsi: lpfc: Inhibit aborts if external loopback plug is inserted (bsc#1200045).
• scsi: lpfc: Introduce FCRSCNMEMENTO flag for tracking post RSCN completion (bsc#1200045).
• scsi: lpfc: Move cfglogverbose check before calling lpfcdmpdbg() (bsc#1200045).
• scsi: lpfc: Move MI module parameter check to handle dynamic disable (bsc#1200045).
• scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT (bsc#1200045).
• scsi: lpfc: Refactor cleanup of mailbox commands (bsc#1200045).
• scsi: lpfc: Register for Application Services FC-4 type in Fabric topology (bsc#1200045).
• scsi: lpfc: Remove false FDMI NVMe FC-4 support for NPIV ports (bsc#1200045).
• scsi: lpfc: Remove redundant lpfcsliprep_wqe() call (bsc#1200045).
• scsi: lpfc: Remove unnecessary null ndlp check in lpfcsliprep_wqe() (bsc#1200045).
• scsi: lpfc: Remove unnecessary NULL pointer assignment for ELS_RDF path (bsc#1200045).
• scsi: lpfc: Remove unneeded variable (bsc#1200045).
• scsi: lpfc: Requeue SCSI I/O to upper layer when fw reports link down (bsc#1200045).
• scsi: lpfc: Revise FDMI reporting of supported port speed for trunk groups (bsc#1200045).
• scsi: lpfc: Rework FDMI initialization after link up (bsc#1200045).
• scsi: lpfc: Transition to NPR state upon LOGO cmpl if link down or aborted (bsc#1200045).
• scsi: lpfc: Tweak message log categories for ELS/FDMI/NVMe rescan (bsc#1200045).
• scsi: lpfc: Update fcprlisent outstanding only after guaranteed IOCB submit (bsc#1200045).
• scsi: lpfc: Update lpfc version to 14.2.0.2 (bsc#1200045).
• scsi: lpfc: Update lpfc version to 14.2.0.3 (bsc#1200045).
• scsi: lpfc: Update stat accounting for READ_STATUS mbox command (bsc#1200045).
• scsi: lpfc: Use listforeachentrysafe() in rscnrecoverycheck() (bsc#1200045).
• scsi: lpfc: Use sgdmaaddress() and sgdmalen() macros for NVMe I/O (bsc#1200045).
• scsi: lpfc: Zero SLI4 fcp_cmnd buffer's fcpCntl0 field (bsc#1200045).
• scsi: pm8001: Fix abort all task initialization (git-fixes).
• scsi: pm8001: Fix command initialization in pm8001chipssptmreq() (git-fixes).
• scsi: pm8001: Fix command initialization in pm80XXsendread_log() (git-fixes).
• scsi: pm8001: Fix le32 values handling in pm80xxchipsata_req() (git-fixes).
• scsi: pm8001: Fix le32 values handling in pm80xxchipsspioreq() (git-fixes).
• scsi: pm8001: Fix le32 values handling in pm80xxsetsasprotocoltimer_config() (git-fixes).
• scsi: pm8001: Fix NCQ NON DATA command completion handling (git-fixes).
• scsi: pm8001: Fix NCQ NON DATA command task initialization (git-fixes).
• scsi: pm8001: Fix payload initialization in pm80xxencryptupdate() (git-fixes).
• scsi: pm8001: Fix payload initialization in pm80xxsetthermal_config() (git-fixes).
• scsi: pm80xx: Enable upper inbound, outbound queues (git-fixes).
• scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 (git-fixes).
• scsi: qla2xxx: edif: Remove unneeded variable (bsc#1200046).
• scsi: qla2xxx: Fix missed DMA unmap for aborted commands (bsc#1200046).
• scsi: qla2xxx: Remove free_sg command flag (bsc#1200046).
• scsi: qla2xxx: Remove unneeded flush_workqueue() (bsc#1200046).
• scsi: sr: Do not leak information in ioctl (git-fixes).
• scsi: ufs: core: Exclude UECxx from SFR dump list (git-fixes).
• scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled (git-fixes).
• scsi: ufs: qcom: Fix ufsqcomresume() (git-fixes).
• scsi: virtio-scsi: Eliminate anonymous moduleinit & moduleexit (git-fixes).
• scsi: zorro7xx: Fix a resource leak in zorro7xxremoveone() (git-fixes).
• selftests: firmware: Use smaller dictionary for XZ compression (git-fixes).
• serial: 8250fintek: Check SERRS485RTS* only with RS485 (git-fixes).
• serial: 8250_mtk: Fix register address for XON/XOFF character (git-fixes).
• serial: 8250mtk: Fix UARTEFR register address (git-fixes).
• serial: 8250: Also set sticky MCR bits in console restoration (git-fixes).
• serial: 8250: core: Remove unneeded <linux/pm_runtime.h> (git-fixes).
• serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (git-fixes).
• serial: 8250: pxa: Remove unneeded <linux/pm_runtime.h> (git-fixes).
• serial: digicolor-usart: Do not allow CS5-6 (git-fixes).
• serial: imx: fix overrun interrupts in DMA mode (git-fixes).
• serial: meson: acquire port->lock in startup() (git-fixes).
• serial: pch: do not overwrite xmit->buf[0] by x_char (git-fixes).
• serial: rda-uart: Do not allow CS5-6 (git-fixes).
• serial: sh-sci: Do not allow CS5-6 (git-fixes).
• serial: sifive: Sanitize CSIZE and c_iflag (git-fixes).
• serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 (git-fixes).
• serial: stm32-usart: Correct CSIZE, bits, and parity (git-fixes).
• serial: txx9: Do not allow CS5-6 (git-fixes).
• slimbus: qcom: Fix IRQ check in qcomslimprobe (git-fixes).
• smp: Fix offline cpu check in flushsmpcallfunctionqueue() (git-fixes).
• smsc911x: allow using IRQ0 (git-fixes).
• soc: qcom: smp2p: Fix missing ofnodeput() in smp2pparseipc (git-fixes).
• soc: qcom: smsm: Fix missing ofnodeput() in smsmparseipc (git-fixes).
• soc: rockchip: Fix refcount leak in rockchipgrfinit (git-fixes).
• spi: img-spfi: Fix pmruntimeget_sync() error checking (git-fixes).
• spi: spi-cadence: Fix kernel-doc format for resume/suspend (git-fixes).
• spi: spi-fsl-qspi: check return value after calling platformgetresource_byname() (git-fixes).
• spi: spi-ti-qspi: Fix return value handling of waitforcompletion_timeout (git-fixes).
• staging: fieldbus: Fix the error handling path in anybusshostcommon_probe() (git-fixes).
• SUNRPC: Ensure gss-proxy connects on setup (git-fixes).
• SUNRPC: Ensure that the gssproxy client can start in a connected state (git-fixes).
• thermal: int340x: Fix attr.show callback prototype (git-fixes).
• thermal/drivers/bcm2711: Do not clamp temperature at zero (git-fixes).
• thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe (git-fixes).
• timekeeping: Really make sure walltomonotonic isn't (git-fixes)
• timers: Fix warning condition in _runtimers() (git-fixes)
• tpm: Fix buffer access in tpm2gettpm_pt() (git-fixes).
• tpm: ibmvtpm: Correct the return value in tpmibmvtpmprobe() (bsc#1065729).
• tracing: Fix potential double free in createvarref() (git-fixes).
• tracing: Fix return value of tracepidwrite() (git-fixes).
• tty: fix deadlock caused by calling printk() under tty_port->lock (git-fixes).
• tty: goldfish: Use ttyportdestroy() to destroy port (git-fixes).
• tty: serial: fsllpuart: fix potential bug when using both ofaliasgetid and idasimpleget (git-fixes).
• tty: serial: owl: Fix missing clkdisableunprepare() in owluartprobe (git-fixes).
• tty/serial: digicolor: fix possible null-ptr-deref in digicoloruartprobe() (git-fixes).
• usb: cdc-wdm: fix reading stuck on device close (git-fixes).
• usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
• usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
• usb: dwc3: gadget: Return proper request status (git-fixes).
• usb: dwc3: pci: Fix pmruntimeget_sync() error checking (git-fixes).
• usb: ehci-omap: drop unused ehci_read() function (git-fixes).
• usb: gadget: configfs: clear deactivation flag in configfscompositeunbind() (git-fixes).
• usb: hcd-pci: Use PCISTDNUM_BARS when checking standard BARs (bsc#1152489)
• usb: misc: fix improper handling of refcount in uss720_probe() (git-fixes).
• usb: mtu3: fix USB 3.0 dual-role-switch from device to host (git-fixes).
• usb: musb: Fix missing ofnodeput() in omap2430_probe (git-fixes).
• usb: quirks: add a Realtek card reader (git-fixes).
• usb: quirks: add STRING quirk for VCOM device (git-fixes).
• usb: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (git-fixes).
• usb: serial: option: add Fibocom L610 modem (git-fixes).
• usb: serial: option: add Fibocom MA510 modem (git-fixes).
• usb: serial: option: add support for Cinterion MV32-WA/MV32-WB (git-fixes).
• usb: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (git-fixes).
• usb: serial: pl2303: add device id for HP LM930 Display (git-fixes).
• usb: serial: qcserial: add support for Sierra Wireless EM7590 (git-fixes).
• usb: serial: whiteheat: fix heap overflow in WHITEHEATGETDTR_RTS (git-fixes).
• usb: storage: karma: fix riokarmainit return (git-fixes).
• usb: typec: mux: Check devsetname() return value (git-fixes).
• usb: typec: tcpci: Do not skip cleanup in .remove() on error (git-fixes).
• usb: typec: ucsi: Fix reuse of completion structure (git-fixes).
• usb: typec: ucsi: Fix role swapping (git-fixes).
• usb: usbip: add missing device lock on tweak configuration cmd (git-fixes).
• usb: usbip: fix a refcount leak in stub_probe() (git-fixes).
• video: fbdev: clcdfb: Fix refcount leak in clcdfbofvram_setup (git-fixes).
• watchdog: ts4800wdt: Fix refcount leak in ts4800wdt_probe (git-fixes).
• wifi: mac80211: fix use-after-free in chanctx code (git-fixes).
• wireguard: device: check for metadatadst with skbvalid_dst() (git-fixes).
• xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms (git-fixes).
• xhci: stop polling roothubs after shutdown (git-fixes).