SUSE-SU-2024:4315-1

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
• CVE-2022-48983: iouring: Fix a null-ptr-deref in iotctxexitcb() (bsc#1231959).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26906: Fixed invalid vsyscall page read for copyfromkernel_nofault() (bsc#1223202).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-35888: erspan: make sure erspanbasehdr is present in skb->head (bsc#1224518).
• CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SENDSHUTDOWN) for TCPSYN_RECV sockets (bsc#1225742).
• CVE-2024-36954: tipc: fix a possible memleak in tipcbufappend (bsc#1225764).
• CVE-2024-38589: netrom: fix possible dead-lock in nrrtioctl() (bsc#1226748).
• CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
• CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
• CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-46681: pktgen: use cpusreadlock() in pgnetinit() (bsc#1230558).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-47679: vfs: fix race between eviceinodes() and findinode()&iput() (bsc#1231930).
• CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
• CVE-2024-47745: mm: call the securitymmapfile() LSM hook in remapfilepages() (bsc#1232135).
• CVE-2024-47757: nilfs2: fix potential oob read in nilfsbtreecheck_delete() (bsc#1232187).
• CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
• CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
• CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
• CVE-2024-49934: fs/inode: Prevent dumpmapping() accessing invalid dentry.dname.name (bsc#1232387).
• CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
• CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
• CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).
• CVE-2024-49983: ext4: drop ppath from ext4extreplayupdateex() to avoid double-free (bsc#1232096).
• CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
• CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreqcpuget's return value (bsc#1232318).
• CVE-2024-50073: tty: ngsm: Fix use-after-free in gsmcleanup_mux (bsc#1232520).
• CVE-2024-50082: blk-rq-qos: fix crash on rqqoswait vs. rqqoswake_function race (bsc#1232500).
• CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
• CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
• CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
• CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
• CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
• CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
• CVE-2024-50125: Bluetooth: SCO: Fix UAF on scosocktimeout (bsc#1232928).
• CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).
• CVE-2024-50128: net: wwan: fix global oob in wwanrtnlpolicy (bsc#1232905).
• CVE-2024-50134: drm/vboxvideo: Replace fake VLA at end of vbvamousepointer_shape (bsc#1232890).
• CVE-2024-50135: nvme-pci: fix race condition between reset and nvmedevdisable() (bsc#1232888).
• CVE-2024-50138: bpf: Use rawspinlockt in ringbuf (bsc#1232935).
• CVE-2024-50146: net/mlx5e: Do not call cleanup on profile rollback failure (bsc#1233056).
• CVE-2024-50147: net/mlx5: Fix command bitmask initialization (bsc#1233067).
• CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in targetallocdevice() (bsc#1233061).
• CVE-2024-50154: tcp/dccp: Do not use timerpending() in reqskqueue_unlink() (bsc#1233070).
• CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).
• CVE-2024-50171: net: systemport: fix potential memory leak in bcmsysportxmit() (bsc#1233057).
• CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129).
• CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135).
• CVE-2024-50186: net: explicitly clear the sk pointer, when pf->create fails (bsc#1233110).
• CVE-2024-50188: net: phy: dp83869: fix memory corruption when enabling fiber (bsc#1233107).
• CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106).
• CVE-2024-50195: posix-clock: Fix missing timespec64 check in pcclocksettime() (bsc#1233103).
• CVE-2024-50196: pinctrl: ocelot: fix system hang on level based interrupts (bsc#1233113).
• CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in applyconstraintto_size() (bsc#1233293).
• CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233117).
• CVE-2024-50229: nilfs2: fix potential deadlock with newly created symlinks (bsc#1233205).
• CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206).
• CVE-2024-50259: netdevsim: Add trailing zero to terminate the string in nsimnexthopbucketactivitywrite() (bsc#1233214).
• CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253).
• CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453).
• CVE-2024-50267: usb: serial: io_edgeport: fix use after free in debug printk (bsc#1233456).
• CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460).
• CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462).
• CVE-2024-50274: idpf: avoid vport access in idpfgetlink_ksettings (bsc#1233463).
• CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
• CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478).
• CVE-2024-50295: net: arc: fix the device for dmamapsingle/dmaunmapsingle (bsc#1233484).
• CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487).
• CVE-2024-53052: iouring/rw: fix missing NOWAIT check for ODIRECT start write (bsc#1233548).
• CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552).
• CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (bsc#1233555).
• CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557).
• CVE-2024-53068: firmware: armscmi: Fix slab-use-after-free in scmibus_notifier() (bsc#1233561).
• CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570).
• CVE-2024-53088: i40e: fix race condition by adding filter's intermediate sync state (bsc#1233580).
• CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat (bsc#1234025).
• CVE-2024-53110: vpvdpa: fix idtable array not null terminated error (bsc#1234085).

The following non-security bugs were fixed:

• Drop OCFS2 patch causing a regression (bsc#1233255)
• Fix regression on AMDGPU driver (bsc#1233134)
• Removed the duplicated check of staticassert(sizeof(struct workstruct) >= sizeof(struct rcu_head)).
• Removed unnecessary white-space change in kernel/bpf/syscall.c
• Revert 'cgroup: Fix memory leak caused by missing cgroupbpfoffline' (bsc#1234108).
• Revert 'ixgbe: Manual AN-37 for troublesome link partners for X550 SFI' (git-fixes).
• Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (git-fixes).
• Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (git-fixes).
• Update config files (bsc#1218644).
• Update config files. Enabled IDPF for ARM64 (bsc#1221309)
• acpi: CPPC: Fix _CPC register setting issue (git-fixes).
• acpi: CPPC: Make rmwlock a rawspin_lock (git-fixes).
• acpi: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).
• acpi: resource: Add LG 16T90SP to irq1levellowskipoverride[] (stable-fixes).
• ad7780: fix division by zero in ad7780writeraw() (git-fixes).
• adapt same struct naming as similar kABI workaround in SLE15-SP6 (prefixed with 'suse_' to make it more obvious its a downstream thing.
• add bugreference to a hv_netvsc patch (bsc#1232413).
• add commit message for the kABI patch
• alsa: 6fire: Release resources at card release (git-fixes).
• alsa: ac97: bus: Fix the mistake in the comment (git-fixes).
• alsa: caiaq: Use sndcardfreewhenclosed() at disconnection (git-fixes).
• alsa: firewire-lib: fix return value on fail in amdtptscminit() (git-fixes).
• alsa: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes).
• alsa: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).
• alsa: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).
• alsa: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).
• alsa: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).
• alsa: hda/realtek: Update ALC225 depop procedure (git-fixes).
• alsa: hda/realtek: Update ALC256 depop procedure (git-fixes).
• alsa: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes).
• alsa: us122l: Use sndcardfreewhenclosed() at disconnection (git-fixes).
• alsa: usb-audio: Add quirk for HP 320 FHD Webcam (stable-fixes).
• alsa: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).
• alsa: usx2y: Use sndcardfreewhenclosed() at disconnection (git-fixes).
• amd-pstate: Set minperf to nominalperf for active mode performance gov (git-fixes).
• arm64/sve: Discard stale CPU state when handling SVE traps (git-fixes)
• arm64: Force position-independent veneers (git-fixes).
• arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).
• arm64: fix .data.rel.ro size assertion when CONFIGLTOCLANG (git-fixes)
• arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes)
• arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() (git-fixes)
• arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)
• arm64:uprobe fix the uprobe SWBP_INSN in big-endian (git-fixes)
• asoc: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes).
• asoc: codecs: Fix atomicity violation in sndsoccomponentgetdrvdata() (git-fixes).
• asoc: codecs: lpass-rx-macro: add missing CDCRXBCLVBATRF_PROC2 to default regs values (stable-fixes).
• asoc: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).
• asoc: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).
• asoc: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).
• asoc: stm32: spdifrx: fix dma channel release in stm32spdifrxremove (git-fixes).
• blk-throttle: Fix io statistics for cgroup v1 (bsc#1233528).
• block: Avoid leaking hctx->nr_active counter on batched completion (bsc#1231923).
• bluetooth: MGMT: Fix slab-use-after-free Read in setpoweredsync (git-fixes).
• bluetooth: hci: fix null-ptr-deref in hcireadsupported_codecs (git-fixes).
• bnxt_en: Fix the PCI-AER routines (git-fixes).
• bnxten: Remove mis-applied code from bnxtcfgntpfilters() (git-fixes).
• bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).
• bnxten: Reset PTP txavail after possible firmware reset (git-fixes).
• bnxten: Restore PTP txavail count in case of skb_pad() error (git-fixes).
• bnxt_en: Wait for FLR to complete during probe (git-fixes).
• bnxt_en: refactor reset close code (git-fixes).
• can: ccan: ccanhandlebus_err(): update statistics if skb allocation fails (git-fixes).
• can: ccan: fix {rx,tx}errors statistics (git-fixes).
• can: emsusb: emsusbrxerr(): fix {rx,tx}_errors statistics (git-fixes).
• can: ificanfd: ificanfdhandlelecerr(): fix {rx,tx}errors statistics (git-fixes).
• can: j1939: j1939sessionnew(): fix skb reference counting (git-fixes).
• can: mcan: mcanhandlelecerr(): fix {rx,tx}errors statistics (git-fixes).
• can: sun4ican: sun4icanerr(): call canchange_state() even if cf is NULL (git-fixes).
• can: sun4ican: sun4icanerr(): fix {rx,tx}errors statistics (git-fixes).
• cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108).
• chtls: fix tp->rcv_tstamp initialization (git-fixes).
• comedi: Flush partial mappings in error case (git-fixes).
• crypto: bcm - add error check in the ahashhmacinit function (git-fixes).
• crypto: caam - Fix the pointer passed to caamqishutdown() (git-fixes).
• crypto: caam - add error check to caamrsasetprivkey_form (git-fixes).
• crypto: cavium - Fix an error handling path in cptucodeload_fw() (git-fixes).
• crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes).
• crypto: inside-secure - Fix the return value of safexcelxcbcmaccra_init() (git-fixes).
• crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes).
• cxgb4: Properly lock TX queue for the selftest (git-fixes).
• cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).
• cxgb4: unnecessary check for 0 in the freesgetxq_uld() function (git-fixes).
• drivers: net: prevent tunbuildskb() to exceed the packet size limit (git-fixes).
• drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes).
• drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes).
• drm/amdgpu: add missing size check in amdgpudebugfsgprwave_read() (stable-fixes).
• drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes).
• drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes).
• drm/bridge: tc358767: Fix link properties discovery (git-fixes).
• drm/bridge: tc358768: Fix DSI command tx (git-fixes).
• drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes).
• drm/imx/dcss: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• drm/mm: Mark drmmmintervaltree*() functions with _maybe_unused (git-fixes).
• drm/msm/adreno: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• drm/msm/dpu: cast crtcclk calculation to u64 in _dpucoreperfcalc_clk() (git-fixes).
• drm/omap: Fix locking in omapgemnew_dmabuf() (git-fixes).
• drm/omap: Fix possible NULL dereference (git-fixes).
• drm/panfrost: Remove unused idmask from struct panfrostmodel (git-fixes).
• drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes).
• drm/sti: avoid potential dereference of error pointers (git-fixes).
• drm/sti: avoid potential dereference of error pointers in stigdpatomic_check (git-fixes).
• drm/sti: avoid potential dereference of error pointers in stihqvdpatomic_check (git-fixes).
• drm/v3d: Address race-condition in MMU flush (git-fixes).
• drm/vboxvideo: Replace fake VLA at end of vbvamousepointer_shape with real VLA (stable-fixes).
• drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes).
• drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes).
• drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes).
• drm/vmwgfx: Limit display layout ioctl array size to VMWGFXNUMDISPLAY_UNITS (stable-fixes).
• e1000e: Fix S0ix residency on corporate systems (git-fixes).
• efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465).
• eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).
• firmware: google: Unregister driver_info on failure (git-fixes).
• genirq/msi: Fix off-by-one error in msidomainalloc() (git-fixes).
• goldfish: Fix unused const variable 'goldfishpipeacpi_match' (git-fixes).
• gve: Fix XDP TX completion handling when counters overflow (git-fixes).
• gve: Fix an edge case for TSO skb validity check (git-fixes).
• gve: Fix skb truesize underestimation (git-fixes).
• gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).
• hid: core: zero-initialize the report buffer (git-fixes).
• hid: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes).
• hid: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes).
• hid: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes).
• hid: multitouch: Add support for B2402FVA track point (stable-fixes).
• hid: wacom: Defer calculation of resolution until resolution_code is known (git-fixes).
• hid: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes).
• hid: wacom: fix when get product name maybe null pointer (git-fixes).
• hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (git-fixes).
• hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes).
• i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs() (git-fixes).
• i40e: Fix XDP program unloading while removing the driver (git-fixes).
• i40e: Fix filter input checks to prevent config with invalid values (git-fixes).
• i40e: Fix waiting for queues of all VSIs to be disabled (git-fixes).
• i40e: Report MFS in decimal base instead of hex (git-fixes).
• i40e: Restore VF MSI-X state during PCI reset (git-fixes).
• i40e: avoid double calling i40epfrxq_wait() (git-fixes).
• i40e: disable NAPI right after disabling irqs when handling xsk_pool (git-fixes).
• i40e: fix use-after-free in i40eaqcadd_filters() (git-fixes).
• i40e: take into account XDP Tx queues when stopping rings (git-fixes).
• iTCOwdt: mask NMINOW bit for updatenoreboot_bit() call (git-fixes).
• iavf: Fix TC config comparison with existing adapter TC config (git-fixes).
• iavf: Fix promiscuous mode configuration flow messages (git-fixes).
• iavf: Introduce new state machines for flow director (git-fixes).
• iavf: do not process adminq tasks when _IAVFINREMOVETASK is set (git-fixes).
• iavf: fix FDIR rule fields masks validation (git-fixes).
• iavf: in iavf_down, disable queues when removing the driver (git-fixes).
• iavf: initialize waitqueues before starting watchdog_task (git-fixes).
• iavf: send VLAN offloading caps once after VFR (git-fixes).
• iavf: validate txcoalesceusecs even if rxcoalesceusecs is zero (git-fixes).
• ibmvnic: Do partial reset on login failure (bsc#1233150).
• ibmvnic: Enforce stronger sanity checks on login response (bsc#1233150).
• ibmvnic: Ensure login failure recovery is safe from other resets (bsc#1233150).
• ibmvnic: Handle DMA unmapping of login buffs in release functions (bsc#1233150).
• ibmvnic: Unmap DMA login rsp buffer on send login fail (bsc#1233150).
• ice: Block switchdev mode when ADQ is active and vice versa (git-fixes).
• ice: Fix NULL pointer deref during VF reset (git-fixes).
• ice: Fix VSI list rule with ICESWLKUP_LAST type (git-fixes).
• ice: Fix linkdownon_close message (git-fixes).
• ice: Fix netifisice() in Safe Mode (git-fixes).
• ice: Interpret .set_channels() input differently (git-fixes).
• ice: Shut down VSI with 'link-down-on-close' enabled (git-fixes).
• ice: avoid executing commands on other ports when driving sync (git-fixes).
• ice: change q_index variable type to s16 to store -1 value (git-fixes).
• ice: fix ICELASTOFFSET formula (git-fixes).
• ice: fix VLAN replay after reset (git-fixes).
• ice: fix accounting for filters shared by multiple VSIs (git-fixes).
• ice: fix accounting if a VLAN already exists (git-fixes).
• ice: fix over-shifted variable (git-fixes).
• ice: fix receive buffer size miscalculation (git-fixes).
• ice: iceaqcheck_events: fix off-by-one check when filling buffer (git-fixes).
• ice: reset first in crash dump kernels (git-fixes).
• ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).
• ice: tc: allow zero flags in parsing tc flower (git-fixes).
• ice: virtchnl: stop pretending to support RSS over AQ or registers (git-fixes).
• idpf: Interpret .set_channels() input differently (git-fixes).
• idpf: avoid compiler introduced padding in virtchnl2rsskey struct (git-fixes).
• idpf: avoid compiler padding in virtchnl2_ptype struct (git-fixes).
• idpf: disable local BH when scheduling napi for marker packets (git-fixes).
• idpf: distinguish vports by the dev_port attribute (git-fixes).
• idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).
• idpf: fix UAFs when destroying the queues (git-fixes).
• idpf: fix corrupted frames and skb leaks in singleq mode (git-fixes).
• idpf: fix memleak in vport interrupt configuration (git-fixes).
• idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).
• igb: Always call igbxdpringupdatetail() under Tx lock (git-fixes).
• igb: Fix missing time sync events (git-fixes).
• igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).
• igb: extend PTP timestamp adjustments to i211 (git-fixes).
• igc: Check VLAN EtherType mask (git-fixes).
• igc: Check VLAN TCI mask (git-fixes).
• igc: Fix hicredit calculation (git-fixes).
• igc: Fix missing time sync events (git-fixes).
• igc: Remove temporary workaround (git-fixes).
• igc: Report VLAN EtherType matching back to user (git-fixes).
• igc: Unlock on error in igcioresume() (git-fixes).
• iio: adc: ad7124: fix division by zero in ad7124setchannel_odr() (git-fixes).
• iio: adc: ad7606: Fix typo in the driver name (git-fixes).
• iio: adc: ad7923: Fix buffer overflow for txbuf and ringxfer (git-fixes).
• iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes).
• iio: light: veml6030: fix microlux value calculation (git-fixes).
• initramfs: avoid filename buffer overrun (bsc#1232436).
• input: i8042 - add Ayaneo Kun to i8042 quirk table (git-fixes).
• input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (git-fixes).
• input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (git-fixes).
• input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (git-fixes).
• input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (git-fixes).
• irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes).
• irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (git-fixes).
• ixgbe: avoid sleeping allocation in ixgbeipsecvfaddsa() (git-fixes).
• ixgbe: fix crash with empty VF macvlan list (git-fixes).
• ixgbe: fix timestamp configuration code (git-fixes).
• ixgbe: {dis, en}able irqs in ixgbetxrxring_{dis, en}able (git-fixes).
• kABI: Restore exported _armsmcccsvecheck (git-fixes)
• kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).
• kernel.h: split out COUNT_ARGS() and CONCATENATE() to args.h (git-fixes)
• kexec: fix a memory leak in crashshrinkmemory() (git-fixes).
• kvm: PPC: Book3S HV: remove unused varible (bsc#1194869).
• mac80211: MAC80211MESSAGETRACING should depend on TRACING (git-fixes).
• media: adv7604: prevent underflow condition when reporting colorspace (git-fixes).
• media: cx24116: prevent overflows on SNR calculus (git-fixes).
• media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035i2cmaster_xfer (stable-fixes).
• media: dvb-usb-v2: af9035: fix missing unlock (git-fixes).
• media: dvb_frontend: do not play tricks with underflow values (git-fixes).
• media: dvbdev: prevent the risk of out of memory access (git-fixes).
• media: pci: cx23885: check cx23885vdevinit() return (stable-fixes).
• media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes).
• media: stb0899_algo: initialize cfr before using it (git-fixes).
• media: v4l2-ctrls-api: fix error handling for v4l2gctrl() (git-fixes).
• media: v4l2-tpg: prevent the risk of a division by zero (git-fixes).
• mei: use kvmalloc for read buffer (git-fixes).
• misc: apds990x: Fix missing pmruntimedisable() (git-fixes).
• mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012).
• mm/memory: add non-anonymous page check in the copypresentpage() (bsc#1231646).
• modpost: remove incorrect code in doeisaentry() (git-fixes).
• net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).
• net/mlx5: Added cond_resched() to crdump collection (git-fixes).
• net/mlx5: Allow 0 for total host VFs (git-fixes).
• net/mlx5: Correctly compare pkt reformat ids (git-fixes).
• net/mlx5: DR, Can't go to uplink vport on RX rule (git-fixes).
• net/mlx5: DR, Use the right GVMI number for drop action (git-fixes).
• net/mlx5: DR, fix memory leak in mlx5drcmdcreatereformatctx (git-fixes).
• net/mlx5: Drain health before unregistering devlink (git-fixes).
• net/mlx5: E-switch, register event handler before arming the event (git-fixes).
• net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).
• net/mlx5: Fix fw tracer first block check (git-fixes).
• net/mlx5: Handle fw tracer change ownership event based on MTRC (git-fixes).
• net/mlx5: LAG, Check correct bucket when modifying LAG (git-fixes).
• net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).
• net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).
• net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (git-fixes).
• net/mlx5: Skip clock update work when device is in error state (git-fixes).
• net/mlx5: Unregister notifier on eswitch init failure (git-fixes).
• net/mlx5: Update the list of the PCI supported devices (git-fixes).
• net/mlx5: Use RMW accessors for changing LNKCTL (git-fixes).
• net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (git-fixes).
• net/mlx5: Use recovery timeout on sync reset flow (git-fixes).
• net/mlx5: fix potential memory leak in mlx5einitrep_rx (git-fixes).
• net/mlx5: fs, lock FTE when checking if active (git-fixes).
• net/mlx5e: Add a check for the return value from mlx5portsetethptys (git-fixes).
• net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).
• net/mlx5e: Add mqpriorl cleanup and free in mlx5epriv_cleanup() (git-fixes).
• net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp (git-fixes).
• net/mlx5e: Allow software parsing when IPsec crypto is enabled (git-fixes).
• net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).
• net/mlx5e: Change the warning when ignoreflowlevel is not supported (git-fixes).
• net/mlx5e: Check return value of snprintf writing to fw_version buffer (git-fixes).
• net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors (git-fixes).
• net/mlx5e: Correct snprintf truncation handling for fw_version buffer (git-fixes).
• net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors (git-fixes).
• net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).
• net/mlx5e: Do not offload internal port if filter device is out device (git-fixes).
• net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).
• net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).
• net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set (git-fixes).
• net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).
• net/mlx5e: Fix pedit endianness (git-fixes).
• net/mlx5e: Fix possible deadlock on mlx5etxtimeout_work (git-fixes).
• net/mlx5e: Fix slab-out-of-bounds in mlx5querynicvportmac_list() (git-fixes).
• net/mlx5e: HTB, Fix inconsistencies with QoS SQs number (git-fixes).
• net/mlx5e: Move representor neigh cleanup to profile cleanup_tx (git-fixes).
• net/mlx5e: Reduce the size of icosq_str (git-fixes).
• net/mlx5e: Take state lock during tx timeout reporter (git-fixes).
• net/mlx5e: Use rxmissederrors instead of rx_dropped for reporting buffer exhaustion (git-fixes).
• net/mlx5e: fix a potential double-free in fsudpcreate_groups (git-fixes).
• net/mlx5e: fix double free in macsecfstxcreatecryptotablegroups (git-fixes).
• net/mlx5e: fix double free of encap_header (git-fixes).
• net/mlx5e: fix return value check in mlx5eipsecremove_trailer() (git-fixes).
• net/mlx5e: kTLS, Fix incorrect page refcounting (git-fixes).
• net: ena: Fix potential sign extension issue (git-fixes).
• net: ena: Remove enaselectqueue (git-fixes).
• net: ena: Wrong missing IO completions check order (git-fixes).
• net: qede: use return from qedeparseflowattr() for flowspec (git-fixes).
• net: relax socket state check at accept time (git-fixes).
• net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes).
• net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes).
• net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes).
• net: usb: usbnet: fix race in probe failure (git-fixes).
• nfs: Fix KMSAN warning in decodegetfattrattrs() (git-fixes).
• nvme-fabrics: fix kernel crash while shutting down controller (git-fixes).
• nvme-pci: fix freeing of the HMB descriptor table (git-fixes).
• nvme-pci: reverse request order in nvmequeuerqs (git-fixes).
• ocfs2: remove entry once instead of null-ptr-dereference in ocfs2xaremove() (git-fixes).
• pci: Add T_PVPERL macro (git-fixes).
• pci: Fix resetmethodstore() memory leak (git-fixes).
• pci: endpoint: Clear secondary (not primary) EPC in pciepcremove_epf() (git-fixes).
• pci: j721e: Deassert PERST# after a delay of PCIETPVPERL_MS milliseconds (git-fixes).
• pci: keystone: Add link up check to kspcieothermapbus() (git-fixes).
• pci: keystone: Set mode as Root Complex for 'ti,keystone-pcie' compatible (git-fixes).
• pci: rockchip-ep: Fix address translation unit programming (git-fixes).
• phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).
• platform/chrome: crosectypec: fix missing fwnode reference decrement (git-fixes).
• platform/surface: aggregator: Fix warning when controller is destroyed in probe (git-fixes).
• platform/x86: dell-sysman: add support for alienware products (stable-fixes).
• platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).
• posix-cpu-timers: Clear TICKDEPBITPOSIXTIMER on clone (bsc#1234098).
• power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).
• power: supply: core: Remove mightsleep() from powersupply_put() (git-fixes).
• powerpc/asm: Remove UPD_CONSTR after GCC 4.9 removal (bsc#1194869).
• powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869).
• powerpc/kexec: Fix return of uninitialized variable (bsc#1194869).
• powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).
• powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).
• powerpc/mm: Fix boot warning with hugepages and CONFIGDEBUGVIRTUAL (bsc#1194869).
• powerpc/powernv: Free name on error in opaleventinit() (bsc#1194869).
• powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869).
• powerpc/pseries: Fix dtlaccesslock to be a rw_semaphore (bsc#1194869).
• powerpc: remove GCC version check for UPD_CONSTR (bsc#1194869).
• qed: avoid truncating work queue length (git-fixes).
• rdma/bnxtre: Check cqe flags to know immdata vs inv_irkey (git-fixes)
• rdma/hns: Add clear_hem return value to log (git-fixes)
• rdma/hns: Add mutex_destroy() (git-fixes)
• rdma/hns: Fix NULL pointer derefernce in hnsrocemapmrsg() (git-fixes)
• rdma/hns: Fix an AEQE overflow error caused by untimely update of eqdbci (git-fixes)
• rdma/hns: Fix cpu stuck caused by printings during reset (git-fixes)
• rdma/hns: Fix different dgids mapping to the same dip_idx (git-fixes)
• rdma/hns: Fix flush cqe error when racing with destroy qp (git-fixes)
• rdma/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes)
• rdma/hns: Remove unnecessary QP type checks (git-fixes)
• rdma/hns: Use dev* printings in hem code instead of ibdev* (git-fixes)
• rdma/hns: Use macro instead of magic number (git-fixes)
• rdma/mlx5: Move events notifier registration to be after device registration (git-fixes)
• rdma/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).
• rdma/rxe: Fix the qp flush warnings in req (git-fixes)
• rdma/rxe: Set queue pair curqpstate when being queried (git-fixes)
• rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)
• rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes).
• rtc: abx80x: Fix WDT bit position of the status register (git-fixes).
• rtc: check if _rtcreadtime was successful in rtctimerdowork() (git-fixes).
• rtc: st-lpc: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241).
• scsi: lpfc: Call lpfcsli4queue_unset() in restart and rmmod paths (bsc#1233241).
• scsi: lpfc: Change lpfcnodelist nlpflag member into a bitmask (bsc#1233241).
• scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241).
• scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241).
• scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241).
• scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241).
• scsi: lpfc: Prevent NDLP reference count underflow in devlosstmo callback (bsc#1233241).
• scsi: lpfc: Remove NLPRELEASERPI flag from nodelist structure (bsc#1233241).
• scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241).
• scsi: lpfc: Update lpfcelsflushcmd() to check for SLIACTIVE before BSG flag (bsc#1233241).
• scsi: scsitransportfc: Allow setting rport state to current state (git-fixes).
• scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes).
• security/keys: fix slab-out-of-bounds in keytaskpermission (git-fixes).
• serial: 8250: omap: Move pmruntimeget_sync (git-fixes).
• sfc: Check firmware supports Ethernet PTP filter (git-fixes).
• sfc: do not unregister flow_indr if it was never registered (git-fixes).
• sfc: fix a double-free bug in efxprobefilters (git-fixes).
• signal: Replace BUG_ON()s (bsc#1234093).
• spi: Fix acpi deferred irq probe (git-fixes).
• spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes).
• staging: iio: frequency: ad9832: fix division by zero in ad9832calcfreqreg() (git-fixes).
• thermal: core: Initialize thermal zones before registering them (git-fixes).
• thermal: intel: int340x: processor: Fix warning during module unload (git-fixes).
• tpm: Lock TPM chip in tpmpmsuspend() first (bsc#1082555 git-fixes).
• tun: Fix xdprxqinfo's queue_index when detaching (git-fixes).
• tun: prevent negative ifindex (git-fixes).
• ucounts: fix counter leak in incrlimitget_ucounts() (bsc#1233460).
• usb: chaoskey: Fix possible deadlock chaoskeylistlock (git-fixes).
• usb: chaoskey: fail open after removal (git-fixes).
• usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes).
• usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes).
• usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).
• usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes).
• usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).
• usb: phy: Fix API devmusbput_phy() can not release the phy (git-fixes).
• usb: serial: ftdisio: Fix atomicity violation in getserial_info() (git-fixes).
• usb: serial: io_edgeport: fix use after free in debug printk (git-fixes).
• usb: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes).
• usb: serial: option: add Quectel RG650V (stable-fixes).
• usb: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes).
• usb: typec: fix potential out of bounds in ucsiccgupdatesetnewcamcmd() (git-fixes).
• usb: typec: fix unreleased fwnodehandle in typecportregisteraltmodes() (git-fixes).
• usb: using mutex lock and supporting ONONBLOCK flag in iowarriorread() (git-fixes).
• usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes).
• usb: yurex: make waiting on yurex_write interruptible (git-fixes).
• usbip: tools: Fix detach_port() invalid port error path (git-fixes).
• vdpa/mlx5: preserve CVQ vringh index (git-fixes).
• watchdog: mediatek: Make sure system reset gets asserted in mtkwdtrestart() (git-fixes).
• watchdog: rti: of: honor timeout-sec property (git-fixes).
• wifi: ath10k: Fix memory leak in management tx (git-fixes).
• wifi: ath10k: fix invalid VHT parameters in supportedvhtmcsratenss1 (git-fixes).
• wifi: ath10k: fix invalid VHT parameters in supportedvhtmcsratenss2 (git-fixes).
• wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).
• wifi: ath9k: add range check for connrspepid in htcconnectservice() (git-fixes).
• wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).
• wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes).
• wifi: iwlwifi: mvm: Fix response handling in iwlmvmsendrecoverycmd() (git-fixes).
• wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (stable-fixes).
• wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).
• wifi: mac80211: skip non-uploaded keys in ieee80211iterkeys (git-fixes).
• wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiexconfigscan() (git-fixes).
• wifi: mwifiex: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• wifi: p54: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• x86/kvm: fix isstalepage_fault() (bsc#1221333).
• xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).
• xhci: Separate PORT and CAPs macros into dedicated file (stable-fixes).
• xhci: Use pmruntimeget to prevent RPM on unsupported systems (git-fixes).