openSUSE-SU-2019:1404-1

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes.

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

• CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
• CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
• CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
• CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

This kernel update contains software mitigations for these issues, which also utilize CPU microcode updates shipped in parallel.

For more information on this set of information leaks, check out https://www.suse.com/support/kb/doc/?id=7023736

The following security bugs were fixed:

• CVE-2018-16880: A flaw was found in handlerx() function in the vhostnet driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. (bnc#1122767).
• CVE-2019-11486: The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c had multiple race conditions (bnc#1133188). It has been disabled.
• CVE-2019-11815: An issue was discovered in rdstcpkill_sock in net/rds/tcp.c. There is a race condition leading to a use-after-free, related to net namespace cleanup (bnc#1134537).
• CVE-2019-11884: The dohidpsock_ioctl function in net/bluetooth/hidp/sock.c allowed a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character (bnc#1134848).
• CVE-2019-3882: A flaw was found in vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). (bnc#1131416 bnc#1131427).
• CVE-2019-9003: Attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a 'service ipmievd restart' loop (bnc#1126704).
• CVE-2019-9500: A brcmfmac heap buffer overflow in brcmfwowlnd_results was fixed (bnc#1132681).
• CVE-2019-9503: Multiple brcmfmac frame validation bypasses have been fixed (bnc#1132828).

The following non-security bugs were fixed:

• 9p: do not trust pdu content for stat item size (bsc#1051510).
• acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1112128) (bsc#1132426).
• ACPI / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
• ALSA: core: Do not refer to snd_cards array directly (bsc#1051510).
• ALSA: core: Fix card races between register and disconnect (bsc#1051510).
• ALSA: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
• ALSA: hda - Add two more machines to the powersaveblacklist (bsc#1051510).
• ALSA: hda/hdmi - Consider eld_valid when reporting jack event (bsc#1051510).
• ALSA: hda/hdmi - Read the pin sense from register when repolling (bsc#1051510).
• ALSA: hda: Initialize power_state field properly (bsc#1051510).
• ALSA: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
• ALSA: hda/realtek - Add quirk for Tuxedo XC 1509 (bsc#1131442).
• ALSA: hda/realtek - Add support headset mode for DELL WYSE AIO (bsc#1051510).
• ALSA: hda/realtek - Add support headset mode for New DELL WYSE NB (bsc#1051510).
• ALSA: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
• ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
• ALSA: hda/realtek - EAPD turn on later (bsc#1051510).
• ALSA: hda/realtek - Fixed Dell AIO speaker noise (bsc#1051510).
• ALSA: hda - Register irq handler after the chip initialization (bsc#1051510).
• ALSA: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) (bsc#1051510).
• ALSA: info: Fix racy addition/deletion of nodes (bsc#1051510).
• ALSA: line6: Avoid polluting led_* namespace (bsc#1051510).
• ALSA: line6: use dynamic buffers (bsc#1051510).
• ALSA: PCM: check if ops are defined before suspending PCM (bsc#1051510).
• ALSA: seq: Align temporary re-locking with irqsave version (bsc#1051510).
• ALSA: seq: Correct unlock sequence at sndseqclientioctlunlock() (bsc#1051510).
• ALSA: seq: Cover unsubscribeport() in listmutex (bsc#1051510).
• ALSA: seq: Fix OOB-reads from strlcpy (bsc#1051510).
• ALSA: seq: Fix race of get-subscription call vs port-delete ioctls (bsc#1051510).
• ALSA: seq: Protect in-kernel ioctl calls with mutex (bsc#1051510).
• ALSA: seq: Protect racy pool manipulation from OSS sequencer (bsc#1051510).
• ALSA: seq: Remove superfluous irqsave flags (bsc#1051510).
• ALSA: seq: Simplify sndseqkernelclientenqueue() helper (bsc#1051510).
• ALSA: timer: Check ack_list emptiness instead of bit flag (bsc#1051510).
• ALSA: timer: Coding style fixes (bsc#1051510).
• ALSA: timer: Make sndtimerclose() really kill pending actions (bsc#1051510).
• ALSA: timer: Make sure to clear pending ack list (bsc#1051510).
• ALSA: timer: Revert active callback sync check at close (bsc#1051510).
• ALSA: timer: Simplify error path in sndtimeropen() (bsc#1051510).
• ALSA: timer: Unify timer callback process code (bsc#1051510).
• ALSA: usb-audio: Fix a memory leak bug (bsc#1051510).
• ALSA: usb-audio: Handle the error from sndusbmixerapplycreate_quirk() (bsc#1051510).
• ALSA: usx2y: fix a double free bug (bsc#1051510).
• ASoC: cs4270: Set auto-increment bit for register writes (bsc#1051510).
• ASoC: fix valid stream condition (bsc#1051510).
• ASoC: fsl-asoc-card: fix object reference leaks in fslasoccard_probe (bsc#1051510).
• ASoC: fsl_esai: fix channel swap issue when stream starts (bsc#1051510).
• ASoC: fsl_esai: Fix missing break in switch statement (bsc#1051510).
• ASoC: hdmi-codec: fix S/PDIF DAI (bsc#1051510).
• ASoC: Intel: avoid Oops if DMA setup fails (bsc#1051510).
• ASoC: max98090: Fix restore of DAPM Muxes (bsc#1051510).
• ASoC: nau8810: fix the issue of widget with prefixed name (bsc#1051510).
• ASoC: nau8824: fix the issue of the widget with prefix name (bsc#1051510).
• ASoC: RT5677-SPI: Disable 16Bit SPI Transfers (bsc#1051510).
• ASoC: samsung: odroid: Fix clock configuration for 44100 sample rate (bsc#1051510).
• ASoC:soc-pcm:fix a codec fixup issue in TDM case (bsc#1051510).
• ASoC: stm32: fix sai driver name initialisation (bsc#1051510).
• ASoC: tlv320aic32x4: Fix Common Pins (bsc#1051510).
• ASoC: topology: free created components in tplg load error (bsc#1051510).
• ASoC: wmadsp: Add locking to wmadsp2buserror (bsc#1051510).
• assume flash part size to be 4MB, if it can't be determined (bsc#1127371).
• at76c50x-usb: Do not register ledtrigger if usbregister_driver failed (bsc#1051510).
• ath10k: avoid possible string overflow (bsc#1051510).
• audit: fix a memleak caused by auditing load module (bsc#1051510).
• b43: shut up clang -Wuninitialized variable warning (bsc#1051510).
• batman-adv: Reduce claim hash refcnt only for removed entry (bsc#1051510).
• batman-adv: Reduce tt_global hash refcnt only for removed entry (bsc#1051510).
• batman-adv: Reduce tt_local hash refcnt only for removed entry (bsc#1051510).
• bcache: account size of buckets used in uuid write to ca->metasectorswritten (bsc#1130972).
• bcache: add a comment in super.c (bsc#1130972).
• bcache: add code comments for bset.c (bsc#1130972).
• bcache: add comment for cacheset->filliter (bsc#1130972).
• bcache: add identifier names to arguments of function definitions (bsc#1130972).
• bcache: add missing SPDX header (bsc#1130972).
• bcache: add MODULE_DESCRIPTION information (bsc#1130972).
• bcache: add separate workqueue for journal_write to avoid deadlock (bsc#1130972).
• bcache: add static const prefix to char * array declarations (bsc#1130972).
• bcache: add sysfsstrtoulbool() for setting bit-field variables (bsc#1130972).
• bcache: add the missing comments for smpmb()/smpwmb() (bsc#1130972).
• bcache: cannot set writeback_running via sysfs if no writeback kthread created (bsc#1130972).
• bcache: correct dirty data statistics (bsc#1130972).
• bcache: do not assign in if condition in bcache_init() (bsc#1130972).
• bcache: do not assign in if condition register_bcache() (bsc#1130972).
• bcache: do not check if debug dentry is ERR or NULL explicitly on remove (bsc#1130972).
• bcache: do not check NULL pointer before calling kmemcachedestroy (bsc#1130972).
• bcache: do not clone bio in bchdataverify (bsc#1130972).
• bcache: do not mark writeback_running too early (bsc#1130972).
• bcache: export backingdevname via sysfs (bsc#1130972).
• bcache: export backingdevuuid via sysfs (bsc#1130972).
• bcache: fix code comments style (bsc#1130972).
• bcache: fix indentation issue, remove tabs on a hunk of code (bsc#1130972).
• bcache: fix indent by replacing blank by tabs (bsc#1130972).
• bcache: fix input integer overflow of congested threshold (bsc#1130972).
• bcache: fix input overflow to cache set ioerrorlimit (bsc#1130972).
• bcache: fix input overflow to cache set sysfs file ioerrorhalflife (bsc#1130972).
• bcache: fix input overflow to journaldelayms (bsc#1130972).
• bcache: fix input overflow to sequential_cutoff (bsc#1130972).
• bcache: fix input overflow to writeback_delay (bsc#1130972).
• bcache: fix input overflow to writebackrateminimum (bsc#1130972).
• bcache: fix ioctl in flash device (bsc#1130972).
• bcache: fix mistaken code comments in bcache.h (bsc#1130972).
• bcache: fix mistaken comments in request.c (bsc#1130972).
• bcache: fix potential div-zero error of writebackrateiterminverse (bsc#1130972).
• bcache: fix potential div-zero error of writebackratepterminverse (bsc#1130972).
• bcache: fix typo in code comments of closurereturnwith_destructor() (bsc#1130972).
• bcache: fix typo 'succesfully' to 'successfully' (bsc#1130972).
• bcache: improve sysfsstrtoulclamp() (bsc#1130972).
• bcache: introduce forcewakeup_gc() (bsc#1130972).
• bcache: make cutoffwriteback and cutoffwriteback_sync tunable (bsc#1130972).
• bcache: Move couple of functions to sysfs.c (bsc#1130972).
• bcache: Move couple of string arrays to sysfs.c (bsc#1130972).
• bcache: move open brace at end of function definitions to next line (bsc#1130972).
• bcache: never writeback a discard operation (bsc#1130972).
• bcache: not use hard coded memset size in bchcacheaccounting_clear() (bsc#1130972).
• bcache: option to automatically run gc thread after writeback (bsc#1130972).
• bcache: panic fix for making cache device (bsc#1130972).
• bcache: Populate writebackrateminimum attribute (bsc#1130972).
• bcache: prefer 'help' in Kconfig (bsc#1130972).
• bcache: print number of keys in tracebcachejournal_write (bsc#1130972).
• bcache: recal cacheddevsectors on detach (bsc#1130972).
• bcache: remove unnecessary space before ioctl function pointer arguments (bsc#1130972).
• bcache: remove unused bchpassthroughcache (bsc#1130972).
• bcache: remove useless parameter of bchdebuginit() (bsc#1130972).
• bcache: Replace bchreadstringlist() by _sysfsmatchstring() (bsc#1130972).
• bcache: replace hard coded number with BUCKETGCGEN_MAX (bsc#1130972).
• bcache: replace '%pF' by '%pS' in seq_printf() (bsc#1130972).
• bcache: replace printk() by pr_*() routines (bsc#1130972).
• bcache: replace Symbolic permissions by octal permission numbers (bsc#1130972).
• bcache: set writeback_percent in a flexible range (bsc#1130972).
• bcache: split combined if-condition code into separate ones (bsc#1130972).
• bcache: stop bcache device when backing device is offline (bsc#1130972).
• bcache: stop using the deprecated get_seconds() (bsc#1130972).
• bcache: style fixes for lines over 80 characters (bsc#1130972).
• bcache: style fix to add a blank line after declarations (bsc#1130972).
• bcache: style fix to replace 'unsigned' by 'unsigned int' (bsc#1130972).
• bcache: treat stale && dirty keys as bad keys (bsc#1130972).
• bcache: trivial - remove tailing backslash in macro BTREE_FLAG (bsc#1130972).
• bcache: update comment for bchdatainsert (bsc#1130972).
• bcache: update comment in sysfs.c (bsc#1130972).
• bcache: use MAXCACHESPERSET instead of magic number 8 in _bchbucketalloc_set (bsc#1130972).
• bcache: use (REQMETA|REQPRIO) to indicate bio for metadata (bsc#1130972).
• bcache: use REQ_PRIO to indicate bio for metadata (bsc#1130972).
• bcache: use routines from lib/crc64.c for CRC64 calculation (bsc#1130972).
• bcache: use sysfsstrtoulbool() to set bit-field variables (bsc#1130972).
• blkcg: Introduce blkgrootlookup() (bsc#1131673).
• blkcg: Make blkgrootlookup() work for queues in bypass mode (bsc#1131673).
• blk-mq: adjust debugfs and sysfs register when updating nrhwqueues (bsc#1131673).
• blk-mq: Avoid that submitting a bio concurrently with device removal triggers a crash (bsc#1131673).
• blk-mq: change gfp flags to GFPNOIO in blkmqreallochw_ctxs (bsc#1131673).
• blk-mq: fallback to previous nrhwqueues when updating fails (bsc#1131673).
• blk-mq: init hctx sched after update ctx and hctx mapping (bsc#1131673).
• blk-mq: realloc hctx when hw queue is mapped to another node (bsc#1131673).
• blk-mq: sync the update nrhwqueues with blkmqqueuetagbusy_iter (bsc#1131673).
• block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
• block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
• block: Ensure that a request queue is dissociated from the cgroup controller (bsc#1131673).
• block: Fix a race between request queue removal and the block cgroup controller (bsc#1131673).
• block: Introduce blkexitqueue() (bsc#1131673).
• block: kABI fixes for biorewinditer() removal (bsc#1131673).
• block: remove biorewinditer() (bsc#1131673).
• bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bsc#1051510).
• bluetooth: btusb: request wake pin with NOAUTOEN (bsc#1051510).
• bluetooth: Check L2CAP option sizes returned from l2capgetconf_opt (bsc#1051510).
• bluetooth: hciuart: Check if socket buffer is ERRPTR in h4recvbuf() (bsc#1133731).
• bluetooth: hidp: fix buffer overflow (bsc#1051510).
• bnxten: Drop oversize TX packets to prevent errors (networking-stable-1903_07).
• bonding: fix PACKET_ORIGDEV regression (git-fixes).
• bpf: fix use after free in bpfevictinode (bsc#1083647).
• brcm80211: potential NULL dereference in brcmfcfg80211vndrcmdsdcmd_handler() (bsc#1051510).
• btrfs: add a helper to return a head ref (bsc#1134813).
• btrfs: Avoid possible qgrouprsvsize overflow in btrfscalculateinodeblockrsv_size (git-fixes).
• btrfs: breakout empty head cleanup to a helper (bsc#1134813).
• btrfs: check for refs on snapshot delete resume (bsc#1131335).
• btrfs: delayed-ref: Introduce better documented delayed ref structures (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: Do not panic when we can't find a root key (bsc#1112063).
• btrfs: extent-tree: Open-code processfunc in _btrfsmodref (bsc#1063638 bsc#1128052 bsc#1108838).
• btrfs: Factor out common delayed refs init code (bsc#1134813).
• btrfs: fix assertion failure on fsync with NO_HOLES enabled (bsc#1131848).
• btrfs: Fix bound checking in qgrouptracenewsubtreeblocks (git-fixes).
• btrfs: fix incorrect file size after shrinking truncate and fsync (bsc#1130195).
• btrfs: Introduce initdelayedref_head (bsc#1134813).
• btrfs: move all ref head cleanup to the helper function (bsc#1134813).
• btrfs: move extent_op cleanup to a helper (bsc#1134813).
• btrfs: move ref_mod modification into the if (ref) logic (bsc#1134813).
• btrfs: Open-code adddelayeddata_ref (bsc#1134813).
• btrfs: Open-code adddelayedtree_ref (bsc#1134813).
• btrfs: qgroup: Move reserved data accounting from btrfsdelayedrefhead to btrfsqgroupextentrecord (bsc#1134162).
• btrfs: qgroup: Remove duplicated trace points for qgrouprsvadd/release (bsc#1134160).
• btrfs: remove delayedrefnode from ref_head (bsc#1134813).
• btrfs: remove WARNON in logdir_items (bsc#1131847).
• btrfs: save drop_progress if we drop refs at all (bsc#1131336).
• btrfs: split delayed ref head initialization and addition (bsc#1134813).
• btrfs: track refs in a rb_tree instead of a list (bsc#1134813).
• btrfs: Use initdelayedrefcommon in adddelayeddataref (bsc#1134813).
• btrfs: Use initdelayedrefcommon in adddelayedtreeref (bsc#1134813).
• btrfs: Use initdelayedrefhead in adddelayedrefhead (bsc#1134813).
• cdrom: Fix race condition in cdromsysctlregister (bsc#1051510).
• ceph: ensure dname stability in cephdentry_hash() (bsc#1134461).
• ceph: fix ci->iheadsnapc leak (bsc#1122776).
• ceph: fix use-after-free on symlink traversal (bsc#1134459).
• ceph: only use d_name directly when parent is locked (bsc#1134460).
• cgroup: fix parsing empty mount option string (bsc#1133094).
• cifs: Do not count -ENODATA as failure for query directory (bsc#1051510).
• cifs: do not dereference smbfiletarget before null check (bsc#1051510).
• cifs: Do not hide EINTR after sending network packets (bsc#1051510).
• cifs: Do not reconnect TCP session in add_credits() (bsc#1051510).
• cifs: Do not reset lease state to NONE on lease break (bsc#1051510).
• cifs: Fix adjustment of credits for MTU requests (bsc#1051510).
• cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510).
• cifs: Fix credits calculations for reads with errors (bsc#1051510).
• cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542).
• cifs: Fix possible hang during async MTU reads and writes (bsc#1051510).
• cifs: Fix potential OOB access of lock element array (bsc#1051510).
• cifs: Fix read after write for files with read caching (bsc#1051510).
• clk: fractional-divider: check parent rate only if flag is set (bsc#1051510).
• clk: rockchip: fix frac settings of GPLL clock for rk3328 (bsc#1051510).
• clk: rockchip: Fix video codec clocks on rk3288 (bsc#1051510).
• clk: rockchip: fix wrong clock definitions for rk3328 (bsc#1051510).
• clk: x86: Add system specific quirk to mark clocks as critical (bsc#1051510).
• cpupowerutils: bench - Fix cpu online check (bsc#1051510).
• cpu/speculation: Add 'mitigations=' cmdline option (bsc#1112178).
• crypto: arm/aes-neonbs - do not access already-freed walk.iv (bsc#1051510).
• crypto: caam - add missing put_device() call (bsc#1129770).
• crypto: ccm - fix incompatibility between 'ccm' and 'ccm_base' (bsc#1051510).
• crypto: ccp - Do not free pspmaster when PLATFORMINIT fails (bsc#1051510).
• crypto: chacha20poly1305 - set cra_name correctly (bsc#1051510).
• crypto: crct10dif-generic - fix use via cryptoshashdigest() (bsc#1051510).
• crypto: crypto4xx - properly set IV after de- and encrypt (bsc#1051510).
• crypto: fips - Grammar s/options/option/, s/to/the/ (bsc#1051510).
• crypto: gcm - fix incompatibility between 'gcm' and 'gcm_base' (bsc#1051510).
• crypto: pcbc - remove bogus memcpy()s with src == dest (bsc#1051510).
• crypto: sha256/arm - fix crash bug in Thumb2 build (bsc#1051510).
• crypto: sha512/arm - fix crash bug in Thumb2 build (bsc#1051510).
• crypto: skcipher - do not WARN on unprocessed data after slow walk step (bsc#1051510).
• crypto: sun4i-ss - Fix invalid calculation of hash end (bsc#1051510).
• crypto: vmx - fix copy-paste error in CTR mode (bsc#1051510).
• crypto: x86/crct10dif-pcl - fix use via cryptoshashdigest() (bsc#1051510).
• crypto: x86/poly1305 - fix overflow during partial reduction (bsc#1051510).
• cxgb4: Add capability to get/set SGE Doorbell Queue Timer Tick (bsc#1127371).
• cxgb4: Added missing break in ndoudptunnel_{add/del} (bsc#1127371).
• cxgb4: Add flag tcflowerinitialized (bsc#1127371).
• cxgb4: Add new T5 PCI device id 0x50ae (bsc#1127371).
• cxgb4: Add new T5 PCI device ids 0x50af and 0x50b0 (bsc#1127371).
• cxgb4: Add new T6 PCI device ids 0x608a (bsc#1127371).
• cxgb4: add per rx-queue counter for packet errors (bsc#1127371).
• cxgb4: Add support for FWETHTXPKTVM_WR (bsc#1127371).
• cxgb4: add support to display DCB info (bsc#1127371).
• cxgb4: Add support to read actual provisioned resources (bsc#1127371).
• cxgb4: collect ASIC LA dumps from ULP TX (bsc#1127371).
• cxgb4: collect hardware queue descriptors (bsc#1127371).
• cxgb4: collect number of free PSTRUCT page pointers (bsc#1127371).
• cxgb4: convert flower table to use rhashtable (bsc#1127371).
• cxgb4: cxgb4: use FWPORTACTIONL1CFG32 for 32 bit capability (bsc#1127371).
• cxgb4/cxgb4vf: Add support for SGE doorbell queue timer (bsc#1127371).
• cxgb4/cxgb4vf: Fix mac_hlist initialization and free (bsc#1127374).
• cxgb4/cxgb4vf: Link management changes (bsc#1127371).
• cxgb4/cxgb4vf: Program hash region for {t4/t4vf}changemac() (bsc#1127371).
• cxgb4: display number of rx and tx pages free (bsc#1127371).
• cxgb4: do not return DUPLEX_UNKNOWN when link is down (bsc#1127371).
• cxgb4: Export sgehostpage_size to ulds (bsc#1127371).
• cxgb4: fix the error path of cxgb4uldregister() (bsc#1127371).
• cxgb4: impose mandatory VLAN usage when non-zero TAG ID (bsc#1127371).
• cxgb4: Mask out interrupts that are not enabled (bsc#1127175).
• cxgb4: move Tx/Rx free pages collection to common code (bsc#1127371).
• cxgb4: remove redundant assignment to vlancmd.dropnovlanfm (bsc#1127371).
• cxgb4: Remove SGEHOSTPAGE_SIZE dependency on page size (bsc#1127371).
• cxgb4: remove the unneeded locks (bsc#1127371).
• cxgb4: specify IQTYPE in fwiqcmd (bsc#1127371).
• cxgb4: Support ethtool private flags (bsc#1127371).
• cxgb4: update supported DCB version (bsc#1127371).
• cxgb4: use new fw interface to get the VIN and smt index (bsc#1127371).
• cxgb4vf: Few more link management changes (bsc#1127374).
• cxgb4vf: fix memleak in mac_hlist initialization (bsc#1127374).
• cxgb4vf: Update port information in cxgb4vf_open() (bsc#1127374).
• device_cgroup: fix RCU imbalance in error case (bsc#1051510).
• Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc (bsc#1051510).
• dmaengine: axi-dmac: Do not check the number of frames for alignment (bsc#1051510).
• dmaengine: imx-dma: fix warning comparison of distinct pointer types (bsc#1051510).
• dmaengine: qcom_hidma: assign channel cookie correctly (bsc#1051510).
• dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid (bsc#1051510).
• dmaengine: tegra210-dma: free dma controller in remove() (bsc#1051510).
• dmaengine: tegra: avoid overflow of byte tracking (bsc#1051510).
• dm: disable DISCARD if the underlying storage no longer supports it (bsc#1114638).
• drivers: hv: vmbus: Offload the handling of channels to two workqueues (bsc#1130567).
• drivers: hv: vmbus: Reset the channel callback in vmbusonofferrescind() (bsc#1130567).
• drm: Auto-set allowfbmodifiers when given modifiers at plane init (bsc#1051510).
• drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs (bsc#1113722)
• drm/dp/mst: Configure nostopbit correctly for remote i2c xfers (bsc#1051510).
• drm/fb-helper: dpms_legacy(): Only set on connectors in use (bsc#1051510).
• drm/i915: Fix I915EXECRING_MASK (bsc#1051510).
• drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113722)
• drm/i915/gvt: Annotate iomem usage (bsc#1051510).
• drm/i915/gvt: do not deliver a workload if its creation fails (bsc#1051510).
• drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113722)
• drm/i915/gvt: Fix incorrect mask of mmio 0x22028 in gen8/9 mmio list (bnc#1113722)
• drm/i915/gvt: Fix MIFLUSHDW parsing with correct index check (bsc#1051510).
• drm/mediatek: Fix an error code in mtkhdmidtparsepdata() (bsc#1113722)
• drm/mediatek: fix possible object reference leak (bsc#1051510).
• drm/meson: add size and alignment requirements for dumb buffers (bnc#1113722)
• drm/meson: Fix invalid pointer in mesondrvunbind() (bsc#1051510).
• drm/meson: Uninstall IRQ handler (bsc#1051510).
• drm/nouveau: Stop using drmcrtcforce_disable (bsc#1051510).
• drm/nouveau/volt/gf117: fix speedo readout register (bsc#1051510).
• drm/rockchip: shutdown drm subsystem on shutdown (bsc#1051510).
• drm/rockchip: vop: reset scale mode when win is disabled (bsc#1113722)
• drm/sun4i: Add missing drmatomichelper_shutdown at driver unbind (bsc#1113722)
• drm/sun4i: Fix component unbinding and component master deletion (bsc#1113722)
• drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)
• drm/sun4i: Set device driver data at bind time for use in unbind (bsc#1113722)
• drm/sun4i: Unbind components before releasing DRM and memory (bsc#1113722)
• drm/ttm: Remove warning about inconsistent mapping information (bnc#1131488)
• drm/udl: add a release method and delay modeset teardown (bsc#1085536)
• drm/vc4: Fix memory leak during gpu reset. (bsc#1113722)
• dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit (networking-stable-190220).
• dt-bindings: net: Fix a typo in the phy-mode list for ethernet bindings (bsc#1129770).
• dwc2: gadget: Fix completed transfer size calculation in DDMA (bsc#1051510).
• e1000e: fix cyclic resets at link up with active tx (bsc#1051510).
• e1000e: Fix -Wformat-truncation warnings (bsc#1051510).
• ext2: Fix underflow in ext2maxsize() (bsc#1131174).
• ext4: add mask of ext4 flags to swap (bsc#1131170).
• ext4: add missing brelse() in addnewgdbmetabg() (bsc#1131176).
• ext4: brelse all indirect buffer in ext4indremove_space() (bsc#1131173).
• ext4: cleanup bh release code in ext4indremove_space() (bsc#1131851).
• ext4: cleanup pagecache before swap i_data (bsc#1131178).
• ext4: fix check of inode in swapinodeboot_loader (bsc#1131177).
• ext4: fix data corruption caused by unaligned direct AIO (bsc#1131172).
• ext4: fix EXT4IOCSWAP_BOOT (bsc#1131180).
• ext4: fix NULL pointer dereference while journal is aborted (bsc#1131171).
• ext4: update quota information while swapping boot loader inode (bsc#1131179).
• fbdev: fbmem: fix memory access if logo is bigger than the screen (bsc#1051510).
• fix cgroupdomount() handling of failure exits (bsc#1133095).
• Fix kabi after 'md: batch flush requests.' (bsc#1119680).
• Fix struct page kABI after adding atomic for ppc (bsc#1131326, bsc#1108937).
• fm10k: Fix a potential NULL pointer dereference (bsc#1051510).
• fs: avoid fdput() after failed fdget() in vfsdedupefile_range() (bsc#1132384, bsc#1132219).
• fs/nfs: Fix nfsparsedevname to not modify it's argument (git-fixes).
• futex: Cure exit race (bsc#1050549).
• futex: Ensure that futex address is aligned in handlefutexdeath() (bsc#1050549).
• futex: Handle early deadlock return correctly (bsc#1050549).
• ghes, EDAC: Fix ghes_edac registration (bsc#1133176).
• gpio: adnp: Fix testing wrong value in adnpgpiodirection_input (bsc#1051510).
• gpio: aspeed: fix a potential NULL pointer dereference (bsc#1051510).
• gpio: gpio-omap: fix level interrupt idling (bsc#1051510).
• gpio: of: Fix ofgpiochipadd() error path (bsc#1051510).
• gre6: use logecnerror module parameter in ip6tnlrcv() (git-fixes).
• hid: debug: fix race condition with between rdesc_show() and device removal (bsc#1051510).
• hid: i2c-hid: Ignore input report if there's no data present on Elan touchpanels (bsc#1133486).
• hid: input: add mapping for Assistant key (bsc#1051510).
• hid: intel-ish-hid: avoid binding wrong ishtpcldevice (bsc#1051510).
• hid: intel-ish: ipc: handle PIMR before ishwakeup also clear PISR busyclear bit (bsc#1051510).
• hid: logitech: check the return value of createsinglethreadworkqueue (bsc#1051510).
• hvnetvsc: Fix IP header checksum for coalesced packets (networking-stable-1903_07).
• hwmon: (f71805f) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (pc87427) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (smsc47b397) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (smsc47m1) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (vt1211) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwmon: (w83627hf) Use requestmuxedregion for Super-IO accesses (bsc#1051510).
• hwrng: virtio - Avoid repeated init of completion (bsc#1051510).
• i2c: Make i2cunregisterdevice() NULL-aware (bsc#1108193).
• ibmvnic: Enable GRO (bsc#1132227).
• ibmvnic: Fix completion structure initialization (bsc#1131659).
• ibmvnic: Fix netdev feature clobbering during a reset (bsc#1132227).
• iio: adc: at91: disable adc channel interrupt in timeout case (bsc#1051510).
• iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver (bsc#1051510).
• iio: adsigmadelta: select channel when reading register (bsc#1051510).
• iio: core: fix a possible circular locking dependency (bsc#1051510).
• iio: cros_ec: Fix the maths for gyro scale calculation (bsc#1051510).
• iio: dac: mcp4725: add missing powerdown bits in store eeprom (bsc#1051510).
• iio: Fix scan mask selection (bsc#1051510).
• iio/gyro/bmg160: Use millidegrees for temperature scale (bsc#1051510).
• iio: gyro: mpu3050: fix chip ID reading (bsc#1051510).
• Input: introduce KEY_ASSISTANT (bsc#1051510).
• Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ (bsc#1051510).
• Input: synaptics-rmi4 - write config register values to the right offset (bsc#1051510).
• intel_idle: add support for Jacobsville (jsc#SLE-5394).
• intel_th: msu: Fix single mode with IOMMU (bsc#1051510).
• intel_th: pci: Add Comet Lake support (bsc#1051510).
• io: accel: kxcjk1013: restore the range after resume (bsc#1051510).
• iommu/amd: Set exclusion range correctly (bsc#1130425).
• iommu/vt-d: Do not request page request irq under dmargloballock (bsc#1135006).
• iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU (bsc#1135007).
• iommu/vt-d: Set inteliommugfx_mapped correctly (bsc#1135008).
• ip6tunnel: fix ip6 tunnel lookup in collectmd mode (git-fixes).
• ipmi: Fix I2C client removal in the SSIF driver (bsc#1108193).
• ipmi:ssif: compare block number correctly for multi-part return messages (bsc#1051510).
• ipmi_ssif: Remove duplicate NULL check (bsc#1108193).
• ipv4: Return error for RTAVIA attribute (networking-stable-1903_07).
• ipv6: Fix dangling pointer when ipv6 fragment (git-fixes).
• ipv6: propagate genlmsgreply return code (networking-stable-1902_24).
• ipv6: Return error for RTAVIA attribute (networking-stable-1903_07).
• ipv6: sit: reset ip header pointer in ipip6_rcv (git-fixes).
• ipvlan: disallow userns capnetadmin to change global mode/flags (networking-stable-190315).
• ipvs: remove IPSNATMASK check to fix passive FTP (git-fixes).
• It's wrong to add len to sector_nr in raid10 reshape twice (git-fixes).
• iw_cxgb4: cq/qp mask depends on bar2 pages in a host page (bsc#1127371).
• iwiwifi: fix bad monitor buffer register addresses (bsc#1129770).
• iwlwifi: fix send hcmd timeout recovery flow (bsc#1129770).
• jbd2: clear dirty flag when revoking a buffer from an older transaction (bsc#1131167).
• jbd2: fix compile warning when using JBUFFER_TRACE (bsc#1131168).
• kABI: restore icmp_send (kabi).
• kabi/severities: add cxgb4 and cxgb4vf shared data to the whitelis (bsc#1127372)
• kABI workaround for removed usbinterface.pmusage_cnt field (bsc#1051510).
• kABI workaround for sndseqkernelclientenqueue() API changes (bsc#1051510).
• kbuild: modversions: Fix relative CRC byte order interpretation (bsc#1131290).
• kbuild: strip whitespace in cmdrecordmcount findstring (bsc#1065729).
• kcm: switch order of device registration to fix a crash (bnc#1130527).
• kernel/sysctl.c: add missing range check in doprocdointvecminmaxconv (bsc#1051510).
• kernel/sysctl.c: fix out-of-bounds access when setting file-max (bsc#1051510).
• kernfs: do not set dentry->d_fsdata (boo#1133115).
• KEYS: always initialize keyringindexkey::desc_len (bsc#1051510).
• KEYS: user: Align the payload buffer (bsc#1051510).
• KVM: Call kvmarchmemslots_updated() before updating memslots (bsc#1132563).
• KVM: Fix kABI for AMD SMAP Errata workaround (bsc#1133149).
• KVM: Fix UAF in nested posted interrupt processing (bsc#1134199).
• KVM: nVMX: Apply addr size mask to effective address for VMX instructions (bsc#1132561).
• KVM: nVMX: Clear reserved bits of #DB exit qualification (bsc#1134200).
• KVM: nVMX: Ignore limit checks on VMX instructions using flat segments (bsc#1132564).
• KVM: nVMX: restore host state in nestedvmxvmexit for VMFail (bsc#1134201).
• KVM: nVMX: Sign extend displacements of VMX instr's mem operands (bsc#1132562).
• KVM: PPC: Book3S HV: Fix race between kvmunmaphva_range and MMU mode switch (bsc#1061840).
• KVM: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation) (bsc#1133149).
• KVM: VMX: Compare only a single byte for VMCS' 'launched' in vCPU-run (bsc#1132555).
• KVM: VMX: Zero out all general purpose registers after VM-Exit (bsc#1134202).
• KVM: x86: Always use 32-bit SMRAM save state for 32-bit kernels (bsc#1134203).
• KVM: x86: Do not clear EFER during SMM transitions for 32-bit vCPU (bsc#1134204).
• KVM: x86: Emulate MSRIA32ARCH_CAPABILITIES on AMD hosts (bsc#1114279).
• KVM: x86/mmu: Detect MMIO generation wrap in any address space (bsc#1132570).
• KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux (bsc#1132571).
• kvm: x86: Report STIBP on GETSUPPORTEDCPUID (bsc#1111331).
• KVM: x86: svm: make sure NMI is injected after nmi_singlestep (bsc#1134205).
• leds: avoid races with workqueue (bsc#1051510).
• leds: pca9532: fix a potential NULL pointer dereference (bsc#1051510).
• lib: add crc64 calculation routines (bsc#1130972).
• libata: fix using DMA buffers on stack (bsc#1051510).
• lib: do not depend on linux headers being installed (bsc#1130972).
• lightnvm: if LUNs are already allocated fix return (bsc#1085535).
• linux/kernel.h: Use parentheses around argument in u64touser_ptr() (bsc#1051510).
• Linux v5.0-rc7: bcm2835 MMC issues (bsc#1070872).
• locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file (bsc#1111331).
• lpfc: validate command in lpfcsli4scmdtowqidx_distr() (bsc#1129138).
• mac80211: do not call driver waketxqueue op during reconfig (bsc#1051510).
• md: batch flush requests (bsc#1119680).
• md: Fix failed allocation of mdregisterthread (git-fixes).
• md/raid1: do not clear bitmap bits on interrupted recovery (git-fixes).
• md/raid5: fix 'out of memory' during raid cache recovery (git-fixes).
• media: cx18: update *pos correctly in cx18readpos() (bsc#1051510).
• media: cx23885: check allocation return (bsc#1051510).
• media: davinci-isif: avoid uninitialized variable use (bsc#1051510).
• media: ivtv: update *pos correctly in ivtvreadpos() (bsc#1051510).
• media: mt9m111: set initial frame size other than 0x0 (bsc#1051510).
• media: mtk-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
• media: mx2_emmaprp: Correct return type for mem2mem buffer helpers (bsc#1051510).
• media: ov2659: fix unbalanced mutex_lock/unlock (bsc#1051510).
• media: pvrusb2: Prevent a buffer overflow (bsc#1129770).
• media: s5p-g2d: Correct return type for mem2mem buffer helpers (bsc#1051510).
• media: s5p-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
• media: serialir: Fix use-after-free in serialirinitmodule (bsc#1051510).
• media: sh_veu: Correct return type for mem2mem buffer helpers (bsc#1051510).
• media: tw5864: Fix possible NULL pointer dereference in tw5864handleframe (bsc#1051510).
• media: vivid: use vfree() instead of kfree() for dev->bitmap_cap (bsc#1051510).
• media: wl128x: Fix an error code in fmdownloadfirmware() (bsc#1051510).
• media: wl128x: prevent two potential buffer overflows (bsc#1051510).
• mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S (bsc#1051510).
• missing barriers in some of unixsock ->addr and ->path accesses (networking-stable-1903_15).
• mmc: core: fix possible use after free of host (bsc#1051510).
• mmc: davinci: remove extraneous __init annotation (bsc#1051510).
• mmc: sdhci: Fix data command CRC error handling (bsc#1051510).
• mmc: sdhci: Handle auto-command errors (bsc#1051510).
• mmc: sdhci: Rename SDHCIACMD12ERR and SDHCIINTACMD12ERR (bsc#1051510).
• mmc: tmiommccore: do not claim spurious interrupts (bsc#1051510).
• mm/debug.c: fix _dumppage when mapping->host is not set (bsc#1131934).
• mm/hugememory.c: fix modifying of page protection by insertpfn_pmd() (bsc#1126740).
• mm/pageisolation.c: fix a wrong flag in setmigratetype_isolate() (bsc#1131935).
• mm/vmalloc: fix size check for remapvmallocrange_partial() (bsc#1133825).
• mpls: Return error for RTAGATEWAY attribute (networking-stable-1903_07).
• mt7601u: bump supported EEPROM version (bsc#1051510).
• mtd: docg3: fix a possible memory leak of mtd->name (bsc#1051510).
• mtd: docg3: Fix passing zero to 'PTRERR' warning in docprobe_device (bsc#1051510).
• mtd: nand: omap: Fix comment in platform data using wrong Kconfig symbol (bsc#1051510).
• mtd: part: fix incorrect format specifier for an unsigned long long (bsc#1051510).
• mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write (bsc#1129770).
• mwifiex: do not advertise IBSS features without FW support (bsc#1129770).
• mwifiex: Fix mem leak in mwifiextmcmd (bsc#1051510).
• mwifiex: prevent an array overflow (bsc#1051510).
• mwl8k: Fix rate_idx underflow (bsc#1051510).
• net: Add header for usage of fls64() (networking-stable-190220).
• net: Add _icmpsend helper (networking-stable-190307).
• net: avoid false positives in untrusted gso validation (git-fixes).
• net: avoid skbwarnbadoffload on ISERR (git-fixes).
• net: avoid use IPCB in cipsov4error (networking-stable-190307).
• net: bridge: add vlan_tunnel to bridge port policies (git-fixes).
• net: bridge: fix per-port af_packet sockets (git-fixes).
• net: bridge: multicast: use rcu to access port list from brmulticaststart_querier (git-fixes).
• net: datagram: fix unbounded loop in _skbtryrecvdatagram() (git-fixes).
• net: Do not allocate page fragments that are not skb aligned (networking-stable-190220).
• net: dsa: legacy: do not unmask port bitmaps (git-fixes).
• net: dsa: mv88e6xxx: Fix u64 statistics (networking-stable-190307).
• netfilter: bridge: ebt_among: add missing match size checks (git-fixes).
• netfilter: bridge: ebt_among: add more missing match size checks (git-fixes).
• netfilter: bridge: set skb transportheader before entering NFINETPREROUTING (git-fixes).
• netfilter: drop template ct when conntrack is skipped (git-fixes).
• netfilter: ip6t_MASQUERADE: add dependency on conntrack module (git-fixes).
• netfilter: ipset: Missing nfnllock()/nfnlunlock() is added to ipsetnet_exit() (git-fixes).
• netfilter: ipv6: fix use-after-free Write in nfnatipv6manippkt (git-fixes).
• netfilter: nfsocket: Fix out of bounds access in nfsklookupslow_v{4,6} (git-fixes).
• netfilter: xtables: avoid out-of-bounds reads in xtrequestfind{match|target} (git-fixes).
• netfilter: xtables: fix int overflow in xtalloctableinfo() (git-fixes).
• net: Fix foreachnetdevfeature on Big endian (networking-stable-1902_20).
• net: fix IPv6 prefix route residue (networking-stable-190220).
• net: Fix untag for vlan packets without ethernet header (git-fixes).
• net: Fix vlan untag for bridge and vlandev with reorderhdr off (git-fixes).
• net/hsr: Check skbputpadto() return value (git-fixes).
• net: hsr: fix memory leak in hsrdevfinalize() (networking-stable-190315).
• net/hsr: fix possible crash in addtimer() (networking-stable-1903_15).
• net/ibmvnic: Update carrier state after link state change (bsc#1135100).
• net/ibmvnic: Update MAC address settings after adapter reset (bsc#1134760).
• netlabel: fix out-of-bounds memory accesses (networking-stable-190307).
• netlink: fix nlaput{u8,u16,u32} for KASAN (git-fixes).
• net/mlx5e: Do not overwrite pedit action when multiple pedit used (networking-stable-190224).
• net: nfc: Fix NULL dereference on nfcllcpbuildtlv fails (networking-stable-1903_07).
• net/packet: fix 4gb buffer limit due to overflow check (networking-stable-190224).
• net/packet: Set _GFPNOWARN upon allocation in allocpgvec (git-fixes).
• netsched: acquire RTNL in tcactionnetexit() (git-fixes).
• netsched: fix two more memory leaks in clstcindex (networking-stable-190224).
• net: Set rtmtable to RTTABLECOMPAT for ipv6 for tables > 255 (networking-stable-1903_15).
• net: sit: fix memory leak in sitinitnet() (networking-stable-190307).
• net: sit: fix UBSAN Undefined behaviour in check6rd (networking-stable-1903_15).
• net: socket: set sock->sk to NULL after calling protoops::release() (networking-stable-1903_07).
• net: validate untrusted gso packets without csum offload (networking-stable-190220).
• net/x25: fix a race in x25bind() (networking-stable-1903_15).
• net/x25: fix use-after-free in x25deviceevent() (networking-stable-190315).
• net/x25: reset state in x25connect() (networking-stable-1903_15).
• net: xfrm: use preempt-safe thiscpuread() in ipcompalloctfms() (git-fixes).
• NFC: nci: Add some bounds checking in ncihcicmd_received() (bsc#1051510).
• NFS: Add missing encode / decode sequence_maxsz to v4.2 operations (git-fixes).
• nfsd4: catch some false session retries (git-fixes).
• nfsd4: fix cached replies to solo SEQUENCE compounds (git-fixes).
• NFS: Do not recoalesce on error in nfspageiocomplete_mirror() (git-fixes).
• NFS: Do not use pagefilemapping after removing the page (git-fixes).
• NFS: Fix an I/O request leakage in nfsdorecoalesce (git-fixes).
• NFS: Fix a soft lockup in the delegation recovery code (git-fixes).
• NFS: Fix a typo in nfsinittimeout_values() (git-fixes).
• NFS: Fix dentry revalidation on NFSv4 lookup (bsc#1132618).
• NFS: Fix I/O request leakages (git-fixes).
• NFS: fix mount/umount race in nlmclnt (git-fixes).
• NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount (git-fixes).
• NFSv4.1 do not free interrupted slot on open (git-fixes).
• NFSv4.1: Reinitialise sequence results before retransmitting a request (git-fixes).
• NFSv4/flexfiles: Fix invalid deref in FFLAYOUTDEVID_NODE() (git-fixes).
• nvme: add proper discard setup for the multipath device (bsc#1114638).
• nvme: fix the dangerous reference of namespaces list (bsc#1131673).
• nvme: make sure ns head inherits underlying device limits (bsc#1131673).
• nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1129273).
• nvme-multipath: split bios with the nshead bioset before submitting (bsc#1103259, bsc#1131673).
• nvme: only reconfigure discard if necessary (bsc#1114638).
• ocfs2: fix inode bh swapping mixup in ocfs2reflinkinodes_lock (bsc#1131169).
• ocfs2: turn on OCFS2FSSTATS setting(bsc#1134393) We need to turn on OCFS2FSSTATS kernel configuration setting, to fix bsc#1134393.
• omapfb: add missing ofnodeput after ofdeviceis_available (bsc#1051510).
• openvswitch: add seqadj extension when NAT is used (bsc#1051510).
• openvswitch: fix flow actions reallocation (bsc#1051510).
• packet: validate msg_namelen in send directly (git-fixes).
• PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller (bsc#1051510).
• PCI: designware-ep: Read-only registers need DBIROWR_EN to be writable (bsc#1051510).
• PCI: pciehp: Convert to threaded IRQ (bsc#1133005).
• PCI: pciehp: Ignore Link State Changes after powering off a slot (bsc#1133005).
• phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode (bsc#1051510).
• phy: sun4i-usb: Support setmode to USBHOST for non-OTG PHYs (bsc#1051510).
• platform/x86: alienware-wmi: printing the wrong error code (bsc#1051510).
• platform/x86: dell-rbtn: Add missing #include (bsc#1051510).
• platform/x86: intelpmcipc: adding error handling (bsc#1051510).
• platform/x86: intelpunitipc: Revert 'Fix resource ioremap warning' (bsc#1051510).
• platform/x86: pmcatom: Drop _initconst on dmi table (bsc#1051510).
• platform/x86: sony-laptop: Fix unintentional fall-through (bsc#1051510).
• powerpc/64: Call setupbarriernospec() from setup_arch() (bsc#1131107).
• powerpc/64: Disable the speculation barrier from the command line (bsc#1131107).
• powerpc64/ftrace: Include ftrace.h needed for enable/disable calls (bsc#1088804, git-fixes).
• powerpc/64: Make stf barrier PPCBOOK3S64 specific (bsc#1131107).
• powerpc/64s: Add new security feature flags for count cache flush (bsc#1131107).
• powerpc/64s: Add support for software count cache flush (bsc#1131107).
• powerpc/64s: Fix logic when handling unknown CPU features (bsc#1055117).
• powerpc/64s: Fix page table fragment refcount race vs speculative references (bsc#1131326, bsc#1108937).
• powerpc/asm: Add a patch_site macro & helpers for patching instructions (bsc#1131107).
• powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer (bsc#1065729).
• powerpc: consolidate -mno-sched-epilog into FTRACE flags (bsc#1065729).
• powerpc: Fix 32-bit KVM-PR lockup and host crash with MacOS guest (bsc#1061840).
• powerpc/fsl: Fix spectre_v2 mitigations reporting (bsc#1131107).
• powerpc/hugetlb: Handle mmapminaddr correctly in getunmappedarea callback (bsc#1131900).
• powerpc/kvm: Save and restore host AMR/IAMR/UAMOR (bsc#1061840).
• powerpc/mm: Add missing tracepoint for tlbie (bsc#1055117, git-fixes).
• powerpc/mm: Check secondary hash page table (bsc#1065729).
• powerpc/mm: Fix page table dump to work on Radix (bsc#1055186, git-fixes).
• powerpc/mm/hash: Handle mmapminaddr correctly in getunmappedarea topdown search (bsc#1131900).
• powerpc/mm/radix: Display if mappings are exec or not (bsc#1055186, git-fixes).
• powerpc/mm/radix: Prettify mapped memory range print out (bsc#1055186, git-fixes).
• powerpc/numa: document topologyupdatesenabled, disable by default (bsc#1133584).
• powerpc/numa: improve control of topology updates (bsc#1133584).
• powerpc/perf: Fix unitsel/cachesel checks (bsc#1053043).
• powerpc/perf: Remove l2 bus events from HW cache event array (bsc#1053043).
• powerpc/powernv/cpuidle: Init all present cpus for deep states (bsc#1055121).
• powerpc/powernv: Do not reprogram SLW image on every KVM guest entry/exit (bsc#1061840).
• powerpc/powernv/ioda2: Remove redundant free of TCE pages (bsc#1061840).
• powerpc/powernv/ioda: Allocate indirect TCE levels of cached userspace addresses on demand (bsc#1061840).
• powerpc/powernv/ioda: Fix locked_vm counting for memory used by IOMMU tables (bsc#1061840).
• powerpc/powernv: Make opal log only readable by root (bsc#1065729).
• powerpc/powernv: Query firmware for count cache flush settings (bsc#1131107).
• powerpc/powernv: Remove never used pnvpower9force_smt4 (bsc#1061840).
• powerpc/pseries: Query hypervisor for count cache flush settings (bsc#1131107).
• powerpc/security: Fix spectre_v2 reporting (bsc#1131107).
• powerpc/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
• powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64 (bsc#1131587).
• powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038 (bsc#1131587).
• proc/kcore: do not bounds check against address 0 (bsc#1051510).
• proc: revalidate kernel thread inodes to root:root (bsc#1051510).
• proc/sysctl: fix return error for procdoulongvecminmax() (bsc#1051510).
• pwm: Fix deadlock warning when removing PWM device (bsc#1051510).
• pwm: meson: Consider 128 a valid pre-divider (bsc#1051510).
• pwm: meson: Do not disable PWM when setting duty repeatedly (bsc#1051510).
• pwm: meson: Use the spin-lock only to protect register modifications (bsc#1051510).
• pwm: tiehrpwm: Update shadow register for disabling PWMs (bsc#1051510).
• qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128979).
• qla2xxx: always allocate qlatgtwq (bsc#1131451).
• qmi_wwan: add Olicard 600 (bsc#1051510).
• qmiwwan: Add support for Quectel EG12/EM12 (networking-stable-1903_07).
• RAS/CEC: Check the correct variable in the debugfs error handling (bsc#1085535).
• ravb: Decrease TxFIFO depth of Q3 and Q2 to one (networking-stable-190315).
• rdma/cxgb4: Add support for 64Byte cqes (bsc#1127371).
• rdma/cxgb4: Add support for kernel mode SRQ's (bsc#1127371).
• rdma/cxgb4: Add support for srq functions & structs (bsc#1127371).
• rdma/cxgb4: fix some info leaks (bsc#1127371).
• RDMA/cxgb4: Make c4iwpollcq_one() easier to analyze (bsc#1127371).
• rdma/cxgb4: Remove a set-but-not-used variable (bsc#1127371).
• RDMA/iwcxgb4: Drop _GFP_NOFAIL (bsc#1127371).
• rds: fix refcount bug in rdssockaddref (git-fixes).
• rds: tcp: atomically purge entries from rdstcpconn_list during netns delete (git-fixes).
• Re-export snd_cards for kABI compatibility (bsc#1051510).
• regulator: tps65086: Fix tps65086ldoa1ranges for selector 0xB (bsc#1051510).
• Revert 'ALSA: seq: Protect in-kernel ioctl calls with mutex' (bsc#1051510).
• Revert 'block: unexport DISKEVENTMEDIA_CHANGE for legacy/fringe drivers' (bsc#1110946, bsc#1119843).
• Revert 'drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)'
• Revert 'ide: unexport DISKEVENTMEDIA_CHANGE for ide-gd and ide-cd' (bsc#1110946).
• Revert 'tty: pty: Fix race condition between releaseonetty and pty_write' (bsc#1051510).
• ring-buffer: Check if memory is available before allocation (bsc#1132531).
• route: set the deleted fnhe fnhedaddr to 0 in ipdelfnhe to fix a race (networking-stable-1903_15).
• rt2x00: do not increment sequence number while re-transmitting (bsc#1051510).
• rtlwifi: rtl8723ae: Fix missing break in switch statement (bsc#1051510).
• rxrpc: Do not release call mutex on error pointer (git-fixes).
• rxrpc: Do not treat call aborts as conn aborts (git-fixes).
• rxrpc: Fix client call queueing, waiting for channel (networking-stable-190315).
• rxrpc: Fix Tx ring annotation after initial Tx failure (git-fixes).
• s390/dasd: fix panic for failed online processing (bsc#1132589).
• s390/pkey: move pckmo subfunction available checks away from module init (bsc#1128544).
• s390/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
• sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() (bsc#1051510).
• sc16is7xx: move label 'err_spi' to correct section (bsc#1051510).
• sc16is7xx: put errspi and erri2c into correct #ifdef (bsc#1051510).
• scripts: override locale from environment when running recordmcount.pl (bsc#1134354).
• scsi: libsas: allocate sense buffer for bsg queue (bsc#1131467).
• scsi: qla2xxx: Add new FC-NVMe enable BIT to enable FC-NVMe feature (bsc#1130579).
• scsi: qla2xxx: Fix panic in qladfstgtcountersshow (bsc#1132044).
• sctp: call gsoresetchecksum when computing checksum in sctpgsosegment (networking-stable-190224).
• sctp: only update outstandingbytes for transmitted queue when doing prsctpprune (git-fixes).
• sctp: set fragpoint in sctpsetsockopt_maxseg correctly` (git-fixes).
• selinux: use kernel linux/socket.h for genheaders and mdp (bsc#1134810).
• serial: 8250_pxa: honor the port number from devicetree (bsc#1051510).
• serial: ar933x_uart: Fix build failure with disabled console (bsc#1051510).
• serial: max310x: Fix to avoid potential NULL pointer dereference (bsc#1051510).
• serial: sh-sci: Fix setting SCSCR_TIE while transferring data (bsc#1051510).
• serial: uartps: console_setup() can't be placed to init section (bsc#1051510).
• sit: check if IPv6 enabled before calling ip6errgenicmpv6unreach() (networking-stable-190224).
• SoC: imx-sgtl5000: add missing put_device() (bsc#1051510).
• soc: qcom: gsbi: Fix error handling in gsbi_probe() (bsc#1051510).
• soc/tegra: fuse: Fix illegal free of IO base address (bsc#1051510).
• soc/tegra: pmc: Drop locking from tegrapowergateis_powered() (bsc#1051510).
• spi: a3700: Clear DATA_OUT when performing a read (bsc#1051510).
• spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios (bsc#1051510).
• spi: bcm2835aux: setup gpio-cs to output and correct level during setup (bsc#1051510).
• spi: bcm2835aux: warn in dmesg that native cs is not really supported (bsc#1051510).
• spi: rspi: Fix sequencer reset during initialization (bsc#1051510).
• ssb: Fix possible NULL pointer dereference in ssbhostpcmcia_exit (bsc#1051510).
• staging: comedi: niusb6501: Fix possible double-free of ->usbrx_buf (bsc#1051510).
• staging: comedi: ni_usb6501: Fix use of uninitialized mutex (bsc#1051510).
• staging: comedi: vmk80xx: Fix possible double-free of ->usbrxbuf (bsc#1051510).
• staging: comedi: vmk80xx: Fix use of uninitialized semaphore (bsc#1051510).
• staging: iio: ad7192: Fix ad7193 channel address (bsc#1051510).
• staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc (bsc#1051510).
• staging: rtl8712: uninitialized memory in readbbreghdl() (bsc#1051510).
• staging: vt6655: Fix interrupt race condition on device start up (bsc#1051510).
• staging: vt6655: Remove vif check from vnt_interrupt (bsc#1051510).
• stm class: Fix an endless loop in channel allocation (bsc#1051510).
• stm class: Fix channel free in stm output free path (bsc#1051510).
• stm class: Prevent division by zero (bsc#1051510).
• sunrpc/cache: handle missing listeners better (bsc#1126221).
• sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (git-fixes).
• supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
• supported.conf: Add vxlan to kernel-default-base (bsc#1132083).
• supported.conf: dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).
• svm/avic: Fix invalidate logical APIC id entry (bsc#1132726).
• svm: Fix AVIC DFR and LDR handling (bsc#1132558).
• sysctl: handle overflow for file-max (bsc#1051510).
• tcp: fix TCPREPAIRQUEUE bound checking (git-fixes).
• tcp: tcpv4err() should be more careful (networking-stable-190220).
• thermal/int340x_thermal: Add additional UUIDs (bsc#1051510).
• thermal/int340x_thermal: fix mode setting (bsc#1051510).
• tipc: fix race condition causing hung sendto (networking-stable-190307).
• tpm: Fix the type of the return value in calctpm2event_size() (bsc#1082555).
• tracing: Fix a memory leak by early error exit in tracepidwrite() (bsc#1133702).
• tracing: Fix buffer_ref pipe ops (bsc#1133698).
• tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into account (bsc#1132527).
• tty: atmel_serial: fix a potential NULL pointer dereference (bsc#1051510).
• tty: increase the default flip buffer limit to 2*640K (bsc#1051510).
• tty: pty: Fix race condition between releaseonetty and pty_write (bsc#1051510).
• tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 (bsc#1051510).
• tun: fix blocking read (networking-stable-190307).
• tun: remove unnecessary memory barrier (networking-stable-190307).
• UAS: fix alignment of scatter/gather segments (bsc#1129770).
• udf: Fix crash on IO error during truncate (bsc#1131175).
• usb: cdc-acm: fix unthrottle races (bsc#1051510).
• usb: chipidea: Grab the (legacy) USB PHY by phandle first (bsc#1051510).
• usb: core: Fix bug caused by duplicate interface PM usage counter (bsc#1051510).
• usb: core: Fix unterminated string returned by usb_string() (bsc#1051510).
• usb: dwc3: Fix default lpmnyetthreshold value (bsc#1051510).
• usb: f_fs: Avoid crash due to out-of-scope stack ptr access (bsc#1051510).
• usb: gadget: net2272: Fix net2272_dequeue() (bsc#1051510).
• usb: gadget: net2280: Fix net2280_dequeue() (bsc#1051510).
• usb: gadget: net2280: Fix overrun of OUT messages (bsc#1051510).
• usb: host: xhci-rcar: Add XHCITRUSTTX_LENGTH quirk (bsc#1051510).
• usb: mtu3: fix EXTCON dependency (bsc#1051510).
• usb: serial: cp210x: add new device id (bsc#1051510).
• usb: serial: cp210x: fix GPIO in autosuspend (bsc#1120902).
• usb: serial: f81232: fix interrupt worker not stop (bsc#1051510).
• usb: serial: fix unthrottle races (bsc#1051510).
• usb: serial: ftdi_sio: add additional NovaTech products (bsc#1051510).
• usb: serial: option: add Olicard 600 (bsc#1051510).
• usb: serial: option: add support for Quectel EM12 (bsc#1051510).
• usb-storage: Set virtboundarymask to avoid SG overflows (bsc#1051510).
• usb: u132-hcd: fix resource leak (bsc#1051510).
• usb: usb251xb: fix to avoid potential NULL pointer dereference (bsc#1051510).
• usb: usbip: fix isoc packet num validation in get_pipe (bsc#1051510).
• usb: w1 ds2490: Fix bug caused by improper use of altsetting array (bsc#1051510).
• usb: yurex: Fix protection fault after device removal (bsc#1051510).
• vfio/mdev: Avoid release parent reference during error path (bsc#1051510).
• vfio/mdev: Fix aborting mdev child device removal if one fails (bsc#1051510).
• vfiopci: Enable memory accesses before calling pcimap_rom (bsc#1051510).
• vfio/pci: use correct format characters (bsc#1051510).
• vfs: allow dedupe of user owned read-only files (bsc#1133778, bsc#1132219).
• vfs: avoid problematic remapping requests into partial EOF block (bsc#1133850, bsc#1132219).
• vfs: dedupe: extract helper for a single dedup (bsc#1133769, bsc#1132219).
• vfs: dedupe should return EPERM if permission is not granted (bsc#1133779, bsc#1132219).
• vfs: exit early from zero length remap operations (bsc#1132411, bsc#1132219).
• vfs: export vfsdedupefilerangeone() to modules (bsc#1133772, bsc#1132219).
• vfs: limit size of dedupe (bsc#1132397, bsc#1132219).
• vfs: rename cloneverifyarea to remapverifyarea (bsc#1133852, bsc#1132219).
• vfs: skip zero-length dedupe requests (bsc#1133851, bsc#1132219).
• vfs: swap names of {do,vfs}clonefile_range() (bsc#1133774, bsc#1132219).
• vfs: vfsclonefileprepinodes should return EINVAL for a clone from beyond EOF (bsc#1133780, bsc#1132219).
• vhost/vsock: fix reset orphans race with close timeout (bsc#1051510).
• video: fbdev: Set pixclock = 0 in goldfishfb (bsc#1051510).
• virtio-blk: limit number of hw queues by nrcpuids (bsc#1051510).
• virtio: Honour 'mayreducenum' in vringcreatevirtqueue (bsc#1051510).
• virtiopci: fix a NULL pointer reference in vpdel_vqs (bsc#1051510).
• vsock/virtio: fix kernel panic after device hot-unplug (bsc#1051510).
• vsock/virtio: fix kernel panic from virtiotransportresetnosock (bsc#1051510).
• vsock/virtio: reset connected sockets on device removal (bsc#1051510).
• vxlan: test dev->flags & IFFUP before calling netifrx() (networking-stable-190220).
• wil6210: check null pointer in wilcfg80211mergeextra_ies (bsc#1051510).
• wlcore: Fix memory leak in case wl12xxfetchfirmware failure (bsc#1051510).
• x86/cpu: Sanitize FAM6_ATOM naming (bsc#1111331).
• x86/kvm: Expose X86FEATUREMD_CLEAR to guests (bsc#1111331).
• x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init (bsc#1132572).
• x86/kvm/vmx: Add MDS protection when L1D Flush is not active (bsc#1111331).
• x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types (bsc#1128415).
• x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units (bsc#1128415).
• x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and PCIE SMCA bank types (bsc#1128415).
• x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type (bsc#1128415).
• x86/mce/AMD: Pass the bank number to smcagetbank_type() (bsc#1128415).
• x86/MCE: Fix kABI for new AMD bank names (bsc#1128415).
• x86/mce: Handle varying MCA bank counts (bsc#1128415).
• x86/msr-index: Cleanup bit defines (bsc#1111331).
• x86/PCI: Fixup RTIT_BAR of Intel Denverton Trace Hub (bsc#1120318).
• x86/speculation: Consolidate CPU whitelists (bsc#1111331).
• x86/speculation/mds: Add basic bug infrastructure for MDS (bsc#1111331).
• x86/speculation/mds: Add BUGMSBDSONLY (bsc#1111331).
• x86/speculation/mds: Add mdsclearcpu_buffers() (bsc#1111331).
• x86/speculation/mds: Add mds=full,nosmt cmdline option (bsc#1111331).
• x86/speculation/mds: Add mitigation control for MDS (bsc#1111331).
• x86/speculation/mds: Add mitigation mode VMWERV (bsc#1111331).
• x86/speculation/mds: Add 'mitigations=' support for MDS (bsc#1111331).
• x86/speculation/mds: Add SMT warning message (bsc#1111331).
• x86/speculation/mds: Add sysfs reporting for MDS (bsc#1111331).
• x86/speculation/mds: Clear CPU buffers on exit to user (bsc#1111331).
• x86/speculation/mds: Conditionally clear CPU buffers on idle entry (bsc#1111331).
• x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (bsc#1111331).
• x86/speculation: Move archsmtupdate() call to after mitigation decisions (bsc#1111331).
• x86/speculation: Prevent deadlock on ssb_state::lock (bsc#1114279).
• x86/speculation: Simplify the CPU bug detection logic (bsc#1111331).
• x86/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
• x86/tsc: Force inlining of cyc2ns bits (bsc#1052904).
• xen-netback: do not populate the hash cache on XenBus disconnect (networking-stable-190307).
• xen-netback: fix occasional leak of grant ref mappings under memory pressure (networking-stable-190307).
• xen: Prevent buffer overflow in privcmd ioctl (bsc#1065600).
• xfrm: do not call rcureadunlock when afinfo is NULL in xfrmgettos (git-fixes).
• xfrm: Fix ESN sequence number handling for IPsec GSO packets (git-fixes).
• xfrm: fix rcureadunlock usage in xfrmlocalerror (git-fixes).
• xfrm: Fix stack-out-of-bounds read on socket policy lookup (git-fixes).
• xfrm: fix xfrmdomigrate() with AEAD e.g(AES-GCM) (git-fixes).
• xfrm: Return error on unknown encaptype in initstate (git-fixes).
• xfs: add the ability to join a held buffer to a defer_ops (bsc#1133674).
• xfs: allow xfslocktwo_inodes to take different EXCL/SHARED modes (bsc#1132370, bsc#1132219).
• xfs: call xfsqmdqattach before performing reflink operations (bsc#1132368, bsc#1132219).
• xfs: cap the length of deduplication requests (bsc#1132373, bsc#1132219).
• xfs: clean up xfsreflinkremap_blocks call site (bsc#1132413, bsc#1132219).
• xfs: detect and fix bad summary counts at mount (bsc#1114427).
• xfs: fix data corruption w/ unaligned dedupe ranges (bsc#1132405, bsc#1132219).
• xfs: fix data corruption w/ unaligned reflink ranges (bsc#1132407, bsc#1132219).
• xfs: fix pagecache truncation prior to reflink (bsc#1132412, bsc#1132219).
• xfs: fix reporting supported extra file attributes for statx() (bsc#1133529).
• xfs: flush removing page cache in xfsreflinkremap_prep (bsc#1132414, bsc#1132219).
• xfs: hold xfs_buf locked between shortform->leaf conversion and the addition of an attribute (bsc#1133675).
• xfs: kill meaningless variable 'zero' (bsc#1106011).
• xfs: only grab shared inode locks for source file during reflink (bsc#1132372, bsc#1132219).
• xfs: prepare xfsbreaklayouts() for another layout type (bsc#1106011).
• xfs: prepare xfsbreaklayouts() to be called with XFSMMAPLOCKEXCL (bsc#1106011).
• xfs: refactor clonerange preparation into a separate helper (bsc#1132402, bsc#1132219).
• xfs: refactor xfstransroll (bsc#1133667).
• xfs: reflink find shared should take a transaction (bsc#1132226, bsc#1132219).
• xfs: reflink should break pnfs leases before sharing blocks (bsc#1132369, bsc#1132219).
• xfs: remove dest file's post-eof preallocations before reflinking (bsc#1132365, bsc#1132219).
• xfs: remove the ip argument to xfsdeferfinish (bsc#1133672).
• xfs: remove xfszerorange (bsc#1106011).
• xfs: rename xfsdeferjoin to xfsdeferijoin (bsc#1133668).
• xfs: update ctime and remove suid before cloning files (bsc#1132404, bsc#1132219).
• xfs: zero posteof blocks when cloning above eof (bsc#1132403, bsc#1132219).
• xhci: Do not let USB3 ports stuck in polling state prevent suspend (bsc#1051510).
• xhci: Fix port resume done detection for SS ports with LPM enabled (bsc#1051510).