Security update for the Linux Kernel

Announcement ID: SUSE-SU-2020:1146-1
Rating: important
References:
Cross-References:
CVSS scores:
  • CVE-2019-19770 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
  • CVE-2019-19770 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
  • CVE-2019-3701 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • CVE-2019-3701 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
  • CVE-2019-9458 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2019-9458 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2020-10942 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2020-10942 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
  • CVE-2020-11494 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
  • CVE-2020-11494 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
  • CVE-2020-11669 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2020-11669 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2020-8834 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
  • CVE-2020-8834 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Affected Products:
  • Basesystem Module 15-SP1
  • Development Tools Module 15-SP1
  • Legacy Module 15-SP1
  • SUSE Linux Enterprise Desktop 15 SP1
  • SUSE Linux Enterprise High Availability Extension 15 SP1
  • SUSE Linux Enterprise High Performance Computing 15 SP1
  • SUSE Linux Enterprise Live Patching 15-SP1
  • SUSE Linux Enterprise Real Time 15 SP1
  • SUSE Linux Enterprise Server 15 SP1
  • SUSE Linux Enterprise Server 15 SP1 Business Critical Linux 15-SP1
  • SUSE Linux Enterprise Server for SAP Applications 15 SP1
  • SUSE Linux Enterprise Workstation Extension 15 SP1
  • SUSE Manager Proxy 4.0
  • SUSE Manager Retail Branch Server 4.0
  • SUSE Manager Server 4.0

An update that solves seven vulnerabilities and has 77 security fixes can now be installed.

Description:

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
  • CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
  • CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
  • CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
  • CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
  • CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
  • CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).

The following non-security bugs were fixed:

  • ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
  • ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).
  • ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
  • ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
  • ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
  • ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
  • ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
  • ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
  • ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
  • ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
  • ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
  • ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
  • ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
  • ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
  • ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
  • ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
  • ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
  • ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
  • ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
  • ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
  • ALSA: info: remove redundant assignment to variable c (bsc#1051510).
  • ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
  • ALSA: line6: Fix endless MIDI read loop (git-fixes).
  • ALSA: pcm: Fix superfluous snprintf() usage (bsc#1051510).
  • ALSA: pcm.h: add for_each_pcm_streams() (bsc#1051510).
  • ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
  • ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
  • ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
  • ALSA: pcm: oss: Unlock mutex temporarily for sleeping at read/write (bsc#1051510).
  • ALSA: pcm: Use a macro for parameter masks to reduce the needed cast (bsc#1051510).
  • ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
  • ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
  • ALSA: usb-audio: Add delayed_register option (bsc#1051510).
  • ALSA: usb-audio: Add support for MOTU MicroBook IIc (bsc#1051510).
  • ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
  • ALSA: usb-audio: Do not create a mixer element with bogus volume range (bsc#1051510).
  • ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor (bsc#1051510).
  • ALSA: usb-audio: Fix mixer controls' USB interface for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
  • ALSA: usb-audio: Inform devices that need delayed registration (bsc#1051510).
  • ALSA: usb-audio: Parse source ID of UAC2 effect unit (bsc#1051510).
  • ALSA: usb-audio: Rewrite registration quirk handling (bsc#1051510).
  • ALSA: usb-midi: Replace zero-length array with flexible-array member (bsc#1051510).
  • ALSA: usx2y: use for_each_pcm_streams() macro (bsc#1051510).
  • ALSA: via82xx: Fix endianness annotations (bsc#1051510).
  • apei/ghes: Do not delay GHES polling (bsc#1166982).
  • ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map() (bsc#1051510).
  • ASoC: Intel: mrfld: fix incorrect check on p->sink (bsc#1051510).
  • ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).
  • ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).
  • ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).
  • ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).
  • batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).
  • batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).
  • batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).
  • binfmt_elf: Do not move brk for INTERP-less ET_EXEC (bsc#1169013).
  • binfmt_elf: move brk out of mmap when doing direct loader exec (bsc#1169013).
  • blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).
  • block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).
  • block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).
  • Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).
  • bnxt_en: Support all variants of the 5750X chip family (bsc#1167216).
  • bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).
  • bpf: Explicitly memset the bpf_attr structure (bsc#1083647).
  • brcmfmac: abort and release host after error (bsc#1111666).
  • btrfs: Account for trans_block_rsv in may_commit_transaction (bsc#1165949).
  • btrfs: add a flush step for delayed iputs (bsc#1165949).
  • btrfs: add assertions for releasing trans handle reservations (bsc#1165949).
  • btrfs: add btrfs_delete_ref_head helper (bsc#1165949).
  • btrfs: add enospc debug messages for ticket failure (bsc#1165949).
  • btrfs: Add enospc_debug printing in metadata_reserve_bytes (bsc#1165949).
  • btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).
  • btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).
  • btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer (bsc#1168273).
  • btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).
  • btrfs: always reserve our entire size for the global reserve (bsc#1165949).
  • btrfs: assert on non-empty delayed iputs (bsc##1165949).
  • btrfs: be more explicit about allowed flush states (bsc#1165949).
  • btrfs: call btrfs_create_pending_block_groups unconditionally (bsc#1165949).
  • btrfs: catch cow on deleting snapshots (bsc#1165949).
  • btrfs: change the minimum global reserve size (bsc#1165949).
  • btrfs: check if there are free block groups for commit (bsc#1165949).
  • btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).
  • btrfs: cleanup extent_op handling (bsc#1165949).
  • btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1165949).
  • btrfs: cleanup the target logic in __btrfs_block_rsv_release (bsc#1165949).
  • btrfs: clear space cache inode generation always (bsc#1165949).
  • btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock (bsc#1165949).
  • btrfs: Do mandatory tree block check before submitting bio (bsc#1168273).
  • btrfs: do not account global reserve in can_overcommit (bsc#1165949).
  • btrfs: do not allow reservations if we have pending tickets (bsc#1165949).
  • btrfs: do not call btrfs_start_delalloc_roots in flushoncommit (bsc#1165949).
  • btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).
  • btrfs: do not enospc all tickets on flush failure (bsc#1165949).
  • btrfs: do not reset bio->bi_ops while writing bio (bsc#1168273).
  • btrfs: do not run delayed_iputs in commit (bsc##1165949).
  • btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).
  • btrfs: do not use ctl->free_space for max_extent_size (bsc##1165949).
  • btrfs: do not use global reserve for chunk allocation (bsc#1165949).
  • btrfs: drop get_extent from extent_page_data (bsc#1168273).
  • btrfs: drop min_size from evict_refill_and_join (bsc##1165949).
  • btrfs: drop unused space_info parameter from create_space_info (bsc#1165949).
  • btrfs: dump block_rsv details when dumping space info (bsc#1165949).
  • btrfs: export block group accounting helpers (bsc#1165949).
  • btrfs: export block_rsv_use_bytes (bsc#1165949).
  • btrfs: export btrfs_block_rsv_add_bytes (bsc#1165949).
  • btrfs: export __btrfs_block_rsv_release (bsc#1165949).
  • btrfs: export space_info_add_*_bytes (bsc#1165949).
  • btrfs: export the block group caching helpers (bsc#1165949).
  • btrfs: export the caching control helpers (bsc#1165949).
  • btrfs: export the excluded extents helpers (bsc#1165949).
  • btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() (bsc#1168273).
  • btrfs: extent_io: Handle errors better in btree_write_cache_pages() (bsc#1168273).
  • btrfs: extent_io: Handle errors better in extent_write_full_page() (bsc#1168273).
  • btrfs: extent_io: Handle errors better in extent_write_locked_range() (bsc#1168273).
  • btrfs: extent_io: Handle errors better in extent_writepages() (bsc#1168273).
  • btrfs: extent_io: Kill dead condition in extent_write_cache_pages() (bsc#1168273).
  • btrfs: extent_io: Kill the forward declaration of flush_write_bio (bsc#1168273).
  • btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up (bsc#1168273).
  • btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).
  • btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).
  • btrfs: extent-tree: Detect bytes_may_use underflow earlier (bsc#1165949).
  • btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).
  • btrfs: factor our read/write stage off csum_tree_block into its callers (bsc#1168273).
  • btrfs: factor out the ticket flush handling (bsc#1165949).
  • btrfs: fix insert_reserved error handling (bsc##1165949).
  • btrfs: fix may_commit_transaction to deal with no partial filling (bsc#1165949).
  • btrfs: fix missing delayed iputs on unmount (bsc#1165949).
  • btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).
  • btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).
  • btrfs: fix truncate throttling (bsc#1165949).
  • btrfs: fix unwritten extent buffers and hangs on future writeback attempts (bsc#1168273).
  • btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).
  • btrfs: Improve global reserve stealing logic (bsc#1165949).
  • btrfs: introduce an evict flushing state (bsc#1165949).
  • btrfs: introduce delayed_refs_rsv (bsc#1165949).
  • btrfs: loop in inode_rsv_refill (bsc#1165949).
  • btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock (bsc#1165949).
  • btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head (bsc#1165949).
  • btrfs: make caching_thread use btrfs_find_next_key (bsc#1165949).
  • btrfs: make plug in writing meta blocks really work (bsc#1168273).
  • btrfs: merge two flush_write_bio helpers (bsc#1168273).
  • btrfs: migrate btrfs_trans_release_chunk_metadata (bsc#1165949).
  • btrfs: migrate inc/dec_block_group_ro code (bsc#1165949).
  • btrfs: migrate nocow and reservation helpers (bsc#1165949).
  • btrfs: migrate the alloc_profile helpers (bsc#1165949).
  • btrfs: migrate the block group caching code (bsc#1165949).
  • btrfs: migrate the block group cleanup code (bsc#1165949).
  • btrfs: migrate the block group lookup code (bsc#1165949).
  • btrfs: migrate the block group read/creation code (bsc#1165949).
  • btrfs: migrate the block group ref counting stuff (bsc#1165949).
  • btrfs: migrate the block group removal code (bsc#1165949).
  • btrfs: migrate the block group space accounting helpers (bsc#1165949).
  • btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).
  • btrfs: migrate the chunk allocation code (bsc#1165949).
  • btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).
  • btrfs: migrate the delayed refs rsv code (bsc#1165949).
  • btrfs: migrate the dirty bg writeout code (bsc#1165949).
  • btrfs: migrate the global_block_rsv helpers to block-rsv.c (bsc#1165949).
  • btrfs: move and export can_overcommit (bsc#1165949).
  • btrfs: move basic block_group definitions to their own header (bsc#1165949).
  • btrfs: move btrfs_add_free_space out of a header file (bsc#1165949).
  • btrfs: move btrfs_block_rsv definitions into it's own header (bsc#1165949).
  • btrfs: move btrfs_raid_group values to btrfs_raid_attr table (bsc#1165949).
  • btrfs: move btrfs_space_info_add_*_bytes to space-info.c (bsc#1165949).
  • btrfs: move dump_space_info to space-info.c (bsc#1165949).
  • btrfs: move reserve_metadata_bytes and supporting code to space-info.c (bsc#1165949).
  • btrfs: move space_info to space-info.h (bsc#1165949).
  • btrfs: move the space_info handling code to space-info.c (bsc#1165949).
  • btrfs: move the space info update macro to space-info.h (bsc#1165949).
  • btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).
  • btrfs: only check delayed ref usage in should_end_transaction (bsc#1165949).
  • btrfs: only check priority tickets for priority flushing (bsc#1165949).
  • btrfs: only free reserved extent if we didn't insert it (bsc##1165949).
  • btrfs: only reserve metadata_size for inodes (bsc#1165949).
  • btrfs: only track ref_heads in delayed_ref_updates (bsc#1165949).
  • btrfs: Output ENOSPC debug info in inc_block_group_ro (bsc#1165949).
  • btrfs: pass root to various extent ref mod functions (bsc#1165949).
  • btrfs: qgroup: Do not hold qgroup_ioctl_lock in btrfs_qgroup_inherit() (bsc#1165823).
  • btrfs: qgroup: Mark qgroup inconsistent if we're inherting snapshot to a new qgroup (bsc#1165823).
  • btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).
  • btrfs: refactor priority_reclaim_metadata_space (bsc#1165949).
  • btrfs: refactor the ticket wakeup code (bsc#1165949).
  • btrfs: release metadata before running delayed refs (bsc##1165949).
  • btrfs: remove bio_flags which indicates a meta block of log-tree (bsc#1168273).
  • btrfs: Remove btrfs_inode::delayed_iput_count (bsc#1165949).
  • btrfs: Remove fs_info from do_chunk_alloc (bsc#1165949).
  • btrfs: remove orig_bytes from reserve_ticket (bsc#1165949).
  • btrfs: Remove redundant argument of flush_space (bsc#1165949).
  • btrfs: Remove redundant mirror_num arg (bsc#1168273).
  • btrfs: Rename bin_search -> btrfs_bin_search (bsc#1168273).
  • btrfs: rename btrfs_space_info_add_old_bytes (bsc#1165949).
  • btrfs: rename do_chunk_alloc to btrfs_chunk_alloc (bsc#1165949).
  • btrfs: rename the btrfs_calc_*_metadata_size helpers (bsc#1165949).
  • btrfs: replace cleaner_delayed_iput_mutex with a waitqueue (bsc#1165949).
  • btrfs: reserve delalloc metadata differently (bsc#1165949).
  • btrfs: reserve extra space during evict (bsc#1165949).
  • btrfs: reset max_extent_size on clear in a bitmap (bsc##1165949).
  • btrfs: reset max_extent_size properly (bsc##1165949).
  • btrfs: rework btrfs_check_space_for_delayed_refs (bsc#1165949).
  • btrfs: rework wake_all_tickets (bsc#1165949).
  • btrfs: roll tracepoint into btrfs_space_info_update helper (bsc#1165949).
  • btrfs: run btrfs_try_granting_tickets if a priority ticket fails (bsc#1165949).
  • btrfs: run delayed iput at unlink time (bsc#1165949).
  • btrfs: run delayed iputs before committing (bsc#1165949).
  • btrfs: set max_extent_size properly (bsc##1165949).
  • btrfs: sink extent_write_full_page tree argument (bsc#1168273).
  • btrfs: sink extent_write_locked_range tree parameter (bsc#1168273).
  • btrfs: sink flush_fn to extent_write_cache_pages (bsc#1168273).
  • btrfs: sink get_extent parameter to extent_fiemap (bsc#1168273).
  • btrfs: sink get_extent parameter to extent_readpages (bsc#1168273).
  • btrfs: sink get_extent parameter to extent_write_full_page (bsc#1168273).
  • btrfs: sink get_extent parameter to extent_write_locked_range (bsc#1168273).
  • btrfs: sink get_extent parameter to extent_writepages (bsc#1168273).
  • btrfs: sink get_extent parameter to get_extent_skip_holes (bsc#1168273).
  • btrfs: sink writepage parameter to extent_write_cache_pages (bsc#1168273).
  • btrfs: stop partially refilling tickets when releasing space (bsc#1165949).
  • btrfs: stop using block_rsv_release_bytes everywhere (bsc#1165949).
  • btrfs: switch to on-stack csum buffer in csum_tree_block (bsc#1168273).
  • btrfs: temporarily export btrfs_get_restripe_target (bsc#1165949).
  • btrfs: temporarily export fragment_free_space (bsc#1165949).
  • btrfs: temporarily export inc_block_group_ro (bsc#1165949).
  • btrfs: track DIO bytes in flight (bsc#1165949).
  • btrfs: tree-checker: Remove comprehensive root owner check (bsc#1168273).
  • btrfs: unexport can_overcommit (bsc#1165949).
  • btrfs: unexport the temporary exported functions (bsc#1165949).
  • btrfs: unify error handling for ticket flushing (bsc#1165949).
  • btrfs: unify extent_page_data type passed as void (bsc#1168273).
  • btrfs: update may_commit_transaction to use the delayed refs rsv (bsc#1165949).
  • btrfs: use btrfs_try_granting_tickets in update_global_rsv (bsc#1165949).
  • btrfs: wait on caching when putting the bg cache (bsc#1165949).
  • btrfs: wait on ordered extents on abort cleanup (bsc#1165949).
  • btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).
  • ceph: canonicalize server path in place (bsc#1168443).
  • ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL (bsc#1169307).
  • ceph: remove the extra slashes in the server path (bsc#1168443).
  • cfg80211: check reg_rule for NULL in handle_channel_custom() (bsc#1051510).
  • cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).
  • cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).
  • cifs: ignore cached share root handle closing errors (bsc#1166780).
  • clk: imx: Align imx sc clock msg structs to 4 (bsc#1111666).
  • clk: imx: Align imx sc clock msg structs to 4 (git-fixes).
  • clk: qcom: rcg: Return failure for RCG update (bsc#1051510).
  • configfs: Fix bool initialization/comparison (bsc#1051510).
  • cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).
  • cpuidle: Do not unset the driver if it is there already (bsc#1051510).
  • crypto: arm64/sha-ce - implement export/import (bsc#1051510).
  • Crypto: chelsio - Fixes a deadlock between rtnl_lock and uld_mutex (bsc#1111666).
  • Crypto: chelsio - Fixes a hang issue during driver registration (bsc#1111666).
  • crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).
  • crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).
  • debugfs: add support for more elaborate ->d_fsdata (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
  • debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
  • debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198). Prerequisite for bsc#1159198.
  • debugfs: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
  • debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
  • debugfs: debugfs_use_start/finish do not exist anymore (bsc#1159198). Prerequisite for bsc#1159198.
  • debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
  • debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198). Prerequisite for bsc#1159198.
  • debugfs: fix debugfs_real_fops() build error (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
  • debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
  • debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
  • debugfs: simplify __debugfs_remove_file() (bsc#1159198). Prerequisite for bsc#1159198.
  • Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).
  • dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).
  • drm/amd/amdgpu: Fix GPR read from debugfs (v2) (bsc#1113956)
  • drm/amd/display: Add link_rate quirk for Apple 15" MBP 2017 (bsc#1111666).
  • drm/amd/display: Fix wrongly passed static prefix (bsc#1111666).
  • drm/amd/display: remove duplicated assignment to grph_obj_type (bsc#1051510).
  • drm/amdgpu: fix typo for vcn1 idle check (bsc#1111666).
  • drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).
  • drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).
  • drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).
  • drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).
  • drm/exynos: dsi: fix workaround for the legacy clock name (bsc#1111666).
  • drm/exynos: dsi: propagate error value and silence meaningless warning (bsc#1111666).
  • drm/lease: fix WARNING in idr_destroy (bsc#1113956)
  • drm/msm: Set dma maximum segment size for mdss (bsc#1051510).
  • drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).
  • drm/msm: Use the correct dma_sync calls harder (bsc#1051510).
  • drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).
  • drm/sun4i: dsi: Use NULL to signify "no panel" (bsc#1111666).
  • drm/v3d: Replace wait_for macros to remove use of msleep (bsc#1111666).
  • drm/vc4: Fix HDMI mode validation (git-fixes).
  • dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).
  • efi: Do not attempt to map RCI2 config table if it does not exist (jsc#ECO-366, bsc#1168367).
  • efi: Export Runtime Configuration Interface table to sysfs (jsc#ECO-366, bsc#1168367).
  • efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).
  • efi: x86: move efi_is_table_address() into arch/x86 (jsc#ECO-366, bsc#1168367).
  • ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).
  • ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).
  • ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).
  • ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).
  • ext4: fix a data race in EXT4_I(inode)->i_disksize (bsc#1166861).
  • ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).
  • ext4: fix incorrect inodes per group in error message (bsc#1168764).
  • ext4: fix potential race between online resizing and write operations (bsc#1166864).
  • ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).
  • ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).
  • ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).
  • ext4: fix support for inode sizes > 1024 bytes (bsc#1164284).
  • ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).
  • ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).
  • ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).
  • fat: fix uninit-memory access for partial initialized inode (bsc#1051510).
  • fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).
  • fbdev/g364fb: Fix build failure (bsc#1051510).
  • fbdev: potential information leak in do_fb_ioctl() (bsc#1114279)
  • fbmem: Adjust indentation in fb_prepare_logo and fb_blank (bsc#1114279)
  • firmware: arm_sdei: fix double-lock on hibernate with shared events (bsc#1111666).
  • firmware: arm_sdei: fix possible double-lock on hibernate error path (bsc#1111666).
  • ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).
  • HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).
  • i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).
  • i2c: jz4780: silence log flood on txabrt (bsc#1051510).
  • IB/hfi1: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).
  • ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).
  • iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).
  • iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).
  • iio: imu: adis16480: check ret val for non-zero vs less-than-zero (bsc#1051510).
  • iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).
  • iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).
  • iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).
  • Input: add safety guards to input_set_keycode() (bsc#1168075).
  • Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).
  • Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger() (bsc#1051510).
  • Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).
  • intel_th: Fix user-visible error codes (bsc#1051510).
  • intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).
  • iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).
  • ipmi: fix hung processes in __get_guid() (bsc#1111666).
  • ipmi: fix hung processes in __get_guid() (git-fixes).
  • ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).
  • ipv6: Fix nlmsg_flags when splitting a multipath route (networking-stable-20_03_01).
  • ipv6: Fix route replacement with dev-only route (networking-stable-20_03_01).
  • ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).
  • irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).
  • irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).
  • kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).
  • kABI: restore debugfs_remove_recursive() (bsc#1159198).
  • kABI workaround for pcie_port_bus_type change (bsc#1161561).
  • KVM: s390: vsie: Fix possible race when shadowing region 3 tables (git-fixes).
  • KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (git-fixes).
  • libceph: fix alloc_msg_with_page_vector() memory leaks (bsc#1169308).
  • libfs: fix infoleak in simple_attr_read() (bsc#1168881).
  • lpfc: add support for translating an RSCN rcv into a discovery rescan (bsc#1164777 bsc#1164780 bsc#1165211).
  • lpfc: add support to generate RSCN events for nport (bsc#1164777 bsc#1164780 bsc#1165211).
  • mac80211: consider more elements in parsing CRC (bsc#1051510).
  • mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).
  • mac80211: free peer keys before vif down in mesh (bsc#1051510).
  • mac80211: mesh: fix RCU warning (bsc#1051510).
  • mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).
  • mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).
  • macsec: add missing attribute validation for port (bsc#1051510).
  • macsec: fix refcnt leak in module exit routine (bsc#1051510).
  • media: dib0700: fix rc endpoint lookup (bsc#1051510).
  • media: flexcop-usb: fix endpoint sanity check (git-fixes).
  • media: go7007: Fix URB type for interrupt handling (bsc#1051510).
  • media: ov519: add missing endpoint sanity checks (bsc#1168829).
  • media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support (bsc#1051510).
  • media: ov6650: Fix some format attributes not under control (bsc#1051510).
  • media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).
  • media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).
  • media: stv06xx: add missing descriptor sanity checks (bsc#1168854).
  • media: tda10071: fix unsigned sign extension overflow (bsc#1051510).
  • media: usbtv: fix control-message timeouts (bsc#1051510).
  • media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).
  • media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).
  • media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).
  • mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).
  • misc: pci_endpoint_test: Fix to support > 10 pci-endpoint-test devices (bsc#1051510).
  • mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).
  • mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).
  • mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).
  • mm: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).
  • mwifiex: set needed_headroom, not hard_header_len (bsc#1051510).
  • net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
  • net: dsa: tag_qca: Make sure there is headroom for tag (networking-stable-20_02_19).
  • net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).
  • net: fib_rules: Correctly set table field when table number exceeds 8 bits (networking-stable-20_03_01).
  • netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).
  • net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bsc#1051510).
  • net: nfc: fix bounds checking bugs on "pipe" (bsc#1051510).
  • net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).
  • net: phy: restore mdio regs in the iproc mdio driver (networking-stable-20_03_01).
  • net/sched: flower: add missing validation of TCA_FLOWER_FLAGS (networking-stable-20_02_19).
  • net_sched: keep alloc_hash updated after hash allocation (git-fixes).
  • net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS (networking-stable-20_02_19).
  • net/smc: fix leak of kernel memory to user space (networking-stable-20_02_19).
  • NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).
  • nfc: pn544: Fix occasional HW initialization failure (networking-stable-20_03_01).
  • NFS: send state management on a single connection (bsc#1167005).
  • nvme: fix a possible deadlock when passthru commands sent to a multipath device (bsc#1158983).
  • nvme: fix controller removal race with scan work (bsc#1158983).
  • nvme-multipath: also check for a disabled path if there is a single sibling (bsc#1158983).
  • nvme-multipath: do not select namespaces which are about