openSUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________
Announcement ID: openSUSE-SU-2019:1404-1
Rating: important
References: #1050549 #1051510 #1052904 #1053043 #1055117
#1055121 #1055186 #1061840 #1063638 #1065600
#1065729 #1070872 #1082555 #1083647 #1085535
#1085536 #1088804 #1097583 #1097584 #1097585
#1097586 #1097587 #1097588 #1103186 #1103259
#1106011 #1108193 #1108838 #1108937 #1110946
#1111331 #1112063 #1112128 #1112178 #1113722
#1114279 #1114427 #1114542 #1114638 #1119680
#1119843 #1120318 #1120902 #1122767 #1122776
#1124839 #1126221 #1126704 #1126740 #1127175
#1127371 #1127372 #1127374 #1128052 #1128415
#1128544 #1128979 #1129138 #1129273 #1129497
#1129770 #1130195 #1130425 #1130527 #1130567
#1130579 #1130972 #1131107 #1131167 #1131168
#1131169 #1131170 #1131171 #1131172 #1131173
#1131174 #1131175 #1131176 #1131177 #1131178
#1131179 #1131180 #1131290 #1131326 #1131335
#1131336 #1131416 #1131427 #1131442 #1131451
#1131467 #1131488 #1131574 #1131587 #1131659
#1131673 #1131847 #1131848 #1131851 #1131900
#1131934 #1131935 #1132044 #1132083 #1132219
#1132226 #1132227 #1132365 #1132368 #1132369
#1132370 #1132372 #1132373 #1132384 #1132397
#1132402 #1132403 #1132404 #1132405 #1132407
#1132411 #1132412 #1132413 #1132414 #1132426
#1132527 #1132531 #1132555 #1132558 #1132561
#1132562 #1132563 #1132564 #1132570 #1132571
#1132572 #1132589 #1132618 #1132681 #1132726
#1132828 #1132943 #1133005 #1133094 #1133095
#1133115 #1133149 #1133176 #1133188 #1133486
#1133529 #1133584 #1133667 #1133668 #1133672
#1133674 #1133675 #1133698 #1133702 #1133731
#1133769 #1133772 #1133774 #1133778 #1133779
#1133780 #1133825 #1133850 #1133851 #1133852
#1134160 #1134162 #1134199 #1134200 #1134201
#1134202 #1134203 #1134204 #1134205 #1134354
#1134393 #1134459 #1134460 #1134461 #1134537
#1134651 #1134760 #1134810 #1134813 #1134848
#1135006 #1135007 #1135008 #1135100
Cross-References: CVE-2018-12126 CVE-2018-12127 CVE-2018-12130
CVE-2018-16880 CVE-2019-11091 CVE-2019-11486
CVE-2019-11815 CVE-2019-11884 CVE-2019-3882
CVE-2019-9003 CVE-2019-9500 CVE-2019-9503
Affected Products:
openSUSE Leap 15.0
______________________________________________________________________________
An update that solves 12 vulnerabilities and has 182 fixes
is now available.
Description:
The openSUSE Leap 15.0 kernel was updated to receive various security and
bugfixes.
Four new speculative execution information leak issues have been
identified in Intel CPUs. (bsc#1111331)
- CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
- CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
- CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory
(MDSUM)
This kernel update contains software mitigations for these issues, which
also utilize CPU microcode updates shipped in parallel.
For more information on this set of information leaks, check out
https://www.suse.com/support/kb/doc/?id=7023736
The following security bugs were fixed:
- CVE-2018-16880: A flaw was found in handle_rx() function in the
vhost_net driver. A malicious virtual guest, under specific conditions,
can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host
which may lead to a kernel memory corruption and a system panic. Due to
the nature of the flaw, privilege escalation cannot be fully ruled out.
(bnc#1122767).
- CVE-2019-11486: The Siemens R3964 line discipline driver in
drivers/tty/n_r3964.c had multiple race conditions (bnc#1133188). It has
been disabled.
- CVE-2019-11815: An issue was discovered in rds_tcp_kill_sock in
net/rds/tcp.c. There is a race condition leading to a use-after-free,
related to net namespace cleanup (bnc#1134537).
- CVE-2019-11884: The do_hidp_sock_ioctl function in
net/bluetooth/hidp/sock.c allowed a local user to obtain potentially
sensitive information from kernel stack memory via a HIDPCONNADD
command, because a name field may not end with a '\0' character
(bnc#1134848).
- CVE-2019-3882: A flaw was found in vfio interface implementation that
permits violation of the user's locked memory limit. If a device is
bound to a vfio driver, such as vfio-pci, and the local attacker is
administratively granted ownership of the device, it may cause a system
memory exhaustion and thus a denial of service (DoS). (bnc#1131416
bnc#1131427).
- CVE-2019-9003: Attackers can trigger a
drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging
for certain simultaneous execution of the code, as demonstrated by a
"service ipmievd restart" loop (bnc#1126704).
- CVE-2019-9500: A brcmfmac heap buffer overflow in brcmf_wowl_nd_results
was fixed (bnc#1132681).
- CVE-2019-9503: Multiple brcmfmac frame validation bypasses have been
fixed (bnc#1132828).
The following non-security bugs were fixed:
- 9p: do not trust pdu content for stat item size (bsc#1051510).
- acpi, nfit: Prefer _DSM over _LSR for namespace label reads
(bsc#1112128) (bsc#1132426).
- ACPI / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
- ALSA: core: Do not refer to snd_cards array directly (bsc#1051510).
- ALSA: core: Fix card races between register and disconnect (bsc#1051510).
- ALSA: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
- ALSA: hda - Add two more machines to the power_save_blacklist
(bsc#1051510).
- ALSA: hda/hdmi - Consider eld_valid when reporting jack event
(bsc#1051510).
- ALSA: hda/hdmi - Read the pin sense from register when repolling
(bsc#1051510).
- ALSA: hda: Initialize power_state field properly (bsc#1051510).
- ALSA: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
- ALSA: hda/realtek - Add quirk for Tuxedo XC 1509 (bsc#1131442).
- ALSA: hda/realtek - Add support headset mode for DELL WYSE AIO
(bsc#1051510).
- ALSA: hda/realtek - Add support headset mode for New DELL WYSE NB
(bsc#1051510).
- ALSA: hda/realtek - add two more pin configuration sets to quirk table
(bsc#1051510).
- ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
- ALSA: hda/realtek - EAPD turn on later (bsc#1051510).
- ALSA: hda/realtek - Fixed Dell AIO speaker noise (bsc#1051510).
- ALSA: hda - Register irq handler after the chip initialization
(bsc#1051510).
- ALSA: hdea/realtek - Headset fixup for System76 Gazelle (gaze14)
(bsc#1051510).
- ALSA: info: Fix racy addition/deletion of nodes (bsc#1051510).
- ALSA: line6: Avoid polluting led_* namespace (bsc#1051510).
- ALSA: line6: use dynamic buffers (bsc#1051510).
- ALSA: PCM: check if ops are defined before suspending PCM (bsc#1051510).
- ALSA: seq: Align temporary re-locking with irqsave version (bsc#1051510).
- ALSA: seq: Correct unlock sequence at snd_seq_client_ioctl_unlock()
(bsc#1051510).
- ALSA: seq: Cover unsubscribe_port() in list_mutex (bsc#1051510).
- ALSA: seq: Fix OOB-reads from strlcpy (bsc#1051510).
- ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
(bsc#1051510).
- ALSA: seq: Protect in-kernel ioctl calls with mutex (bsc#1051510).
- ALSA: seq: Protect racy pool manipulation from OSS sequencer
(bsc#1051510).
- ALSA: seq: Remove superfluous irqsave flags (bsc#1051510).
- ALSA: seq: Simplify snd_seq_kernel_client_enqueue() helper (bsc#1051510).
- ALSA: timer: Check ack_list emptiness instead of bit flag (bsc#1051510).
- ALSA: timer: Coding style fixes (bsc#1051510).
- ALSA: timer: Make snd_timer_close() really kill pending actions
(bsc#1051510).
- ALSA: timer: Make sure to clear pending ack list (bsc#1051510).
- ALSA: timer: Revert active callback sync check at close (bsc#1051510).
- ALSA: timer: Simplify error path in snd_timer_open() (bsc#1051510).
- ALSA: timer: Unify timer callback process code (bsc#1051510).
- ALSA: usb-audio: Fix a memory leak bug (bsc#1051510).
- ALSA: usb-audio: Handle the error from
snd_usb_mixer_apply_create_quirk() (bsc#1051510).
- ALSA: usx2y: fix a double free bug (bsc#1051510).
- ASoC: cs4270: Set auto-increment bit for register writes (bsc#1051510).
- ASoC: fix valid stream condition (bsc#1051510).
- ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe
(bsc#1051510).
- ASoC: fsl_esai: fix channel swap issue when stream starts (bsc#1051510).
- ASoC: fsl_esai: Fix missing break in switch statement (bsc#1051510).
- ASoC: hdmi-codec: fix S/PDIF DAI (bsc#1051510).
- ASoC: Intel: avoid Oops if DMA setup fails (bsc#1051510).
- ASoC: max98090: Fix restore of DAPM Muxes (bsc#1051510).
- ASoC: nau8810: fix the issue of widget with prefixed name (bsc#1051510).
- ASoC: nau8824: fix the issue of the widget with prefix name
(bsc#1051510).
- ASoC: RT5677-SPI: Disable 16Bit SPI Transfers (bsc#1051510).
- ASoC: samsung: odroid: Fix clock configuration for 44100 sample rate
(bsc#1051510).
- ASoC:soc-pcm:fix a codec fixup issue in TDM case (bsc#1051510).
- ASoC: stm32: fix sai driver name initialisation (bsc#1051510).
- ASoC: tlv320aic32x4: Fix Common Pins (bsc#1051510).
- ASoC: topology: free created components in tplg load error (bsc#1051510).
- ASoC: wm_adsp: Add locking to wm_adsp2_bus_error (bsc#1051510).
- assume flash part size to be 4MB, if it can't be determined
(bsc#1127371).
- at76c50x-usb: Do not register led_trigger if usb_register_driver failed
(bsc#1051510).
- ath10k: avoid possible string overflow (bsc#1051510).
- audit: fix a memleak caused by auditing load module (bsc#1051510).
- b43: shut up clang -Wuninitialized variable warning (bsc#1051510).
- batman-adv: Reduce claim hash refcnt only for removed entry
(bsc#1051510).
- batman-adv: Reduce tt_global hash refcnt only for removed entry
(bsc#1051510).
- batman-adv: Reduce tt_local hash refcnt only for removed entry
(bsc#1051510).
- bcache: account size of buckets used in uuid write to
ca->meta_sectors_written (bsc#1130972).
- bcache: add a comment in super.c (bsc#1130972).
- bcache: add code comments for bset.c (bsc#1130972).
- bcache: add comment for cache_set->fill_iter (bsc#1130972).
- bcache: add identifier names to arguments of function definitions
(bsc#1130972).
- bcache: add missing SPDX header (bsc#1130972).
- bcache: add MODULE_DESCRIPTION information (bsc#1130972).
- bcache: add separate workqueue for journal_write to avoid deadlock
(bsc#1130972).
- bcache: add static const prefix to char * array declarations
(bsc#1130972).
- bcache: add sysfs_strtoul_bool() for setting bit-field variables
(bsc#1130972).
- bcache: add the missing comments for smp_mb()/smp_wmb() (bsc#1130972).
- bcache: cannot set writeback_running via sysfs if no writeback kthread
created (bsc#1130972).
- bcache: correct dirty data statistics (bsc#1130972).
- bcache: do not assign in if condition in bcache_init() (bsc#1130972).
- bcache: do not assign in if condition register_bcache() (bsc#1130972).
- bcache: do not check if debug dentry is ERR or NULL explicitly on remove
(bsc#1130972).
- bcache: do not check NULL pointer before calling kmem_cache_destroy
(bsc#1130972).
- bcache: do not clone bio in bch_data_verify (bsc#1130972).
- bcache: do not mark writeback_running too early (bsc#1130972).
- bcache: export backing_dev_name via sysfs (bsc#1130972).
- bcache: export backing_dev_uuid via sysfs (bsc#1130972).
- bcache: fix code comments style (bsc#1130972).
- bcache: fix indentation issue, remove tabs on a hunk of code
(bsc#1130972).
- bcache: fix indent by replacing blank by tabs (bsc#1130972).
- bcache: fix input integer overflow of congested threshold (bsc#1130972).
- bcache: fix input overflow to cache set io_error_limit (bsc#1130972).
- bcache: fix input overflow to cache set sysfs file io_error_halflife
(bsc#1130972).
- bcache: fix input overflow to journal_delay_ms (bsc#1130972).
- bcache: fix input overflow to sequential_cutoff (bsc#1130972).
- bcache: fix input overflow to writeback_delay (bsc#1130972).
- bcache: fix input overflow to writeback_rate_minimum (bsc#1130972).
- bcache: fix ioctl in flash device (bsc#1130972).
- bcache: fix mistaken code comments in bcache.h (bsc#1130972).
- bcache: fix mistaken comments in request.c (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_i_term_inverse
(bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_p_term_inverse
(bsc#1130972).
- bcache: fix typo in code comments of closure_return_with_destructor()
(bsc#1130972).
- bcache: fix typo 'succesfully' to 'successfully' (bsc#1130972).
- bcache: improve sysfs_strtoul_clamp() (bsc#1130972).
- bcache: introduce force_wake_up_gc() (bsc#1130972).
- bcache: make cutoff_writeback and cutoff_writeback_sync tunable
(bsc#1130972).
- bcache: Move couple of functions to sysfs.c (bsc#1130972).
- bcache: Move couple of string arrays to sysfs.c (bsc#1130972).
- bcache: move open brace at end of function definitions to next line
(bsc#1130972).
- bcache: never writeback a discard operation (bsc#1130972).
- bcache: not use hard coded memset size in bch_cache_accounting_clear()
(bsc#1130972).
- bcache: option to automatically run gc thread after writeback
(bsc#1130972).
- bcache: panic fix for making cache device (bsc#1130972).
- bcache: Populate writeback_rate_minimum attribute (bsc#1130972).
- bcache: prefer 'help' in Kconfig (bsc#1130972).
- bcache: print number of keys in trace_bcache_journal_write (bsc#1130972).
- bcache: recal cached_dev_sectors on detach (bsc#1130972).
- bcache: remove unnecessary space before ioctl function pointer arguments
(bsc#1130972).
- bcache: remove unused bch_passthrough_cache (bsc#1130972).
- bcache: remove useless parameter of bch_debug_init() (bsc#1130972).
- bcache: Replace bch_read_string_list() by __sysfs_match_string()
(bsc#1130972).
- bcache: replace hard coded number with BUCKET_GC_GEN_MAX (bsc#1130972).
- bcache: replace '%pF' by '%pS' in seq_printf() (bsc#1130972).
- bcache: replace printk() by pr_*() routines (bsc#1130972).
- bcache: replace Symbolic permissions by octal permission numbers
(bsc#1130972).
- bcache: set writeback_percent in a flexible range (bsc#1130972).
- bcache: split combined if-condition code into separate ones
(bsc#1130972).
- bcache: stop bcache device when backing device is offline (bsc#1130972).
- bcache: stop using the deprecated get_seconds() (bsc#1130972).
- bcache: style fixes for lines over 80 characters (bsc#1130972).
- bcache: style fix to add a blank line after declarations (bsc#1130972).
- bcache: style fix to replace 'unsigned' by 'unsigned int' (bsc#1130972).
- bcache: treat stale && dirty keys as bad keys (bsc#1130972).
- bcache: trivial - remove tailing backslash in macro BTREE_FLAG
(bsc#1130972).
- bcache: update comment for bch_data_insert (bsc#1130972).
- bcache: update comment in sysfs.c (bsc#1130972).
- bcache: use MAX_CACHES_PER_SET instead of magic number 8 in
__bch_bucket_alloc_set (bsc#1130972).
- bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata
(bsc#1130972).
- bcache: use REQ_PRIO to indicate bio for metadata (bsc#1130972).
- bcache: use routines from lib/crc64.c for CRC64 calculation
(bsc#1130972).
- bcache: use sysfs_strtoul_bool() to set bit-field variables
(bsc#1130972).
- blkcg: Introduce blkg_root_lookup() (bsc#1131673).
- blkcg: Make blkg_root_lookup() work for queues in bypass mode
(bsc#1131673).
- blk-mq: adjust debugfs and sysfs register when updating nr_hw_queues
(bsc#1131673).
- blk-mq: Avoid that submitting a bio concurrently with device removal
triggers a crash (bsc#1131673).
- blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs
(bsc#1131673).
- blk-mq: fallback to previous nr_hw_queues when updating fails
(bsc#1131673).
- blk-mq: init hctx sched after update ctx and hctx mapping (bsc#1131673).
- blk-mq: realloc hctx when hw queue is mapped to another node
(bsc#1131673).
- blk-mq: sync the update nr_hw_queues with blk_mq_queue_tag_busy_iter
(bsc#1131673).
- block: check_events: do not bother with events if unsupported
(bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: Ensure that a request queue is dissociated from the cgroup
controller (bsc#1131673).
- block: Fix a race between request queue removal and the block cgroup
controller (bsc#1131673).
- block: Introduce blk_exit_queue() (bsc#1131673).
- block: kABI fixes for bio_rewind_iter() removal (bsc#1131673).
- block: remove bio_rewind_iter() (bsc#1131673).
- bluetooth: Align minimum encryption key size for LE and BR/EDR
connections (bsc#1051510).
- bluetooth: btusb: request wake pin with NOAUTOEN (bsc#1051510).
- bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt
(bsc#1051510).
- bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
(bsc#1133731).
- bluetooth: hidp: fix buffer overflow (bsc#1051510).
- bnxt_en: Drop oversize TX packets to prevent errors
(networking-stable-19_03_07).
- bonding: fix PACKET_ORIGDEV regression (git-fixes).
- bpf: fix use after free in bpf_evict_inode (bsc#1083647).
- brcm80211: potential NULL dereference in
brcmf_cfg80211_vndr_cmds_dcmd_handler() (bsc#1051510).
- btrfs: add a helper to return a head ref (bsc#1134813).
- btrfs: Avoid possible qgroup_rsv_size overflow in
btrfs_calculate_inode_block_rsv_size (git-fixes).
- btrfs: breakout empty head cleanup to a helper (bsc#1134813).
- btrfs: check for refs on snapshot delete resume (bsc#1131335).
- btrfs: delayed-ref: Introduce better documented delayed ref structures
(bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: Do not panic when we can't find a root key (bsc#1112063).
- btrfs: extent-tree: Open-code process_func in __btrfs_mod_ref
(bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: Factor out common delayed refs init code (bsc#1134813).
- btrfs: fix assertion failure on fsync with NO_HOLES enabled
(bsc#1131848).
- btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks (git-fixes).
- btrfs: fix incorrect file size after shrinking truncate and fsync
(bsc#1130195).
- btrfs: Introduce init_delayed_ref_head (bsc#1134813).
- btrfs: move all ref head cleanup to the helper function (bsc#1134813).
- btrfs: move extent_op cleanup to a helper (bsc#1134813).
- btrfs: move ref_mod modification into the if (ref) logic (bsc#1134813).
- btrfs: Open-code add_delayed_data_ref (bsc#1134813).
- btrfs: Open-code add_delayed_tree_ref (bsc#1134813).
- btrfs: qgroup: Move reserved data accounting from btrfs_delayed_ref_head
to btrfs_qgroup_extent_record (bsc#1134162).
- btrfs: qgroup: Remove duplicated trace points for qgroup_rsv_add/release
(bsc#1134160).
- btrfs: remove delayed_ref_node from ref_head (bsc#1134813).
- btrfs: remove WARN_ON in log_dir_items (bsc#1131847).
- btrfs: save drop_progress if we drop refs at all (bsc#1131336).
- btrfs: split delayed ref head initialization and addition (bsc#1134813).
- btrfs: track refs in a rb_tree instead of a list (bsc#1134813).
- btrfs: Use init_delayed_ref_common in add_delayed_data_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_common in add_delayed_tree_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_head in add_delayed_ref_head (bsc#1134813).
- cdrom: Fix race condition in cdrom_sysctl_register (bsc#1051510).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: fix ci->i_head_snapc leak (bsc#1122776).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- cgroup: fix parsing empty mount option string (bsc#1133094).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510).
- cifs: do not dereference smb_file_target before null check (bsc#1051510).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510).
- cifs: Fix credit calculation for encrypted reads with errors
(bsc#1051510).
- cifs: Fix credits calculations for reads with errors (bsc#1051510).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510).
- cifs: Fix potential OOB access of lock element array (bsc#1051510).
- cifs: Fix read after write for files with read caching (bsc#1051510).
- clk: fractional-divider: check parent rate only if flag is set
(bsc#1051510).
- clk: rockchip: fix frac settings of GPLL clock for rk3328 (bsc#1051510).
- clk: rockchip: Fix video codec clocks on rk3288 (bsc#1051510).
- clk: rockchip: fix wrong clock definitions for rk3328 (bsc#1051510).
- clk: x86: Add system specific quirk to mark clocks as critical
(bsc#1051510).
- cpupowerutils: bench - Fix cpu online check (bsc#1051510).
- cpu/speculation: Add 'mitigations=' cmdline option (bsc#1112178).
- crypto: arm/aes-neonbs - do not access already-freed walk.iv
(bsc#1051510).
- crypto: caam - add missing put_device() call (bsc#1129770).
- crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
(bsc#1051510).
- crypto: ccp - Do not free psp_master when PLATFORM_INIT fails
(bsc#1051510).
- crypto: chacha20poly1305 - set cra_name correctly (bsc#1051510).
- crypto: crct10dif-generic - fix use via crypto_shash_digest()
(bsc#1051510).
- crypto: crypto4xx - properly set IV after de- and encrypt (bsc#1051510).
- crypto: fips - Grammar s/options/option/, s/to/the/ (bsc#1051510).
- crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
(bsc#1051510).
- crypto: pcbc - remove bogus memcpy()s with src == dest (bsc#1051510).
- crypto: sha256/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: sha512/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: skcipher - do not WARN on unprocessed data after slow walk step
(bsc#1051510).
- crypto: sun4i-ss - Fix invalid calculation of hash end (bsc#1051510).
- crypto: vmx - fix copy-paste error in CTR mode (bsc#1051510).
- crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
(bsc#1051510).
- crypto: x86/poly1305 - fix overflow during partial reduction
(bsc#1051510).
- cxgb4: Add capability to get/set SGE Doorbell Queue Timer Tick
(bsc#1127371).
- cxgb4: Added missing break in ndo_udp_tunnel_{add/del} (bsc#1127371).
- cxgb4: Add flag tc_flower_initialized (bsc#1127371).
- cxgb4: Add new T5 PCI device id 0x50ae (bsc#1127371).
- cxgb4: Add new T5 PCI device ids 0x50af and 0x50b0 (bsc#1127371).
- cxgb4: Add new T6 PCI device ids 0x608a (bsc#1127371).
- cxgb4: add per rx-queue counter for packet errors (bsc#1127371).
- cxgb4: Add support for FW_ETH_TX_PKT_VM_WR (bsc#1127371).
- cxgb4: add support to display DCB info (bsc#1127371).
- cxgb4: Add support to read actual provisioned resources (bsc#1127371).
- cxgb4: collect ASIC LA dumps from ULP TX (bsc#1127371).
- cxgb4: collect hardware queue descriptors (bsc#1127371).
- cxgb4: collect number of free PSTRUCT page pointers (bsc#1127371).
- cxgb4: convert flower table to use rhashtable (bsc#1127371).
- cxgb4: cxgb4: use FW_PORT_ACTION_L1_CFG32 for 32 bit capability
(bsc#1127371).
- cxgb4/cxgb4vf: Add support for SGE doorbell queue timer (bsc#1127371).
- cxgb4/cxgb4vf: Fix mac_hlist initialization and free (bsc#1127374).
- cxgb4/cxgb4vf: Link management changes (bsc#1127371).
- cxgb4/cxgb4vf: Program hash region for {t4/t4vf}_change_mac()
(bsc#1127371).
- cxgb4: display number of rx and tx pages free (bsc#1127371).
- cxgb4: do not return DUPLEX_UNKNOWN when link is down (bsc#1127371).
- cxgb4: Export sge_host_page_size to ulds (bsc#1127371).
- cxgb4: fix the error path of cxgb4_uld_register() (bsc#1127371).
- cxgb4: impose mandatory VLAN usage when non-zero TAG ID (bsc#1127371).
- cxgb4: Mask out interrupts that are not enabled (bsc#1127175).
- cxgb4: move Tx/Rx free pages collection to common code (bsc#1127371).
- cxgb4: remove redundant assignment to vlan_cmd.dropnovlan_fm
(bsc#1127371).
- cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (bsc#1127371).
- cxgb4: remove the unneeded locks (bsc#1127371).
- cxgb4: specify IQTYPE in fw_iq_cmd (bsc#1127371).
- cxgb4: Support ethtool private flags (bsc#1127371).
- cxgb4: update supported DCB version (bsc#1127371).
- cxgb4: use new fw interface to get the VIN and smt index (bsc#1127371).
- cxgb4vf: Few more link management changes (bsc#1127374).
- cxgb4vf: fix memleak in mac_hlist initialization (bsc#1127374).
- cxgb4vf: Update port information in cxgb4vf_open() (bsc#1127374).
- device_cgroup: fix RCU imbalance in error case (bsc#1051510).
- Disable kgdboc failed by echo space to
/sys/module/kgdboc/parameters/kgdboc (bsc#1051510).
- dmaengine: axi-dmac: Do not check the number of frames for alignment
(bsc#1051510).
- dmaengine: imx-dma: fix warning comparison of distinct pointer types
(bsc#1051510).
- dmaengine: qcom_hidma: assign channel cookie correctly (bsc#1051510).
- dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid
(bsc#1051510).
- dmaengine: tegra210-dma: free dma controller in remove() (bsc#1051510).
- dmaengine: tegra: avoid overflow of byte tracking (bsc#1051510).
- dm: disable DISCARD if the underlying storage no longer supports it
(bsc#1114638).
- drivers: hv: vmbus: Offload the handling of channels to two workqueues
(bsc#1130567).
- drivers: hv: vmbus: Reset the channel callback in
vmbus_onoffer_rescind() (bsc#1130567).
- drm: Auto-set allow_fb_modifiers when given modifiers at plane init
(bsc#1051510).
- drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs
(bsc#1113722)
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
(bsc#1051510).
- drm/fb-helper: dpms_legacy(): Only set on connectors in use
(bsc#1051510).
- drm/i915: Fix I915_EXEC_RING_MASK (bsc#1051510).
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113722)
- drm/i915/gvt: Annotate iomem usage (bsc#1051510).
- drm/i915/gvt: do not deliver a workload if its creation fails
(bsc#1051510).
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113722)
- drm/i915/gvt: Fix incorrect mask of mmio 0x22028 in gen8/9 mmio list
(bnc#1113722)
- drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check
(bsc#1051510).
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata()
(bsc#1113722)
- drm/mediatek: fix possible object reference leak (bsc#1051510).
- drm/meson: add size and alignment requirements for dumb buffers
(bnc#1113722)
- drm/meson: Fix invalid pointer in meson_drv_unbind() (bsc#1051510).
- drm/meson: Uninstall IRQ handler (bsc#1051510).
- drm/nouveau: Stop using drm_crtc_force_disable (bsc#1051510).
- drm/nouveau/volt/gf117: fix speedo readout register (bsc#1051510).
- drm/rockchip: shutdown drm subsystem on shutdown (bsc#1051510).
- drm/rockchip: vop: reset scale mode when win is disabled (bsc#1113722)
- drm/sun4i: Add missing drm_atomic_helper_shutdown at driver unbind
(bsc#1113722)
- drm/sun4i: Fix component unbinding and component master deletion
(bsc#1113722)
- drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)
- drm/sun4i: Set device driver data at bind time for use in unbind
(bsc#1113722)
- drm/sun4i: Unbind components before releasing DRM and memory
(bsc#1113722)
- drm/ttm: Remove warning about inconsistent mapping information
(bnc#1131488)
- drm/udl: add a release method and delay modeset teardown (bsc#1085536)
- drm/vc4: Fix memory leak during gpu reset. (bsc#1113722)
- dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit
(networking-stable-19_02_20).
- dt-bindings: net: Fix a typo in the phy-mode list for ethernet bindings
(bsc#1129770).
- dwc2: gadget: Fix completed transfer size calculation in DDMA
(bsc#1051510).
- e1000e: fix cyclic resets at link up with active tx (bsc#1051510).
- e1000e: Fix -Wformat-truncation warnings (bsc#1051510).
- ext2: Fix underflow in ext2_max_size() (bsc#1131174).
- ext4: add mask of ext4 flags to swap (bsc#1131170).
- ext4: add missing brelse() in add_new_gdb_meta_bg() (bsc#1131176).
- ext4: brelse all indirect buffer in ext4_ind_remove_space()
(bsc#1131173).
- ext4: cleanup bh release code in ext4_ind_remove_space() (bsc#1131851).
- ext4: cleanup pagecache before swap i_data (bsc#1131178).
- ext4: fix check of inode in swap_inode_boot_loader (bsc#1131177).
- ext4: fix data corruption caused by unaligned direct AIO (bsc#1131172).
- ext4: fix EXT4_IOC_SWAP_BOOT (bsc#1131180).
- ext4: fix NULL pointer dereference while journal is aborted
(bsc#1131171).
- ext4: update quota information while swapping boot loader inode
(bsc#1131179).
- fbdev: fbmem: fix memory access if logo is bigger than the screen
(bsc#1051510).
- fix cgroup_do_mount() handling of failure exits (bsc#1133095).
- Fix kabi after "md: batch flush requests." (bsc#1119680).
- Fix struct page kABI after adding atomic for ppc (bsc#1131326,
bsc#1108937).
- fm10k: Fix a potential NULL pointer dereference (bsc#1051510).
- fs: avoid fdput() after failed fdget() in vfs_dedupe_file_range()
(bsc#1132384, bsc#1132219).
- fs/nfs: Fix nfs_parse_devname to not modify it's argument (git-fixes).
- futex: Cure exit race (bsc#1050549).
- futex: Ensure that futex address is aligned in handle_futex_death()
(bsc#1050549).
- futex: Handle early deadlock return correctly (bsc#1050549).
- ghes, EDAC: Fix ghes_edac registration (bsc#1133176).
- gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input
(bsc#1051510).
- gpio: aspeed: fix a potential NULL pointer dereference (bsc#1051510).
- gpio: gpio-omap: fix level interrupt idling (bsc#1051510).
- gpio: of: Fix of_gpiochip_add() error path (bsc#1051510).
- gre6: use log_ecn_error module parameter in ip6_tnl_rcv() (git-fixes).
- hid: debug: fix race condition with between rdesc_show() and device
removal (bsc#1051510).
- hid: i2c-hid: Ignore input report if there's no data present on Elan
touchpanels (bsc#1133486).
- hid: input: add mapping for Assistant key (bsc#1051510).
- hid: intel-ish-hid: avoid binding wrong ishtp_cl_device (bsc#1051510).
- hid: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR
busy_clear bit (bsc#1051510).
- hid: logitech: check the return value of create_singlethread_workqueue
(bsc#1051510).
- hv_netvsc: Fix IP header checksum for coalesced packets
(networking-stable-19_03_07).
- hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
(bsc#1051510).
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
(bsc#1051510).
- hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
(bsc#1051510).
- hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
(bsc#1051510).
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
(bsc#1051510).
- hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
(bsc#1051510).
- hwrng: virtio - Avoid repeated init of completion (bsc#1051510).
- i2c: Make i2c_unregister_device() NULL-aware (bsc#1108193).
- ibmvnic: Enable GRO (bsc#1132227).
- ibmvnic: Fix completion structure initialization (bsc#1131659).
- ibmvnic: Fix netdev feature clobbering during a reset (bsc#1132227).
- iio: adc: at91: disable adc channel interrupt in timeout case
(bsc#1051510).
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver (bsc#1051510).
- iio: ad_sigma_delta: select channel when reading register (bsc#1051510).
- iio: core: fix a possible circular locking dependency (bsc#1051510).
- iio: cros_ec: Fix the maths for gyro scale calculation (bsc#1051510).
- iio: dac: mcp4725: add missing powerdown bits in store eeprom
(bsc#1051510).
- iio: Fix scan mask selection (bsc#1051510).
- iio/gyro/bmg160: Use millidegrees for temperature scale (bsc#1051510).
- iio: gyro: mpu3050: fix chip ID reading (bsc#1051510).
- Input: introduce KEY_ASSISTANT (bsc#1051510).
- Input: snvs_pwrkey - initialize necessary driver data before enabling
IRQ (bsc#1051510).
- Input: synaptics-rmi4 - write config register values to the right offset
(bsc#1051510).
- intel_idle: add support for Jacobsville (jsc#SLE-5394).
- intel_th: msu: Fix single mode with IOMMU (bsc#1051510).
- intel_th: pci: Add Comet Lake support (bsc#1051510).
- io: accel: kxcjk1013: restore the range after resume (bsc#1051510).
- iommu/amd: Set exclusion range correctly (bsc#1130425).
- iommu/vt-d: Do not request page request irq under dmar_global_lock
(bsc#1135006).
- iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
(bsc#1135007).
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly (bsc#1135008).
- ip6_tunnel: fix ip6 tunnel lookup in collect_md mode (git-fixes).
- ipmi: Fix I2C client removal in the SSIF driver (bsc#1108193).
- ipmi:ssif: compare block number correctly for multi-part return messages
(bsc#1051510).
- ipmi_ssif: Remove duplicate NULL check (bsc#1108193).
- ipv4: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv6: Fix dangling pointer when ipv6 fragment (git-fixes).
- ipv6: propagate genlmsg_reply return code (networking-stable-19_02_24).
- ipv6: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv6: sit: reset ip header pointer in ipip6_rcv (git-fixes).
- ipvlan: disallow userns cap_net_admin to change global mode/flags
(networking-stable-19_03_15).
- ipvs: remove IPS_NAT_MASK check to fix passive FTP (git-fixes).
- It's wrong to add len to sector_nr in raid10 reshape twice (git-fixes).
- iw_cxgb4: cq/qp mask depends on bar2 pages in a host page (bsc#1127371).
- iwiwifi: fix bad monitor buffer register addresses (bsc#1129770).
- iwlwifi: fix send hcmd timeout recovery flow (bsc#1129770).
- jbd2: clear dirty flag when revoking a buffer from an older transaction
(bsc#1131167).
- jbd2: fix compile warning when using JBUFFER_TRACE (bsc#1131168).
- kABI: restore icmp_send (kabi).
- kabi/severities: add cxgb4 and cxgb4vf shared data to the whitelis
(bsc#1127372)
- kABI workaround for removed usb_interface.pm_usage_cnt field
(bsc#1051510).
- kABI workaround for snd_seq_kernel_client_enqueue() API changes
(bsc#1051510).
- kbuild: modversions: Fix relative CRC byte order interpretation
(bsc#1131290).
- kbuild: strip whitespace in cmd_record_mcount findstring (bsc#1065729).
- kcm: switch order of device registration to fix a crash (bnc#1130527).
- kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
(bsc#1051510).
- kernel/sysctl.c: fix out-of-bounds access when setting file-max
(bsc#1051510).
- kernfs: do not set dentry->d_fsdata (boo#1133115).
- KEYS: always initialize keyring_index_key::desc_len (bsc#1051510).
- KEYS: user: Align the payload buffer (bsc#1051510).
- KVM: Call kvm_arch_memslots_updated() before updating memslots
(bsc#1132563).
- KVM: Fix kABI for AMD SMAP Errata workaround (bsc#1133149).
- KVM: Fix UAF in nested posted interrupt processing (bsc#1134199).
- KVM: nVMX: Apply addr size mask to effective address for VMX
instructions (bsc#1132561).
- KVM: nVMX: Clear reserved bits of #DB exit qualification (bsc#1134200).
- KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
(bsc#1132564).
- KVM: nVMX: restore host state in nested_vmx_vmexit for VMFail
(bsc#1134201).
- KVM: nVMX: Sign extend displacements of VMX instr's mem operands
(bsc#1132562).
- KVM: PPC: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode
switch (bsc#1061840).
- KVM: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation)
(bsc#1133149).
- KVM: VMX: Compare only a single byte for VMCS' "launched" in vCPU-run
(bsc#1132555).
- KVM: VMX: Zero out *all* general purpose registers after VM-Exit
(bsc#1134202).
- KVM: x86: Always use 32-bit SMRAM save state for 32-bit kernels
(bsc#1134203).
- KVM: x86: Do not clear EFER during SMM transitions for 32-bit vCPU
(bsc#1134204).
- KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (bsc#1114279).
- KVM: x86/mmu: Detect MMIO generation wrap in any address space
(bsc#1132570).
- KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux
(bsc#1132571).
- kvm: x86: Report STIBP on GET_SUPPORTED_CPUID (bsc#1111331).
- KVM: x86: svm: make sure NMI is injected after nmi_singlestep
(bsc#1134205).
- leds: avoid races with workqueue (bsc#1051510).
- leds: pca9532: fix a potential NULL pointer dereference (bsc#1051510).
- lib: add crc64 calculation routines (bsc#1130972).
- libata: fix using DMA buffers on stack (bsc#1051510).
- lib: do not depend on linux headers being installed (bsc#1130972).
- lightnvm: if LUNs are already allocated fix return (bsc#1085535).
- linux/kernel.h: Use parentheses around argument in u64_to_user_ptr()
(bsc#1051510).
- Linux v5.0-rc7: bcm2835 MMC issues (bsc#1070872).
- locking/atomics, asm-generic: Move some macros from