Security update for the Linux Kernel

Announcement ID: SUSE-SU-2019:2946-1
Rating: important
References:
Cross-References:
CVSS scores:
  • CVE-2018-12207 ( SUSE ): 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2018-12207 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
  • CVE-2019-0154 ( SUSE ): 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-0154 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-0155 ( SUSE ): 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2019-0155 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2019-10220 ( SUSE ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
  • CVE-2019-10220 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • CVE-2019-11135 ( SUSE ): 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
  • CVE-2019-11135 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
  • CVE-2019-16232 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
  • CVE-2019-16232 ( NVD ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-16233 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
  • CVE-2019-16233 ( NVD ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-16234 ( SUSE ): 4.0 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
  • CVE-2019-16234 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-16995 ( SUSE ): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-16995 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-17056 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
  • CVE-2019-17133 ( SUSE ): 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CVE-2019-17133 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CVE-2019-17666 ( SUSE ): 5.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
  • CVE-2019-17666 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products:
  • Basesystem Module 15
  • Development Tools Module 15
  • Legacy Module 15
  • SUSE Linux Enterprise Desktop 15
  • SUSE Linux Enterprise High Availability Extension 15
  • SUSE Linux Enterprise High Performance Computing 15
  • SUSE Linux Enterprise Live Patching 15
  • SUSE Linux Enterprise Server 15
  • SUSE Linux Enterprise Server for SAP Applications 15
  • SUSE Linux Enterprise Workstation Extension 15

An update that solves 12 vulnerabilities and has 93 security fixes can now be installed.

Description:

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.

The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735

  • CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described "Microarchitectural Data Sampling" attack.

The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).

The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251

  • CVE-2019-0154: Fix a local denial of service via read of unprotected i915 registers. (bsc#1135966)
  • CVE-2019-0155: Fix privilege escalation in the i915 driver. Batch buffers from usermode could have escalated privileges via blitter command stream. (bsc#1135967)
  • CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457).
  • CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903).
  • CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port failed to add a port, which may have caused denial of service (bsc#1152685).
  • CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).
  • CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465)
  • CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452).
  • CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158).
  • CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

  • 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
  • acpi / CPPC: do not require the _PSD method (bsc#1051510).
  • acpi / processor: do not print errors for processorIDs == 0xff (bsc#1051510).
  • acpi: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
  • act_mirred: Fix mirred_init_module error handling (bsc#1051510).
  • alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
  • alsa: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
  • alsa: hda - Apply AMD controller workaround for Raven platform (bsc#1051510).
  • alsa: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
  • alsa: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
  • alsa: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510).
  • alsa: hda - Inform too slow responses (bsc#1051510).
  • alsa: hda - Show the fatal CORB/RIRB error more clearly (bsc#1051510).
  • alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
  • alsa: hda/realtek - Add support for ALC623 (bsc#1051510).
  • alsa: hda/realtek - Add support for ALC711 (bsc#1051510).
  • alsa: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bsc#1051510).
  • alsa: hda/realtek - Check beep whitelist before assigning in all codecs (bsc#1051510).
  • alsa: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510).
  • alsa: hda/realtek - Fix alienware headset mic (bsc#1051510).
  • alsa: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510).
  • alsa: hda/sigmatel - remove unused variable 'stac9200_core_init' (bsc#1051510).
  • alsa: hda: Add Elkhart Lake pci ID (bsc#1051510).
  • alsa: hda: Add Tigerlake/Jasperlake pci ID (bsc#1051510).
  • alsa: hda: Add support of Zhaoxin controller (bsc#1051510).
  • alsa: hda: Flush interrupts on disabling (bsc#1051510).
  • alsa: hda: Set fifo_size for both playback and capture streams (bsc#1051510).
  • alsa: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510).
  • alsa: line6: sizeof (byte) is always 1, use that fact (bsc#1051510).
  • alsa: timer: Fix mutex deadlock at releasing card (bsc#1051510).
  • alsa: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510).
  • alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510).
  • alsa: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510).
  • appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
  • arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30).
  • asoc: Define a set of DAPM pre/post-up events (bsc#1051510).
  • asoc: Intel: Fix use of potentially uninitialized variable (bsc#1051510).
  • asoc: Intel: NHLT: Fix debug print format (bsc#1051510).
  • asoc: dmaengine: Make the pcm->name equal to pcm->id if the name is not set (bsc#1051510).
  • asoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510).
  • asoc: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510).
  • asoc: sgtl5000: Fix charge pump source assignment (bsc#1051510).
  • auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510).
  • ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
  • blk-wbt: abstract out end IO completion handler (bsc#1135873).
  • blk-wbt: fix has-sleeper queueing check (bsc#1135873).
  • blk-wbt: improve waking of tasks (bsc#1135873).
  • blk-wbt: move disable check into get_limit() (bsc#1135873).
  • blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873).
  • block: add io timeout to sysfs (bsc#1148410).
  • block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
  • bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510).
  • bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ).
  • boot: Sign non-x86 kernels when possible (boo#1134303)
  • bpf: fix use after free in prog symbol exposure (bsc#1083647).
  • bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15).
  • btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651).
  • btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607).
  • btrfs: bail out gracefully rather than BUG_ON (bsc#1153646).
  • btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178).
  • btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713).
  • btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179).
  • btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651).
  • btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186).
  • btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184).
  • can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510).
  • can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510).
  • cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15).
  • cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510).
  • ceph: fix directories inode i_blkbits initialization (bsc#1153717).
  • ceph: reconnect connection if session hang in opening state (bsc#1153718).
  • ceph: update the mtime when truncating up (bsc#1153719).
  • cfg80211: Purge frame registrations on iftype change (bsc#1051510).
  • cfg80211: add and use strongly typed element iteration macros (bsc#1051510).
  • clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510).
  • clk: qoriq: Fix -Wunused-const-variable (bsc#1051510).
  • clk: sirf: Do not reference clk_init_data after registration (bsc#1051510).
  • clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510).
  • crypto: af_alg - Fix race around ctx->rcvused by making it atomic_t (bsc#1154737).
  • crypto: af_alg - Initialize sg_num_bytes in error code path (bsc#1051510).
  • crypto: af_alg - consolidation of duplicate code (bsc#1154737).
  • crypto: af_alg - fix race accessing cipher request (bsc#1154737).
  • crypto: af_alg - remove locking in async callback (bsc#1154737).
  • crypto: af_alg - update correct dst SGL entry (bsc#1051510).
  • crypto: af_alg - wait for data at beginning of recvmsg (bsc#1154737).
  • crypto: algif - return error code when no data was processed (bsc#1154737).
  • crypto: algif_aead - copy AAD from src to dst (bsc#1154737).
  • crypto: algif_aead - fix reference counting of null skcipher (bsc#1154737).
  • crypto: algif_aead - overhaul memory management (bsc#1154737).
  • crypto: algif_aead - skip SGL entries with NULL page (bsc#1154737).
  • crypto: algif_skcipher - overhaul memory management (bsc#1154737).
  • crypto: talitos - fix missing break in switch statement (bsc#1142635).
  • cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584).
  • cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129).
  • cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129).
  • cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513).
  • cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129).
  • cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05).
  • dasd_fba: Display '00000000' for zero page when dumping sense (bsc#1123080).
  • drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510).
  • drm/amdgpu/si: fix ASIC tests (git-fixes).
  • drm/amdgpu: Check for valid number of registers to read (bsc#1051510).
  • drm/ast: Fixed reboot test may cause system hanged (bsc#1051510).
  • drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510).
  • drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510).
  • drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
  • drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967)
  • drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
  • drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
  • drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967)
  • drm/i915/gtt: Disable read-only support under GVT (bsc#1135967)
  • drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967)
  • drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
  • drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
  • drm/i915: Allow parsing of unsized batches (bsc#1135967)
  • drm/i915: Disable Secure Batches for gen6+
  • drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
  • drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967)
  • drm/i915: Remove Master tables from cmdparser
  • drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
  • drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967)
  • drm/msm/dsi: Implement reset correctly (bsc#1051510).
  • drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510).
  • drm/radeon: Fix EEH during kexec (bsc#1051510).
  • drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510).
  • drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510).
  • drm: Flush output polling on shutdown (bsc#1051510).
  • e1000e: add workaround for possible stalled packet (bsc#1051510).
  • efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510).
  • efi: cper: print AER info of pcie fatal error (bsc#1051510).
  • efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510).
  • firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes).
  • gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510).
  • hid: apple: Fix stuck function keys when using FN (bsc#1051510).
  • hid: fix error message in hid_open_report() (bsc#1051510).
  • hid: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510).
  • hid: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510).
  • hid: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510).
  • hid: prodikeys: Fix general protection fault during probe (bsc#1051510).
  • hid: sony: Fix memory corruption issue on cleanup (bsc#1051510).
  • hso: fix NULL-deref on tty open (bsc#1051510).
  • hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510).
  • hwrng: core - do not wait on add_early_randomness() (git-fixes).
  • hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905).
  • i2c: riic: Clear NACK in tend isr (bsc#1051510).
  • ib/core, ipoib: Do not overreact to SM LID change event (bsc#1154108)
  • ib/core: Add mitigation for Spectre V1 (bsc#1155671)
  • ib/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449).
  • ib/mlx5: Consolidate use_umr checks into single function (bsc#1093205).
  • ib/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205).
  • ib/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305).
  • ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510).
  • ieee802154: ca8210: prevent memory leak (bsc#1051510).
  • ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
  • iio: adc: ad799x: fix probe error handling (bsc#1051510).
  • iio: light: opt3001: fix mutex unlock race (bsc#1051510).
  • ima: always return negative code for error (bsc#1051510).
  • input: da9063 - fix capability and drop KEY_SLEEP (bsc#1051510).
  • input: synaptics-rmi4 - avoid processing unknown IRQs (bsc#1051510).
  • integrity: prevent deadlock during digsig verification (bsc#1090631).
  • iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799).
  • iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608).
  • iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799).
  • iommu/amd: Remove domain->updated (bsc#1154610).
  • iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611).
  • ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510).
  • ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15).
  • ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05).
  • ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05).
  • ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674).
  • ixgbe: sync the first fragment unconditionally (bsc#1133140).
  • kABI workaround for crypto/af_alg changes (bsc#1154737).
  • kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967)
  • kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510).
  • kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code.
  • kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
  • kernel-binary: Drop .kernel-binary.spec.buildenv (boo#1154578).
  • kernel-binary: check also bzImage on s390/s390x Starting with 4.19-rc1, uncompressed image is no longer built on s390x.
  • kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case.
  • kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875).
  • ksm: cleanup stable_node chain collapse case (bnc#1144338).
  • ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338).
  • ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338).
  • ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338).
  • ksm: swap the two output parameters of chain/chain_prune (bnc#1144338).
  • kvm: Convert kvm_lock to a mutex (bsc#1117665).
  • kvm: MMU: drop vcpu param in gpte_access (bsc#1117665).
  • kvm: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840).
  • kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665).
  • kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665).
  • kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665).
  • kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665).
  • kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665).
  • kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665).
  • kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665).
  • kvm: x86: mmu: Recovery of shattered NX large pages (bsc#1117665, CVE-2018-12207).
  • kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665).
  • lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510).
  • libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510).
  • mISDN: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
  • mac80211: Reject malformed SSID elements (bsc#1051510).
  • mac80211: accept deauth frames in ibSS mode (bsc#1051510).
  • mac80211: fix txq null pointer dereference (bsc#1051510).
  • macsec: drop skb sk before calling gro_cells_receive (bsc#1051510).
  • md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090).
  • md/raid0: fix warning message for parameter default_layout (bsc#1140090).
  • media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642).
  • media: cpia2_usb: fix memory leaks (bsc#1051510).
  • media: dvb-core: fix a memory leak bug (bsc#1051510).
  • media: exynos4-is: fix leaked of_node references (bsc#1051510).
  • media: gspca: zero usb_buf on error (bsc#1051510).
  • media: hdpvr: Add device num check and handling (bsc#1051510).
  • media: hdpvr: add terminating 0 at end of string (bsc#1051510).
  • media: i2c: ov5645: Fix power sequence (bsc#1051510).
  • media: iguanair: add sanity checks (bsc#1051510).
  • media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510).
  • media: omap3isp: Set device on omap3isp subdevs (bsc#1051510).
  • media: ov9650: add a sanity check (bsc#1051510).
  • media: radio/si470x: kill urb on error (bsc#1051510).
  • media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510).
  • media: saa7146: add cleanup in hexium_attach() (bsc#1051510).
  • media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510).
  • media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510).
  • media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510).
  • mem: /dev/mem: Bail out upon SIGKILL (git-fixes).
  • memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510).
  • mfd: intel-lpss: Remove D3cold delay (bsc#1051510).
  • mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05).
  • mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510).
  • mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510).
  • mmc: sdhci: improve ADMA error reporting (bsc#1051510).
  • net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
  • net/mlx4_en: fix a memory leak bug (bsc#1046299).
  • net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ).
  • net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ).
  • net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30).
  • net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05).
  • net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
  • net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848).
  • net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30).
  • net: Fix null de-reference of device refcount (networking-stable-19_09_15).
  • net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612).
  • net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05).
  • net: fix skb use after free in netpoll (networking-stable-19_09_05).
  • net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15).
  • net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes).
  • net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05).
  • net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30).
  • net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
  • net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05).
  • net_sched: add policy validation for action attributes (networking-stable-19_09_30).
  • net_sched: fix