Security update for the Linux Kernel

Announcement ID: SUSE-SU-2019:2073-1
Rating: important
References:
Cross-References:
CVSS scores:
  • CVE-2018-20855 ( SUSE ): 5.1 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
  • CVE-2018-20855 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  • CVE-2018-20855 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  • CVE-2019-1125 ( SUSE ): 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  • CVE-2019-1125 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  • CVE-2019-11810 ( SUSE ): 3.9 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
  • CVE-2019-11810 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-11810 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-13631 ( SUSE ): 5.9 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
  • CVE-2019-13631 ( NVD ): 6.8 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CVE-2019-13648 ( SUSE ): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-13648 ( NVD ): 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-14283 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
  • CVE-2019-14283 ( NVD ): 6.8 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CVE-2019-14284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-14284 ( NVD ): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products:
  • Basesystem Module 15-SP1
  • Development Tools Module 15-SP1
  • Legacy Module 15-SP1
  • SUSE Linux Enterprise Desktop 15 SP1
  • SUSE Linux Enterprise High Availability Extension 15 SP1
  • SUSE Linux Enterprise High Performance Computing 15 SP1
  • SUSE Linux Enterprise Live Patching 15-SP1
  • SUSE Linux Enterprise Real Time 15 SP1
  • SUSE Linux Enterprise Server 15 SP1
  • SUSE Linux Enterprise Server 15 SP1 Business Critical Linux 15-SP1
  • SUSE Linux Enterprise Server for SAP Applications 15 SP1
  • SUSE Linux Enterprise Workstation Extension 15 SP1
  • SUSE Manager Proxy 4.0
  • SUSE Manager Retail Branch Server 4.0
  • SUSE Manager Server 4.0

An update that solves seven vulnerabilities and has 78 security fixes can now be installed.

Description:

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace(bsc#1143045).
  • CVE-2019-1125: Exclude ATOMs from speculation through SWAPGS (bsc#1139358).
  • CVE-2019-14283: In the Linux kernel, set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It could be triggered by an unprivileged local user when a floppy disk was inserted. NOTE: QEMU creates the floppy device by default. (bnc#1143191)
  • CVE-2019-11810: An issue was discovered in the Linux kernel A NULL pointer dereference could occur when megasas_create_frame_pool() failed in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This caused a Denial of Service, related to a use-after-free (bnc#1134399).
  • CVE-2019-13648: In the Linux kernel on the powerpc platform, when hardware transactional memory was disabled, a local user could cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sent a crafted signal frame. (bnc#1142254)
  • CVE-2019-13631: In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel, a malicious USB device could send an HID report that triggered an out-of-bounds write during generation of debugging messages. (bnc#1142023)

The following non-security bugs were fixed:

  • acpi/nfit: Always dump _DSM output payload (bsc#1142351).
  • Add back sibling paca poiter to paca (bsc#1055117).
  • Add support for crct10dif-vpmsum ().
  • af_unix: remove redundant lockdep class (git-fixes).
  • alsa: compress: Be more restrictive about when a drain is allowed (bsc#1051510).
  • alsa: compress: Do not allow paritial drain operations on capture streams (bsc#1051510).
  • alsa: compress: Fix regression on compressed capture streams (bsc#1051510).
  • alsa: compress: Prevent bypasses of set_params (bsc#1051510).
  • alsa: hda - Add a conexant codec entry to let mute led work (bsc#1051510).
  • alsa: hda - Do not resume forcibly i915 HDMI/DP codec (bsc#1111666).
  • alsa: hda - Fix intermittent CORB/RIRB stall on Intel chips (bsc#1111666).
  • alsa: hda/hdmi - Fix i915 reverse port/pin mapping (bsc#1111666).
  • alsa: hda/hdmi - Remove duplicated define (bsc#1111666).
  • alsa: hda - Optimize resume for codecs without jack detection (bsc#1111666).
  • alsa: hda/realtek: apply ALC891 headset fixup to one Dell machine (bsc#1051510).
  • alsa: hda/realtek - Fixed Headphone Mic can't record on Dell platform (bsc#1051510).
  • alsa: hda/realtek - Headphone Mic can't record after S3 (bsc#1051510).
  • alsa: line6: Fix a typo (bsc#1051510).
  • alsa: line6: Fix wrong altsetting for LINE6_PODHD500_1 (bsc#1051510).
  • alsa: seq: Break too long mutex context in the write loop (bsc#1051510).
  • alsa: usb-audio: Add quirk for Focusrite Scarlett Solo (bsc#1051510).
  • alsa: usb-audio: Add quirk for MOTU MicroBook II (bsc#1051510).
  • alsa: usb-audio: Cleanup DSD whitelist (bsc#1051510).
  • alsa: usb-audio: Enable .product_name override for Emagic, Unitor 8 (bsc#1051510).
  • alsa: usb-audio: fix Line6 Helix audio format rates (bsc#1111666).
  • alsa: usb-audio: Sanity checks for each pipe and EP types (bsc#1051510).
  • arm64: do not override dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • asoc : cs4265 : readable register too low (bsc#1051510).
  • asoc: max98090: remove 24-bit format support if RJ is 0 (bsc#1051510).
  • asoc: soc-pcm: BE dai needs prepare when pause release after resume (bsc#1051510).
  • ath10k: add missing error handling (bsc#1111666).
  • ath10k: add peer id check in ath10k_peer_find_by_id (bsc#1111666).
  • ath10k: destroy sdio workqueue while remove sdio module (bsc#1111666).
  • ath10k: Do not send probe response template for mesh (bsc#1111666).
  • ath10k: Fix encoding for protected management frames (bsc#1111666).
  • ath10k: fix incorrect multicast/broadcast rate setting (bsc#1111666).
  • ath10k: fix PCIE device wake up failed (bsc#1111666).
  • ath6kl: add some bounds checking (bsc#1051510).
  • ath9k: Check for errors when reading SREV register (bsc#1111666).
  • ath9k: correctly handle short radar pulses (bsc#1111666).
  • ath: DFS JP domain W56 fixed pulse type 3 RADAR detection (bsc#1111666).
  • batman-adv: fix for leaked TVLV handler (bsc#1051510).
  • bcache: acquire bch_register_lock later in cached_dev_detach_finish() (bsc#1140652).
  • bcache: acquire bch_register_lock later in cached_dev_free() (bsc#1140652).
  • bcache: add code comments for journal_read_bucket() (bsc#1140652).
  • bcache: Add comments for blkdev_put() in registration code path (bsc#1140652).
  • bcache: add comments for closure_fn to be called in closure_queue() (bsc#1140652).
  • bcache: add comments for kobj release callback routine (bsc#1140652).
  • bcache: add comments for mutex_lock(b->write_lock) (bsc#1140652).
  • bcache: add error check for calling register_bdev() (bsc#1140652).
  • bcache: add failure check to run_cache_set() for journal replay (bsc#1140652).
  • bcache: add io error counting in write_bdev_super_endio() (bsc#1140652).
  • bcache: add more error message in bch_cached_dev_attach() (bsc#1140652).
  • bcache: add pendings_cleanup to stop pending bcache device (bsc#1140652).
  • bcache: add reclaimed_journal_buckets to struct cache_set (bsc#1140652).
  • bcache: add return value check to bch_cached_dev_run() (bsc#1140652).
  • bcache: avoid a deadlock in bcache_reboot() (bsc#1140652).
  • bcache: avoid clang -Wunintialized warning (bsc#1140652).
  • bcache: avoid flushing btree node in cache_set_flush() if io disabled (bsc#1140652).
  • bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set (bsc#1140652).
  • bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bsc#1140652).
  • bcache: check CACHE_SET_IO_DISABLE in allocator code (bsc#1140652).
  • bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bsc#1140652).
  • bcache: Clean up bch_get_congested() (bsc#1140652).
  • bcache: destroy dc->writeback_write_wq if failed to create dc->writeback_thread (bsc#1140652).
  • bcache: do not assign in if condition in bcache_device_init() (bsc#1140652).
  • bcache: do not set max writeback rate if gc is running (bsc#1140652).
  • bcache: fix a race between cache register and cacheset unregister (bsc#1140652).
  • bcache: fix crashes stopping bcache device before read miss done (bsc#1140652).
  • bcache: fix failure in journal relplay (bsc#1140652).
  • bcache: fix inaccurate result of unused buckets (bsc#1140652).
  • bcache: fix mistaken sysfs entry for io_error counter (bsc#1140652).
  • bcache: fix potential deadlock in cached_def_free() (bsc#1140652).
  • bcache: fix race in btree_flush_write() (bsc#1140652).
  • bcache: fix return value error in bch_journal_read() (bsc#1140652).
  • bcache: fix stack corruption by PRECEDING_KEY() (bsc#1140652).
  • bcache: fix wrong usage use-after-freed on keylist in out_nocoalesce branch of btree_gc_coalesce (bsc#1140652).
  • bcache: ignore read-ahead request failure on backing device (bsc#1140652).
  • bcache: improve bcache_reboot() (bsc#1140652).
  • bcache: improve error message in bch_cached_dev_run() (bsc#1140652).
  • bcache: make bset_search_tree() be more understandable (bsc#1140652).
  • bcache: make is_discard_enabled() static (bsc#1140652).
  • bcache: more detailed error message to bcache_device_link() (bsc#1140652).
  • bcache: move definition of 'int ret' out of macro read_bucket() (bsc#1140652).
  • bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() (bsc#1140652).
  • bcache: only clear BTREE_NODE_dirty bit when it is set (bsc#1140652).
  • bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bsc#1140652).
  • bcache: performance improvement for btree_flush_write() (bsc#1140652).
  • bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
  • bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
  • bcache: remove retry_flush_write from struct cache_set (bsc#1140652).
  • bcache: remove unncessary code in bch_btree_keys_init() (bsc#1140652).
  • bcache: remove unnecessary prefetch() in bset_search_tree() (bsc#1140652).
  • bcache: return error immediately in bch_journal_replay() (bsc#1140652).
  • bcache: Revert "bcache: fix high CPU occupancy during journal" (bsc#1140652).
  • bcache: Revert "bcache: free heap cache_set->flush_btree in bch_journal_free" (bsc#1140652).
  • bcache: set largest seq to ja->seq[bucket_index] in journal_read_bucket() (bsc#1140652).
  • bcache: shrink btree node cache after bch_btree_check() (bsc#1140652).
  • bcache: stop writeback kthread and kworker when bch_cached_dev_run() failed (bsc#1140652).
  • bcache: use sysfs_match_string() instead of __sysfs_match_string() (bsc#1140652).
  • be2net: Fix number of Rx queues used for flow hashing (networking-stable-19_06_18).
  • be2net: Signal that the device cannot transmit during reconfiguration (bsc#1127315).
  • be2net: Synchronize be_update_queues with dev_watchdog (bsc#1127315).
  • block, bfq: NULL out the bic when it's no longer valid (bsc#1142359).
  • bnx2x: Prevent load reordering in tx completion processing (bsc#1142868).
  • bnxt_en: Cap the returned MSIX vectors to the RDMA driver (bsc#1134090 jsc#SLE-5954).
  • bnxt_en: Disable bus master during PCI shutdown and driver unload (bsc#1104745).
  • bnxt_en: Fix aggregation buffer leak under OOM condition (networking-stable-19_05_31).
  • bnxt_en: Fix statistics context reservation logic for RDMA driver (bsc#1104745).
  • bnxt_en: Suppress error messages when querying DSCP DCB capabilities (bsc#1104745).
  • bonding: fix arp_validate toggling in active-backup mode (networking-stable-19_05_14).
  • bonding: Force slave speed check after link state recovery for 802.3ad (bsc#1137584).
  • bpf: btf: fix the brackets of BTF_INT_OFFSET() (bsc#1083647).
  • bpf: fix callees pruning callers (bsc#1109837).
  • bpf: fix nested bpf tracepoints with per-cpu data (bsc#1083647).
  • bpf, x64: fix stack layout of JITed bpf code (bsc#1083647).
  • bpf, x64: save 5 bytes in prologue when ebpf insns came from cbpf (bsc#1083647).
  • bridge: Fix error path for kobject_init_and_add() (networking-stable-19_05_14).
  • btrfs: fix race between block group removal and block group allocation (bsc#1143003).
  • carl9170: fix misuse of device driver API (bsc#1111666).
  • cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (bsc#1141478).
  • clk: qcom: Fix -Wunused-const-variable (bsc#1051510).
  • clk: rockchip: Do not yell about bad mmc phases when getting (bsc#1051510).
  • clk: tegra210: fix PLLU and PLLU_OUT1 (bsc#1051510).
  • Correct iwlwifi 22000 series ucode file name (bsc#1142673)
  • Correct the buggy backport about AER / DPC pcie stuff (bsc#1142623)
  • cpufreq: acpi-cpufreq: Report if CPU does not support boost technologies (bsc#1051510).
  • cpufreq: brcmstb-avs-cpufreq: Fix initial command check (bsc#1051510).
  • cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency (bsc#1051510).
  • cpufreq: check if policy is inactive early in __cpufreq_get() (bsc#1051510).
  • cpufreq: kirkwood: fix possible object reference leak (bsc#1051510).
  • cpufreq/pasemi: fix possible object reference leak (bsc#1051510).
  • cpufreq: pmac32: fix possible object reference leak (bsc#1051510).
  • cpufreq: ppc_cbe: fix possible object reference leak (bsc#1051510).
  • cpufreq: Use struct kobj_attribute instead of struct global_attr (bsc#1051510).
  • crypto: arm64/sha1-ce - correct digest for empty data in finup (bsc#1051510).
  • crypto: arm64/sha2-ce - correct digest for empty data in finup (bsc#1051510).
  • crypto: ccp - Fix 3DES complaint from ccp-crypto module (bsc#1051510).
  • crypto: ccp - fix AES CFB error exposed by new test vectors (bsc#1051510).
  • crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL (bsc#1051510).
  • crypto: ccp/gcm - use const time tag comparison (bsc#1051510).
  • crypto: ccp - memset structure fields to zero before reuse (bsc#1051510).
  • crypto: ccp - Validate the the error value used to index error messages (bsc#1051510).
  • crypto: chacha20poly1305 - fix atomic sleep when using async algorithm (bsc#1051510).
  • crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe (bsc#1051510).
  • crypto: ghash - fix unaligned memory access in ghash_setkey() (bsc#1051510).
  • crypto: talitos - Align SEC1 accesses to 32 bits boundaries (bsc#1051510).
  • crypto: talitos - check data blocksize in ablkcipher (bsc#1051510).
  • crypto: talitos - fix CTR alg blocksize (bsc#1051510).
  • crypto: talitos - fix max key size for sha384 and sha512 (bsc#1051510).
  • crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking (bsc#1051510).
  • crypto: talitos - properly handle split ICV (bsc#1051510).
  • crypto: talitos - reduce max key size for SEC1 (bsc#1051510).
  • crypto: talitos - rename alternative AEAD algos (bsc#1051510).
  • dasd_fba: Display '00000000' for zero page when dumping sense (bsc#1123080).
  • Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
  • dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc (bsc#1111666).
  • dma-direct: add support for allocation from ZONE_DMA and ZONE_DMA32 (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • dma-direct: do not retry allocation for no-op GFP_DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • dma-direct: retry allocations using GFP_DMA for small masks (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width" (bsc#1051510).
  • dma-mapping: move dma_mark_clean to dma-direct.h (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • dma-mapping: move swiotlb arch helpers to a new header (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • dma-mapping: take dma_pfn_offset into account in dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • dpaa_eth: fix SG frame cleanup (networking-stable-19_05_14).
  • drm/amd/display: Make some functions static (bsc#1111666).
  • drm/atmel-hlcdc: revert shift by 8 (bsc#1111666).
  • drm/i915/cml: Introduce Comet Lake PCH (jsc#SLE-6681).
  • drm/i915/icl: Add WaDisableBankHangMode (bsc#1111666).
  • drm/meson: Add support for XBGR8888 & ABGR8888 formats (bsc#1051510).
  • drm/msm/a3xx: remove TPL1 regs from snapshot (bsc#1051510).
  • drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1111666).
  • drm/nouveau/i2c: Enable i2c pads & busses during preinit (bsc#1051510).
  • drm: return -EFAULT if copy_to_user() fails (bsc#1111666).
  • drm/rockchip: Properly adjust to a true clock in adjusted_mode (bsc#1051510).
  • drm/udl: introduce a macro to convert dev to udl (bsc#1111666).
  • drm/udl: move to embedding drm device inside udl device (bsc#1111666).
  • drm/udl: Replace drm_dev_unref with drm_dev_put (bsc#1111666).
  • drm/vc4: fix fb references in async update (bsc#1141312).
  • drm/vmwgfx: Honor the sg list segment size limitation (bsc#1111666).
  • e1000e: start network tx queue only when link is up (bsc#1051510).
  • Enable intel-speed-select driver and update supported.conf (jsc#SLE-5364)
  • ethtool: check the return value of get_regs_len (git-fixes).
  • ethtool: fix potential userspace buffer overflow (networking-stable-19_06_09).
  • Fix kABI for asus-wmi quirk_entry field addition (bsc#1051510).
  • Fix memory leak in sctp_process_init (networking-stable-19_06_09).
  • fork, memcg: fix cached_stacks case (bsc#1134097).
  • fork, memcg: fix crash in free_thread_stack on memcg charge fail (bsc#1134097).
  • fpga: add intel stratix10 soc fpga manager driver (jsc#SLE-7057).
  • fpga: stratix10-soc: fix use-after-free on s10_init() (jsc#SLE-7057).
  • fpga: stratix10-soc: fix wrong of_node_put() in init function (jsc#jsc#SLE-7057).
  • gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1111666).
  • hid: wacom: correct touch resolution x/y typo (bsc#1051510).
  • hid: wacom: generic: Correct pad syncing (bsc#1051510).
  • hid: wacom: generic: only switch the mode on devices with LEDs (bsc#1051510).
  • hid: wacom: generic: read HID_DG_CONTACTMAX from any feature report (bsc#1051510).
  • ib/ipoib: Add child to parent list only if device initialized (bsc#1103992).
  • ib/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE (bsc#1103991).
  • idr: fix overflow case for idr_for_each_entry_ul() (bsc#1109837).
  • input: elantech - enable middle button support on 2 ThinkPads (bsc#1051510).
  • input: imx_keypad - make sure keyboard can always wake up system (bsc#1051510).
  • input: psmouse - fix build error of multiple definition (bsc#1051510).
  • input: synaptics - enable SMBUS on T480 thinkpad trackpad (bsc#1051510).
  • input: tm2-touchkey - acknowledge that setting brightness is a blocking call (bsc#1129770).
  • intel_th: msu: Fix single mode with disabled IOMMU (bsc#1051510).
  • iommu-helper: mark iommu_is_span_boundary as inline (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • ipv4: Fix raw socket lookup for local traffic (networking-stable-19_05_14).
  • ipv4/igmp: fix another memory leak in igmpv3_del_delrec() (networking-stable-19_05_31).
  • ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST (networking-stable-19_05_31).
  • ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop (git-fixes).
  • ipv6: Consider sk_bound_dev_if when binding a raw socket to an address (networking-stable-19_05_31).
  • ipv6: fix EFAULT on sendto with icmpv6 and hdrincl (networking-stable-19_06_09).
  • ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero (networking-stable-19_06_18).
  • ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 (networking-stable-19_06_09).
  • iwlwifi: correct one of the PCI struct names (bsc#1111666).
  • iwlwifi: do not WARN when calling iwl_get_shared_mem_conf with RF-Kill (bsc#1111666).
  • iwlwifi: fix cfg structs for 22000 with different RF modules (bsc#1111666).
  • iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules (bsc#1111666).
  • iwlwifi: Fix double-free problems in iwl_req_fw_callback() (bsc#1111666).
  • iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices (bsc#1111666).
  • iwlwifi: mvm: Drop large non sta frames (bsc#1111666).
  • iwlwifi: pcie: do not service an interrupt that was masked (bsc#1111666).
  • iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1111666).
  • kabi fix for hda_codec.relaxed_resume flag (bsc#1111666).
  • kabi: Fix lost iommu-helper symbols on arm64 (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • kabi: mask changes made by basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • kabi: mask changes made by swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • kabi: mask changes made by use of DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • kabi: remove unused hcall definition (bsc#1140322 LTC#176270).
  • kbuild: use -flive-patching when CONFIG_LIVEPATCH is enabled (bsc#1071995).
  • kernel: jump label transformation performance (bsc#1137534 bsc#1137535 LTC#178058 LTC#178059).
  • kvm: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots (bsc#1133021).
  • kvm: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory (bsc#1133021).
  • kvm: mmu: Fix overflow on kvm mmu page limit calculation (bsc#1135335).
  • kvm/mmu: kABI fix for *_mmu_pages changes in struct kvm_arch (bsc#1135335).
  • kvm: polling: add architecture backend to disable polling (bsc#1119222).
  • kvm: s390: change default halt poll time to 50us (bsc#1119222).
  • kvm: s390: enable CONFIG_HAVE_kvm_NO_POLL (bsc#1119222) We need to enable CONFIG_HAVE_kvm_NO_POLL for bsc#1119222
  • kvm: s390: fix typo in parameter description (bsc#1119222).
  • kvm: s390: kABI Workaround for 'kvm_vcpu_stat' Add halt_no_poll_steal to kvm_vcpu_stat. Hide it from the kABI checker.
  • kvm: s390: kABI Workaround for 'lowcore' (bsc#1119222).
  • kvm: s390: provide kvm_arch_no_poll function (bsc#1119222).
  • kvm: svm/avic: Do not send AVIC doorbell to self (bsc#1140133).
  • kvm: SVM: Fix detection of AMD Errata 1096 (bsc#1142354).
  • lapb: fixed leak of control-blocks (networking-stable-19_06_18).
  • lib: fix stall in __bitmap_parselist() (bsc#1051510).
  • libnvdimm/namespace: Fix label tracking error (bsc#1142350).
  • libnvdimm/region: Register badblocks before namespaces (bsc#1143209).
  • lib/bitmap.c: make bitmap_parselist() thread-safe and much faster (bsc#1143507).
  • lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE (bsc#1051510).
  • livepatch: Remove duplicate warning about missing reliable stacktrace support (bsc#1071995).
  • livepatch: Use static buffer for debugging messages under rq lock (bsc#1071995).
  • llc: fix skb leak in llc_build_and_send_ui_pkt() (networking-stable-19_05_31).
  • mac80211: do not start any work during reconfigure flow (bsc#1111666).
  • mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() (bsc#1111666).
  • mac80211: free peer keys before vif down in mesh (bsc#1111666).
  • mac80211: mesh: fix RCU warning (bsc#1111666).
  • mac80211: only warn once on chanctx_conf being NULL (bsc#1111666).
  • media: cpia2_usb: first wake up, then free in disconnect (bsc#1135642).
  • media: marvell-ccic: fix DMA s/g desc number calculation (bsc#1051510).
  • media: s5p-mfc: Make additional clocks optional (bsc#1051510).
  • media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom() (bsc#1051510).
  • media: vivid: fix incorrect assignment operation when setting video mode (bsc#1051510).
  • mei: bus: need to unlink client before freeing (bsc#1051510).
  • mei: me: add denverton innovation engine device IDs (bsc#1051510).
  • mei: me: add gemini lake devices id (bsc#1051510).
  • memory: tegra: Fix integer overflow on tick value calculation (bsc#1051510).
  • memstick: Fix error cleanup path of memstick_init (bsc#1051510).
  • mfd: intel-lpss: Release IDA resources (bsc#1051510).
  • mips: fix an off-by-one in dma_capable (jsc#SLE-6197 bsc#1140559 LTC#173150).
  • mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed (bsc#1112374).
  • mmc: sdhci-pci: Try "cd" for card-detect lookup before using NULL (bsc#1051510).
  • mm: migrate: Fix reference check race between __find_get_block() and migration (bnc#1137609).
  • mm/nvdimm: add is_ioremap_addr and use that to check ioremap address (bsc#1140322 LTC#176270).
  • mm, page_alloc: fix has_unmovable_pages for HugePages (bsc#1127034).
  • mm: replace all open encodings for NUMA_NO_NODE (bsc#1140322 LTC#176270).
  • mt7601u: do not schedule rx_tasklet when the device has been disconnected (bsc#1111666).
  • mt7601u: fix possible memory leak when the device is disconnected (bsc#1111666).
  • neigh: fix use-after-free read in pneigh_get_next (networking-stable-19_06_18).
  • net/af_iucv: build proper skbs for HiperTransport (bsc#1142221 LTC#179332).
  • net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142112 bsc#1142221 LTC#179334 LTC#179332).
  • net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142221 LTC#179332).
  • net: avoid weird emergency message (networking-stable-19_05_21).
  • net: fec: fix the clk mismatch in failed_reset path (networking-stable-19_05_31).
  • netfilter: conntrack: fix calculation of next bucket number in early_drop (git-fixes).
  • net-gro: fix use-after-free read in napi_gro_frags() (networking-stable-19_05_31).
  • net: hns3: Fix inconsistent indenting (bsc#1140676).
  • net: hns: fix ICMP6 neighbor solicitation messages discard problem (bsc#1140676).
  • net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() (bsc#1140676).
  • net: hns: Fix loopback test failed at copper ports (bsc#1140676).
  • net: hns: Fix probabilistic memory overwrite when HNS driver initialized (bsc#1140676).
  • net: hns: fix unsigned comparison to less than zero (bsc#1140676).
  • net: hns: Fix WARNING when remove HNS driver with SMMU enabled (bsc#1140676).
  • net: hns: Use NAPI_POLL_WEIGHT for hns driver (bsc#1140676).
  • net/mlx4_core: Change the error print to info print (networking-stable-19_05_21).
  • net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_06_09).
  • net/mlx5: Allocate root ns memory using kzalloc to match kfree (networking-stable-19_05_31).
  • net/mlx5: Avoid double free in fs init error unwinding path (networking-stable-19_05_31).
  • net/mlx5e: Rx, Fix checksum calculation for new hardware (bsc#1127611).
  • net: mvneta: Fix err code path of probe (networking-stable-19_05_31).
  • net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value (networking-stable-19_05_31).
  • net: openvswitch: do not free vport if register_netdevice() is failed (networking-stable-19_06_18).
  • net/packet: fix memory leak in packet_set_ring() (git-fixes).
  • net: rds: fix memory leak in rds_ib_flush_mr_pool (networking-stable-19_06_09).
  • net: seeq: fix crash caused by not set dev.parent (networking-stable-19_05_14).
  • net: stmmac: fix reset gpio free missing (networking-stable-19_05_31).
  • net/tls: fix socket wmem accounting on fallback with netem (bsc#1109837).
  • net/tls: make sure offload also gets the keys wiped (bsc#1109837).
  • net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions (networking-stable-19_05_21).
  • nvme: fix memory leak caused by incorrect subsystem free (bsc#1143185).
  • ocfs2: add first lock wait time in locking_state (bsc#1134390).
  • ocfs2: add last unlock times in locking_state (bsc#1134390).
  • ocfs2: add locking filter debugfs file (bsc#1134390).
  • p54usb: Fix race between disconnect and firmware loading (bsc#1111666).
  • packet: Fix error path in packet_init (networking-stable-19_05_14).
  • packet: in recvmsg msg_name return at least sizeof sockaddr_ll (git-fixes).
  • pci/aer: Use cached AER Capability offset (bsc#1142623).
  • pci: Always allow probing with driver_override (bsc#1051510).
  • pci: hv: Add hv_pci_remove_slots() when we unload the driver (bsc#1142701).
  • pci: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (bsc#1142701).
  • pci: hv: Fix a memory leak in hv_eject_device_work() (bsc#1142701).
  • pci: hv: Fix a use-after-free bug in hv_eject_device_work() (bsc#1142701).
  • pci: hv: Fix return value check in hv_pci_assign_slots() (bsc#1142701).
  • pci: hv: Remove unused reason for refcount handler (bsc#1142701).
  • pci: hv: support reporting serial number as slot information (bsc#1142701).
  • pci/P2PDMA: Fix missing check for dma_virt_ops (bsc#1111666).
  • pci / PM: Use SMART_SUSPEND and LEAVE_SUSPENDED flags for PCIe ports (bsc#1142623).
  • pci/portdrv: Add #defines for AER and DPC Interrupt Message Number masks (bsc#1142623).
  • pci/portdrv: Consolidate comments (bsc#1142623).
  • pci/portdrv: Disable port driver in compat mode (bsc#1142623).
  • pci/portdrv: Remove pcie_portdrv_err_handler.slot_reset (bsc#1142623).
  • pci: portdrv: Restore PCI config state on slot reset (bsc#1142623).
  • pci/portdrv: Support PCIe services on subtractive decode bridges (bsc#1142623).
  • pci/portdrv: Use conventional Device ID table formatting (bsc#1142623).
  • pci: Return error if cannot probe VF (bsc#1051510).
  • pkey: Indicate old mkvp only if old and current mkvp are different (bsc#1137827 LTC#178090).
  • pktgen: do not sleep with the thread lock held (git-fixes).
  • platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ (bsc#1051510).
  • platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
  • platform/x86: intel_turbo_max_3: Remove restriction for HWP platforms (jsc#SLE-5439).
  • platform/x86: ISST: Add common API to register and handle ioctls (jsc#SLE-5364).
  • platform/x86: ISST: Add Intel Speed Select mailbox interface via MSRs (jsc#SLE-5364).
  • platform/x86: ISST: Add Intel Speed Select mailbox interface via PCI (jsc#SLE-5364).
  • platform/x86: ISST: Add Intel Speed Select mmio interface (jsc#SLE-5364).
  • platform/x86: ISST: Add Intel Speed Select PUNIT MSR interface (jsc#SLE-5364).
  • platform/x86: ISST: Add IOCTL to Translate Linux logical CPU to PUNIT CPU number (jsc#SLE-5364).
  • platform/x86: ISST: Restore state on resume (jsc#SLE-5364).
  • platform/x86: ISST: Store per CPU information (jsc#SLE-5364).
  • platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to critclk_systems DMI table (bsc#1051510).
  • powerpc/64s: Remove POWER9 DD1 support (bsc#1055117, LTC#159753, git-fixes).
  • powerpc/crypto: Use cheaper random numbers for crc-vpmsum self-test ().
  • powerpc/mm: Change function prototype (bsc#1055117).
  • powerpc/mm: Consolidate numa_enable check and min_common_depth check (bsc#1140322 LTC#176270).
  • powerpc/mm/drconf: Use NUMA_NO_NODE on failures instead of node 0 (bsc#1140322 LTC#176270).
  • powerpc/mm: Fix node look up with numa=off boot (bsc#1140322 LTC#176270).
  • powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call __ptep_set_access_flags directly (bsc#1055117).
  • powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang (bsc#1055117).
  • powerpc/mm/radix: Move function from radix.h to pgtable-radix.c (bsc#1055117).
  • powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails (bsc#1140322 LTC#176270).
  • powerpc/papr_scm: Update drc_pmem_unbind() to use H_SCM_UNBIND_ALL (bsc#1140322 LTC#176270).
  • powerpc/pseries: Update SCM hcall op-codes in hvcall.h (bsc#1140322 LTC#176270).
  • powerpc/watchpoint: Restore NV GPRs while returning from exception (bsc#1140945 bsc#1141401 bsc#1141402 bsc#1141452 bsc#1141453 bsc#1141454 LTC#178983 LTC#179191 LTC#179192 LTC#179193 LTC#179194 LTC#179195).
  • ppc: Convert mmu context allocation to new IDA API (bsc#1139619 LTC#178538).
  • ppp: deflate: Fix possible crash in deflate_init (networking-stable-19_05_21).
  • qed: Fix build error without CONFIG_DEVLINK (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
  • qed: F