{"id":"CVE-2017-7482","aliases":["DEBIAN-CVE-2017-7482","DLA-1099-1","DSA-3927-1","DSA-3945-1","EUVD-2017-16502","GHSA-2x6j-879g-gpqr","RHSA-2019:0641","SUSE-SU-2017:2342-1","SUSE-SU-2017:2389-1","SUSE-SU-2017:2525-1","SUSE-SU-2017:2908-1","SUSE-SU-2017:2920-1","SUSE-SU-2017:3398-1","SUSE-SU-2017:3410-1","SUSE-SU-2018:0213-1","UBUNTU-CVE-2017-7482","USN-3377-2","USN-3378-1","USN-3378-2","USN-3381-1"],"status":"published","title":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys...","description":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.","severity":{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0047,"percentile":0.40895,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2017-06-27T00:00:00Z","modified":"2026-09-01T20:03:50Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.11.11-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.11.11-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.11.11-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-126.175"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","fixed_in":["4.4.0-89.112~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux","fixed_in":["4.4.0-89.112"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1028.37"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-gke","fixed_in":["4.4.0-1024.24"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","fixed_in":["4.10.0-32.36~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","fixed_in":["4.4.0-1067.75"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","fixed_in":["4.4.0-1069.74"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.11-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.11-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.11-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.93-1"}]}],"versions":["3.2.41-2","3.2.41-2+deb7u1","3.2.41-2+deb7u2","3.2.41-2+deb7u2~bpo60+1","3.2.46-1","3.2.46-1+deb7u1","3.2.46-1+deb7u1~bpo60+1","3.2.46-1~bpo60+1","3.2.51-1","3.2.51-1~bpo60+1","3.2.53-1","3.2.53-2","3.2.54-1","3.2.54-2","3.2.54-2~bpo60+1","3.2.57-1","3.2.57-2","3.2.57-3","3.2.57-3+deb7u1","3.2.57-3+deb7u2","3.2.57-3+deb7u2~bpo60+1","3.2.60-1","3.2.60-1+deb7u1","3.2.60-1+deb7u2","3.2.60-1+deb7u3","3.2.60-1+deb7u3~bpo60+1","3.2.63-1","3.2.63-2","3.2.63-2+deb7u1","3.2.63-2+deb7u1~bpo60+1","3.2.63-2+deb7u2","3.2.63-2+deb7u2~bpo60+1","3.2.65-1","3.2.65-1+deb7u1","3.2.65-1+deb7u1~bpo60+1","3.2.65-1+deb7u2","3.2.65-1+deb7u2~bpo60+1","3.2.68-1","3.2.68-1+deb7u1","3.2.68-1+deb7u1~bpo60+1","3.2.68-1+deb7u2","3.2.68-1+deb7u2~bpo60+1","3.2.68-1+deb7u3","3.2.68-1+deb7u3~bpo60+1","3.2.68-1+deb7u4","3.2.68-1+deb7u4~bpo60+1","3.2.68-1+deb7u5","3.2.68-1+deb7u6","3.2.68-1+deb7u6~bpo60+1","3.2.71-1","3.2.71-2","3.2.73-1","3.2.73-2","3.2.73-2+deb7u1","3.2.73-2+deb7u2","3.2.73-2+deb7u2~bpo60+1","3.2.73-2+deb7u3","3.2.78-1","3.2.81-1","3.2.81-2","3.2.82-1","3.2.84-1","3.2.84-2","3.2.86-1","3.2.88-1","3.2.89-1","3.2.89-2"],"bundled":20},{"source":"osv","ecosystem":"Debian:9","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.30-2+deb9u3"}]}],"versions":["4.9.30-2","4.9.30-2+deb9u1","4.9.30-2+deb9u2","4.9.30-2+deb9u2~bpo8+1"],"bundled":10},{"source":"osv","ecosystem":"Debian:8","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.43-2+deb8u3"}]}],"versions":["3.16.36-1","3.16.36-1+deb8u1","3.16.36-1+deb8u1~bpo70+1","3.16.36-1+deb8u2","3.16.36-1+deb8u2~bpo70+1","3.16.39-1","3.16.39-1+deb8u1","3.16.39-1+deb8u1~bpo70+1","3.16.39-1+deb8u1~bpo70+1+gcc4.4","3.16.39-1+deb8u2","3.16.39-1~bpo70+1","3.16.43-1","3.16.43-2","3.16.43-2+deb8u1","3.16.43-2+deb8u2","3.16.7-ckt11-1","3.16.7-ckt11-1+deb8u1","3.16.7-ckt11-1+deb8u2","3.16.7-ckt11-1+deb8u2~bpo70+1","3.16.7-ckt11-1+deb8u3","3.16.7-ckt11-1+deb8u3~bpo70+1","3.16.7-ckt11-1+deb8u4","3.16.7-ckt11-1+deb8u4~bpo70+1","3.16.7-ckt11-1+deb8u5","3.16.7-ckt11-1+deb8u6","3.16.7-ckt11-1+deb8u6~bpo70+1","3.16.7-ckt11-1~bpo70+1","3.16.7-ckt17-1","3.16.7-ckt20-1","3.16.7-ckt20-1+deb8u1","3.16.7-ckt20-1+deb8u2","3.16.7-ckt20-1+deb8u2~bpo70+1","3.16.7-ckt20-1+deb8u3","3.16.7-ckt20-1+deb8u3~bpo70+1","3.16.7-ckt20-1+deb8u4","3.16.7-ckt20-1+deb8u4~bpo70+1","3.16.7-ckt25-1","3.16.7-ckt25-1~bpo70+1","3.16.7-ckt25-2","3.16.7-ckt25-2+deb8u1","3.16.7-ckt25-2+deb8u2","3.16.7-ckt25-2+deb8u3","3.16.7-ckt25-2+deb8u3~bpo70+1","3.16.7-ckt25-2~bpo70+1","3.16.7-ckt9-2","3.16.7-ckt9-3","3.16.7-ckt9-3~deb8u1","3.16.7-ckt9-3~deb8u1~bpo70+1"],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-693.46.1.rt56.639.el6rt"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-69.5.1"}]}],"bundled":43},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-rt_trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-69.5.1"}]}],"bundled":43},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-69.5.1"}]}],"bundled":43},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-69.5.1"}]}],"bundled":43},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.2"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 11 SP4","package":"cluster-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-2.32.2.14"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 11 SP4","package":"drbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.4-0.27.2.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 11 SP4","package":"drbd-kmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.4-0.27.2.13"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 11 SP4","package":"gfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2-0.24.2.14"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 11 SP4","package":"ocfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-0.28.3.4"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"cluster-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-2.32.2.14"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"drbd-kmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.4-0.27.2.13"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"gfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2-0.24.2.14"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"ocfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-0.28.3.4"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-bigmem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-bigmem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-108.7.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.106.5.1"}]}],"bundled":40},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"kgraft-patch-SLE12-SP1_Update_22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kgraft-patch-SLE12-SP1_Update_22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.63.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"kgraft-patch-SLE12-SP1_Update_22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.101.1"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.101.1"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.101.1"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.101.1"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.101.1"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kgraft-patch-SLE12_Update_28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-8.1"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12 SP3","package":"kgraft-patch-SLE12-SP3_Update_6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-4.3.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-6.33.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12-SP2_Update_16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-3.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.103-92.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP2","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.104-24.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP2","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.104-24.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP2","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.104-24.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 12 SP2","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.104-24.1"}]}],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-126.175"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131","3.13.0-87.133","3.13.0-88.135","3.13.0-91.138","3.13.0-92.139","3.13.0-93.140","3.13.0-95.142","3.13.0-96.143","3.13.0-98.145","3.13.0-100.147","3.13.0-101.148","3.13.0-103.150","3.13.0-105.152","3.13.0-106.153","3.13.0-107.154","3.13.0-108.155","3.13.0-109.156","3.13.0-110.157","3.13.0-111.158","3.13.0-112.159","3.13.0-113.160","3.13.0-115.162","3.13.0-116.163","3.13.0-117.164","3.13.0-119.166","3.13.0-121.170","3.13.0-123.172","3.13.0-125.174"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-89.112~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1","4.4.0-34.53~14.04.1","4.4.0-36.55~14.04.1","4.4.0-38.57~14.04.1","4.4.0-42.62~14.04.1","4.4.0-45.66~14.04.1","4.4.0-47.68~14.04.1","4.4.0-51.72~14.04.1","4.4.0-53.74~14.04.1","4.4.0-57.78~14.04.1","4.4.0-59.80~14.04.1","4.4.0-62.83~14.04.1","4.4.0-63.84~14.04.2","4.4.0-64.85~14.04.1","4.4.0-66.87~14.04.1","4.4.0-67.88~14.04.1","4.4.0-70.91~14.04.1","4.4.0-71.92~14.04.1","4.4.0-72.93~14.04.1","4.4.0-75.96~14.04.1","4.4.0-78.99~14.04.2","4.4.0-79.100~14.04.1","4.4.0-81.104~14.04.1","4.4.0-83.106~14.04.1","4.4.0-87.110~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-89.112"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1028.37"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1024.24"}]}],"versions":["4.4.0-1003.3","4.4.0-1005.6","4.4.0-1006.6","4.4.0-1008.8","4.4.0-1009.9","4.4.0-1010.10","4.4.0-1012.12","4.4.0-1013.13","4.4.0-1014.14","4.4.0-1016.16","4.4.0-1018.18","4.4.0-1022.22"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.0-32.36~16.04.1"}]}],"versions":["4.8.0-36.36~16.04.1","4.8.0-39.42~16.04.1","4.8.0-41.44~16.04.1","4.8.0-42.45~16.04.1","4.8.0-44.47~16.04.1","4.8.0-45.48~16.04.1","4.8.0-46.49~16.04.1","4.8.0-49.52~16.04.1","4.8.0-51.54~16.04.1","4.8.0-52.55~16.04.1","4.8.0-53.56~16.04.1","4.8.0-54.57~16.04.1","4.8.0-56.61~16.04.1","4.8.0-58.63~16.04.1","4.10.0-27.30~16.04.2","4.10.0-28.32~16.04.2","4.10.0-30.34~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1067.75"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23","4.4.0-1019.25","4.4.0-1021.27","4.4.0-1023.29","4.4.0-1027.33","4.4.0-1029.36","4.4.0-1034.41","4.4.0-1038.45","4.4.0-1040.47","4.4.0-1042.49","4.4.0-1044.51","4.4.0-1046.53","4.4.0-1048.55","4.4.0-1050.57","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1055.62","4.4.0-1057.64","4.4.0-1059.67","4.4.0-1061.69","4.4.0-1065.73"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1069.74"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23","4.4.0-1022.25","4.4.0-1024.27","4.4.0-1026.29","4.4.0-1030.33","4.4.0-1032.36","4.4.0-1035.39","4.4.0-1039.43","4.4.0-1042.46","4.4.0-1044.48","4.4.0-1046.50","4.4.0-1047.51","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1051.55","4.4.0-1053.57","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1057.61","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1061.66","4.4.0-1063.68","4.4.0-1067.72"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.0-30.34~16.04.1"}]}],"versions":["4.8.0-36.36~16.04.1","4.8.0-39.42~16.04.1","4.8.0-41.44~16.04.1","4.8.0-42.45~16.04.1","4.8.0-44.47~16.04.1","4.8.0-45.48~16.04.1","4.8.0-46.49~16.04.1","4.8.0-49.52~16.04.1","4.8.0-51.54~16.04.1","4.8.0-52.55~16.04.1","4.8.0-53.56~16.04.1","4.8.0-54.57~16.04.1","4.8.0-56.61~16.04.1","4.8.0-58.63~16.04.1","4.10.0-27.30~16.04.2","4.10.0-28.32~16.04.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-89.112"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1028.37"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1024.24"}]}],"versions":["4.4.0-1003.3","4.4.0-1005.6","4.4.0-1006.6","4.4.0-1008.8","4.4.0-1009.9","4.4.0-1010.10","4.4.0-1012.12","4.4.0-1013.13","4.4.0-1014.14","4.4.0-1016.16","4.4.0-1018.18","4.4.0-1022.22"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1067.75"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23","4.4.0-1019.25","4.4.0-1021.27","4.4.0-1023.29","4.4.0-1027.33","4.4.0-1029.36","4.4.0-1034.41","4.4.0-1038.45","4.4.0-1040.47","4.4.0-1042.49","4.4.0-1044.51","4.4.0-1046.53","4.4.0-1048.55","4.4.0-1050.57","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1055.62","4.4.0-1057.64","4.4.0-1059.67","4.4.0-1061.69","4.4.0-1065.73"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1069.74"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23","4.4.0-1022.25","4.4.0-1024.27","4.4.0-1026.29","4.4.0-1030.33","4.4.0-1032.36","4.4.0-1035.39","4.4.0-1039.43","4.4.0-1042.46","4.4.0-1044.48","4.4.0-1046.50","4.4.0-1047.51","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1051.55","4.4.0-1053.57","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1057.61","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1061.66","4.4.0-1063.68","4.4.0-1067.72"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-89.112~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1","4.4.0-34.53~14.04.1","4.4.0-36.55~14.04.1","4.4.0-38.57~14.04.1","4.4.0-42.62~14.04.1","4.4.0-45.66~14.04.1","4.4.0-47.68~14.04.1","4.4.0-51.72~14.04.1","4.4.0-53.74~14.04.1","4.4.0-57.78~14.04.1","4.4.0-59.80~14.04.1","4.4.0-62.83~14.04.1","4.4.0-63.84~14.04.2","4.4.0-64.85~14.04.1","4.4.0-66.87~14.04.1","4.4.0-67.88~14.04.1","4.4.0-70.91~14.04.1","4.4.0-71.92~14.04.1","4.4.0-72.93~14.04.1","4.4.0-75.96~14.04.1","4.4.0-78.99~14.04.2","4.4.0-79.100~14.04.1","4.4.0-81.104~14.04.1","4.4.0-83.106~14.04.1","4.4.0-87.110~14.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-126.175"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131","3.13.0-87.133","3.13.0-88.135","3.13.0-91.138","3.13.0-92.139","3.13.0-93.140","3.13.0-95.142","3.13.0-96.143","3.13.0-98.145","3.13.0-100.147","3.13.0-101.148","3.13.0-103.150","3.13.0-105.152","3.13.0-106.153","3.13.0-107.154","3.13.0-108.155","3.13.0-109.156","3.13.0-110.157","3.13.0-111.158","3.13.0-112.159","3.13.0-113.160","3.13.0-115.162","3.13.0-116.163","3.13.0-117.164","3.13.0-119.166","3.13.0-121.170","3.13.0-123.172","3.13.0-125.174"],"bundled":4}],"products":[{"vendor":"[unknown]","product":"kernel:"},{"vendor":"debian","product":"debian_linux"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"redhat","product":"enterprise_mrg"},{"vendor":"the linux foundation","product":"kernel:"}],"references":[{"url":"http://www.securityfocus.com/bid/99299","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5f2f97656ada8d811d3c1bef503ced266fcd53a0","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"http://www.securitytracker.com/id/1038787","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3927","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3945","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7482","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://seclists.org/oss-sec/2017/q2/602","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix","report"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0641","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7482","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2x6j-879g-gpqr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-7482","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1551051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1674935","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0641.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7482","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7482","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5803","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5803","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10902","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10902","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12929","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12930","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12930","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12930","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12931","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12931","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12931","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172342-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1003077","tags":["report"]},{"url":"https://bugzilla.suse.com/1005651","tags":["report"]},{"url":"https://bugzilla.suse.com/1008374","tags":["report"]},{"url":"https://bugzilla.suse.com/1008850","tags":["report"]},{"url":"https://bugzilla.suse.com/1008893","tags":["report"]},{"url":"https://bugzilla.suse.com/1012422","tags":["report"]},{"url":"https://bugzilla.suse.com/1013018","tags":["report"]},{"url":"https://bugzilla.suse.com/1013070","tags":["report"]},{"url":"https://bugzilla.suse.com/1013800","tags":["report"]},{"url":"https://bugzilla.suse.com/1013862","tags":["report"]},{"url":"https://bugzilla.suse.com/1016489","tags":["report"]},{"url":"https://bugzilla.suse.com/1017143","tags":["report"]},{"url":"https://bugzilla.suse.com/1018074","tags":["report"]},{"url":"https://bugzilla.suse.com/1018263","tags":["report"]},{"url":"https://bugzilla.suse.com/1018446","tags":["report"]},{"url":"https://bugzilla.suse.com/1019168","tags":["report"]},{"url":"https://bugzilla.suse.com/1020229","tags":["report"]},{"url":"https://bugzilla.suse.com/1021256","tags":["report"]},{"url":"https://bugzilla.suse.com/1021913","tags":["report"]},{"url":"https://bugzilla.suse.com/1022971","tags":["report"]},{"url":"https://bugzilla.suse.com/1023014","tags":["report"]},{"url":"https://bugzilla.suse.com/1023051","tags":["report"]},{"url":"https://bugzilla.suse.com/1023163","tags":["report"]},{"url":"https://bugzilla.suse.com/1023888","tags":["report"]},{"url":"https://bugzilla.suse.com/1024508","tags":["report"]},{"url":"https://bugzilla.suse.com/1024788","tags":["report"]},{"url":"https://bugzilla.suse.com/1024938","tags":["report"]},{"url":"https://bugzilla.suse.com/1025235","tags":["report"]},{"url":"https://bugzilla.suse.com/1025702","tags":["report"]},{"url":"https://bugzilla.suse.com/1026024","tags":["report"]},{"url":"https://bugzilla.suse.com/1026260","tags":["report"]},{"url":"https://bugzilla.suse.com/1026722","tags":["report"]},{"url":"https://bugzilla.suse.com/1026914","tags":["report"]},{"url":"https://bugzilla.suse.com/1027066","tags":["report"]},{"url":"https://bugzilla.suse.com/1027101","tags":["report"]},{"url":"https://bugzilla.suse.com/1027178","tags":["report"]},{"url":"https://bugzilla.suse.com/1027565","tags":["report"]},{"url":"https://bugzilla.suse.com/1028372","tags":["report"]},{"url":"https://bugzilla.suse.com/1028415","tags":["report"]},{"url":"https://bugzilla.suse.com/1028880","tags":["report"]},{"url":"https://bugzilla.suse.com/1029140","tags":["report"]},{"url":"https://bugzilla.suse.com/1029212","tags":["report"]},{"url":"https://bugzilla.suse.com/1029770","tags":["report"]},{"url":"https://bugzilla.suse.com/1029850","tags":["report"]},{"url":"https://bugzilla.suse.com/1030213","tags":["report"]},{"url":"https://bugzilla.suse.com/1030552","tags":["report"]},{"url":"https://bugzilla.suse.com/1030573","tags":["report"]},{"url":"https://bugzilla.suse.com/1030593","tags":["report"]},{"url":"https://bugzilla.suse.com/1030814","tags":["report"]},{"url":"https://bugzilla.suse.com/1031003","tags":["report"]},{"url":"https://bugzilla.suse.com/1031052","tags":["report"]},{"url":"https://bugzilla.suse.com/1031440","tags":["report"]},{"url":"https://bugzilla.suse.com/1031579","tags":["report"]},{"url":"https://bugzilla.suse.com/1032141","tags":["report"]},{"url":"https://bugzilla.suse.com/1032340","tags":["report"]},{"url":"https://bugzilla.suse.com/1032471","tags":["report"]},{"url":"https://bugzilla.suse.com/1033287","tags":["report"]},{"url":"https://bugzilla.suse.com/1033336","tags":["report"]},{"url":"https://bugzilla.suse.com/1033771","tags":["report"]},{"url":"https://bugzilla.suse.com/1033794","tags":["report"]},{"url":"https://bugzilla.suse.com/1033804","tags":["report"]},{"url":"https://bugzilla.suse.com/1033816","tags":["report"]},{"url":"https://bugzilla.suse.com/1034026","tags":["report"]},{"url":"https://bugzilla.suse.com/1034670","tags":["report"]},{"url":"https://bugzilla.suse.com/1035576","tags":["report"]},{"url":"https://bugzilla.suse.com/1035777","tags":["report"]},{"url":"https://bugzilla.suse.com/1035920","tags":["report"]},{"url":"https://bugzilla.suse.com/1036056","tags":["report"]},{"url":"https://bugzilla.suse.com/1036288","tags":["report"]},{"url":"https://bugzilla.suse.com/1036629","tags":["report"]},{"url":"https://bugzilla.suse.com/1037182","tags":["report"]},{"url":"https://bugzilla.suse.com/1037183","tags":["report"]},{"url":"https://bugzilla.suse.com/1037191","tags":["report"]},{"url":"https://bugzilla.suse.com/1037193","tags":["report"]},{"url":"https://bugzilla.suse.com/1037227","tags":["report"]},{"url":"https://bugzilla.suse.com/1037232","tags":["report"]},{"url":"https://bugzilla.suse.com/1037233","tags":["report"]},{"url":"https://bugzilla.suse.com/1037356","tags":["report"]},{"url":"https://bugzilla.suse.com/1037358","tags":["report"]},{"url":"https://bugzilla.suse.com/1037359","tags":["report"]},{"url":"https://bugzilla.suse.com/1037441","tags":["report"]},{"url":"https://bugzilla.suse.com/1038544","tags":["report"]},{"url":"https://bugzilla.suse.com/1038879","tags":["report"]},{"url":"https://bugzilla.suse.com/1038981","tags":["report"]},{"url":"https://bugzilla.suse.com/1038982","tags":["report"]},{"url":"https://bugzilla.suse.com/1039258","tags":["report"]},{"url":"https://bugzilla.suse.com/1039348","tags":["report"]},{"url":"https://bugzilla.suse.com/1039354","tags":["report"]},{"url":"https://bugzilla.suse.com/1039456","tags":["report"]},{"url":"https://bugzilla.suse.com/1039594","tags":["report"]},{"url":"https://bugzilla.suse.com/1039882","tags":["report"]},{"url":"https://bugzilla.suse.com/1039883","tags":["report"]},{"url":"https://bugzilla.suse.com/1039885","tags":["report"]},{"url":"https://bugzilla.suse.com/1040069","tags":["report"]},{"url":"https://bugzilla.suse.com/1040351","tags":["report"]},{"url":"https://bugzilla.suse.com/1041160","tags":["report"]},{"url":"https://bugzilla.suse.com/1041431","tags":["report"]},{"url":"https://bugzilla.suse.com/1041762","tags":["report"]},{"url":"https://bugzilla.suse.com/1041975","tags":["report"]},{"url":"https://bugzilla.suse.com/1042045","tags":["report"]},{"url":"https://bugzilla.suse.com/1042200","tags":["report"]},{"url":"https://bugzilla.suse.com/1042615","tags":["report"]},{"url":"https://bugzilla.suse.com/1042633","tags":["report"]},{"url":"https://bugzilla.suse.com/1042687","tags":["report"]},{"url":"https://bugzilla.suse.com/1042832","tags":["report"]},{"url":"https://bugzilla.suse.com/1043014","tags":["report"]},{"url":"https://bugzilla.suse.com/1043234","tags":["report"]},{"url":"https://bugzilla.suse.com/1043935","tags":["report"]},{"url":"https://bugzilla.suse.com/1044015","tags":["report"]},{"url":"https://bugzilla.suse.com/1044125","tags":["report"]},{"url":"https://bugzilla.suse.com/1044216","tags":["report"]},{"url":"https://bugzilla.suse.com/1044230","tags":["report"]},{"url":"https://bugzilla.suse.com/1044854","tags":["report"]},{"url":"https://bugzilla.suse.com/1044882","tags":["report"]},{"url":"https://bugzilla.suse.com/1044913","tags":["report"]},{"url":"https://bugzilla.suse.com/1044985","tags":["report"]},{"url":"https://bugzilla.suse.com/1045154","tags":["report"]},{"url":"https://bugzilla.suse.com/1045340","tags":["report"]},{"url":"https://bugzilla.suse.com/1045356","tags":["report"]},{"url":"https://bugzilla.suse.com/1045406","tags":["report"]},{"url":"https://bugzilla.suse.com/1045416","tags":["report"]},{"url":"https://bugzilla.suse.com/1045525","tags":["report"]},{"url":"https://bugzilla.suse.com/1045538","tags":["report"]},{"url":"https://bugzilla.suse.com/1045547","tags":["report"]},{"url":"https://bugzilla.suse.com/1045615","tags":["report"]},{"url":"https://bugzilla.suse.com/1046107","tags":["report"]},{"url":"https://bugzilla.suse.com/1046122","tags":["report"]},{"url":"https://bugzilla.suse.com/1046192","tags":["report"]},{"url":"https://bugzilla.suse.com/1046715","tags":["report"]},{"url":"https://bugzilla.suse.com/1047027","tags":["report"]},{"url":"https://bugzilla.suse.com/1047053","tags":["report"]},{"url":"https://bugzilla.suse.com/1047343","tags":["report"]},{"url":"https://bugzilla.suse.com/1047354","tags":["report"]},{"url":"https://bugzilla.suse.com/1047487","tags":["report"]},{"url":"https://bugzilla.suse.com/1047523","tags":["report"]},{"url":"https://bugzilla.suse.com/1047653","tags":["report"]},{"url":"https://bugzilla.suse.com/1048185","tags":["report"]},{"url":"https://bugzilla.suse.com/1048221","tags":["report"]},{"url":"https://bugzilla.suse.com/1048232","tags":["report"]},{"url":"https://bugzilla.suse.com/1048275","tags":["report"]},{"url":"https://bugzilla.suse.com/1049483","tags":["report"]},{"url":"https://bugzilla.suse.com/1049603","tags":["report"]},{"url":"https://bugzilla.suse.com/1049688","tags":["report"]},{"url":"https://bugzilla.suse.com/1049882","tags":["report"]},{"url":"https://bugzilla.suse.com/1050154","tags":["report"]},{"url":"https://bugzilla.suse.com/1050431","tags":["report"]},{"url":"https://bugzilla.suse.com/1051478","tags":["report"]},{"url":"https://bugzilla.suse.com/1051515","tags":["report"]},{"url":"https://bugzilla.suse.com/1051770","tags":["report"]},{"url":"https://bugzilla.suse.com/784815","tags":["report"]},{"url":"https://bugzilla.suse.com/792863","tags":["report"]},{"url":"https://bugzilla.suse.com/799133","tags":["report"]},{"url":"https://bugzilla.suse.com/870618","tags":["report"]},{"url":"https://bugzilla.suse.com/909486","tags":["report"]},{"url":"https://bugzilla.suse.com/909618","tags":["report"]},{"url":"https://bugzilla.suse.com/911105","tags":["report"]},{"url":"https://bugzilla.suse.com/919382","tags":["report"]},{"url":"https://bugzilla.suse.com/928138","tags":["report"]},{"url":"https://bugzilla.suse.com/931620","tags":["report"]},{"url":"https://bugzilla.suse.com/938352","tags":["report"]},{"url":"https://bugzilla.suse.com/943786","tags":["report"]},{"url":"https://bugzilla.suse.com/948562","tags":["report"]},{"url":"https://bugzilla.suse.com/962257","tags":["report"]},{"url":"https://bugzilla.suse.com/970956","tags":["report"]},{"url":"https://bugzilla.suse.com/971975","tags":["report"]},{"url":"https://bugzilla.suse.com/972891","tags":["report"]},{"url":"https://bugzilla.suse.com/979021","tags":["report"]},{"url":"https://bugzilla.suse.com/982783","tags":["report"]},{"url":"https://bugzilla.suse.com/983212","tags":["report"]},{"url":"https://bugzilla.suse.com/985561","tags":["report"]},{"url":"https://bugzilla.suse.com/986362","tags":["report"]},{"url":"https://bugzilla.suse.com/986365","tags":["report"]},{"url":"https://bugzilla.suse.com/986924","tags":["report"]},{"url":"https://bugzilla.suse.com/988065","tags":["report"]},{"url":"https://bugzilla.suse.com/989056","tags":["report"]},{"url":"https://bugzilla.suse.com/990682","tags":["report"]},{"url":"https://bugzilla.suse.com/991651","tags":["report"]},{"url":"https://bugzilla.suse.com/995542","tags":["report"]},{"url":"https://bugzilla.suse.com/999245","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9242","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172389-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000365","tags":["report"]},{"url":"https://bugzilla.suse.com/1000380","tags":["report"]},{"url":"https://bugzilla.suse.com/1015452","tags":["report"]},{"url":"https://bugzilla.suse.com/1035721","tags":["report"]},{"url":"https://bugzilla.suse.com/1042863","tags":["report"]},{"url":"https://bugzilla.suse.com/1045479","tags":["report"]},{"url":"https://bugzilla.suse.com/1045487","tags":["report"]},{"url":"https://bugzilla.suse.com/1049128","tags":["report"]},{"url":"https://bugzilla.suse.com/1055680","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10277","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172525-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1006919","tags":["report"]},{"url":"https://bugzilla.suse.com/1025013","tags":["report"]},{"url":"https://bugzilla.suse.com/1027179","tags":["report"]},{"url":"https://bugzilla.suse.com/1027406","tags":["report"]},{"url":"https://bugzilla.suse.com/1030575","tags":["report"]},{"url":"https://bugzilla.suse.com/1031481","tags":["report"]},{"url":"https://bugzilla.suse.com/1031660","tags":["report"]},{"url":"https://bugzilla.suse.com/1034838","tags":["report"]},{"url":"https://bugzilla.suse.com/1037994","tags":["report"]},{"url":"https://bugzilla.suse.com/1038564","tags":["report"]},{"url":"https://bugzilla.suse.com/1038883","tags":["report"]},{"url":"https://bugzilla.suse.com/1039349","tags":["report"]},{"url":"https://bugzilla.suse.com/1042364","tags":["report"]},{"url":"https://bugzilla.suse.com/1042892","tags":["report"]},{"url":"https://bugzilla.suse.com/1050677","tags":["report"]},{"url":"https://bugzilla.suse.com/1052311","tags":["report"]},{"url":"https://bugzilla.suse.com/1053148","tags":["report"]},{"url":"https://bugzilla.suse.com/1053152","tags":["report"]},{"url":"https://bugzilla.suse.com/1053760","tags":["report"]},{"url":"https://bugzilla.suse.com/1056588","tags":["report"]},{"url":"https://bugzilla.suse.com/957988","tags":["report"]},{"url":"https://bugzilla.suse.com/957990","tags":["report"]},{"url":"https://bugzilla.suse.com/963655","tags":["report"]},{"url":"https://bugzilla.suse.com/979681","tags":["report"]},{"url":"https://bugzilla.suse.com/989896","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8831","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172908-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001459","tags":["report"]},{"url":"https://bugzilla.suse.com/1012985","tags":["report"]},{"url":"https://bugzilla.suse.com/1023287","tags":["report"]},{"url":"https://bugzilla.suse.com/1027149","tags":["report"]},{"url":"https://bugzilla.suse.com/1028217","tags":["report"]},{"url":"https://bugzilla.suse.com/1030531","tags":["report"]},{"url":"https://bugzilla.suse.com/1031515","tags":["report"]},{"url":"https://bugzilla.suse.com/1033960","tags":["report"]},{"url":"https://bugzilla.suse.com/1034405","tags":["report"]},{"url":"https://bugzilla.suse.com/1035531","tags":["report"]},{"url":"https://bugzilla.suse.com/1035738","tags":["report"]},{"url":"https://bugzilla.suse.com/1039721","tags":["report"]},{"url":"https://bugzilla.suse.com/1039864","tags":["report"]},{"url":"https://bugzilla.suse.com/1041429","tags":["report"]},{"url":"https://bugzilla.suse.com/1042696","tags":["report"]},{"url":"https://bugzilla.suse.com/1045327","tags":["report"]},{"url":"https://bugzilla.suse.com/1045922","tags":["report"]},{"url":"https://bugzilla.suse.com/1048788","tags":["report"]},{"url":"https://bugzilla.suse.com/1049645","tags":["report"]},{"url":"https://bugzilla.suse.com/1053317","tags":["report"]},{"url":"https://bugzilla.suse.com/1056982","tags":["report"]},{"url":"https://bugzilla.suse.com/1057179","tags":["report"]},{"url":"https://bugzilla.suse.com/1058410","tags":["report"]},{"url":"https://bugzilla.suse.com/1058507","tags":["report"]},{"url":"https://bugzilla.suse.com/1058524","tags":["report"]},{"url":"https://bugzilla.suse.com/1059863","tags":["report"]},{"url":"https://bugzilla.suse.com/1062471","tags":["report"]},{"url":"https://bugzilla.suse.com/1062520","tags":["report"]},{"url":"https://bugzilla.suse.com/1063667","tags":["report"]},{"url":"https://bugzilla.suse.com/1064388","tags":["report"]},{"url":"https://bugzilla.suse.com/856774","tags":["report"]},{"url":"https://bugzilla.suse.com/860250","tags":["report"]},{"url":"https://bugzilla.suse.com/863764","tags":["report"]},{"url":"https://bugzilla.suse.com/878240","tags":["report"]},{"url":"https://bugzilla.suse.com/922855","tags":["report"]},{"url":"https://bugzilla.suse.com/922871","tags":["report"]},{"url":"https://bugzilla.suse.com/993099","tags":["report"]},{"url":"https://bugzilla.suse.com/994364","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7889","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172920-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1008353","tags":["report"]},{"url":"https://bugzilla.suse.com/1017941","tags":["report"]},{"url":"https://bugzilla.suse.com/1032268","tags":["report"]},{"url":"https://bugzilla.suse.com/1035877","tags":["report"]},{"url":"https://bugzilla.suse.com/1036752","tags":["report"]},{"url":"https://bugzilla.suse.com/1037306","tags":["report"]},{"url":"https://bugzilla.suse.com/1041958","tags":["report"]},{"url":"https://bugzilla.suse.com/1047408","tags":["report"]},{"url":"https://bugzilla.suse.com/1052593","tags":["report"]},{"url":"https://bugzilla.suse.com/1058038","tags":["report"]},{"url":"https://bugzilla.suse.com/938162","tags":["report"]},{"url":"https://bugzilla.suse.com/975596","tags":["report"]},{"url":"https://bugzilla.suse.com/977417","tags":["report"]},{"url":"https://bugzilla.suse.com/984779","tags":["report"]},{"url":"https://bugzilla.suse.com/985562","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8106","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173398-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1010201","tags":["report"]},{"url":"https://bugzilla.suse.com/1012382","tags":["report"]},{"url":"https://bugzilla.suse.com/1012523","tags":["report"]},{"url":"https://bugzilla.suse.com/1015336","tags":["report"]},{"url":"https://bugzilla.suse.com/1015337","tags":["report"]},{"url":"https://bugzilla.suse.com/1015340","tags":["report"]},{"url":"https://bugzilla.suse.com/1015342","tags":["report"]},{"url":"https://bugzilla.suse.com/1015343","tags":["report"]},{"url":"https://bugzilla.suse.com/1019675","tags":["report"]},{"url":"https://bugzilla.suse.com/1020412","tags":["report"]},{"url":"https://bugzilla.suse.com/1020645","tags":["report"]},{"url":"https://bugzilla.suse.com/1022595","tags":["report"]},{"url":"https://bugzilla.suse.com/1022607","tags":["report"]},{"url":"https://bugzilla.suse.com/1024346","tags":["report"]},{"url":"https://bugzilla.suse.com/1024373","tags":["report"]},{"url":"https://bugzilla.suse.com/1024376","tags":["report"]},{"url":"https://bugzilla.suse.com/1024412","tags":["report"]},{"url":"https://bugzilla.suse.com/1031717","tags":["report"]},{"url":"https://bugzilla.suse.com/1032150","tags":["report"]},{"url":"https://bugzilla.suse.com/1036489","tags":["report"]},{"url":"https://bugzilla.suse.com/1036800","tags":["report"]},{"url":"https://bugzilla.suse.com/1037404","tags":["report"]},{"url":"https://bugzilla.suse.com/1037838","tags":["report"]},{"url":"https://bugzilla.suse.com/1038299","tags":["report"]},{"url":"https://bugzilla.suse.com/1039542","tags":["report"]},{"url":"https://bugzilla.suse.com/1040073","tags":["report"]},{"url":"https://bugzilla.suse.com/1041873","tags":["report"]},{"url":"https://bugzilla.suse.com/1042268","tags":["report"]},{"url":"https://bugzilla.suse.com/1042957","tags":["report"]},{"url":"https://bugzilla.suse.com/1042977","tags":["report"]},{"url":"https://bugzilla.suse.com/1042978","tags":["report"]},{"url":"https://bugzilla.suse.com/1043017","tags":["report"]},{"url":"https://bugzilla.suse.com/1045404","tags":["report"]},{"url":"https://bugzilla.suse.com/1046054","tags":["report"]},{"url":"https://bugzilla.suse.com/1047901","tags":["report"]},{"url":"https://bugzilla.suse.com/1047989","tags":["report"]},{"url":"https://bugzilla.suse.com/1048317","tags":["report"]},{"url":"https://bugzilla.suse.com/1048327","tags":["report"]},{"url":"https://bugzilla.suse.com/1048356","tags":["report"]},{"url":"https://bugzilla.suse.com/1050060","tags":["report"]},{"url":"https://bugzilla.suse.com/1050231","tags":["report"]},{"url":"https://bugzilla.suse.com/1051406","tags":["report"]},{"url":"https://bugzilla.suse.com/1051635","tags":["report"]},{"url":"https://bugzilla.suse.com/1051987","tags":["report"]},{"url":"https://bugzilla.suse.com/1052384","tags":["report"]},{"url":"https://bugzilla.suse.com/1053309","tags":["report"]},{"url":"https://bugzilla.suse.com/1053919","tags":["report"]},{"url":"https://bugzilla.suse.com/1055272","tags":["report"]},{"url":"https://bugzilla.suse.com/1056003","tags":["report"]},{"url":"https://bugzilla.suse.com/1056365","tags":["report"]},{"url":"https://bugzilla.suse.com/1056427","tags":["report"]},{"url":"https://bugzilla.suse.com/1056587","tags":["report"]},{"url":"https://bugzilla.suse.com/1056596","tags":["report"]},{"url":"https://bugzilla.suse.com/1056652","tags":["report"]},{"url":"https://bugzilla.suse.com/1056979","tags":["report"]},{"url":"https://bugzilla.suse.com/1057079","tags":["report"]},{"url":"https://bugzilla.suse.com/1057199","tags":["report"]},{"url":"https://bugzilla.suse.com/1057820","tags":["report"]},{"url":"https://bugzilla.suse.com/1058413","tags":["report"]},{"url":"https://bugzilla.suse.com/1059639","tags":["report"]},{"url":"https://bugzilla.suse.com/1060333","tags":["report"]},{"url":"https://bugzilla.suse.com/1061756","tags":["report"]},{"url":"https://bugzilla.suse.com/1062496","tags":["report"]},{"url":"https://bugzilla.suse.com/1062835","tags":["report"]},{"url":"https://bugzilla.suse.com/1062941","tags":["report"]},{"url":"https://bugzilla.suse.com/1063026","tags":["report"]},{"url":"https://bugzilla.suse.com/1063349","tags":["report"]},{"url":"https://bugzilla.suse.com/1063516","tags":["report"]},{"url":"https://bugzilla.suse.com/1064206","tags":["report"]},{"url":"https://bugzilla.suse.com/1064320","tags":["report"]},{"url":"https://bugzilla.suse.com/1064591","tags":["report"]},{"url":"https://bugzilla.suse.com/1064597","tags":["report"]},{"url":"https://bugzilla.suse.com/1064606","tags":["report"]},{"url":"https://bugzilla.suse.com/1064701","tags":["report"]},{"url":"https://bugzilla.suse.com/1064926","tags":["report"]},{"url":"https://bugzilla.suse.com/1065101","tags":["report"]},{"url":"https://bugzilla.suse.com/1065180","tags":["report"]},{"url":"https://bugzilla.suse.com/1065600","tags":["report"]},{"url":"https://bugzilla.suse.com/1065639","tags":["report"]},{"url":"https://bugzilla.suse.com/1065692","tags":["report"]},{"url":"https://bugzilla.suse.com/1065717","tags":["report"]},{"url":"https://bugzilla.suse.com/1065866","tags":["report"]},{"url":"https://bugzilla.suse.com/1065959","tags":["report"]},{"url":"https://bugzilla.suse.com/1066045","tags":["report"]},{"url":"https://bugzilla.suse.com/1066175","tags":["report"]},{"url":"https://bugzilla.suse.com/1066192","tags":["report"]},{"url":"https://bugzilla.suse.com/1066213","tags":["report"]},{"url":"https://bugzilla.suse.com/1066223","tags":["report"]},{"url":"https://bugzilla.suse.com/1066285","tags":["report"]},{"url":"https://bugzilla.suse.com/1066382","tags":["report"]},{"url":"https://bugzilla.suse.com/1066470","tags":["report"]},{"url":"https://bugzilla.suse.com/1066471","tags":["report"]},{"url":"https://bugzilla.suse.com/1066472","tags":["report"]},{"url":"https://bugzilla.suse.com/1066573","tags":["report"]},{"url":"https://bugzilla.suse.com/1066606","tags":["report"]},{"url":"https://bugzilla.suse.com/1066629","tags":["report"]},{"url":"https://bugzilla.suse.com/1066660","tags":["report"]},{"url":"https://bugzilla.suse.com/1066696","tags":["report"]},{"url":"https://bugzilla.suse.com/1066767","tags":["report"]},{"url":"https://bugzilla.suse.com/1066812","tags":["report"]},{"url":"https://bugzilla.suse.com/1066974","tags":["report"]},{"url":"https://bugzilla.suse.com/1067105","tags":["report"]},{"url":"https://bugzilla.suse.com/1067132","tags":["report"]},{"url":"https://bugzilla.suse.com/1067225","tags":["report"]},{"url":"https://bugzilla.suse.com/1067494","tags":["report"]},{"url":"https://bugzilla.suse.com/1067734","tags":["report"]},{"url":"https://bugzilla.suse.com/1067735","tags":["report"]},{"url":"https://bugzilla.suse.com/1067888","tags":["report"]},{"url":"https://bugzilla.suse.com/1067906","tags":["report"]},{"url":"https://bugzilla.suse.com/1068671","tags":["report"]},{"url":"https://bugzilla.suse.com/1068978","tags":["report"]},{"url":"https://bugzilla.suse.com/1068980","tags":["report"]},{"url":"https://bugzilla.suse.com/1068982","tags":["report"]},{"url":"https://bugzilla.suse.com/1069152","tags":["report"]},{"url":"https://bugzilla.suse.com/1069250","tags":["report"]},{"url":"https://bugzilla.suse.com/1069270","tags":["report"]},{"url":"https://bugzilla.suse.com/1069277","tags":["report"]},{"url":"https://bugzilla.suse.com/1069484","tags":["report"]},{"url":"https://bugzilla.suse.com/1069583","tags":["report"]},{"url":"https://bugzilla.suse.com/1069721","tags":["report"]},{"url":"https://bugzilla.suse.com/1069793","tags":["report"]},{"url":"https://bugzilla.suse.com/1069879","tags":["report"]},{"url":"https://bugzilla.suse.com/1069916","tags":["report"]},{"url":"https://bugzilla.suse.com/1069942","tags":["report"]},{"url":"https://bugzilla.suse.com/1069996","tags":["report"]},{"url":"https://bugzilla.suse.com/1070001","tags":["report"]},{"url":"https://bugzilla.suse.com/1070006","tags":["report"]},{"url":"https://bugzilla.suse.com/1070145","tags":["report"]},{"url":"https://bugzilla.suse.com/1070169","tags":["report"]},{"url":"https://bugzilla.suse.com/1070404","tags":["report"]},{"url":"https://bugzilla.suse.com/1070535","tags":["report"]},{"url":"https://bugzilla.suse.com/1070767","tags":["report"]},{"url":"https://bugzilla.suse.com/1070771","tags":["report"]},{"url":"https://bugzilla.suse.com/1070805","tags":["report"]},{"url":"https://bugzilla.suse.com/1070825","tags":["report"]},{"url":"https://bugzilla.suse.com/1070964","tags":["report"]},{"url":"https://bugzilla.suse.com/1071693","tags":["report"]},{"url":"https://bugzilla.suse.com/1071694","tags":["report"]},{"url":"https://bugzilla.suse.com/1071695","tags":["report"]},{"url":"https://bugzilla.suse.com/1071833","tags":["report"]},{"url":"https://bugzilla.suse.com/1072589","tags":["report"]},{"url":"https://bugzilla.suse.com/744692","tags":["report"]},{"url":"https://bugzilla.suse.com/789311","tags":["report"]},{"url":"https://bugzilla.suse.com/964944","tags":["report"]},{"url":"https://bugzilla.suse.com/966170","tags":["report"]},{"url":"https://bugzilla.suse.com/966172","tags":["report"]},{"url":"https://bugzilla.suse.com/969470","tags":["report"]},{"url":"https://bugzilla.suse.com/979928","tags":["report"]},{"url":"https://bugzilla.suse.com/989261","tags":["report"]},{"url":"https://bugzilla.suse.com/996376","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8824","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173410-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1012829","tags":["report"]},{"url":"https://bugzilla.suse.com/1017461","tags":["report"]},{"url":"https://bugzilla.suse.com/1021424","tags":["report"]},{"url":"https://bugzilla.suse.com/1022600","tags":["report"]},{"url":"https://bugzilla.suse.com/1022914","tags":["report"]},{"url":"https://bugzilla.suse.com/1025461","tags":["report"]},{"url":"https://bugzilla.suse.com/1027301","tags":["report"]},{"url":"https://bugzilla.suse.com/1028971","tags":["report"]},{"url":"https://bugzilla.suse.com/1030061","tags":["report"]},{"url":"https://bugzilla.suse.com/1034048","tags":["report"]},{"url":"https://bugzilla.suse.com/1037890","tags":["report"]},{"url":"https://bugzilla.suse.com/1055567","tags":["report"]},{"url":"https://bugzilla.suse.com/1058135","tags":["report"]},{"url":"https://bugzilla.suse.com/1060682","tags":["report"]},{"url":"https://bugzilla.suse.com/1060985","tags":["report"]},{"url":"https://bugzilla.suse.com/1061451","tags":["report"]},{"url":"https://bugzilla.suse.com/1062962","tags":["report"]},{"url":"https://bugzilla.suse.com/1063460","tags":["report"]},{"url":"https://bugzilla.suse.com/1063475","tags":["report"]},{"url":"https://bugzilla.suse.com/1063501","tags":["report"]},{"url":"https://bugzilla.suse.com/1063509","tags":["report"]},{"url":"https://bugzilla.suse.com/1063520","tags":["report"]},{"url":"https://bugzilla.suse.com/1063695","tags":["report"]},{"url":"https://bugzilla.suse.com/1071231","tags":["report"]},{"url":"https://bugzilla.suse.com/963575","tags":["report"]},{"url":"https://bugzilla.suse.com/966186","tags":["report"]},{"url":"https://bugzilla.suse.com/966191","tags":["report"]},{"url":"https://bugzilla.suse.com/966316","tags":["report"]},{"url":"https://bugzilla.suse.com/966318","tags":["report"]},{"url":"https://bugzilla.suse.com/969474","tags":["report"]},{"url":"https://bugzilla.suse.com/969475","tags":["report"]},{"url":"https://bugzilla.suse.com/969476","tags":["report"]},{"url":"https://bugzilla.suse.com/969477","tags":["report"]},{"url":"https://bugzilla.suse.com/974590","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180213-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1012917","tags":["report"]},{"url":"https://bugzilla.suse.com/1022476","tags":["report"]},{"url":"https://bugzilla.suse.com/1039616","tags":["report"]},{"url":"https://bugzilla.suse.com/1063043","tags":["report"]},{"url":"https://bugzilla.suse.com/1064311","tags":["report"]},{"url":"https://bugzilla.suse.com/1068032","tags":["report"]},{"url":"https://bugzilla.suse.com/1068951","tags":["report"]},{"url":"https://bugzilla.suse.com/1069496","tags":["report"]},{"url":"https://bugzilla.suse.com/1069702","tags":["report"]},{"url":"https://bugzilla.suse.com/1071009","tags":["report"]},{"url":"https://bugzilla.suse.com/1072556","tags":["report"]},{"url":"https://bugzilla.suse.com/1072962","tags":["report"]},{"url":"https://bugzilla.suse.com/1073090","tags":["report"]},{"url":"https://bugzilla.suse.com/1073792","tags":["report"]},{"url":"https://bugzilla.suse.com/1073809","tags":["report"]},{"url":"https://bugzilla.suse.com/1073874","tags":["report"]},{"url":"https://bugzilla.suse.com/1073912","tags":["report"]},{"url":"https://bugzilla.suse.com/1074392","tags":["report"]},{"url":"https://bugzilla.suse.com/1074709","tags":["report"]},{"url":"https://bugzilla.suse.com/964063","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5754","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-7482","tags":["report"]},{"url":"https://git.kernel.org/torvalds/c/5f2f97656ada8d811d3c1bef503ced266fcd53a0","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3377-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3377-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3378-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3378-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3381-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3381-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-10810","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-1000365","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-8405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2618","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-7482","description":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.","status":"published","published":"2018-07-30T14:00:00Z","modified":"2024-08-05T16:04:11.726Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:33:20.488433Z"}],"euvd":[{"id":"EUVD-2017-16502","description":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.","status":"published","published":"2018-07-30T14:00:00Z","modified":"2024-08-05T16:04:11Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:39:08.461482Z"}],"ghsa":[{"id":"GHSA-2x6j-879g-gpqr","title":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys...","description":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.","status":"published","published":"2022-05-13T01:08:46Z","modified":"2023-02-01T05:03:14Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:50:02.204531Z"}],"nvd":[{"id":"CVE-2017-7482","description":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.","status":"published","published":"2018-07-30T14:29:02.99Z","modified":"2026-06-17T01:24:26.283Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:04:18.679411Z"}],"osv":[{"id":"CVE-2017-7482","description":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.","status":"published","published":"2018-07-30T14:29:02.99Z","modified":"2026-03-15T22:17:51.019188Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.412595Z"},{"id":"DEBIAN-CVE-2017-7482","description":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.","status":"published","published":"2018-07-30T14:29:02.99Z","modified":"2026-09-01T20:03:50.029821005Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.412243Z"},{"id":"RHSA-2019:0641","title":"Red Hat Security Advisory: kernel-rt security and bug fix update","status":"published","published":"2024-09-13T16:54:48Z","modified":"2026-07-08T10:00:57Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2017-7482","description":"In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.","status":"published","published":"2017-06-27T00:00:00Z","modified":"2026-04-22T11:31:17.172064Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"DLA-1099-1","title":"linux - security update","status":"published","published":"2017-09-19T00:00:00Z","modified":"2026-03-09T01:01:08.61084Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3927-1","title":"linux - security update","status":"published","published":"2017-08-07T00:00:00Z","modified":"2026-03-09T01:19:59.802768Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"DSA-3945-1","title":"linux - security update","status":"published","published":"2017-08-17T00:00:00Z","modified":"2026-03-09T01:20:40.31278Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"SUSE-SU-2017:2342-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2014-9922: The eCryptfs subsystem in the Linux kernel allowed local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c (bsc#1032340).\n- CVE-2015-3288: mm/memory.c in the Linux kernel mishandled anonymous pages, which allowed local users to gain privileges or cause a denial of service (page tainting) via a crafted application that triggers writing to page zero (bnc#979021).\n- CVE-2015-8970: crypto/algif_skcipher.c in the Linux kernel did not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that did not supply a key, related to the lrw_crypt function in crypto/lrw.c (bnc#1008374 bsc#1008850).\n- CVE-2016-10200: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c (bnc#1028415).\n- CVE-2016-2188: The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel allowed physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor (bnc#970956).\n- CVE-2016-4997: The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement (bnc#986362).\n- CVE-2016-4998: The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel allowed local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary (bnc#986365).\n- CVE-2016-5243: The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel did not properly copy a certain string, which allowed local users to obtain sensitive information from kernel stack memory by reading a Netlink message (bnc#983212).\n- CVE-2016-7117: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing (bnc#1003077).\n- CVE-2017-1000363: A buffer overflow in kernel commandline handling of the 'lp' parameter could be used to bypass certain secure boot settings. (bnc#1039456).\n- CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010) (bnc#1039348).\n- CVE-2017-1000365: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but did not take the argument and environment pointers into account, which allowed attackers to bypass this limitation (bnc#1039354).\n- CVE-2017-1000380: sound/core/timer.c in the Linux kernel is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time (bnc#1044125).\n- CVE-2017-11176: The mq_notify function in the Linux kernel did not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allowed attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact (bnc#1048275).\n- CVE-2017-11473: Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel allowed local users to gain privileges via a crafted ACPI table (bsc#1049603).\n- CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bnc#1027565 bsc#1028372).\n- CVE-2017-2647: The KEYS subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c (bnc#1030593).\n- CVE-2017-2671: The ping_unhash function in net/ipv4/ping.c in the Linux kernel is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allowed local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call (bnc#1031003).\n- CVE-2017-5669: The do_shmat function in ipc/shm.c in the Linux kernel did not restrict the address calculated by a certain rounding operation, which allowed local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context (bnc#1026914).\n- CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bnc#1024938).\n- CVE-2017-5986: Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel allowed local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state (bnc#1025235).\n- CVE-2017-6074: The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel mishandled DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allowed local users to obtain root privileges or cause a denial of service (double free) via an application that made an IPV6_RECVPKTINFO setsockopt system call (bnc#1026024 bsc#1033287).\n- CVE-2017-6214: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel allowed remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag (bnc#1026722).\n- CVE-2017-6348: The hashbin_delete function in net/irda/irqueue.c in the Linux kernel improperly manages lock dropping, which allowed local users to cause a denial of service (deadlock) via crafted operations on IrDA devices (bnc#1027178).\n- CVE-2017-6353: net/sctp/socket.c in the Linux kernel did not properly restrict association peel-off operations during certain wait states, which allowed local users to cause a denial of service (invalid unlock and double free) via a multithreaded application.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986 (bnc#1027066).\n- CVE-2017-6951: The keyring_search_aux function in security/keys/keyring.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a request_key system call for the 'dead' type (bnc#1029850).\n- CVE-2017-7184: The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel did not validate certain size data after an XFRM_MSG_NEWAE update, which allowed local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52 (bnc#1030573).\n- CVE-2017-7187: The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel allowed local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function (bnc#1030213).\n- CVE-2017-7261: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not check for a zero value of certain levels data, which allowed local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031052).\n- CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031440).\n- CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls (bnc#1031579).\n- CVE-2017-7482: Fixed a potential overflow in the net/rxprc where a padded len isn't checked in ticket decode (bsc#1046107).\n- CVE-2017-7487: The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel mishandled reference counts, which allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface (bnc#1038879).\n- CVE-2017-7533: Race condition in the fsnotify implementation in the Linux kernel allowed local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions (bsc#1049483).\n- CVE-2017-7542: The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel allowed local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket (bsc#1049882).\n- CVE-2017-7616: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel allowed local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation (bnc#1033336).\n- CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bnc#1038544).\n- CVE-2017-8924: The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel allowed local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow (bnc#1037182 bsc#1038982).\n- CVE-2017-8925: The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel allowed local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling (bnc#1037183 bsc#1038981).\n- CVE-2017-9074: The IPv6 fragmentation implementation in the Linux kernel did not consider that the nexthdr field may be associated with an invalid option, which allowed local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls (bnc#1039882).\n- CVE-2017-9075: The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1039883).\n- CVE-2017-9076: The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1039885).\n- CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1040069).\n- CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bnc#1041431).\n\nThe following non-security bugs were fixed:\n\n- 8250: use callbacks to access UART_DLL/UART_DLM.\n- acpi: Disable APEI error injection if securelevel is set (bsc#972891, bsc#1023051).\n- af_key: Add lock to key dump (bsc#1047653).\n- af_key: Fix slab-out-of-bounds in pfkey_compile_policy (bsc#1047354).\n- alsa: ctxfi: Fallback DMA mask to 32bit (bsc#1045538).\n- alsa: hda - Fix regression of HD-audio controller fallback modes (bsc#1045538).\n- alsa: hda/realtek - Correction of fixup codes for PB V7900 laptop (bsc#1045538).\n- alsa: hda/realtek - Fix COEF widget NID for ALC260 replacer fixup (bsc#1045538).\n- alsa: hda - using uninitialized data (bsc#1045538).\n- alsa: off by one bug in snd_riptide_joystick_probe() (bsc#1045538).\n- alsa: seq: Fix snd_seq_call_port_info_ioctl in compat mode (bsc#1045538).\n- ath9k: fix buffer overrun for ar9287 (bsc#1045538).\n- __bitmap_parselist: fix bug in empty string handling (bnc#1042633).\n- blacklist.conf: Add a few inapplicable items (bsc#1045538).\n- blacklist.conf: blacklisted 1fe89e1b6d27 (bnc#1046122)\n- block: do not allow updates through sysfs until registration completes (bsc#1047027).\n- block: fix ext_dev_lock lockdep report (bsc#1050154).\n- btrfs: Don't clear SGID when inheriting ACLs (bsc#1030552).\n- cifs: backport prepath matching fix (bsc#799133).\n- cifs: don't compare uniqueids in cifs_prime_dcache unless server inode numbers are in use (bsc#1041975).\n- cifs: small underflow in cnvrtDosUnixTm() (bsc#1043935).\n- cifs: Timeout on SMBNegotiate request (bsc#1044913).\n- clocksource: Remove 'weak' from clocksource_default_clock() declaration (bnc#1013018).\n- cputime: Avoid multiplication overflow on utime scaling (bnc#938352).\n- crypto: nx - off by one bug in nx_of_update_msc() (fate#314588,bnc#792863).\n- decompress_bunzip2: off by one in get_next_block() (git-fixes).\n- devres: fix a for loop bounds check (git-fixes).\n- dlm: backport 'fix lvb invalidation conditions' (bsc#1005651).\n- dm: fix ioctl retry termination with signal (bsc#1050154).\n- drm/mgag200: Add support for G200eH3 (bnc#1044216, fate#323551)\n- drm/mgag200: Add support for G200e rev 4 (bnc#995542, comment #81)\n- edac, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr() (fate#313937).\n- enic: set skb-\u003ehash type properly (bsc#911105 FATE#317501).\n- ext2: Don't clear SGID when inheriting ACLs (bsc#1030552).\n- ext3: Don't clear SGID when inheriting ACLs (bsc#1030552).\n- ext4: Don't clear SGID when inheriting ACLs (bsc#1030552).\n- ext4: fix fdatasync(2) after extent manipulation operations (bsc#1013018).\n- ext4: fix mballoc breakage with 64k block size (bsc#1013018).\n- ext4: fix stack memory corruption with 64k block size (bsc#1013018).\n- ext4: keep existing extra fields when inode expands (bsc#1013018).\n- ext4: reject inodes with negative size (bsc#1013018).\n- fbdev/efifb: Fix 16 color palette entry calculation (bsc#1041762).\n- firmware: fix directory creation rule matching with make 3.80 (bsc#1012422).\n- firmware: fix directory creation rule matching with make 3.82 (bsc#1012422).\n- fixed invalid assignment of 64bit mask to host dma_boundary for scatter gather segment boundary limit (bsc#1042045).\n- Fix soft lockup in svc_rdma_send (bsc#1044854).\n- fnic: Return 'DID_IMM_RETRY' if rport is not ready (bsc#1035920).\n- fnic: Using rport-\u003edd_data to check rport online instead of rport_lookup (bsc#1035920).\n- fs/block_dev: always invalidate cleancache in invalidate_bdev() (git-fixes).\n- fs: fix data invalidation in the cleancache during direct IO (git-fixes).\n- fs/xattr.c: zero out memory copied to userspace in getxattr (bsc#1013018).\n- fuse: add missing FR_FORCE (bsc#1013018).\n- fuse: initialize fc-\u003erelease before calling it (bsc#1013018).\n- genirq: Prevent proc race against freeing of irq descriptors (bnc#1044230).\n- hrtimer: Allow concurrent hrtimer_start() for self restarting timers (bnc#1013018).\n- i40e: avoid null pointer dereference (bsc#909486 FATE#317393).\n- i40e: Fix TSO with more than 8 frags per segment issue (bsc#985561).\n- i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (bsc#985561).\n- i40e/i40evf: Fix mixed size frags and linearization (bsc#985561).\n- i40e/i40evf: Limit TSO to 7 descriptors for payload instead of 8 per packet (bsc#985561).\n- i40e/i40evf: Rewrite logic for 8 descriptor per packet check (bsc#985561).\n- i40e: Impose a lower limit on gso size (bsc#985561).\n- i40e: Limit TX descriptor count in cases where frag size is greater than 16K (bsc#985561).\n- ib/mlx4: Demote mcg message from warning to debug (bsc#919382).\n- ib/mlx4: Fix ib device initialization error flow (bsc#919382).\n- ib/mlx4: Fix port query for 56Gb Ethernet links (bsc#919382).\n- ib/mlx4: Handle well-known-gid in mad_demux processing (bsc#919382).\n- ib/mlx4: Reduce SRIOV multicast cleanup warning message to debug level (bsc#919382).\n- ib/mlx4: Set traffic class in AH (bsc#919382).\n- Implement an ioctl to support the USMTMC-USB488 READ_STATUS_BYTE operation (bsc#1036288).\n- initial cr0 bits (bnc#1036056, LTC#153612).\n- input: cm109 - validate number of endpoints before using them (bsc#1037193).\n- input: hanwang - validate number of endpoints before using them (bsc#1037232).\n- input: yealink - validate number of endpoints before using them (bsc#1037227).\n- ipmr, ip6mr: fix scheduling while atomic and a deadlock with ipmr_get_route (git-fixes).\n- irq: Fix race condition (bsc#1042615).\n- isdn/gigaset: fix NULL-deref at probe (bsc#1037356).\n- isofs: Do not return EACCES for unknown filesystems (bsc#1013018).\n- jbd: do not wait (forever) for stale tid caused by wraparound (bsc#1020229).\n- jbd: Fix oops in journal_remove_journal_head() (bsc#1017143).\n- jsm: add support for additional Neo cards (bsc#1045615).\n- kabi fix (bsc#1008893).\n- kABI: mask struct xfs_icdinode change (bsc#1024788).\n- kabi: Protect xfs_mount and xfs_buftarg (bsc#1024508).\n- kabi:severeties: Add splice_write_to_file PASS This function is part of an xfs-specific fix which never went upstream and is not expected to have 3rdparty users other than xfs itself.\n- kernel-binary.spec: Propagate MAKE_ARGS to %build (bsc#1012422)\n- keys: Disallow keyrings beginning with '.' to be joined as session keyrings (bnc#1035576).\n- kvm: kvm_io_bus_unregister_dev() should never fail.\n- libata: fix sff host state machine locking while polling (bsc#1045525).\n- libceph: NULL deref on crush_decode() error path (bsc#1044015).\n- libceph: potential NULL dereference in ceph_msg_data_create() (bsc#1051515).\n- libfc: fixup locking in fc_disc_stop() (bsc#1029140).\n- libfc: move 'pending' and 'requested' setting (bsc#1029140).\n- libfc: only restart discovery after timeout if not already running (bsc#1029140).\n- lockd: use init_utsname for id encoding (bsc#1033804).\n- lockd: use rpc client's cl_nodename for id encoding (bsc#1033804).\n- locking/rtmutex: Prevent dequeue vs. unlock race (bnc#1013018).\n- math64: New div64_u64_rem helper (bnc#938352).\n- md: ensure md devices are freed before module is unloaded (git-fixes).\n- md: fix a null dereference (bsc#1040351).\n- md: flush -\u003eevent_work before stopping array (git-fixes).\n- md linear: fix a race between linear_add() and linear_congested() (bsc#1018446).\n- md/linear: shutup lockdep warnning (bsc#1018446).\n- md: make sure GET_ARRAY_INFO ioctl reports correct 'clean' status (git-fixes).\n- md/raid0: apply base queue limits *before* disk_stack_limits (git-fixes).\n- md/raid1: extend spinlock to protect raid1_end_read_request against inconsistencies (git-fixes).\n- md/raid1: fix test for 'was read error from last working device' (git-fixes).\n- md/raid5: do not record new size if resize_stripes fails (git-fixes).\n- md/raid5: Fix CPU hotplug callback registration (git-fixes).\n- md: use separate bio_pool for metadata writes (bsc#1040351).\n- megaraid_sas: add missing curly braces in ioctl handler (bsc#1050154).\n- mlx4: reduce OOM risk on arches with large pages (bsc#919382).\n- mmc: core: add missing pm event in mmc_pm_notify to fix hib restore (bsc#1045547).\n- mmc: ushc: fix NULL-deref at probe (bsc#1037191).\n- mm: do not collapse stack gap into THP (bnc#1039348)\n- mm: enlarge stack guard gap (bnc#1039348).\n- mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check (VM Functionality, bsc#1042832).\n- mm: hugetlb: call huge_pte_alloc() only if ptep is null (VM Functionality, bsc#1042832).\n- mm/memory-failure.c: use compound_head() flags for huge pages (bnc#971975 VM -- git fixes).\n- mm/mempolicy.c: do not put mempolicy before using its nodemask (References: VM Performance, bnc#931620).\n- mm, mmap: do not blow on PROT_NONE MAP_FIXED holes in the stack (bnc#1039348, bnc#1045340, bnc#1045406).\n- module: fix memory leak on early load_module() failures (bsc#1043014).\n- Move nr_cpus_allowed into a hole in struct_sched_entity instead of the one below task_struct.policy. RT fills the hole 29baa7478ba4 used, which will screw up kABI for RT instead of curing the space needed problem in sched_rt_entity caused by adding ff77e4685359. This leaves nr_cpus_alowed in an odd spot, but safely allows the RT entity specific data added by ff77e4685359 to reside where it belongs.. nr_cpus_allowed just moves from one odd spot to another.\n- mwifiex: printk() overflow with 32-byte SSIDs (bsc#1048185).\n- net: avoid reference counter overflows on fib_rules in multicast forwarding (git-fixes).\n- net: ip6mr: fix static mfc/dev leaks on table destruction (git-fixes).\n- net: ipmr: fix static mfc/dev leaks on table destruction (git-fixes).\n- net/mlx4_core: Eliminate warning messages for SRQ_LIMIT under SRIOV (bsc#919382).\n- net/mlx4_core: Enhance the MAD_IFC wrapper to convert VF port to physical (bsc#919382).\n- net/mlx4_core: Fix VF overwrite of module param which disables DMFS on new probed PFs (bsc#919382).\n- net/mlx4_core: Fix when to save some qp context flags for dynamic VST to VGT transitions (bsc#919382).\n- net/mlx4_core: Get num_tc using netdev_get_num_tc (bsc#919382).\n- net/mlx4_core: Prevent VF from changing port configuration (bsc#919382).\n- net/mlx4_core: Use-after-free causes a resource leak in flow-steering detach (bsc#919382).\n- net/mlx4_core: Use cq quota in SRIOV when creating completion EQs (bsc#919382).\n- net/mlx4_en: Avoid adding steering rules with invalid ring (bsc#919382).\n- net/mlx4_en: Change the error print to debug print (bsc#919382).\n- net/mlx4_en: fix overflow in mlx4_en_init_timestamp() (bsc#919382).\n- net/mlx4_en: Fix type mismatch for 32-bit systems (bsc#919382).\n- net/mlx4_en: Resolve dividing by zero in 32-bit system (bsc#919382).\n- net/mlx4_en: Wake TX queues only when there's enough room (bsc#1039258).\n- net/mlx4: Fix the check in attaching steering rules (bsc#919382).\n- net/mlx4: Fix uninitialized fields in rule when adding promiscuous mode to device managed flow steering (bsc#919382).\n- net: wimax/i2400m: fix NULL-deref at probe (bsc#1037358).\n- netxen_nic: set rcode to the return status from the call to netxen_issue_cmd (bnc#784815 FATE#313898).\n- nfs: Avoid getting confused by confused server (bsc#1045416).\n- nfsd4: minor NFSv2/v3 write decoding cleanup (bsc#1034670).\n- nfsd: check for oversized NFSv2/v3 arguments (bsc#1034670).\n- nfsd: do not risk using duplicate owner/file/delegation ids (bsc#1029212).\n- nfsd: Don't use state id of 0 - it is reserved (bsc#1049688 bsc#1051770).\n- nfsd: stricter decoding of write-like NFSv2/v3 ops (bsc#1034670).\n- nfs: Fix another OPEN_DOWNGRADE bug (git-next).\n- nfs: fix nfs_size_to_loff_t (git-fixes).\n- nfs: Fix size of NFSACL SETACL operations (git-fixes).\n- nfs: Make nfs_readdir revalidate less often (bsc#1048232).\n- nfs: tidy up nfs_show_mountd_netid (git-fixes).\n- nfsv4: Do not call put_rpccred() under the rcu_read_lock() (git-fixes).\n- nfsv4: Fix another bug in the close/open_downgrade code (git-fixes).\n- nfsv4: fix getacl head length estimation (git-fixes).\n- nfsv4: Fix problems with close in the presence of a delegation (git-fixes).\n- nfsv4: Fix the underestimation of delegation XDR space reservation (git-fixes).\n- ocfs2: do not write error flag to user structure we cannot copy from/to (bsc#1013018).\n- ocfs2: Don't clear SGID when inheriting ACLs (bsc#1030552).\n- ocfs2: fix crash caused by stale lvb with fsdlm plugin (bsc#1013800).\n- ocfs2: fix error return code in ocfs2_info_handle_freefrag() (bsc#1013018).\n- ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with ocfs2_unblock_lock (bsc#962257).\n- ocfs2: null deref on allocation error (bsc#1013018).\n- pci: Allow access to VPD attributes with size 0 (bsc#1018074).\n- pciback: only check PF if actually dealing with a VF (bsc#999245).\n- pciback: use pci_physfn() (bsc#999245).\n- pci: Fix devfn for VPD access through function 0 (bnc#943786 git-fixes).\n- perf/core: Correct event creation with PERF_FORMAT_GROUP (bnc#1013018).\n- perf/core: Fix event inheritance on fork() (bnc#1013018).\n- posix-timers: Fix stack info leak in timer_create() (bnc#1013018).\n- powerpc,cpuidle: Dont toggle CPUIDLE_FLAG_IGNORE while setting smt_snooze_delay (bsc#1023163).\n- powerpc: Drop support for pre-POWER4 cpus (fate#322495, bsc#1032471).\n- powerpc/fadump: Fix the race in crash_fadump() (bsc#1022971).\n- powerpc/fadump: Reserve memory at an offset closer to bottom of RAM (bsc#1032141).\n- powerpc/fadump: Update fadump documentation (bsc#1032141).\n- powerpc/mm: Do not alias user region to other regions below PAGE_OFFSET (bsc#928138,fate#319026).\n- powerpc/mm/hash: Check for non-kernel address in get_kernel_vsid() (fate#322495, bsc#1032471).\n- powerpc/mm/hash: Convert mask to unsigned long (fate#322495, bsc#1032471).\n- powerpc/mm/hash: Increase VA range to 128TB (fate#322495, bsc#1032471).\n- powerpc/mm/hash: Properly mask the ESID bits when building proto VSID (fate#322495, bsc#1032471).\n- powerpc/mm/hash: Support 68 bit VA (fate#322495, bsc#1032471).\n- powerpc/mm/hash: Use context ids 1-4 for the kernel (fate#322495, bsc#1032471).\n- powerpc/mm: Remove checks that TASK_SIZE_USER64 is too small (fate#322495, bsc#1032471).\n- powerpc/mm/slice: Convert slice_mask high slice to a bitmap (fate#322495, bsc#1032471).\n- powerpc/mm/slice: Fix off-by-1 error when computing slice mask (fate#322495, bsc#1032471).\n- powerpc/mm/slice: Move slice_mask struct definition to slice.c (fate#322495, bsc#1032471).\n- powerpc/mm/slice: Update slice mask printing to use bitmap printing (fate#322495, bsc#1032471).\n- powerpc/mm/slice: Update the function prototype (fate#322495, bsc#1032471).\n- powerpc/mm: use macro PGTABLE_EADDR_SIZE instead of digital (fate#322495, bsc#1032471).\n- powerpc/nvram: Fix an incorrect partition merge (bsc#1016489).\n- powerpc/pseries: Release DRC when configure_connector fails (bsc#1035777, Pending Base Kernel Fixes).\n- powerpc: Remove STAB code (fate#322495, bsc#1032471).\n- powerpc/vdso64: Use double word compare on pointers (bsc#1016489).\n- raid1: avoid unnecessary spin locks in I/O barrier code (bsc#982783,bsc#1026260).\n- random32: fix off-by-one in seeding requirement (git-fixes).\n- rcu: Call out dangers of expedited RCU primitives (bsc#1008893).\n- rcu: Direct algorithmic SRCU implementation (bsc#1008893).\n- rcu: Flip -\u003ecompleted only once per SRCU grace period (bsc#1008893).\n- rcu: Implement a variant of Peter's SRCU algorithm (bsc#1008893).\n- rcu: Increment upper bit only for srcu_read_lock() (bsc#1008893).\n- rcu: Remove fast check path from __synchronize_srcu() (bsc#1008893).\n- reiserfs: Don't clear SGID when inheriting ACLs (bsc#1030552).\n- reiserfs: don't preallocate blocks for extended attributes (bsc#990682).\n- Remove patches causing regression (bsc#1043234)\n- Remove superfluous make flags (bsc#1012422)\n- Return short read or 0 at end of a raw device, not EIO (bsc#1039594).\n- Revert 'kabi:severeties: Add splice_write_to_file PASS' This reverts commit 05ecf7ab16b2ea555fadd1ce17d8177394de88f2.\n- Revert 'math64: New div64_u64_rem helper' (bnc#938352).\n- Revert 'xfs: fix up xfs_swap_extent_forks inline extent handling (bsc#1023888).' I was baing my assumption of SLE11-SP4 needing this patch on an old kernel build (3.0.101-63). Re-testing with the latest one 3.0.101-94 shows that the issue is not present. Furthermore this one was causing some crashes. This reverts commit 16ceeac70f7286b6232861c3170ed32e39dcc68c.\n- rfkill: fix rfkill_fop_read wait_event usage (bsc#1046192).\n- s390/kmsg: add missing kmsg descriptions (bnc#1025702, LTC#151573).\n- s390/qdio: clear DSCI prior to scanning multiple input queues (bnc#1046715, LTC#156234).\n- s390/qeth: no ETH header for outbound AF_IUCV (bnc#1046715, LTC#156276).\n- s390/qeth: size calculation outbound buffers (bnc#1046715, LTC#156276).\n- s390/vmlogrdr: fix IUCV buffer allocation (bnc#1025702, LTC#152144).\n- s390/zcrypt: Introduce CEX6 toleration (FATE#321782, LTC#147505).\n- sched: Always initialize cpu-power (bnc#1013018).\n- sched: Avoid cputime scaling overflow (bnc#938352).\n- sched: Avoid prev-\u003estime underflow (bnc#938352).\n- sched/core: Fix TASK_DEAD race in finish_task_switch() (bnc#1013018).\n- sched/core: Remove false-positive warning from wake_up_process() (bnc#1044882).\n- sched/cputime: Do not scale when utime == 0 (bnc#938352).\n- sched/debug: Print the scheduler topology group mask (bnc#1013018).\n- sched: Do not account bogus utime (bnc#938352).\n- sched/fair, cpumask: Export for_each_cpu_wrap() (bnc#1013018).\n- sched/fair: Fix min_vruntime tracking (bnc#1013018).\n- sched: Fix domain iteration (bnc#1013018).\n- sched: Fix SD_OVERLAP (bnc#1013018).\n- sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded systems (bnc#1013018).\n- sched: Lower chances of cputime scaling overflow (bnc#938352).\n- sched: Move nr_cpus_allowed out of 'struct sched_rt_entity' (bnc#1013018). Prep for b60205c7c558 sched/fair: Fix min_vruntime tracking\n- sched: Rename a misleading variable in build_overlap_sched_groups() (bnc#1013018).\n- sched/rt: Fix PI handling vs. sched_setscheduler() (bnc#1013018). Prep for b60205c7c558 sched/fair: Fix min_vruntime tracking\n- sched/topology: Fix building of overlapping sched-groups (bnc#1013018).\n- sched/topology: Fix overlapping sched_group_capacity (bnc#1013018).\n- sched/topology: Fix overlapping sched_group_mask (bnc#1013018).\n- sched/topology: Move comment about asymmetric node setups (bnc#1013018).\n- sched/topology: Optimize build_group_mask() (bnc#1013018).\n- sched/topology: Refactor function build_overlap_sched_groups() (bnc#1013018).\n- sched/topology: Remove FORCE_SD_OVERLAP (bnc#1013018).\n- sched/topology: Simplify build_overlap_sched_groups() (bnc#1013018).\n- sched/topology: Verify the first group matches the child domain (bnc#1013018).\n- sched: Use swap() macro in scale_stime() (bnc#938352).\n- scsi: bnx2i: missing error code in bnx2i_ep_connect() (bsc#1048221).\n- scsi: fix race between simultaneous decrements of -\u003ehost_failed (bsc#1050154).\n- scsi: fnic: Correcting rport check location in fnic_queuecommand_lck (bsc#1035920).\n- scsi: mvsas: fix command_active typo (bsc#1050154).\n- scsi: qla2xxx: Fix scsi scan hang triggered if adapter fails during init (bsc#1050154).\n- scsi: virtio_scsi: fix memory leak on full queue condition (bsc#1028880).\n- scsi: zfcp: do not trace pure benign residual HBA responses at default level (bnc#1025702, LTC#151317).\n- scsi: zfcp: fix rport unblock race with LUN recovery (bnc#1025702, LTC#151319).\n- scsi: zfcp: fix use-after-free by not tracing WKA port open/close on failed send (bnc#1025702, LTC#151365).\n- scsi: zfcp: fix use-after-'free' in FC ingress path after TMF (bnc#1025702, LTC#151312).\n- sfc: do not device_attach if a reset is pending (bsc#909618 FATE#317521).\n- sfc: reduce severity of PIO buffer alloc failures (bsc#1019168).\n- smsc75xx: use skb_cow_head() to deal with cloned skbs (bsc#1045154).\n- splice: Stub splice_write_to_file (bsc#1043234).\n- sunrpc: Clean up the slot table allocation (bsc#1013862).\n- sunrpc: Fix a memory leak in the backchannel code (git-fixes).\n- sunrpc: Initalise the struct xprt upon allocation (bsc#1013862).\n- svcrdma: Fix send_reply() scatter/gather set-up (git-fixes).\n- target/iscsi: Fix double free in lio_target_tiqn_addtpg() (bsc#1050154).\n- tcp: abort orphan sockets stalling on zero window probes (bsc#1021913).\n- tracing: Fix syscall_*regfunc() vs copy_process() race (bnc#1042687).\n- tracing/kprobes: Enforce kprobes teardown after testing (bnc#1013018).\n- udf: Fix deadlock between writeback and udf_setsize() (bsc#1013018).\n- udf: Fix races with i_size changes during readpage (bsc#1013018).\n- Update metadata for serial fixes (bsc#1013070)\n- Update patches.fixes/nfs-svc-rdma.fix (bsc#1044854).\n- usb: cdc-acm: fix broken runtime suspend (bsc#1033771).\n- usb: cdc-acm: fix open and suspend race (bsc#1033771).\n- usb: cdc-acm: fix potential urb leak and PM imbalance in write (bsc#1033771).\n- usb: cdc-acm: fix runtime PM for control messages (bsc#1033771).\n- usb: cdc-acm: fix runtime PM imbalance at shutdown (bsc#1033771).\n- usb: cdc-acm: fix shutdown and suspend race (bsc#1033771).\n- usb: cdc-acm: fix write and resume race (bsc#1033771).\n- usb: cdc-acm: fix write and suspend race (bsc#1033771).\n- usb: class: usbtmc.c: Cleaning up uninitialized variables (bsc#1036288).\n- usb: class: usbtmc: do not print error when allocating urb fails (bsc#1036288).\n- usb: class: usbtmc: do not print on ENOMEM (bsc#1036288).\n- usb: hub: Fix crash after failure to read BOS descriptor (FATE#317453).\n- usb: iowarrior: fix info ioctl on big-endian hosts (bsc#1037441).\n- usb: iowarrior: fix NULL-deref in write (bsc#1037359).\n- usb: r8a66597-hcd: select a different endpoint on timeout (bsc#1047053).\n- usb: serial: ark3116: fix register-accessor error handling (git-fixes).\n- usb: serial: ch341: fix open error handling (bsc#1037441).\n- usb: serial: cp210x: fix tiocmget error handling (bsc#1037441).\n- usb: serial: ftdi_sio: fix line-status over-reporting (bsc#1037441).\n- usb: serial: io_edgeport: fix epic-descriptor handling (bsc#1037441).\n- usb: serial: io_ti: fix information leak in completion handler (git-fixes).\n- usb: serial: iuu_phoenix: fix NULL-deref at open (bsc#1033794).\n- usb: serial: kl5kusb105: fix line-state error handling (bsc#1021256).\n- usb: serial: mos7720: fix NULL-deref at open (bsc#1033816).\n- usb: serial: mos7720: fix parallel probe (bsc#1033816).\n- usb: serial: mos7720: fix parport use-after-free on probe errors (bsc#1033816).\n- usb: serial: mos7720: fix use-after-free on probe errors (bsc#1033816).\n- usb: serial: mos7840: fix another NULL-deref at open (bsc#1034026).\n- usb: serial: mos7840: fix NULL-deref at open (bsc#1034026).\n- usb: serial: oti6858: fix NULL-deref at open (bsc#1037441).\n- usb: serial: sierra: fix bogus alternate-setting assumption (bsc#1037441).\n- usb: serial: spcp8x5: fix NULL-deref at open (bsc#1037441).\n- usbtmc: remove redundant braces (bsc#1036288).\n- usbtmc: remove trailing spaces (bsc#1036288).\n- usb: usbip: fix nonconforming hub descriptor (bsc#1047487).\n- usb: usbtmc: add device quirk for Rigol DS6104 (bsc#1036288).\n- usb: usbtmc: Add flag rigol_quirk to usbtmc_device_data (bsc#1036288).\n- usb: usbtmc: add missing endpoint sanity check (bsc#1036288).\n- usb: usbtmc: Change magic number to constant (bsc#1036288).\n- usb: usbtmc: fix big-endian probe of Rigol devices (bsc#1036288).\n- usb: usbtmc: fix DMA on stack (bsc#1036288).\n- usb: usbtmc: fix probe error path (bsc#1036288).\n- usb: usbtmc: Set rigol_quirk if device is listed (bsc#1036288).\n- usb: usbtmc: TMC request code segregated from usbtmc_read (bsc#1036288).\n- usb: usbtmc: usbtmc_read sends multiple TMC header based on rigol_quirk (bsc#1036288).\n- usbvision: fix NULL-deref at probe (bsc#1050431).\n- usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL (bsc#1023014).\n- Use make --output-sync feature when available (bsc#1012422). The mesages in make output can interleave making it impossible to extract warnings reliably. Since version 4 GNU Make supports --output-sync flag that prints output of each sub-command atomically preventing this issue. Detect the flag and use it if available. SLE11 has make 3.81 so it is required to include make 4 in the kernel OBS projects to take advantege of this.\n- Use PF_LESS_THROTTLE in loop device thread (bsc#1027101).\n- uwb: hwa-rc: fix NULL-deref at probe (bsc#1037233).\n- uwb: i1480-dfu: fix NULL-deref at probe (bsc#1036629).\n- vb2: Fix an off by one error in 'vb2_plane_vaddr' (bsc#1050431).\n- vfs: split generic splice code from i_mutex locking (bsc#1024788).\n- vmxnet3: avoid calling pskb_may_pull with interrupts disabled (bsc#1045356).\n- vmxnet3: fix checks for dma mapping errors (bsc#1045356).\n- vmxnet3: fix lock imbalance in vmxnet3_tq_xmit() (bsc#1045356).\n- vmxnet3: segCnt can be 1 for LRO packets (bsc#988065, bsc#1029770).\n- x86, mm, paravirt: Fix vmalloc_fault oops during lazy MMU updates (bsc#948562).\n- x86/pci-calgary: Fix iommu_free() comparison of unsigned expression \u003e= 0 (bsc#1051478).\n- xen: avoid deadlock in xenbus (bnc#1047523).\n- xen-blkfront: correct maximum segment accounting (bsc#1018263).\n- xen-blkfront: do not call talk_to_blkback when already connected to blkback.\n- xen-blkfront: free resources if xlvbd_alloc_gendisk fails.\n- xen/PCI-MSI: fix sysfs teardown in DomU (bsc#986924).\n- xfrm: dst_entries_init() per-net dst_ops (bsc#1030814).\n- xfrm: NULL dereference on allocation failure (bsc#1047343).\n- xfrm: Oops on error in pfkey_msg2xfrm_state() (bsc#1047653).\n- xfs_dmapi: fix the debug compilation of xfs_dmapi (bsc#989056).\n- xfs: do not assert fail on non-async buffers on ioacct decrement (bsc#1024508).\n- xfs: exclude never-released buffers from buftarg I/O accounting (bsc#1024508).\n- xfs: fix buffer overflow dm_get_dirattrs/dm_get_dirattrs2 (bsc#989056).\n- xfs: Fix lock ordering in splice write (bsc#1024788).\n- xfs: fix up xfs_swap_extent_forks inline extent handling (bsc#1023888).\n- xfs: kill xfs_itruncate_start (bsc#1024788).\n- xfs: Make xfs_icdinode-\u003edi_dmstate atomic_t (bsc#1024788).\n- xfs: remove the i_new_size field in struct xfs_inode (bsc#1024788).\n- xfs: remove the i_size field in struct xfs_inode (bsc#1024788).\n- xfs: remove xfs_itruncate_data (bsc#1024788).\n- xfs: replace global xfslogd wq with per-mount wq (bsc#1024508).\n- xfs: split xfs_itruncate_finish (bsc#1024788).\n- xfs: split xfs_setattr (bsc#1024788).\n- xfs: Synchronize xfs_buf disposal routines (bsc#1041160).\n- xfs: track and serialize in-flight async buffers against unmount (bsc#1024508).\n- xfs: use -\u003eb_state to fix buffer I/O accounting release race (bsc#1041160).\n- xprtrdma: Free the pd if ib_query_qp() fails (git-fixes).\n","status":"published","published":"2017-09-04T13:37:48Z","modified":"2025-05-02T04:04:17.704556Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2389-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2017-7482: Several missing length checks ticket decode allowing for information leak or potentially code execution (bsc#1046107).\n- CVE-2016-10277: Potential privilege escalation due to a missing bounds check in the lp driver. A kernel command-line adversary can overflow the parport_nr array to execute code (bsc#1039456).\n- CVE-2017-7542: The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel allowed local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket (bsc#1049882).\n- CVE-2017-7533: Bug in inotify code allowing privilege escalation (bsc#1049483).\n- CVE-2017-11176: The mq_notify function in the Linux kernel did not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allowed attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact (bsc#1048275).\n- CVE-2017-11473: Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel allowed local users to gain privileges via a crafted ACPI table (bnc#1049603).\n- CVE-2017-1000365: The Linux Kernel imposed a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but did not take the argument and environment pointers into account, which allowed attackers to bypass this limitation. (bnc#1039354)\n- CVE-2014-9922: The eCryptfs subsystem in the Linux kernel allowed local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related to fs/ecryptfs/main.c and fs/overlayfs/super.c (bnc#1032340)\n- CVE-2017-8924: The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel allowed local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow (bnc#1038982).\n- CVE-2017-8925: The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel allowed local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling (bnc#1038981).\n- CVE-2017-1000380: sound/core/timer.c was vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents could have bene disclosed when a read and an ioctl happen at the same time (bnc#1044125)\n- CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c was too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bnc#1041431)\n- CVE-2017-1000363: A buffer overflow in kernel commandline handling of the 'lp' parameter could be used by local console attackers to bypass certain secure boot settings. (bnc#1039456)\n- CVE-2017-9076: The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1039885)\n- CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1040069)\n- CVE-2017-9075: The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1039883)\n- CVE-2017-9074: The IPv6 fragmentation implementation in the Linux kernel did not consider that the nexthdr field may be associated with an invalid option, which allowed local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls (bnc#1039882)\n- CVE-2017-7487: The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel mishandled reference counts, which allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface (bnc#1038879)\n- CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bnc#1038544)\n- CVE-2017-2647: The KEYS subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c (bnc#1030593)\n- CVE-2017-6951: The keyring_search_aux function in security/keys/keyring.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a request_key system call for the 'dead' type (bnc#1029850)\n\nThe following non-security bugs were fixed:\n\n- 8250: use callbacks to access UART_DLL/UART_DLM.\n- ALSA: ctxfi: Fallback DMA mask to 32bit (bsc#1045538).\n- ALSA: hda - Fix regression of HD-audio controller fallback modes (bsc#1045538).\n- ALSA: hda - using uninitialized data (bsc#1045538).\n- ALSA: hda/realtek - Correction of fixup codes for PB V7900 laptop (bsc#1045538).\n- ALSA: hda/realtek - Fix COEF widget NID for ALC260 replacer fixup (bsc#1045538).\n- ALSA: off by one bug in snd_riptide_joystick_probe() (bsc#1045538).\n- ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode (bsc#1045538).\n- Add CVE tag to references\n- CIFS: backport prepath matching fix (bsc#799133).\n- Drop CONFIG_PPC_CELL from bigmem (bsc#1049128).\n- EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr().\n- Fix scripts/bigmem-generate-ifdef-guard to work on all branches\n- Fix soft lockup in svc_rdma_send (bsc#1044854).\n- IB/mlx4: Demote mcg message from warning to debug (bsc#919382).\n- IB/mlx4: Fix ib device initialization error flow (bsc#919382).\n- IB/mlx4: Fix port query for 56Gb Ethernet links (bsc#919382).\n- IB/mlx4: Handle well-known-gid in mad_demux processing (bsc#919382).\n- IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level (bsc#919382).\n- IB/mlx4: Set traffic class in AH (bsc#919382).\n- Implement an ioctl to support the USMTMC-USB488 READ_STATUS_BYTE operation (bsc#1036288).\n- Input: cm109 - validate number of endpoints before using them (bsc#1037193).\n- Input: hanwang - validate number of endpoints before using them (bsc#1037232).\n- Input: yealink - validate number of endpoints before using them (bsc#1037227).\n- KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (bnc#1035576).\n- NFS: Avoid getting confused by confused server (bsc#1045416).\n- NFS: Fix another OPEN_DOWNGRADE bug (git-next).\n- NFS: Fix size of NFSACL SETACL operations (git-fixes).\n- NFS: Make nfs_readdir revalidate less often (bsc#1048232).\n- NFS: tidy up nfs_show_mountd_netid (git-fixes).\n- NFSD: Do not use state id of 0 - it is reserved (bsc#1049688 bsc#1051770).\n- NFSv4: Do not call put_rpccred() under the rcu_read_lock() (git-fixes).\n- NFSv4: Fix another bug in the close/open_downgrade code (git-fixes).\n- NFSv4: Fix problems with close in the presence of a delegation (git-fixes).\n- NFSv4: Fix the underestimation of delegation XDR space reservation (git-fixes).\n- NFSv4: fix getacl head length estimation (git-fixes).\n- PCI: Fix devfn for VPD access through function 0 (bnc#943786 git-fixes).\n- Remove superfluous make flags (bsc#1012422)\n- Return short read or 0 at end of a raw device, not EIO (bsc#1039594).\n- Revert 'math64: New div64_u64_rem helper' (bnc#938352).\n- SUNRPC: Fix a memory leak in the backchannel code (git-fixes).\n- Staging: vt6655-6: potential NULL dereference in hostap_disable_hostapd() (bsc#1045479).\n- USB: class: usbtmc.c: Cleaning up uninitialized variables (bsc#1036288).\n- USB: class: usbtmc: do not print error when allocating urb fails (bsc#1036288).\n- USB: class: usbtmc: do not print on ENOMEM (bsc#1036288).\n- USB: iowarrior: fix NULL-deref in write (bsc#1037359).\n- USB: iowarrior: fix info ioctl on big-endian hosts (bsc#1037441).\n- USB: r8a66597-hcd: select a different endpoint on timeout (bsc#1047053).\n- USB: serial: ark3116: fix register-accessor error handling (git-fixes).\n- USB: serial: ch341: fix open error handling (bsc#1037441).\n- USB: serial: cp210x: fix tiocmget error handling (bsc#1037441).\n- USB: serial: ftdi_sio: fix line-status over-reporting (bsc#1037441).\n- USB: serial: io_edgeport: fix epic-descriptor handling (bsc#1037441).\n- USB: serial: io_ti: fix information leak in completion handler (git-fixes).\n- USB: serial: mos7840: fix another NULL-deref at open (bsc#1034026).\n- USB: serial: oti6858: fix NULL-deref at open (bsc#1037441).\n- USB: serial: sierra: fix bogus alternate-setting assumption (bsc#1037441).\n- USB: serial: spcp8x5: fix NULL-deref at open (bsc#1037441).\n- USB: usbip: fix nonconforming hub descriptor (bsc#1047487).\n- USB: usbtmc: Add flag rigol_quirk to usbtmc_device_data (bsc#1036288).\n- USB: usbtmc: Change magic number to constant (bsc#1036288).\n- USB: usbtmc: Set rigol_quirk if device is listed (bsc#1036288).\n- USB: usbtmc: TMC request code segregated from usbtmc_read (bsc#1036288).\n- USB: usbtmc: add device quirk for Rigol DS6104 (bsc#1036288).\n- USB: usbtmc: add missing endpoint sanity check (bsc#1036288).\n- USB: usbtmc: fix DMA on stack (bsc#1036288).\n- USB: usbtmc: fix big-endian probe of Rigol devices (bsc#1036288).\n- USB: usbtmc: fix probe error path (bsc#1036288).\n- USB: usbtmc: usbtmc_read sends multiple TMC header based on rigol_quirk (bsc#1036288).\n- USB: wusbcore: fix NULL-deref at probe (bsc#1045487).\n- Update patches.fixes/nfs-svc-rdma.fix (bsc#1044854).\n- Use make --output-sync feature when available (bsc#1012422).\n- Xen/PCI-MSI: fix sysfs teardown in DomU (bsc#986924).\n- __bitmap_parselist: fix bug in empty string handling (bnc#1042633).\n- acpi: Disable APEI error injection if securelevel is set (bsc#972891, bsc#1023051).\n- af_key: Add lock to key dump (bsc#1047653).\n- af_key: Fix slab-out-of-bounds in pfkey_compile_policy (bsc#1047354).\n- ath9k: fix buffer overrun for ar9287 (bsc#1045538).\n- blacklist b50a6c584bb4 powerpc/perf: Clear MMCR2 when enabling PMU (bsc#1035721). \n- blacklist.conf: Add a few inapplicable items (bsc#1045538).\n- blacklist.conf: Blacklist 847fa1a6d3d0 ('ftrace/x86_32: Set ftrace_stub to weak to prevent gcc from using short jumps to it') The released kernels are not build with a gas new enough to optimize the jmps so that this patch would be required. (bsc#1051478)\n- blkback/blktap: do not leak stack data via response ring (bsc#1042863 XSA-216).\n- block: do not allow updates through sysfs until registration completes (bsc#1047027).\n- block: fix ext_dev_lock lockdep report (bsc#1050154).\n- btrfs: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- cifs: Timeout on SMBNegotiate request (bsc#1044913).\n- cifs: do not compare uniqueids in cifs_prime_dcache unless server inode numbers are in use (bsc#1041975). backporting upstream commit 2f2591a34db6c9361faa316c91a6e320cb4e6aee\n- cifs: small underflow in cnvrtDosUnixTm() (bsc#1043935).\n- cputime: Avoid multiplication overflow on utime scaling (bnc#938352).\n- crypto: nx - off by one bug in nx_of_update_msc() (bnc#792863).\n- decompress_bunzip2: off by one in get_next_block() (git-fixes).\n- dentry name snapshots (bsc#1049483).\n- devres: fix a for loop bounds check (git-fixes).\n- dm: fix ioctl retry termination with signal (bsc#1050154).\n- drm/mgag200: Add support for G200eH3 (bnc#1044216)\n- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452, bsc#995542).\n- ext2: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- ext3: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- ext4: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- ext4: fix fdatasync(2) after extent manipulation operations (bsc#1013018).\n- ext4: keep existing extra fields when inode expands (bsc#1013018).\n- fbdev/efifb: Fix 16 color palette entry calculation (bsc#1041762).\n- firmware: fix directory creation rule matching with make 3.80 (bsc#1012422).\n- firmware: fix directory creation rule matching with make 3.82 (bsc#1012422).\n- fixed invalid assignment of 64bit mask to host dma_boundary for scatter gather segment boundary limit (bsc#1042045).\n- fnic: Return 'DID_IMM_RETRY' if rport is not ready (bsc#1035920).\n- fnic: Using rport-\u003edd_data to check rport online instead of rport_lookup (bsc#1035920).\n- fs/block_dev: always invalidate cleancache in invalidate_bdev() (git-fixes).\n- fs/xattr.c: zero out memory copied to userspace in getxattr (bsc#1013018).\n- fs: fix data invalidation in the cleancache during direct IO (git-fixes).\n- fuse: add missing FR_FORCE (bsc#1013018).\n- genirq: Prevent proc race against freeing of irq descriptors (bnc#1044230).\n- hrtimer: Allow concurrent hrtimer_start() for self restarting timers (bnc#1013018).\n- initial cr0 bits (bnc#1036056, LTC#153612).\n- ipmr, ip6mr: fix scheduling while atomic and a deadlock with ipmr_get_route (git-fixes).\n- irq: Fix race condition (bsc#1042615).\n- isdn/gigaset: fix NULL-deref at probe (bsc#1037356).\n- isofs: Do not return EACCES for unknown filesystems (bsc#1013018).\n- jsm: add support for additional Neo cards (bsc#1045615).\n- kernel-binary.spec: Propagate MAKE_ARGS to %build (bsc#1012422)\n- libata: fix sff host state machine locking while polling (bsc#1045525).\n- libceph: NULL deref on crush_decode() error path (bsc#1044015).\n- libceph: potential NULL dereference in ceph_msg_data_create() (bsc#1051515).\n- libfc: fixup locking in fc_disc_stop() (bsc#1029140).\n- libfc: move 'pending' and 'requested' setting (bsc#1029140).\n- libfc: only restart discovery after timeout if not already running (bsc#1029140).\n- locking/rtmutex: Prevent dequeue vs. unlock race (bnc#1013018).\n- math64: New div64_u64_rem helper (bnc#938352).\n- md/raid0: apply base queue limits *before* disk_stack_limits (git-fixes).\n- md/raid1: extend spinlock to protect raid1_end_read_request against inconsistencies (git-fixes).\n- md/raid1: fix test for 'was read error from last working device' (git-fixes).\n- md/raid5: Fix CPU hotplug callback registration (git-fixes).\n- md/raid5: do not record new size if resize_stripes fails (git-fixes).\n- md: ensure md devices are freed before module is unloaded (git-fixes).\n- md: fix a null dereference (bsc#1040351).\n- md: flush -\u003eevent_work before stopping array (git-fixes).\n- md: make sure GET_ARRAY_INFO ioctl reports correct 'clean' status (git-fixes).\n- md: use separate bio_pool for metadata writes (bsc#1040351).\n- megaraid_sas: add missing curly braces in ioctl handler (bsc#1050154).\n- mlx4: reduce OOM risk on arches with large pages (bsc#919382).\n- mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check (VM Functionality, bsc#1042832).\n- mm/memory-failure.c: use compound_head() flags for huge pages (bnc#971975 VM -- git fixes).\n- mm: hugetlb: call huge_pte_alloc() only if ptep is null (VM Functionality, bsc#1042832).\n- mmc: core: add missing pm event in mmc_pm_notify to fix hib restore (bsc#1045547).\n- mmc: ushc: fix NULL-deref at probe (bsc#1037191).\n- module: fix memory leak on early load_module() failures (bsc#1043014).\n- mwifiex: printk() overflow with 32-byte SSIDs (bsc#1048185).\n- net/mlx4: Fix the check in attaching steering rules (bsc#919382).\n- net/mlx4: Fix uninitialized fields in rule when adding promiscuous mode to device managed flow steering (bsc#919382).\n- net/mlx4_core: Eliminate warning messages for SRQ_LIMIT under SRIOV (bsc#919382).\n- net/mlx4_core: Enhance the MAD_IFC wrapper to convert VF port to physical (bsc#919382).\n- net/mlx4_core: Fix VF overwrite of module param which disables DMFS on new probed PFs (bsc#919382).\n- net/mlx4_core: Fix when to save some qp context flags for dynamic VST to VGT transitions (bsc#919382).\n- net/mlx4_core: Get num_tc using netdev_get_num_tc (bsc#919382).\n- net/mlx4_core: Prevent VF from changing port configuration (bsc#919382).\n- net/mlx4_core: Use cq quota in SRIOV when creating completion EQs (bsc#919382).\n- net/mlx4_core: Use-after-free causes a resource leak in flow-steering detach (bsc#919382).\n- net/mlx4_en: Avoid adding steering rules with invalid ring (bsc#919382).\n- net/mlx4_en: Change the error print to debug print (bsc#919382).\n- net/mlx4_en: Fix type mismatch for 32-bit systems (bsc#919382).\n- net/mlx4_en: Resolve dividing by zero in 32-bit system (bsc#919382).\n- net/mlx4_en: Wake TX queues only when there's enough room (bsc#1039258).\n- net/mlx4_en: fix overflow in mlx4_en_init_timestamp() (bsc#919382).\n- net: avoid reference counter overflows on fib_rules in multicast forwarding (git-fixes).\n- net: ip6mr: fix static mfc/dev leaks on table destruction (git-fixes).\n- net: ipmr: fix static mfc/dev leaks on table destruction (git-fixes).\n- net: wimax/i2400m: fix NULL-deref at probe (bsc#1037358).\n- netxen_nic: set rcode to the return status from the call to netxen_issue_cmd (bnc#784815).\n- nfs: fix nfs_size_to_loff_t (git-fixes).\n- nfsd4: minor NFSv2/v3 write decoding cleanup (bsc#1034670).\n- nfsd: check for oversized NFSv2/v3 arguments (bsc#1034670).\n- nfsd: stricter decoding of write-like NFSv2/v3 ops (bsc#1034670).\n- ocfs2: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with ocfs2_unblock_lock (bsc#962257).\n- perf/core: Correct event creation with PERF_FORMAT_GROUP (bnc#1013018).\n- perf/core: Fix event inheritance on fork() (bnc#1013018).\n- powerpc/ibmebus: Fix device reference leaks in sysfs interface (bsc#1035777 [2017-04-24] Pending Base Kernel Fixes).\n- powerpc/ibmebus: Fix further device reference leaks (bsc#1035777 [2017-04-24] Pending Base Kernel Fixes).\n- powerpc/mm/hash: Check for non-kernel address in get_kernel_vsid() (bsc#1032471).\n- powerpc/mm/hash: Convert mask to unsigned long (bsc#1032471).\n- powerpc/mm/hash: Increase VA range to 128TB (bsc#1032471).\n- powerpc/mm/hash: Properly mask the ESID bits when building proto VSID (bsc#1032471).\n- powerpc/mm/hash: Support 68 bit VA (bsc#1032471).\n- powerpc/mm/hash: Use context ids 1-4 for the kernel (bsc#1032471).\n- powerpc/mm/slice: Convert slice_mask high slice to a bitmap (bsc#1032471).\n- powerpc/mm/slice: Fix off-by-1 error when computing slice mask (bsc#1032471).\n- powerpc/mm/slice: Move slice_mask struct definition to slice.c (bsc#1032471).\n- powerpc/mm/slice: Update slice mask printing to use bitmap printing (bsc#1032471).\n- powerpc/mm/slice: Update the function prototype (bsc#1032471).\n- powerpc/mm: Do not alias user region to other regions below PAGE_OFFSET (bsc#928138).\n- powerpc/mm: Remove checks that TASK_SIZE_USER64 is too small (bsc#1032471).\n- powerpc/mm: use macro PGTABLE_EADDR_SIZE instead of digital (bsc#1032471).\n- powerpc/pci/rpadlpar: Fix device reference leaks (bsc#1035777 [2017-04-24] Pending Base Kernel Fixes).\n- powerpc/pseries: Release DRC when configure_connector fails (bsc#1035777, Pending Base Kernel Fixes).\n- powerpc: Drop support for pre-POWER4 cpus (bsc#1032471).\n- powerpc: Remove STAB code (bsc#1032471).\n- random32: fix off-by-one in seeding requirement (git-fixes).\n- reiserfs: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- reiserfs: do not preallocate blocks for extended attributes (bsc#990682).\n- rfkill: fix rfkill_fop_read wait_event usage (bsc#1046192).\n- s390/qdio: clear DSCI prior to scanning multiple input queues (bnc#1046715, LTC#156234).\n- s390/qeth: no ETH header for outbound AF_IUCV (bnc#1046715, LTC#156276).\n- s390/qeth: size calculation outbound buffers (bnc#1046715, LTC#156276).\n- sched/core: Remove false-positive warning from wake_up_process() (bnc#1044882).\n- sched/cputime: Do not scale when utime == 0 (bnc#938352).\n- sched/debug: Print the scheduler topology group mask (bnc#1013018).\n- sched/fair, cpumask: Export for_each_cpu_wrap() (bnc#1013018).\n- sched/fair: Fix min_vruntime tracking (bnc#1013018).\n- sched/rt: Fix PI handling vs. sched_setscheduler() (bnc#1013018). Prep for b60205c7c558 sched/fair: Fix min_vruntime tracking\n- sched/topology: Fix building of overlapping sched-groups (bnc#1013018).\n- sched/topology: Fix overlapping sched_group_capacity (bnc#1013018).\n- sched/topology: Fix overlapping sched_group_mask (bnc#1013018).\n- sched/topology: Move comment about asymmetric node setups (bnc#1013018).\n- sched/topology: Optimize build_group_mask() (bnc#1013018).\n- sched/topology: Refactor function build_overlap_sched_groups() (bnc#1013018).\n- sched/topology: Remove FORCE_SD_OVERLAP (bnc#1013018).\n- sched/topology: Simplify build_overlap_sched_groups() (bnc#1013018).\n- sched/topology: Verify the first group matches the child domain (bnc#1013018).\n- sched: Always initialize cpu-power (bnc#1013018).\n- sched: Avoid cputime scaling overflow (bnc#938352).\n- sched: Avoid prev-\u003estime underflow (bnc#938352).\n- sched: Do not account bogus utime (bnc#938352).\n- sched: Fix SD_OVERLAP (bnc#1013018).\n- sched: Fix domain iteration (bnc#1013018).\n- sched: Lower chances of cputime scaling overflow (bnc#938352).\n- sched: Move nr_cpus_allowed out of 'struct sched_rt_entity' (bnc#1013018). Prep for b60205c7c558 sched/fair: Fix min_vruntime tracking\n- sched: Rename a misleading variable in build_overlap_sched_groups() (bnc#1013018).\n- sched: Use swap() macro in scale_stime() (bnc#938352).\n- scsi: bnx2i: missing error code in bnx2i_ep_connect() (bsc#1048221).\n- scsi: fix race between simultaneous decrements of -\u003ehost_failed (bsc#1050154).\n- scsi: fnic: Correcting rport check location in fnic_queuecommand_lck (bsc#1035920).\n- scsi: mvsas: fix command_active typo (bsc#1050154).\n- scsi: qla2xxx: Fix scsi scan hang triggered if adapter fails during init (bsc#1050154).\n- sfc: do not device_attach if a reset is pending (bsc#909618).\n- smsc75xx: use skb_cow_head() to deal with cloned skbs (bsc#1045154).\n- splice: Stub splice_write_to_file (bsc#1043234).\n- svcrdma: Fix send_reply() scatter/gather set-up (git-fixes).\n- target/iscsi: Fix double free in lio_target_tiqn_addtpg() (bsc#1050154).\n- tracing/kprobes: Enforce kprobes teardown after testing (bnc#1013018).\n- tracing: Fix syscall_*regfunc() vs copy_process() race (bnc#1042687).\n- udf: Fix deadlock between writeback and udf_setsize() (bsc#1013018).\n- udf: Fix races with i_size changes during readpage (bsc#1013018).\n- usbtmc: remove redundant braces (bsc#1036288).\n- usbtmc: remove trailing spaces (bsc#1036288).\n- usbvision: fix NULL-deref at probe (bsc#1050431).\n- uwb: hwa-rc: fix NULL-deref at probe (bsc#1037233).\n- uwb: i1480-dfu: fix NULL-deref at probe (bsc#1036629).\n- vb2: Fix an off by one error in 'vb2_plane_vaddr' (bsc#1050431).\n- vmxnet3: avoid calling pskb_may_pull with interrupts disabled (bsc#1045356).\n- vmxnet3: fix checks for dma mapping errors (bsc#1045356).\n- vmxnet3: fix lock imbalance in vmxnet3_tq_xmit() (bsc#1045356).\n- x86, mm, paravirt: Fix vmalloc_fault oops during lazy MMU updates (bsc#948562).\n- x86/pci-calgary: Fix iommu_free() comparison of unsigned expression greater than 0 (bsc#1051478).\n- xen: avoid deadlock in xenbus (bnc#1047523).\n- xfrm: NULL dereference on allocation failure (bsc#1047343).\n- xfrm: Oops on error in pfkey_msg2xfrm_state() (bsc#1047653).\n- xfrm: dst_entries_init() per-net dst_ops (bsc#1030814).\n- xfs: Synchronize xfs_buf disposal routines (bsc#1041160).\n- xfs: use -\u003eb_state to fix buffer I/O accounting release race (bsc#1041160).\n- xprtrdma: Free the pd if ib_query_qp() fails (git-fixes).\n","status":"published","published":"2017-09-08T12:50:50Z","modified":"2026-02-04T04:18:58.696442Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2525-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 LTSS kernel was updated receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2016-5243: The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel did not properly copy a certain string, which allowed local users to obtain sensitive information from kernel stack memory by reading a Netlink message (bnc#983212)\n- CVE-2016-10200: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c (bnc#1028415)\n- CVE-2017-2647: The KEYS subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c (bsc#1030593).\n- CVE-2017-2671: The ping_unhash function in net/ipv4/ping.c in the Linux kernel was  too late in obtaining a certain lock and consequently could not ensure that disconnect function calls are safe, which allowed local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call (bnc#1031003)\n- CVE-2017-5669: The do_shmat function in ipc/shm.c in the Linux kernel did not restrict the address calculated by a certain rounding operation, which allowed local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context (bnc#1026914)\n- CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bsc#1024938)\n- CVE-2017-5986: Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel allowed local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state (bsc#1025235)\n- CVE-2017-6074: The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel mishandled DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allowed local users to obtain root privileges or cause a denial of service (double free) via an application that made an IPV6_RECVPKTINFO setsockopt system call (bnc#1026024)\n- CVE-2017-6214: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel allowed remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag (bnc#1026722)\n- CVE-2017-6348: The hashbin_delete function in net/irda/irqueue.c in the Linux kernel improperly managed lock dropping, which allowed local users to cause a denial of service (deadlock) via crafted operations on IrDA devices (bnc#1027178)\n- CVE-2017-6353: net/sctp/socket.c in the Linux kernel did not properly restrict association peel-off operations during certain wait states, which allowed local users to cause a denial of service (invalid unlock and double free) via a multithreaded application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986 (bnc#1027066)\n- CVE-2017-6951: The keyring_search_aux function in security/keys/keyring.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a request_key system call for the 'dead' type (bsc#1029850).\n- CVE-2017-7184: The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel did not validate certain size data after an XFRM_MSG_NEWAE update, which allowed local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability (bsc#1030573)\n- CVE-2017-7187: The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel allowed local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function (bnc#1030213)\n- CVE-2017-7261: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not check for a zero value of certain levels data, which allowed local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031052)\n- CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031440)\n- CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bnc#1031579)\n- CVE-2017-7482: Several missing length checks ticket decode allowing for information leak or potentially code execution (bsc#1046107).\n- CVE-2017-7487: The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel mishandled reference counts, which allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface (bsc#1038879).\n- CVE-2017-7533: Race condition in the fsnotify implementation in the Linux kernel allowed local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions (bnc#1049483 1050677 ).\n- CVE-2017-7542: The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel allowed local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket (bnc#1049882).\n- CVE-2017-7616: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel allowed local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation (bsc#1033336)\n- CVE-2017-8831: The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel allowed local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a 'double fetch' vulnerability. This requires a malicious PCI Card. (bnc#1037994).\n- CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038544).\n- CVE-2017-8924: The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel allowed local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow (bnc#1037182).\n- CVE-2017-8925: The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel allowed local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling (bnc#1038981).\n- CVE-2017-9074: The IPv6 fragmentation implementation in the Linux kernel did not consider that the nexthdr field may be associated with an invalid option, which allowed local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls (bnc#1039882).\n- CVE-2017-9075: The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1039883).\n- CVE-2017-9076: The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1039885).\n- CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1040069).\n- CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel was too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bnc#1041431).\n- CVE-2017-10661: Race condition in fs/timerfd.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing (bnc#1053152).\n- CVE-2017-11176: The mq_notify function in the Linux kernel did not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allowed attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact (bnc#1048275).\n- CVE-2017-11473: Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel allowed local users to gain privileges via a crafted ACPI table (bnc#1049603).\n- CVE-2017-12762: In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. (bnc#1053148).\n- CVE-2017-14051: An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel allowed local users to cause a denial of service (memory corruption and system crash) by leveraging root access (bnc#1056588).\n- CVE-2017-1000112: Fixed a race condition in net-packet code that could have been exploited by unprivileged users to gain root access. (bsc#1052311).\n- CVE-2017-1000363: Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary  could have overflowed the parport_nr array in the following code (bnc#1039456).\n- CVE-2017-1000365: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but did not take the argument and environment pointers into account, which allowed attackers to bypass this limitation (bnc#1039354).\n- CVE-2017-1000380: sound/core/timer.c in the Linux kernel was vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time (bnc#1044125).\n\nThe following non-security bugs were fixed:\n\n- acpi: Disable APEI error injection if securelevel is set (bsc#972891, bsc#1023051).\n- blkback/blktap: do not leak stack data via response ring (bsc#1042863 XSA-216).\n- btrfs: cleanup code of btrfs_balance_delayed_items() (bsc#1034838).\n- btrfs: do not run delayed nodes again after all nodes flush (bsc#1034838).\n- btrfs: remove btrfs_end_transaction_dmeta() (bsc#1034838).\n- btrfs: remove residual code in delayed inode async helper (bsc#1034838).\n- btrfs: use flags instead of the bool variants in delayed node (bsc#1034838).\n- cifs: cifs_get_root shouldn't use path with tree name, alternate fix (bsc#963655, bsc#979681, bsc#1027406).\n- dentry name snapshots (bsc#1049483).\n- firmware: fix directory creation rule matching with make 3.80 (bsc#1012422).\n- firmware: fix directory creation rule matching with make 3.82 (bsc#1012422).\n- Fix vmalloc_fault oops during lazy MMU updates (bsc#948562) (bsc#948562).\n- hv: do not lose pending heartbeat vmbus packets (bnc#1006919, bnc#1053760).\n- jbd: do not wait (forever) for stale tid caused by wraparound (bsc#1020229).\n- jbd: Fix oops in journal_remove_journal_head() (bsc#1017143).\n- kernel-binary.spec: Propagate MAKE_ARGS to %build (bsc#1012422)\n- keys: Disallow keyrings beginning with '.' to be joined as session keyrings (bnc#1035576).\n- nfs: Avoid getting confused by confused server (bsc#1045416).\n- nfsd4: minor NFSv2/v3 write decoding cleanup (bsc#1034670).\n- nfsd: check for oversized NFSv2/v3 arguments (bsc#1034670).\n- nfsd: do not risk using duplicate owner/file/delegation ids (bsc#1029212).\n- nfsd: stricter decoding of write-like NFSv2/v3 ops (bsc#1034670).\n- nfs: Make nfs_readdir revalidate less often (bsc#1048232).\n- pciback: check PF instead of VF for PCI_COMMAND_MEMORY (bsc#957990).\n- pciback: only check PF if actually dealing with a VF (bsc#999245).\n- pciback: Save the number of MSI-X entries to be copied later (bsc#957988).\n- Remove superfluous make flags (bsc#1012422)\n- Return short read or 0 at end of a raw device, not EIO (bsc#1039594).\n- Revert 'fs/cifs: fix wrongly prefixed path to root (bsc#963655, bsc#979681)\n- scsi: lpfc: avoid double free of resource identifiers (bsc#989896).\n- scsi: virtio_scsi: fix memory leak on full queue condition (bsc#1028880).\n- sunrpc: Clean up the slot table allocation (bsc#1013862).\n- sunrpc: Initalise the struct xprt upon allocation (bsc#1013862).\n- usb: serial: kl5kusb105: fix line-state error handling (bsc#1021256).\n- usb: wusbcore: fix NULL-deref at probe (bsc#1045487).\n- Use make --output-sync feature when available (bsc#1012422). \n- Use PF_LESS_THROTTLE in loop device thread (bsc#1027101).\n- xen/PCI-MSI: fix sysfs teardown in DomU (bsc#986924).\n","status":"published","published":"2017-09-19T08:33:08Z","modified":"2026-02-04T04:14:57.335109Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2908-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 12 SP1 LTS kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free, a different vulnerability than CVE-2017-6346 (bnc#1064388).\n- CVE-2017-13080: Wi-Fi Protected Access (WPA and WPA2) allowed reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients (bnc#1063667).\n- CVE-2017-15274: security/keys/keyctl.c in the Linux kernel did not consider the case of a NULL payload in conjunction with a nonzero length value, which allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192 (bnc#1045327).\n- CVE-2017-15265: Use-after-free vulnerability in the Linux kernel allowed local users to have unspecified impact via vectors related to /dev/snd/seq (bnc#1062520).\n- CVE-2017-1000365: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but did not take the argument and environment pointers into account, which allowed attackers to bypass this limitation. (bnc#1039354).\n- CVE-2017-12153: A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel This function did not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash (bnc#1058410).\n- CVE-2017-12154: The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel did not ensure that the 'CR8-load exiting' and 'CR8-store exiting' L0 vmcs02 controls exist in cases where L1 omits the 'use TPR shadow' vmcs12 control, which allowed KVM L2 guest OS users to obtain read and write access to the hardware CR8 register (bnc#1058507).\n- CVE-2017-14106: The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel allowed local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path (bnc#1056982).\n- CVE-2017-14140: The move_pages system call in mm/migrate.c in the Linux kernel doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR (bnc#1057179).\n- CVE-2017-14051: An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel allowed local users to cause a denial of service (memory corruption and system crash) by leveraging root access (bnc#1056588).\n- CVE-2017-10661: Race condition in fs/timerfd.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing (bnc#1053152).\n- CVE-2017-12762: In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. (bnc#1053148).\n- CVE-2017-8831: The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel allowed local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a 'double fetch' vulnerability (bnc#1037994).\n- CVE-2017-7482: A potential memory corruption was fixed in decoding of krb5 principals in the kernels kerberos handling. (bnc#1046107).\n- CVE-2017-7542: The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel allowed local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket (bnc#1049882).\n- CVE-2017-11176: The mq_notify function in the Linux kernel did not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allowed attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact (bnc#1048275).\n- CVE-2017-7541: The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel allowed local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet (bnc#1049645).\n- CVE-2017-7518: The Linux kernel was vulnerable to an incorrect debug exception(#DB) error. It could occur while emulating a syscall instruction and potentially lead to guest privilege escalation. (bsc#1045922).\n- CVE-2017-8924: The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel allowed local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow (bnc#1037182 bsc#1038982).\n- CVE-2017-8925: The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel allowed local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling (bnc#1037183 bsc#1038981).\n- CVE-2017-1000380: sound/core/timer.c in the Linux kernel was vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents might have been disclosed when a read and an ioctl happen at the same time (bnc#1044125).\n- CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bnc#1041431).\n- CVE-2017-1000363: Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (could happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partial control over the command line) could overflow the parport_nr array in the following code, by appending many (\u003eLP_NO) 'lp=none' arguments to the command line (bnc#1039456).\n- CVE-2017-9076: The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1039885).\n- CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1040069).\n- CVE-2017-9075: The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1039883).\n- CVE-2017-9074: The IPv6 fragmentation implementation in the Linux kernel did not consider that the nexthdr field may be associated with an invalid option, which allowed local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls (bnc#1039882).\n- CVE-2017-7487: The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel mishandled reference counts, which allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface (bnc#1038879).\n- CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bnc#1038544).\n- CVE-2017-7889: The mm subsystem in the Linux kernel did not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allowed local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c (bnc#1034405).\n\nThe following new features were implemented:\n- the r8152 network driver was updated to support Realtek RTL8152/RTL8153 Based USB Ethernet Adapters (fate#321482)\n\nThe following non-security bugs were fixed:\n\n- blkback/blktap: do not leak stack data via response ring (bsc#1042863 XSA-216).\n- btrfs: Add WARN_ON for qgroup reserved underflow (bsc#1031515).\n- btrfs: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- btrfs: Check qgroup level in kernel qgroup assign (bsc#1001459).\n- btrfs: qgroup: allow to remove qgroup which has parent but no child (bsc#1001459).\n- btrfs: quota: Automatically update related qgroups or mark INCONSISTENT flags when assigning/deleting a qgroup relations (bsc#1001459).\n- ceph: Correctly return NXIO errors from ceph_llseek (git-fixes).\n- ceph: fix file open flags on ppc64 (git-fixes).\n- ceph: check i_nlink while converting a file handle to dentry (bsc#1039864).\n- drivers/net: delete non-required instances of include \u0026lt;linux/init.h\u0026gt; (bsc#993099).\n- drivers/net/usb: add device id for NVIDIA Tegra USB 3.0 Ethernet (bsc#993099).\n- drivers/net/usb: Add support for 'Lenovo OneLink Pro Dock' (bsc#993099).\n- enic: set skb-\u0026gt;hash type properly (bsc#922871).\n- ext2: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- ext4: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- firmware: dmi_scan: Fix ordering of product_uuid (bsc#1030531).\n- fm10k: correctly check if interface is removed (bsc#922855).\n- fs/block_dev: always invalidate cleancache in invalidate_bdev() (git-fixes).\n- fs: fix data invalidation in the cleancache during direct IO (git-fixes).\n- fs/xattr.c: zero out memory copied to userspace in getxattr (git-fixes).\n- hv: vmbus: Raise retry/wait limits in vmbus_post_msg() (bsc#1023287, bsc#1028217, bsc#1048788).\n- jhash: Update jhash_[321]words functions to use correct initval (git-fixes).\n- kABI: mask an include (bsc#994364).\n- md: ensure md devices are freed before module is unloaded (git-fixes).\n- md/raid0: apply base queue limits *before* disk_stack_limits (git-fixes).\n- md/raid0: update queue parameter in a safer location (git-fixes).\n- md/raid1: do not clear bitmap bit when bad-block-list write fails (git-fixes).\n- md/raid10: do not clear bitmap bit when bad-block-list write fails (git-fixes).\n- md/raid10: ensure device failure recorded before write request returns (git-fixes).\n- mlock: fix mlock count can not decrease in race condition (VM Functionality, bsc#1042696).\n- mlx: Revert the mlx5e_tx_notify_hw() changes.(bsc#1033960)\n- mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check (VM Functionality, bsc#1042832).\n- mm: hugetlb: call huge_pte_alloc() only if ptep is null (VM Functionality, bsc#1042832).\n- mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack (bnc#1039348).\n- netfilter: bridge: Fix the build when IPV6 is disabled (bsc#1027149).\n- net: get rid of SET_ETHTOOL_OPS (bsc#993099).\n- net/usb/r8152: add device id for Lenovo TP USB 3.0 Ethernet (bsc#993099).\n- netvsc: get rid of completion timeouts (bsc#1048788).\n- nfs v4.1: Fix Oopsable condition in server callback races (git-fixes).\n- ocfs2: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes (bnc#1012985).\n- powerpc: Add missing error check to prom_find_boot_cpu() (bnc#856774).\n- powerpc/book3s: Fix MCE console messages for unrecoverable MCE (bnc#878240).\n- powerpc/bpf/jit: Disable classic BPF JIT on ppc64le (bsc#1041429, [2017-05-29] Pending SUSE Kernel Fixes).\n- powerpc: Fix bad inline asm constraint in create_zero_mask() (bnc#856774).\n- powerpc/64: Fix flush_(d|i)cache_range() called from modules (bnc#863764).\n- printk: prevent userland from spoofing kernel messages (bsc#1039721).\n- reiserfs: Do not clear SGID when inheriting ACLs (bsc#1030552).\n- rtl8152: correct speed testing (bsc#993099).\n- r8152: add functions to set EEE (bsc#993099).\n- r8152: add MODULE_VERSION (bsc#993099).\n- r8152: add mutex for hw settings (bsc#993099).\n- r8152: add pre_reset and post_reset (bsc#993099).\n- r8152: add reset_resume function (bsc#993099).\n- r8152: add rtl_ops (bsc#993099).\n- r8152: add skb_cow_head (bsc#993099).\n- r8152: add three functions (bsc#993099).\n- r8152: adjust ALDPS function (bsc#993099).\n- r8152: adjust lpm timer (bsc#993099).\n- r8152: adjust rtl_start_rx (bsc#993099).\n- r8152: adjust rx_bottom (bsc#993099).\n- r8152: adjust r8152_submit_rx (bsc#993099).\n- r8152: adjust the line feed for hw_features (bsc#993099).\n- r8152: adjust usb_autopm_xxx (bsc#993099).\n- r8152: autoresume before setting feature (bsc#993099).\n- r8152: autoresume before setting MAC address (bsc#993099).\n- r8152: calculate the dropped packets for rx (bsc#993099).\n- r8152: call rtl_start_rx after netif_carrier_on (bsc#993099).\n- r8152: clear BMCR_PDOWN (bsc#993099).\n- r8152: clear LINK_OFF_WAKE_EN after autoresume (bsc#993099).\n- r8152: clear SELECTIVE_SUSPEND when autoresuming (bsc#993099).\n- r8152: clear the flag of SCHEDULE_TASKLET in tasklet (bsc#993099).\n- r8152: combine PHY reset with set_speed (bsc#993099).\n- r8152: constify ethtool_ops structures (bsc#993099).\n- r8152: correct some messages (bsc#993099).\n- r8152: correct the rx early size (bsc#993099).\n- r8152: deal with the empty line and space (bsc#993099).\n- r8152: disable ALDPS and EEE before setting PHY (bsc#993099).\n- r8152: disable ALDPS (bsc#993099).\n- r8152: disable MAC clock speed down (bsc#993099).\n- r8152: disable power cut for RTL8153 (bsc#993099).\n- r8152: disable teredo for RTL8152 (bsc#993099).\n- r8152: disable the capability of zero length (bsc#993099).\n- r8152: disable the ECM mode (bsc#993099).\n- r8152: disable the tasklet by default (bsc#993099).\n- r8152: do not enable napi before rx ready (bsc#993099).\n- r8152: ecm and vendor modes coexist (bsc#993099).\n- r8152: fix incorrect type in assignment (bsc#993099).\n- r8152: fix lockup when runtime PM is enabled (bsc#993099).\n- r8152: fix runtime function for RTL8152 (bsc#993099).\n- r8152: fix r8152_csum_workaround function (bsc#993099).\n- r8152: fix setting RTL8152_UNPLUG (bsc#993099).\n- r8152: fix the carrier off when autoresuming (bsc#993099).\n- r8152: fix the checking of the usb speed (bsc#993099).\n- r8152: fix the issue about U1/U2 (bsc#993099).\n- r8152: fix the runtime suspend issues (bsc#993099).\n- r8152: fix the submission of the interrupt transfer (bsc#993099).\n- r8152: fix the wake event (bsc#993099).\n- r8152: fix the warnings and a error from checkpatch.pl (bsc#993099).\n- r8152: fix the wrong return value (bsc#993099).\n- r8152: fix tx/rx memory overflow (bsc#993099).\n- r8152: fix wakeup settings (bsc#993099).\n- r8152: change rx early size when the mtu is changed (bsc#993099).\n- r8152: change some definitions (bsc#993099).\n- r8152: change the descriptor (bsc#993099).\n- r8152: change the EEE definition (bsc#993099).\n- r8152: change the location of rtl8152_set_mac_address (bsc#993099).\n- r8152: check code with checkpatch.pl (bsc#993099).\n- r8152: check linking status with netif_carrier_ok (bsc#993099).\n- r8152: check RTL8152_UNPLUG and netif_running before autoresume (bsc#993099).\n- r8152: check RTL8152_UNPLUG (bsc#993099).\n- r8152: check RTL8152_UNPLUG for rtl8152_close (bsc#993099).\n- r8152: check the status before submitting rx (bsc#993099).\n- r8152: check tx agg list before spin lock (bsc#993099).\n- r8152: check WORK_ENABLE in suspend function (bsc#993099).\n- r8152: increase the tx timeout (bsc#993099).\n- r8152: load the default MAC address (bsc#993099).\n- r8152: modify rtl_ops_init (bsc#993099).\n- r8152: modify the check of the flag of PHY_RESET in set_speed function (bsc#993099).\n- r8152: modify the method of accessing PHY (bsc#993099).\n- r8152: modify the tx flow (bsc#993099).\n- r8152: move enabling PHY (bsc#993099).\n- r8152: move PHY settings to hw_phy_cfg (bsc#993099).\n- r8152: move rtl8152_unload and ocp_reg_write (bsc#993099).\n- r8152: move r8152b_get_version (bsc#993099).\n- r8152: move some functions (bsc#993099).\n- r8152: move some functions (bsc#993099).\n- r8152: move some functions from probe to open (bsc#993099).\n- r8152: move the actions of saving the information of the device (bsc#993099).\n- r8152: move the setting for the default speed (bsc#993099).\n- r8152: move the settings of PHY to a work queue (bsc#993099).\n- r8152: nway reset after setting eee (bsc#993099).\n- r8152: redefine REALTEK_USB_DEVICE (bsc#993099).\n- r8152: reduce the frequency of spin_lock (bsc#993099).\n- r8152: reduce the number of Tx (bsc#993099).\n- r8152: remove a netif_carrier_off in rtl8152_open function (bsc#993099).\n- r8152: remove cancel_delayed_work_sync in rtl8152_set_speed (bsc#993099).\n- r8152: remove clearing bp (bsc#993099).\n- r8152: remove generic_ocp_read before writing (bsc#993099).\n- r8152: remove rtl_phy_reset function (bsc#993099).\n- r8152: remove rtl8152_get_stats (bsc#993099).\n- r8152: remove r8153_enable_eee (bsc#993099).\n- r8152: remove sram_read (bsc#993099).\n- r8152: remove the definitions of the PID (bsc#993099).\n- r8152: remove the duplicate init for the list of rx_done (bsc#993099).\n- r8152: remove the setting of LAN_WAKE_EN (bsc#993099).\n- r8152: rename rx_buf_sz (bsc#993099).\n- r8152: rename tx_underun (bsc#993099).\n- r8152: replace get_protocol with vlan_get_protocol (bsc#993099).\n- r8152: replace netdev_alloc_skb_ip_align with napi_alloc_skb (bsc#993099).\n- r8152: replace netif_rx with netif_receive_skb (bsc#993099).\n- r8152: replace some tabs with spaces (bsc#993099).\n- r8152: replace some types from int to bool (bsc#993099).\n- r8152: replace spin_lock_irqsave and spin_unlock_irqrestore (bsc#993099).\n- r8152: replace strncpy with strlcpy (bsc#993099).\n- r8152: replace tasklet with NAPI (bsc#993099).\n- r8152: replace the return value of rtl_ops_init (bsc#993099).\n- r8152: replace tp-\u0026gt;netdev with netdev (bsc#993099).\n- r8152: reset device when tx timeout (bsc#993099).\n- r8152: reset the bmu (bsc#993099).\n- r8152: reset tp-\u0026gt;speed before autoresuming in open function (bsc#993099).\n- r8152: restore hw settings (bsc#993099).\n- r8152: return -EBUSY for runtime suspend (bsc#993099).\n- r8152: save the speed (bsc#993099).\n- r8152: separate USB_RX_EARLY_AGG (bsc#993099).\n- r8152: set disable_hub_initiated_lpm (bsc#993099).\n- r8152: set RTL8152_UNPLUG when finding -ENODEV (bsc#993099).\n- r8152: split DRIVER_VERSION (bsc#993099).\n- r8152: split rtl8152_enable (bsc#993099).\n- r8152: stop submitting intr for -EPROTO (bsc#993099).\n- r8152: support dumping the hw counters (bsc#993099).\n- r8152: support ethtool eee (bsc#993099).\n- r8152: support get_msglevel and set_msglevel (bsc#993099).\n- r8152: support IPv6 (bsc#993099).\n- r8152: support jumbo frame for RTL8153 (bsc#993099).\n- r8152: support nway_reset of ethtool (bsc#993099).\n- r8152: support RTL8153 (bsc#993099).\n- r8152: support runtime suspend (bsc#993099).\n- r8152: support rx checksum (bsc#993099).\n- r8152: support setting rx coalesce (bsc#993099).\n- r8152: support stopping/waking tx queue (bsc#993099).\n- r8152: support the new RTL8153 chip (bsc#993099).\n- r8152: support TSO (bsc#993099).\n- r8152: support VLAN (bsc#993099).\n- r8152: support WOL (bsc#993099).\n- r8152: up the priority of the transmission (bsc#993099).\n- r8152: use BIT macro (bsc#993099).\n- r8152: use eth_hw_addr_random (bsc#993099).\n- r8152: Use kmemdup instead of kmalloc + memcpy (bsc#993099).\n- r8152: use test_and_clear_bit (bsc#993099).\n- r8152: use usleep_range (bsc#993099).\n- r8152: wake up the device before dumping the hw counter (bsc#993099).\n- scsi: qla2xxx: Get mutex lock before checking optrom_state (bsc#1053317).\n- sched/fair: Fix min_vruntime tracking (bnc#1012985).\n- sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded systems (bnc#1012985).\n- sched/rt: Fix PI handling vs. sched_setscheduler() (bnc#1012985).\n- sunrpc: Update RPCBIND_MAXNETIDLEN (git-fixes).\n- syscall: fix dereferencing NULL payload with nonzero length (bsc#1045327, bsc#1062471).\n- tcp: do not inherit fastopen_req from parent (bsc#1038544).\n- timekeeping: Ignore the bogus sleep time if pm_trace is enabled (bsc#994364).\n- tracing/kprobes: Enforce kprobes teardown after testing (bnc#1012985).\n- usb: wusbcore: fix NULL-deref at probe (bsc#1045487).\n- xen: Linux 3.12.74.\n- xen/PCI-MSI: fix sysfs teardown in DomU (bsc#986924).\n- xfs: fix a couple error sequence jumps in xfs_mountfs() (bsc#1035531).\n- xfs: fix coccinelle warnings (bsc#1035531).\n- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).\n- xfs: use -\u0026gt;b_state to fix buffer I/O accounting release race (bsc#1041160) (bsc#1041160).\n- xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present (bsc#1058524).\n","status":"published","published":"2017-10-30T15:09:11Z","modified":"2026-02-04T03:07:49.763246Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2920-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 12 GA LTS kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free, a different vulnerability than CVE-2017-6346 (bnc#1064388).\n- CVE-2015-9004: kernel/events/core.c in the Linux kernel mishandled counter grouping, which allowed local users to gain privileges via a crafted application, related to the perf_pmu_register and perf_event_open functions (bnc#1037306).\n- CVE-2016-10229: udp.c in the Linux kernel allowed remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag (bnc#1032268).\n- CVE-2016-9604: The handling of keyrings starting with '.' in KEYCTL_JOIN_SESSION_KEYRING, which could have allowed local users to manipulate privileged keyrings, was fixed (bsc#1035576)\n- CVE-2017-1000363: Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vulnerability the adversary has partial control over the command line) can overflow the parport_nr array in the following code, by appending many (\u003eLP_NO) 'lp=none' arguments to the command line (bnc#1039456).\n- CVE-2017-1000365: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but did not take the argument and environment pointers into account, which allowed attackers to bypass this limitation. (bnc#1039354).\n- CVE-2017-1000380: sound/core/timer.c in the Linux kernel is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time (bnc#1044125).\n- CVE-2017-10661: Race condition in fs/timerfd.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing (bnc#1053152).\n- CVE-2017-11176: The mq_notify function in the Linux kernel did not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allowed attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact (bnc#1048275).\n- CVE-2017-12153: A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel This function did not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash (bnc#1058410).\n- CVE-2017-12154: The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel did not ensure that the 'CR8-load exiting' and 'CR8-store exiting' L0 vmcs02 controls exist in cases where L1 omits the 'use TPR shadow' vmcs12 control, which allowed KVM L2 guest OS users to obtain read and write access to the hardware CR8 register (bnc#1058507).\n- CVE-2017-12762: In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. (bnc#1053148).\n- CVE-2017-13080: Wi-Fi Protected Access (WPA and WPA2) allowed reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients (bnc#1063667).\n- CVE-2017-14051: An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel allowed local users to cause a denial of service (memory corruption and system crash) by leveraging root access (bnc#1056588).\n- CVE-2017-14106: The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel allowed local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path (bnc#1056982).\n- CVE-2017-14140: The move_pages system call in mm/migrate.c in the Linux kernel doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR (bnc#1057179).\n- CVE-2017-15265: Use-after-free vulnerability in the Linux kernel allowed local users to have unspecified impact via vectors related to /dev/snd/seq (bnc#1062520).\n- CVE-2017-15274: security/keys/keyctl.c in the Linux kernel did not consider the case of a NULL payload in conjunction with a nonzero length value, which allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192 (bnc#1045327).\n- CVE-2017-2647: The KEYS subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c (bnc#1030593).\n- CVE-2017-6951: The keyring_search_aux function in security/keys/keyring.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a request_key system call for the 'dead' type (bnc#1029850).\n- CVE-2017-7482: A potential memory corruption was fixed in decoding of krb5 principals in the kernels kerberos handling. (bnc#1046107).\n- CVE-2017-7487: The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel mishandled reference counts, which allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface (bnc#1038879).\n- CVE-2017-7518: The Linux kernel was vulnerable to an incorrect debug exception(#DB) error. It could occur while emulating a syscall instruction and potentially lead to guest privilege escalation. (bsc#1045922).\n- CVE-2017-7541: The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel allowed local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet (bnc#1049645).\n- CVE-2017-7542: The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel allowed local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket (bnc#1049882).\n- CVE-2017-7889: The mm subsystem in the Linux kernel did not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allowed local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c (bnc#1034405).\n- CVE-2017-8106: The handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 allowed privileged KVM guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a single-context INVEPT instruction with a NULL EPT pointer (bnc#1035877).\n- CVE-2017-8831: The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel allowed local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a 'double fetch' vulnerability (bnc#1037994).\n- CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bnc#1038544).\n- CVE-2017-8924: The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel allowed local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow (bnc#1037182 bsc#1038982).\n- CVE-2017-8925: The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel allowed local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling (bnc#1037183 bsc#1038981).\n- CVE-2017-9074: The IPv6 fragmentation implementation in the Linux kernel did not consider that the nexthdr field may be associated with an invalid option, which allowed local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls (bnc#1039882).\n- CVE-2017-9075: The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1039883).\n- CVE-2017-9076: The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1039885).\n- CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bnc#1040069).\n- CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bnc#1041431).\n\nThe following non-security bugs were fixed:\n\n- btrfs: Fix a data space underflow warning (bsc#985562, bsc#975596, bsc#984779, bsc#1008353, bsc#1017941).\n- dm-mpath: always return reservation conflict. bsc#938162\n- getcwd: Close race with d_move called by lustre (bsc#1052593).\n- ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (bsc#1041958).\n- ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (bsc#1041958).\n- kabi: avoid bogus kabi errors in ip_output.c (bsc#1041958).\n- keys: Disallow keyrings beginning with '.' to be joined as session keyrings (bnc#1035576).\n- mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack (bnc#1039348).\n- net: account for current skb length when deciding about UFO (bsc#1041958).\n- nfsd4: minor NFSv2/v3 write decoding cleanup (bsc#1034670 CVE#2017-7645).\n- nfsd: check for oversized NFSv2/v3 arguments (bsc#1034670 CVE#2017-7645).\n- nfsd: stricter decoding of write-like NFSv2/v3 ops (bsc#1034670 CVE#2017-7645).\n- printk: prevent userland from spoofing kernel messages (bsc#1039721).\n- reiserfs: do not preallocate blocks for extended attributes (bsc#990682).\n- tcp: do not inherit fastopen_req from parent (bsc#1038544).\n- udp: disallow UFO for sockets with SO_NO_CHECK option (bsc#1041958).\n- usb: wusbcore: fix NULL-deref at probe (bsc#1045487).\n- vsock: Detach QP check should filter out non matching QPs (bsc#1036752 bsc#1047408).\n- vsock: Fix lockdep issue (bsc#977417 bsc#1047408).\n- vsock: sock_put wasn't safe to call in interrupt context (bsc#977417 bsc#1047408).\n- xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present (bsc#1058524).\n","status":"published","published":"2017-11-02T13:02:36Z","modified":"2026-02-04T03:00:43.498459Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:3398-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.103 to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2017-1000410: The Linux kernel was affected by an information lea that lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. (bnc#1070535).\n- CVE-2017-11600: net/xfrm/xfrm_policy.c in the Linux kernel did not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allowed local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message (bnc#1050231).\n- CVE-2017-12193: The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel mishandled node splitting, which allowed local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations (bnc#1066192).\n- CVE-2017-15115: The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel did not check whether the intended netns is used in a peel-off action, which allowed local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls (bnc#1068671).\n- CVE-2017-16528: sound/core/seq_device.c in the Linux kernel allowed local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066629).\n- CVE-2017-16536: The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066606).\n- CVE-2017-16537: The imon_probe function in drivers/media/rc/imon.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066573).\n- CVE-2017-16645: The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel allowed local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1067132).\n- CVE-2017-16646: drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel allowed local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1067105).\n- CVE-2017-16994: The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel mishandled holes in hugetlb ranges, which allowed local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call (bnc#1069996).\n- CVE-2017-17448: net/netfilter/nfnetlink_cthelper.c in the Linux kernel did not require the CAP_NET_ADMIN capability for new, get, and del operations, which allowed local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces (bnc#1071693).\n- CVE-2017-17449: The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel did not restrict observations of Netlink messages to a single net namespace, which allowed local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system (bnc#1071694).\n- CVE-2017-17450: net/netfilter/xt_osf.c in the Linux kernel did not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allowed local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces (bnc#1071695).\n- CVE-2017-7482: Fixed an overflow when decoding a krb5 principal. (bnc#1046107).\n- CVE-2017-8824: The dccp_disconnect function in net/dccp/proto.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state (bnc#1070771).\n\nThe following non-security bugs were fixed:\n\n- acpi / APD: Add clock frequency for ThunderX2 I2C controller (bsc#1067225).\n- Add references (bsc#1062941, bsc#1037404, bsc#1012523, bsc#1038299) The scsi_devinfo patches are relevant for all bugs related to HITACHI OPEN-V:\n- adm80211: return an error if adm8211_alloc_rings() fails (bsc#1031717).\n- adv7604: Initialize drive strength to default when using DT (bnc#1012382).\n- af_netlink: ensure that NLMSG_DONE never fails in dumps (bnc#1012382).\n- alsa: caiaq: Fix stray URB at probe error path (bnc#1012382).\n- alsa: hda: Abort capability probe at invalid register read (bsc#1048356).\n- alsa: hda: Add Raven PCI ID (bnc#1012382).\n- alsa: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE (bnc#1012382).\n- alsa: hda/ca0132 - Fix memory leak at error path (bsc#1031717).\n- alsa: hda - fix headset mic problem for Dell machines with alc236 (bnc#1012382).\n- alsa: hda - No loopback on ALC299 codec (git-fixes).\n- alsa: hda/realtek: Add headset mic support for Intel NUC Skull Canyon (bsc#1031717).\n- alsa: hda/realtek - Add new codec ID ALC299 (bnc#1012382).\n- alsa: hda/realtek - Add support for ALC236/ALC3204 (bnc#1012382).\n- alsa: hda/realtek - Fix ALC700 family no sound issue (bsc#1031717).\n- alsa: hda: Remove superfluous '-' added by printk conversion (bnc#1012382).\n- alsa: hda: Workaround for KBL codec power control (bsc#1048356,bsc#1047989,bsc#1055272,bsc#1058413).\n- alsa: line6: Fix leftover URB at error-path during probe (bnc#1012382).\n- alsa: pcm: update tstamp only if audio_tstamp changed (bsc#1031717).\n- alsa: seq: Avoid invalid lockdep class warning (bsc#1031717).\n- alsa: seq: Enable 'use' locking in all configurations (bnc#1012382).\n- alsa: seq: Fix copy_from_user() call inside lock (bnc#1012382).\n- alsa: seq: Fix nested rwsem annotation for lockdep splat (bnc#1012382).\n- alsa: seq: Fix OSS sysex delivery in OSS emulation (bnc#1012382).\n- alsa: timer: Add missing mutex lock for compat ioctls (bnc#1012382).\n- alsa: timer: Remove kernel warning at compat ioctl error paths (bsc#1031717).\n- alsa: usb-audio: Add native DSD support for Pro-Ject Pre Box S2 Digital (bnc#1012382).\n- alsa: usb-audio: Add sanity checks in v2 clock parsers (bsc#1031717).\n- alsa: usb-audio: Add sanity checks to FE parser (bsc#1031717).\n- alsa: usb-audio: Fix potential out-of-bound access at parsing SU (bsc#1031717).\n- alsa: usb-audio: Kill stray URB at exiting (bnc#1012382).\n- alsa: usb-audio: uac1: Invalidate ctl on interrupt (bsc#1031717).\n- alsa: vx: Do not try to update capture stream before running (bnc#1012382).\n- alsa: vx: Fix possible transfer overflow (bnc#1012382).\n- Apply generic ppc build fixes to vanilla (bsc#1070805)\n- arm64: dts: NS2: reserve memory for Nitro firmware (bnc#1012382).\n- arm64: ensure __dump_instr() checks addr_limit (bnc#1012382).\n- arm: 8715/1: add a private asm/unaligned.h (bnc#1012382).\n- arm: 8720/1: ensure dump_instr() checks addr_limit (bnc#1012382).\n- arm: 8721/1: mm: dump: check hardware RO bit for LPAE (bnc#1012382).\n- arm: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE (bnc#1012382).\n- arm: crypto: reduce priority of bit-sliced AES cipher (bnc#1012382).\n- arm: dts: Fix am335x and dm814x scm syscon to probe children (bnc#1012382).\n- arm: dts: Fix compatible for ti81xx uarts for 8250 (bnc#1012382).\n- arm: dts: Fix omap3 off mode pull defines (bnc#1012382).\n- arm: dts: mvebu: pl310-cache disable double-linefill (bnc#1012382).\n- arm: OMAP2+: Fix init for multiple quirks for the same SoC (bnc#1012382).\n- arm: omap2plus_defconfig: Fix probe errors on UARTs 5 and 6 (bnc#1012382).\n- arm: pxa: Do not rely on public mmc header to include leds.h (bnc#1012382).\n- asm/sections: add helpers to check for section data (bsc#1063026).\n- asoc: adau17x1: Workaround for noise bug in ADC (bnc#1012382).\n- asoc: cs42l56: Fix reset GPIO name in example DT binding (bsc#1031717).\n- asoc: davinci-mcasp: Fix an error handling path in 'davinci_mcasp_probe()' (bsc#1031717).\n- asoc: rsnd: do not double free kctrl (bnc#1012382).\n- asoc: samsung: Fix possible double iounmap on s3c24xx driver probe failure (bsc#1031717).\n- asoc: wm_adsp: Do not overrun firmware file buffer when reading region data (bnc#1012382).\n- ata: ATA_BMDMA should depend on HAS_DMA (bnc#1012382).\n- ata: fixes kernel crash while tracing ata_eh_link_autopsy event (bnc#1012382).\n- ata: SATA_HIGHBANK should depend on HAS_DMA (bnc#1012382).\n- ata: SATA_MV should depend on HAS_DMA (bnc#1012382).\n- ath10k: convert warning about non-existent OTP board id to debug message (git-fixes).\n- ath10k: fix a warning during channel switch with multiple vaps (bsc#1031717).\n- ath10k: fix board data fetch error message (bsc#1031717).\n- ath10k: fix diag_read to collect data for larger memory (bsc#1031717).\n- ath10k: fix incorrect txpower set by P2P_DEVICE interface (bnc#1012382).\n- ath10k: fix potential memory leak in ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).\n- ath10k: free cached fw bin contents when get board id fails (bsc#1031717).\n- ath10k: ignore configuring the incorrect board_id (bnc#1012382).\n- ath10k: set CTS protection VDEV param only if VDEV is up (bnc#1012382).\n- ath9k_htc: check for underflow in ath9k_htc_rx_msg() (bsc#1031717).\n- ath9k: off by one in ath9k_hw_nvram_read_array() (bsc#1031717).\n- autofs: do not fail mount for transient error (bsc#1065180).\n- backlight: adp5520: Fix error handling in adp5520_bl_probe() (bnc#1012382).\n- backlight: lcd: Fix race condition during register (bnc#1012382).\n- bcache: check ca-\u003ealloc_thread initialized before wake up it (bnc#1012382).\n- bio-integrity: bio_integrity_advance must update integrity seed (bsc#1046054).\n- bio-integrity: bio_trim should truncate integrity vector accordingly (bsc#1046054).\n- bio-integrity: Do not allocate integrity context for bio w/o data (bsc#1046054).\n- bio-integrity: fix interface for bio_integrity_trim (bsc#1046054).\n- bio: partially revert 'fix interface for bio_integrity_trim' (bsc#1046054).\n- blacklist.conf: Add ath10k, mmc and rtl8192u commits (bsc#1031717)\n- blacklist.conf: Add drm/i915 blacklist (bsc#1031717)\n- blacklist.conf: added misc commits (bsc#1031717)\n- blacklist.conf: Add misc entries (bsc#1031717)\n- blacklist.conf: Add non-applicable commit ID (bsc#1066812)\n- blacklist.conf: Add non-applicable commits (bsc#1066812)\n- blacklist.conf: blacklisted 16af97dc5a89 (bnc#1053919)\n- blacklist.conf: Blacklist two commits (bbb3be170ac2 and ccf1e0045eea).\n- blacklist.conf: Update blacklist (bsc#1031717)\n- blacklist.conf: Update iwlwifi blacklist (bsc#1031717)\n- blacklist.conf: yet another serial entry (bsc#1031717)\n- block: Fix a race between blk_cleanup_queue() and timeout handling (FATE#319965, bsc#964944).\n- block: Make q_usage_counter also track legacy requests (bsc#1057820).\n- bluetooth: btusb: fix QCA Rome suspend/resume (bnc#1012382).\n- bnxt_en: Do not use rtnl lock to protect link change logic in workqueue (bsc#1020412 FATE#321671).\n- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg() (bsc#1053309).\n- bnxt_en: Fix possible corrupted NVRAM parameters from firmware response (bsc#1020412 FATE#321671).\n- bnxt_en: Fix possible corruption in DCB parameters from firmware (bsc#1020412 FATE#321671).\n- bnxt_en: Fix VF PCIe link speed and width logic (bsc#1020412 FATE#321671).\n- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown (bsc#1053309).\n- bnxt_re: Make room for mapping beyond 32 entries (bsc#1056596).\n- bonding: discard lowest hash bit for 802.3ad layer3+4 (bnc#1012382).\n- bpf: one perf event close won't free bpf program attached by another perf event (bnc#1012382).\n- bpf/verifier: reject BPF_ALU64|BPF_END (bnc#1012382).\n- brcmfmac: add length check in brcmf_cfg80211_escan_handler() (bnc#1012382).\n- brcmfmac: remove setting IBSS mode when stopping AP (bnc#1012382).\n- brcmsmac: make some local variables 'static const' to reduce stack size (bnc#1012382).\n- bt8xx: fix memory leak (bnc#1012382).\n- btrfs: return the actual error value from from btrfs_uuid_tree_iterate (bnc#1012382).\n- bus: mbus: fix window size calculation for 4GB windows (bnc#1012382).\n- can: c_can: do not indicate triple sampling support for D_CAN (bnc#1012382).\n- can: esd_usb2: Fix can_dlc value for received RTR, frames (bnc#1012382).\n- can: gs_usb: fix busy loop if no more TX context is available (bnc#1012382).\n- can: kvaser_usb: Correct return value in printout (bnc#1012382).\n- can: kvaser_usb: Ignore CMD_FLUSH_QUEUE_REPLY messages (bnc#1012382).\n- can: sun4i: fix loopback mode (bnc#1012382).\n- can: sun4i: handle overrun in RX FIFO (bnc#1012382).\n- cdc_ncm: Set NTB format again after altsetting switch for Huawei devices (bnc#1012382).\n- ceph: clean up unsafe d_parent accesses in build_dentry_path (FATE#322288 bnc#1012382).\n- ceph: disable cached readdir after dropping positive dentry (bsc#1069277).\n- ceph: -EINVAL on decoding failure in ceph_mdsc_handle_fsmap() (bsc#1069277).\n- ceph: present consistent fsid, regardless of arch endianness (bsc#1069277).\n- ceph: unlock dangling spinlock in try_flush_caps() (bsc#1065639).\n- cgroup, net_cls: iterate the fds of only the tasks which are being migrated (bnc#1064926).\n- cifs: check MaxPathNameComponentLength != 0 before using it (bnc#1012382).\n- cifs: fix circular locking dependency (bsc#1064701).\n- cifs: Reconnect expired SMB sessions (bnc#1012382).\n- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).\n- clk: ti: dra7-atl-clock: Fix of_node reference counting (bnc#1012382).\n- clockevents/drivers/cs5535: Improve resilience to spurious interrupts (bnc#1012382).\n- cma: fix calculation of aligned offset (VM Functionality, bsc#1050060).\n- coda: fix 'kernel memory exposure attempt' in fsync (bnc#1012382).\n- cpufreq: CPPC: add acpi_PROCESSOR dependency (bnc#1012382).\n- crypto: dh - Do not permit 'key' or 'g' size longer than 'p' (bsc#1048317).\n- crypto: dh - Do not permit 'p' to be 0 (bsc#1048317).\n- crypto: dh - Fix double free of ctx-\u003ep (bsc#1048317).\n- crypto: dh - fix memleak in setkey (bsc#1048317).\n- crypto: rsa - fix buffer overread when stripping leading zeroes (bsc#1048317).\n- crypto: shash - Fix zero-length shash ahash digest crash (bnc#1012382).\n- crypto: vmx - disable preemption to enable vsx in aes_ctr.c (bnc#1012382).\n- crypto: x86/sha1-mb - fix panic due to unaligned access (bnc#1012382).\n- crypto: xts - Add ECB dependency (bnc#1012382).\n- cx231xx: Fix I2C on Internal Master 3 Bus (bnc#1012382).\n- cxgb4: Fix error codes in c4iw_create_cq() (bsc#1048327).\n- cxl: Fix DAR check \u0026 use REGION_ID instead of opencoding (bsc#1066223).\n- cxl: Fix leaking pid refs in some error paths (bsc#1066223).\n- cxl: Force context lock during EEH flow (bsc#1066223).\n- cxl: Prevent adapter reset if an active context exists (bsc#1066223).\n- cxl: Route eeh events to all drivers in cxl_pci_error_detected() (bsc#1066223).\n- direct-io: Prevent NULL pointer access in submit_page_section (bnc#1012382).\n- Disable IPMI fix patches due to regression (bsc#1071833)\n- Disable patches.kernel.org/4.4.93-022-fix-unbalanced-page-refcounting-in-bio_map_use.patch (bsc#1070767)\n- dmaengine: dmatest: warn user when dma test times out (bnc#1012382).\n- dmaengine: edma: Align the memcpy acnt array size with the transfer (bnc#1012382).\n- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).\n- dm bufio: fix integer overflow when limiting maximum cache size (bnc#1012382).\n- dm: fix race between dm_get_from_kobject() and __dm_destroy() (bnc#1012382).\n- dm mpath: remove annoying message of 'blk_get_request() returned -11' (bsc#1066812).\n- dm raid: fix NULL pointer dereference for raid1 without bitmap (bsc#1042957, FATE#321488).\n- dm rq: Avoid that request processing stalls sporadically (bsc#1042978).\n- drivers: base: cacheinfo: fix x86 with CONFIG_OF enabled (bsc#1070001).\n- drivers: dma-mapping: Do not leave an invalid area-\u003epages pointer in dma_common_contiguous_remap() (Git-fixes, bsc#1065692).\n- drivers/fbdev/efifb: Allow BAR to be moved instead of claiming it (bsc#1051987).\n- drivers: of: Fix of_pci.h header guard (bsc#1065959).\n- drm/amdgpu: when dpm disabled, also need to stop/start vce (bnc#1012382).\n- drm/amdkfd: NULL dereference involving create_process() (bsc#1031717).\n- drm: Apply range restriction after color adjustment when allocation (bnc#1012382).\n- drm/armada: Fix compile fail (bnc#1012382).\n- drm: drm_minor_register(): Clean up debugfs on failure (bnc#1012382).\n- drm: gma500: fix logic error (bsc#1031717).\n- drm/i915/bxt: set min brightness from VBT (bsc#1031717).\n- drm/i915: Do not try indexed reads to alternate slave addresses (bsc#1031717).\n- drm/i915: fix backlight invert for non-zero minimum brightness (bsc#1031717).\n- drm/i915: Prevent zero length 'index' write (bsc#1031717).\n- drm/i915: Read timings from the correct transcoder in intel_crtc_mode_get() (bsc#1031717).\n- drm/msm: fix an integer overflow test (bnc#1012382).\n- drm/msm: Fix potential buffer overflow issue (bnc#1012382).\n- drm/nouveau/bsp/g92: disable by default (bnc#1012382).\n- drm/nouveau/gr: fallback to legacy paths during firmware lookup (bsc#1031717).\n- drm/nouveau/mmu: flush tlbs before deleting page tables (bnc#1012382).\n- drm/omap: Fix error handling path in 'omap_dmm_probe()' (bsc#1031717).\n- drm/panel: simple: Add missing panel_simple_unprepare() calls (bsc#1031717).\n- drm/radeon: Avoid double gpu reset by adding a timeout on IB ring tests (bsc#1066175).\n- drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache (bnc#1012382).\n- drm/vc4: Fix leak of HDMI EDID (bsc#1031717).\n- drm/vmwgfx: Fix Ubuntu 17.10 Wayland black screen issue (bnc#1012382).\n- Drop obsolete patch (bsc#1067734)\n- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470 FATE#319819).\n- e1000e: Fix error path in link detection (bnc#1012382).\n- e1000e: Fix return value test (bnc#1012382).\n- e1000e: Separate signaling for link check/link up (bnc#1012382).\n- ecryptfs: fix dereference of NULL user_key_payload (bnc#1012382).\n- eCryptfs: use after free in ecryptfs_release_messaging() (bsc#1070404).\n- epoll: avoid calling ep_call_nested() from ep_poll_safewake() (bsc#1056427).\n- epoll: remove ep_call_nested() from ep_eventpoll_poll() (bsc#1056427).\n- ext4: cleanup goto next group (bsc#1066285).\n- ext4: do not use stripe_width if it is not set (bnc#1012382).\n- ext4: fix fault handling when mounted with -o dax,ro (bsc#1069484).\n- ext4: fix interaction between i_size, fallocate, and delalloc after a crash (bnc#1012382).\n- ext4: fix stripe-unaligned allocations (bnc#1012382).\n- ext4: in ext4_seek_{hole,data}, return -ENXIO for negative offsets (bnc#1012382).\n- ext4: prevent data corruption with inline data + DAX (bsc#1064591).\n- ext4: prevent data corruption with journaling + DAX (bsc#1064591).\n- ext4: reduce lock contention in __ext4_new_inode (bsc#1066285).\n- extcon: palmas: Check the parent instance to prevent the NULL (bnc#1012382).\n- exynos4-is: fimc-is: Unmap region obtained by of_iomap() (bnc#1012382).\n- f2fs crypto: add missing locking for keyring_key access (bnc#1012382).\n- f2fs crypto: replace some BUG_ON()'s with error checks (bnc#1012382).\n- f2fs: do not wait for writeback in write_begin (bnc#1012382).\n- fealnx: Fix building error on MIPS (bnc#1012382).\n- fix a page leak in vhost_scsi_iov_to_sgl() error recovery (bnc#1012382).\n- Fix tracing sample code warning (bnc#1012382).\n- fix unbalanced page refcounting in bio_map_user_iov (bnc#1012382).\n- Fixup patches.fixes/block-Make-q_usage_counter-also-track-legacy-request.patch. (bsc#1062496)\n- fm10k: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- fs/9p: Compare qid.path in v9fs_test_inode (bsc#1070404).\n- fs-cache: fix dereference of NULL user_key_payload (bnc#1012382).\n- fscrypt: fix dereference of NULL user_key_payload (bnc#1012382).\n- fscrypt: lock mutex before checking for bounce page pool (bnc#1012382).\n- fscrypto: require write access to mount to set encryption policy (bnc#1012382).\n- fuse: fix READDIRPLUS skipping an entry (bnc#1012382).\n- gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap (bnc#1012382).\n- hid: elo: clear BTN_LEFT mapping (bsc#1065866).\n- hid: usbhid: fix out-of-bounds bug (bnc#1012382).\n- hsi: ssi_protocol: double free in ssip_pn_xmit() (bsc#1031717).\n- hwmon: (xgene) Fix up error handling path mixup in 'xgene_hwmon_probe()' (bsc#).\n- i2c: at91: ensure state is restored after suspending (bnc#1012382).\n- i2c: bcm2835: Add support for dynamic clock (bsc#1066660).\n- i2c: bcm2835: Add support for Repeated Start Condition (bsc#1066660).\n- i2c: bcm2835: Avoid possible NULL ptr dereference (bsc#1066660).\n- i2c: bcm2835: Can't support I2C_M_IGNORE_NAK (bsc#1066660).\n- i2c: bcm2835: Do not complain on -EPROBE_DEFER from getting our clock (bsc#1066660).\n- i2c: bcm2835: Fix hang for writing messages larger than 16 bytes (bsc#1066660).\n- i2c: bcm2835: Protect against unexpected TXW/RXR interrupts (bsc#1066660).\n- i2c: bcm2835: Support i2c-dev ioctl I2C_TIMEOUT (bsc#1066660).\n- i2c: bcm2835: Use dev_dbg logging on transfer errors (bsc#1066660).\n- i2c: cadance: fix ctrl/addr reg write order (bsc#1031717).\n- i2c: imx: Use correct function to write to register (bsc#1031717).\n- i2c: ismt: Separate I2C block read from SMBus block read (bnc#1012382).\n- i2c: riic: correctly finish transfers (bnc#1012382).\n- i2c: riic: fix restart condition (git-fixes).\n- i2c: xlp9xx: Enable HWMON class probing for xlp9xx (bsc#1067225).\n- i2c: xlp9xx: Get clock frequency with clk API (bsc#1067225).\n- i2c: xlp9xx: Handle I2C_M_RECV_LEN in msg-\u003eflags (bsc#1067225).\n- i40e: Fix incorrect use of tx_itr_setting when checking for Rx ITR setup (bsc#1024346 FATE#321239 bsc#1024373 FATE#321247).\n- i40e: fix the calculation of VFs mac addresses (bsc#1024346 FATE#321239 bsc#1024373 FATE#321247).\n- i40e: only redistribute MSI-X vectors when needed (bsc#1024346 FATE#321239 bsc#1024373 FATE#321247).\n- i40e: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- i40evf: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- i40iw: Remove UDA QP from QoS list if creation fails (bsc#1024376 FATE#321249).\n- ib/core: Fix calculation of maximum RoCE MTU (bsc#1022595 FATE#322350).\n- ib/core: Fix unable to change lifespan entry for hw_counters (FATE#321231 FATE#321473).\n- ib/core: Namespace is mandatory input for address resolution (bsc#1022595 FATE#322350).\n- ib/hfi1: Add MODULE_FIRMWARE statements (bsc#1036800).\n- ib/ipoib: Clean error paths in add port (bsc#1022595 FATE#322350).\n- ib/ipoib: Prevent setting negative values to max_nonsrq_conn_qp (bsc#1022595 FATE#322350).\n- ib/ipoib: Remove double pointer assigning (bsc#1022595 FATE#322350).\n- ib/ipoib: Set IPOIB_NEIGH_TBL_FLUSH after flushed completion initialization (bsc#1022595 FATE#322350).\n- ib/mlx5: Fix RoCE Address Path fields (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- ibmvnic: Add netdev_dbg output for debugging (fate#323285).\n- ibmvnic: Add vnic client data to login buffer (bsc#1069942).\n- ibmvnic: Convert vnic server reported statistics to cpu endian (fate#323285).\n- ibmvnic: Enable scatter-gather support (bsc#1066382).\n- ibmvnic: Enable TSO support (bsc#1066382).\n- ibmvnic: Feature implementation of Vital Product Data (VPD) for the ibmvnic driver (bsc#1069942).\n- ibmvnic: Fix calculation of number of TX header descriptors (bsc#1066382).\n- ibmvnic: fix dma_mapping_error call (bsc#1069942).\n- ibmvnic: Fix failover error path for non-fatal resets (bsc#1066382).\n- ibmvnic: Implement .get_channels (fate#323285).\n- ibmvnic: Implement .get_ringparam (fate#323285).\n- ibmvnic: Implement per-queue statistics reporting (fate#323285).\n- ibmvnic: Let users change net device features (bsc#1066382).\n- ibmvnic: Update reset infrastructure to support tunable parameters (bsc#1066382).\n- ib/rxe: check for allocation failure on elem (FATE#322149).\n- ib/rxe: do not crash, if allocation of crc algorithm failed (bsc#1051635).\n- ib/rxe: put the pool on allocation failure (FATE#322149).\n- ib/srp: Avoid that a cable pull can trigger a kernel crash (bsc#1022595 FATE#322350).\n- ib/srpt: Do not accept invalid initiator port names (bnc#1012382).\n- ib/uverbs: Fix device cleanup (bsc#1022595 FATE#322350).\n- ib/uverbs: Fix NULL pointer dereference during device removal (bsc#1022595 FATE#322350).\n- igb: close/suspend race in netif_device_detach (bnc#1012382).\n- igb: Fix hw_dbg logging in igb_update_flash_i210 (bnc#1012382).\n- igb: reset the PHY before reading the PHY ID (bnc#1012382).\n- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- igbvf: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- iio: adc: xilinx: Fix error handling (bnc#1012382).\n- iio: dummy: events: Add missing break (bsc#1031717).\n- iio: light: fix improper return value (bnc#1012382).\n- iio: trigger: free trigger resource correctly (bnc#1012382).\n- ima: do not update security.ima if appraisal status is not INTEGRITY_PASS (bnc#1012382).\n- input: ar1021_i2c - fix too long name in driver's device table (bsc#1031717).\n- input: edt-ft5x06 - fix setting gain, offset, and threshold via device tree (bsc#1031717).\n- input: elan_i2c - add ELAN060C to the acpi table (bnc#1012382).\n- input: elan_i2c - add ELAN0611 to the acpi table (bnc#1012382).\n- input: gtco - fix potential out-of-bound access (bnc#1012382).\n- input: mpr121 - handle multiple bits change of status register (bnc#1012382).\n- input: mpr121 - set missing event capability (bnc#1012382).\n- input: ti_am335x_tsc - fix incorrect step config for 5 wire touchscreen (bsc#1031717).\n- input: twl4030-pwrbutton - use correct device for irq request (bsc#1031717).\n- input: ucb1400_ts - fix suspend and resume handling (bsc#1031717).\n- input: uinput - avoid crash when sending FF request to device going away (bsc#1031717).\n- iommu/amd: Finish TLB flush in amd_iommu_unmap() (bnc#1012382).\n- iommu/vt-d: Do not register bus-notifier under dmar_global_lock (bsc#1069793).\n- ip6_gre: only increase err_count for some certain type icmpv6 in ip6gre_err (bnc#1012382).\n- ip6_gre: skb_push ipv6hdr before packing the header in ip6gre_header (bnc#1012382).\n- ipip: only increase err_count for some certain type icmp in ipip_err (bnc#1012382).\n- ipmi: fix unsigned long underflow (bnc#1012382).\n- ipmi: Pick up slave address from SMBIOS on an acpi device (bsc#1070006).\n- ipmi: Prefer acpi system interfaces over SMBIOS ones (bsc#1070006).\n- ipmi_si: Clean up printks (bsc#1070006).\n- ipmi_si: fix memory leak on new_smi (bsc#1070006).\n- ipsec: do not ignore crypto err in ah4 input (bnc#1012382).\n- ipv6: flowlabel: do not leave opt-\u003etot_len with garbage (bnc#1012382).\n- ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (bnc#1012382).\n- ipvs: make drop_entry protection effective for SIP-pe (bsc#1056365).\n- irqchip/crossbar: Fix incorrect type of local variables (bnc#1012382).\n- isa: Prevent NULL dereference in isa_bus driver callbacks (bsc#1031717).\n- iscsi-target: Fix non-immediate TMR reference leak (bnc#1012382).\n- isdn/i4l: fetch the ppp_write buffer in one shot (bnc#1012382).\n- isofs: fix timestamps beyond 2027 (bnc#1012382).\n- iwlwifi: mvm: fix the coex firmware API (bsc#1031717).\n- iwlwifi: mvm: return -ENODATA when reading the temperature with the FW down (bsc#1031717).\n- iwlwifi: mvm: set the RTS_MIMO_PROT bit in flag mask when sending sta to fw (bsc#1031717).\n- iwlwifi: mvm: use IWL_HCMD_NOCOPY for MCAST_FILTER_CMD (bnc#1012382).\n- iwlwifi: split the regulatory rules when the bandwidth flags require it (bsc#1031717).\n- ixgbe: add mask for 64 RSS queues (bnc#1012382).\n- ixgbe: do not disable FEC from the driver (bnc#1012382).\n- ixgbe: fix AER error handling (bnc#1012382).\n- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).\n- ixgbe: handle close/suspend race with netif_device_detach/present (bnc#1012382).\n- ixgbe: Reduce I2C retry count on X550 devices (bnc#1012382).\n- ixgbevf: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- kABI: protect struct l2tp_tunnel (kabi).\n- kABI: protect struct regulator_dev (kabi).\n- kABI: protect structs rt_rq+root_domain (kabi).\n- kABI: protect typedef rds_rdma_cookie_t (kabi).\n- kabi/severities: Ignore drivers/nvme/target (bsc#1063349)\n- kabi/severities: Ignore kABI changes for qla2xxx (bsc#1043017)\n- kernel-docs: unpack the source instead of using kernel-source (bsc#1057199).\n- kernel/sysctl_binary.c: check name array length in deprecated_sysctl_warning() (FATE#323821).\n- kernel/sysctl.c: remove duplicate UINT_MAX check on do_proc_douintvec_conv() (bsc#1066470).\n- kernel/watchdog: Prevent false positives with turbo modes (bnc#1063516).\n- keys: do not let add_key() update an uninstantiated key (bnc#1012382).\n- keys: do not revoke uninstantiated key in request_key_auth_new() (bsc#1031717).\n- keys: encrypted: fix dereference of NULL user_key_payload (bnc#1012382).\n- keys: fix cred refcount leak in request_key_auth_new() (bsc#1031717).\n- keys: fix key refcount leak in keyctl_assume_authority() (bsc#1031717).\n- keys: fix key refcount leak in keyctl_read_key() (bsc#1031717).\n- keys: fix NULL pointer dereference during ASN.1 parsing [ver #2] (bnc#1012382).\n- keys: fix out-of-bounds read during ASN.1 parsing (bnc#1012382).\n- keys: Fix race between updating and finding a negative key (bnc#1012382).\n- keys: return full count in keyring_read() if buffer is too small (bnc#1012382).\n- keys: trusted: fix writing past end of buffer in trusted_read() (bnc#1012382).\n- keys: trusted: sanitize all key material (bnc#1012382).\n- kvm: nVMX: fix guest CR4 loading when emulating L2 to L1 exit (bnc#1012382).\n- kvm: nVMX: set IDTR and GDTR limits when loading L1 host state (bnc#1012382).\n- kvm: PPC: Book 3S: XICS: correct the real mode ICP rejecting counter (bnc#1012382).\n- kvm: SVM: obey guest PAT (bnc#1012382).\n- l2tp: Avoid schedule while atomic in exit_net (bnc#1012382).\n- l2tp: check ps-\u003esock before running pppol2tp_session_ioctl() (bnc#1012382).\n- l2tp: fix race condition in l2tp_tunnel_delete (bnc#1012382).\n- libceph: do not WARN() if user tries to add invalid key (bsc#1069277).\n- lib/digsig: fix dereference of NULL user_key_payload (bnc#1012382).\n- libertas: Fix lbs_prb_rsp_limit_set() (bsc#1031717).\n- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).\n- libnvdimm, namespace: fix label initialization to use valid seq numbers (bnc#1012382).\n- libnvdimm, namespace: make 'resource' attribute only readable by root (bnc#1012382).\n- libnvdimm, pfn: make 'resource' attribute only readable by root (FATE#319858).\n- lib/ratelimit.c: use deferred printk() version (bsc#979928).\n- locking/lockdep: Add nest_lock integrity test (bnc#1012382).\n- lpfc: tie in to new dev_loss_tmo interface in nvme transport (bsc#1041873).\n- mac80211: agg-tx: call drv_wake_tx_queue in proper context (bsc#1031717).\n- mac80211: do not compare TKIP TX MIC key in reinstall prevention (bsc#1066472).\n- mac80211: do not send SMPS action frame in AP mode when not needed (bsc#1031717).\n- mac80211: Fix addition of mesh configuration element (git-fixes).\n- mac80211: Fix BW upgrade for TDLS peers (bsc#1031717).\n- mac80211: fix mgmt-tx abort cookie and leak (bsc#1031717).\n- mac80211: fix power saving clients handling in iwlwifi (bnc#1012382).\n- mac80211_hwsim: check HWSIM_ATTR_RADIO_NAME length (bnc#1012382).\n- mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl() (bsc#1031717).\n- mac80211: Remove invalid flag operations in mesh TSF synchronization (bnc#1012382).\n- mac80211: Remove unused 'beaconint_us' variable (bsc#1031717).\n- mac80211: Remove unused 'i' variable (bsc#1031717).\n- mac80211: Remove unused 'len' variable (bsc#1031717).\n- mac80211: Remove unused 'rates_idx' variable (bsc#1031717).\n- mac80211: Remove unused 'sband' and 'local' variables (bsc#1031717).\n- mac80211: Remove unused 'struct ieee80211_rx_status' ptr (bsc#1031717).\n- mac80211: Suppress NEW_PEER_CANDIDATE event if no room (bnc#1012382).\n- mac80211: TDLS: always downgrade invalid chandefs (bsc#1031717).\n- mac80211: TDLS: change BW calculation for WIDER_BW peers (bsc#1031717).\n- mac80211: use constant time comparison with keys (bsc#1066471).\n- md/linear: shutup lockdep warnning (FATE#321488 bnc#1012382 bsc#1042977).\n- media: au0828: fix RC_CORE dependency (bsc#1031717).\n- media: Do not do DMA on stack for firmware upload in the AS102 driver (bnc#1012382).\n- media: em28xx: calculate left volume level correctly (bsc#1031717).\n- media: mceusb: fix memory leaks in error path (bsc#1031717).\n- media: rc: check for integer overflow (bnc#1012382).\n- media: v4l2-ctrl: Fix flags field on Control events (bnc#1012382).\n- mei: return error on notification request to a disconnected client (bnc#1012382).\n- memremap: add scheduling point to devm_memremap_pages (bnc#1057079).\n- mfd: ab8500-sysctrl: Handle probe deferral (bnc#1012382).\n- mfd: axp20x: Fix axp288 PEK_DBR and PEK_DBF irqs being swapped (bnc#1012382).\n- misc: panel: properly restore atomic counter on error path (bnc#1012382).\n- mmc: block: return error on failed mmc_blk_get() (bsc#1031717).\n- mmc: core: add driver strength selection when selecting hs400es (bsc#1069721).\n- mmc: core: Fix access to HS400-ES devices (bsc#1031717).\n- mmc: core/mmci: restore pre/post_req behaviour (bsc#1031717).\n- mmc: dw_mmc: Fix the DTO timeout calculation (bsc#1069721).\n- mm: check the return value of lookup_page_ext for all call sites (bnc#1068982).\n- mmc: host: omap_hsmmc: avoid possible overflow of timeout value (bsc#1031717).\n- mmc: host: omap_hsmmc: checking for NULL instead of IS_ERR() (bsc#1031717).\n- mmc: mediatek: Fixed size in dma_free_coherent (bsc#1031717).\n- mmc: s3cmci: include linux/interrupt.h for tasklet_struct (bnc#1012382).\n- mmc: sd: limit SD card power limit according to cards capabilities (bsc#1031717).\n- mm: distinguish CMA and MOVABLE isolation in has_unmovable_pages (bnc#1051406).\n- mm: drop migrate type checks from has_unmovable_pages (bnc#1051406).\n- mm, hwpoison: fixup 'mm: check the return value of lookup_page_ext for all call sites' (bnc#1012382).\n- mm/madvise.c: fix freeing of locked page with MADV_FREE (bnc#1069152).\n- mm/madvise.c: fix madvise() infinite loop under special circumstances (bnc#1070964).\n- mm, memory_hotplug: add scheduling point to __add_pages (bnc#1057079).\n- mm, memory_hotplug: do not fail offlining too early (bnc#1051406).\n- mm, memory_hotplug: remove timeout from __offline_memory (bnc#1051406).\n- mm, page_alloc: add scheduling point to memmap_init_zone (bnc#1057079).\n- mm/page_alloc.c: broken deferred calculation (bnc#1068980).\n- mm, page_alloc: fix potential false positive in __zone_watermark_ok (Git-fixes, bsc#1068978).\n- mm/page_ext.c: check if page_ext is not prepared (bnc#1068982).\n- mm/page_owner: avoid null pointer dereference (bnc#1068982).\n- mm/pagewalk.c: report holes in hugetlb ranges (bnc#1012382).\n- mm, sparse: do not swamp log with huge vmemmap allocation failures (bnc#1047901).\n- net: 3com: typhoon: typhoon_init_one: fix incorrect return values (bnc#1012382).\n- net: 3com: typhoon: typhoon_init_one: make return values more specific (bnc#1012382).\n- net/9p: Switch to wait_event_killable() (bnc#1012382).\n- net: Allow IP_MULTICAST_IF to set index to L3 slave (bnc#1012382).\n- net: cdc_ether: fix divide by 0 on bad descriptors (bnc#1012382).\n- net: cdc_ncm: GetNtbFormat endian fix (git-fixes).\n- net: dsa: select NET_SWITCHDEV (bnc#1012382).\n- net: emac: Fix napi poll list corruption (bnc#1012382).\n- netfilter/ipvs: clear ipvs_property flag when SKB net namespace changed (bnc#1012382).\n- netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value (bnc#1012382).\n- netfilter: nf_tables: fix oob access (bnc#1012382).\n- netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family (bnc#1012382).\n- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).\n- net: ibm: ibmvnic: constify vio_device_id (fate#323285).\n- net: ixgbe: Use new IXGBE_FLAG2_ROOT_RELAXED_ORDERING flag (bsc#1056652).\n- net/mlx4_core: Fix VF overwrite of module param which disables DMFS on new probed PFs (FATE#321685 FATE#321686 FATE#321687 bnc#1012382 bsc#1015336 bsc#1015337 bsc#1015340).\n- net/mlx4_en: fix overflow in mlx4_en_init_timestamp() (FATE#321685 FATE#321686 FATE#321687 bnc#1012382 bsc#1015336 bsc#1015337 bsc#1015340).\n- net/mlx5: Delay events till mlx5 interface's add complete for pci resume (bsc#1015342 FATE#321688 bsc#1015343 FATE#321689).\n- net/mlx5e: Increase Striding RQ minimum size limit to 4 multi-packet WQEs (bsc#1015342 FATE#321688 bsc#1015343 FATE#321689).\n- net/mlx5: Fix health work queue spin lock to IRQ safe (bsc#1015342).\n- net/mlx5: Loop over temp list to release delay events (bsc#1015342 FATE#321688 bsc#1015343 FATE#321689).\n- net: mvneta: fix handling of the Tx descriptor counter (fate#319899).\n- net: mvpp2: release reference to txq_cpu[] entry after unmapping (bnc#1012382 bsc#1032150).\n- net: qmi_wwan: fix divide by 0 on bad descriptors (bnc#1012382).\n- net/sctp: Always set scope_id in sctp_inet6_skb_msgname (bnc#1012382).\n- net: Set sk_prot_creator when cloning sockets to the right proto (bnc#1012382).\n- net/smc: dev_put for netdev after usage of ib_query_gid() (bsc#1066812).\n- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts (bsc#1069583).\n- net: thunderx: Fix TCP/UDP checksum offload for IPv6 pkts (bsc#1069583).\n- net/unix: do not show information about sockets from other namespaces (bnc#1012382).\n- netvsc: use refcount_t for keeping track of sub channels (bsc#1062835).\n- nfc: fix device-allocation error return (bnc#1012382).\n- nfsd/callback: Cleanup callback cred on shutdown (bnc#1012382).\n- nfsd: deal with revoked delegations appropriately (bnc#1012382).\n- nfs: Do not disconnect open-owner on NFS4ERR_BAD_SEQID (bsc#989261).\n- nfs: Fix typo in nomigration mount option (bnc#1012382).\n- nfs: Fix ugly referral attributes (bnc#1012382).\n- nilfs2: fix race condition that causes file system corruption (bnc#1012382).\n- nl80211: Define policy for packet pattern attributes (bnc#1012382).\n- nvme: add duplicate_connect option (bsc#1067734).\n- nvme: add helper to compare options to controller (bsc#1067734).\n- nvme: add transport SGL definitions (bsc#1057820).\n- nvme: allow controller RESETTING to RECONNECTING transition (bsc#1037838).\n- nvme-fabrics: Allow 0 as KATO value (bsc#1067734).\n- nvme-fabrics: kABI fix for duplicate_connect option (bsc#1067734).\n- nvme-fc: add a dev_loss_tmo field to the remoteport (bsc#1037838).\n- nvme-fc: add dev_loss_tmo timeout and remoteport resume support (bsc#1037838).\n- nvme-fc: add support for duplicate_connect option (bsc#1067734).\n- nvme-fc: add uevent for auto-connect (bsc#1037838).\n- nvme-fc: change ctlr state assignments during reset/reconnect (bsc#1037838).\n- nvme-fc: check connectivity before initiating reconnects (bsc#1037838).\n- nvme-fc: correct io termination handling (bsc#1067734).\n- nvme-fc: correct io timeout behavior (bsc#1067734).\n- nvme-fc: create fc class and transport device (bsc#1037838).\n- nvme-fc: decouple ns references from lldd references (bsc#1067734).\n- nvme-fc: fix iowait hang (bsc#1052384).\n- nvme-fc: fix localport resume using stale values (bsc#1067734).\n- nvme-fcloop: fix port deletes and callbacks (bsc#1037838).\n- nvme-fc: move remote port get/put/free location (bsc#1037838).\n- nvme-fc: on lldd/transport io error, terminate association (bsc#1042268).\n- nvme-fc: Reattach to localports on re-registration (bsc#1052384).\n- nvme-fc: remove NVME_FC_MAX_SEGMENTS (bsc#1067734).\n- nvme-fc: remove unused 'queue_size' field (bsc#1042268).\n- nvme-fc: retry initial controller connections 3 times (bsc#1067734).\n- nvme-fc: use transport-specific sgl format (bsc#1057820).\n- nvme: Fix memory order on async queue deletion (bnc#1012382).\n- nvme: fix the definition of the doorbell buffer config support bit (bsc#1066812).\n- nvme-rdma: add support for duplicate_connect option (bsc#1067734).\n- nvme/rdma: Kick admin queue when a connection is going down (bsc#1059639).\n- nvmet-fc: correct ref counting error when deferred rcv used (bsc#1067734).\n- nvmet-fc: fix failing max io queue connections (bsc#1067734).\n- nvmet-fc: on port remove call put outside lock (bsc#1067734).\n- nvmet-fc: simplify sg list handling (bsc#1052384).\n- nvmet: Fix fatal_err_work deadlock (bsc#1063349).\n- ocfs2: fstrim: Fix start offset of first cluster group during fstrim (bnc#1012382).\n- ocfs2: should wait dio before inode lock in ocfs2_setattr() (bnc#1012382).\n- packet: avoid panic in packet_getsockopt() (bnc#1012382).\n- packet: only test po-\u003ehas_vnet_hdr once in packet_snd (bnc#1012382).\n- parisc: Avoid trashing sr2 and sr3 in LWS code (bnc#1012382).\n- parisc: Fix double-word compare and exchange in LWS code on 32-bit kernels (bnc#1012382).\n- parisc: Fix validity check of pointer size argument in new CAS implementation (bnc#1012382).\n- pci: Apply Cavium ThunderX ACS quirk to more Root Ports (bsc#1069250).\n- pci: Apply _HPX settings only to relevant devices (bnc#1012382).\n- pci: Enable Relaxed Ordering for Hisilicon Hip07 chip (bsc#1056652).\n- pci: Mark Cavium CN8xxx to avoid bus reset (bsc#1069250).\n- pci: Set Cavium ACS capability quirk flags to assert RR/CR/SV/UF (bsc#1069250).\n- percpu: make this_cpu_generic_read() atomic w.r.t. interrupts (bnc#1012382).\n- perf tools: Fix build failure on perl script context (bnc#1012382).\n- perf tools: Only increase index if perf_evsel__new_idx() succeeds (bnc#1012382).\n- perf/x86/intel/bts: Fix exclusive event reference leak (git-fixes d2878d642a4ed).\n- phy: increase size of MII_BUS_ID_SIZE and bus_id (bnc#1012382).\n- pkcs#7: fix unitialized boolean 'want' (bnc#1012382).\n- pkcs7: Prevent NULL pointer dereference, since sinfo is not always set (bnc#1012382).\n- platform/x86: acer-wmi: setup accelerometer when acpi device was found (bsc#1031717).\n- platform/x86: hp-wmi: Do not shadow error values (bnc#1012382).\n- platform/x86: hp-wmi: Fix detection for dock and tablet mode (bnc#1012382).\n- platform/x86: hp-wmi: Fix error value for hp_wmi_tablet_state (bnc#1012382).\n- platform/x86: intel_mid_thermal: Fix module autoload (bnc#1012382).\n- platform/x86: sony-laptop: Fix error handling in sony_nc_setup_rfkill() (bsc#1031717).\n- pm / OPP: Add missing of_node_put(np) (bnc#1012382).\n- power: bq27xxx_battery: Fix bq27541 AveragePower register address (bsc#1031717).\n- power: bq27xxx: fix reading for bq27000 and bq27010 (bsc#1031717).\n- powerCap: Fix an error code in powercap_register_zone() (bsc#1031717).\n- power: ipaq-micro-battery: freeing the wrong variable (bsc#1031717).\n- powerpc/64: Fix race condition in setting lock bit in idle/wakeup code (bsc#1066223).\n- powerpc/64s/hash: Allow MAP_FIXED allocations to cross 128TB boundary (bsc#1070169).\n- powerpc/64s/hash: Fix 128TB-512TB virtual address boundary case allocation (bsc#1070169).\n- powerpc/64s/hash: Fix 512T hint detection to use \u003e= 128T (bsc#1070169).\n- powerpc/64s/hash: Fix fork() with 512TB process address space (bsc#1070169).\n- powerpc/64s/slice: Use addr limit when computing slice mask (bsc#1070169).\n- powerpc/bpf/jit: Disable classic BPF JIT on ppc64le (bsc#1066223).\n- powerpc/corenet: explicitly disable the SDHC controller on kmcoge4 (bnc#1012382).\n- powerpc: Correct instruction code for xxlor instruction (bsc#1066223).\n- powerpc: Fix VSX enabling/flushing to also test MSR_FP and MSR_VEC (bsc#1066223).\n- powerpc/hotplug: Improve responsiveness of hotplug change (FATE#322022, bsc#1067906).\n- powerpc/mm: Fix check of multiple 16G pages from device tree (bsc#1066223).\n- powerpc/mm: Fix virt_addr_valid() etc. on 64-bit hash (bsc#1066223).\n- powerpc/mm/hash64: Fix subpage protection with 4K HPTE config (bsc#1010201, bsc#1066223).\n- powerpc/mm/hash: Free the subpage_prot_table correctly (bsc#1066223).\n- powerpc/numa: Fix multiple bugs in memory_hotplug_max() (bsc#1066223).\n- powerpc/numa: Fix whitespace in hot_add_drconf_memory_max() (bsc#1066223).\n- powerpc/opal: Fix EBUSY bug in acquiring tokens (bsc#1066223).\n- powerpc/powernv/ioda: Fix endianness when reading TCEs (bsc#1066223).\n- powerpc/powernv: Make opal_event_shutdown() callable from IRQ context (bsc#1066223).\n- powerpc/pseries/vio: Dispose of virq mapping on vdevice unregister (bsc#1067888).\n- powerpc/signal: Properly handle return value from uprobe_deny_signal() (bsc#1066223).\n- powerpc/sysrq: Fix oops whem ppmu is not registered (bsc#1066223).\n- powerpc/vphn: Fix numa update end-loop bug (FATE#322022, bsc#1067906).\n- powerpc/vphn: Improve recognition of PRRN/VPHN (FATE#322022, bsc#1067906).\n- powerpc/vphn: Update CPU topology when VPHN enabled (FATE#322022, bsc#1067906).\n- power: supply: bq27xxx_battery: Fix register map for BQ27510 and BQ27520 ('bsc#1069270').\n- power: supply: isp1704: Fix unchecked return value of devm_kzalloc (bsc#1031717).\n- power: supply: lp8788: prevent out of bounds array access (bsc#1031717).\n- power_supply: tps65217-charger: Fix NULL deref during property export (bsc#1031717).\n- ppp: fix race in ppp device destruction (bnc#1012382).\n- printk/console: Always disable boot consoles that use init memory before it is freed (bsc#1063026).\n- printk/console: Enhance the check for consoles using init memory (bsc#1063026).\n- printk: include \u003casm/sections.h\u003e instead of \u003casm-generic/sections.h\u003e (bsc#1063026).\n- printk: Make sure to wake up printk kthread from irq work for pending output (bnc#744692, bnc#789311).\n- printk: only unregister boot consoles when necessary (bsc#1063026).\n- qla2xxx: Fix cable swap (bsc#1043017).\n- qla2xxx: Fix notify ack without timeout handling (bsc#1043017).\n- qla2xxx: Fix re-login for Nport Handle in use (bsc#1043017).\n- qla2xxx: fix stale memory access (bsc#1043017).\n- qla2xxx: Login state machine stuck at GPDB (bsc#1043017).\n- qla2xxx: Recheck session state after RSCN (bsc#1043017).\n- qla2xxx: relogin is being triggered too fast (bsc#1043017).\n- qla2xxx: Retry switch command on timed out (bsc#1043017).\n- qla2xxx: Serialize gpnid (bsc#1043017).\n- quota: Check for register_shrinker() failure (bsc#1070404).\n- r8169: Do not increment tx_dropped in TX ring cleaning (bsc#1031717).\n- rbd: set discard_alignment to zero (bsc#1064320).\n- rbd: use GFP_NOIO for parent stat and data requests (bnc#1012382).\n- rcu: Allow for page faults in NMI handlers (bnc#1012382).\n- rdma/uverbs: Prevent leak of reserved field (bsc#1022595 FATE#322350).\n- rds: rdma: return appropriate error on rdma map failures (bnc#1012382).\n- Refresh patches with upstream commit ID (bsc#1067734)\n- regulator: core: Limit propagation of parent voltage count and list (bsc#1070145).\n- regulator: fan53555: fix I2C device ids (bnc#1012382).\n- Revert 'crypto: xts - Add ECB dependency' (bnc#1012382).\n- Revert 'drm: bridge: add DT bindings for TI ths8135' (bnc#1012382).\n- Revert 'phy: increase size of MII_BUS_ID_SIZE and bus_id' (kabi).\n- Revert 'sctp: do not peel off an assoc from one netns to another one' (bnc#1012382).\n- Revert 'tty: goldfish: Fix a parameter of a call to free_irq' (bnc#1012382).\n- Revert 'uapi: fix linux/rds.h userspace compilation errors' (bnc#1012382).\n- rpm/kernel-binary.spec.in: add the kernel-binary dependencies to kernel-binary-base (bsc#1060333).\n- rpm/kernel-binary.spec.in: Correct supplements for recent SLE products (bsc#1067494)\n- rpm/kernel-binary.spec.in: only rewrite modules.dep if non-zero in size (bsc#1056979).\n- rpm/package-descriptions:\n- rtc: ds1307: Fix relying on reset value for weekday (bsc#1031717).\n- rtc: ds1374: wdt: Fix issue with timeout scaling from secs to wdt ticks (bsc#1031717).\n- rtc: ds1374: wdt: Fix stop/start ioctl always returning -EINVAL (bsc#1031717).\n- rtc: rtc-nuc900: fix loop timeout test (bsc#1031717).\n- rtc: sa1100: fix unbalanced clk_prepare_enable/clk_disable_unprepare (bsc#1031717).\n- rtlwifi: fix uninitialized rtlhal-\u003elast_suspend_sec time (bnc#1012382).\n- rtlwifi: rtl8192ee: Fix memory leak when loading firmware (bnc#1012382).\n- rtlwifi: rtl8821ae: Fix connection lost problem (bnc#1012382).\n- rtlwifi: rtl8821ae: Fix HW_VAR_NAV_UPPER operation (bsc#1031717).\n- s390/dasd: check for device error pointer within state change interrupts (bnc#1012382).\n- s390/disassembler: add missing end marker for e7 table (bnc#1012382).\n- s390/disassembler: correct disassembly lines alignment (bsc#1070825).\n- s390/disassembler: increase show_code buffer size (bnc#1070825, LTC#161577).\n- s390/disassembler: increase show_code buffer size (LTC#161577 bnc#1012382 bnc#1070825).\n- s390: fix transactional execution control register handling (bnc#1012382).\n- s390/kbuild: enable modversions for symbols exported from asm (bnc#1012382).\n- s390/mm: fix write access check in gup_huge_pmd() (bnc#1066974, LTC#160551).\n- s390/qeth: allow hsuid configuration in DOWN state (bnc#1070825, LTC#161871).\n- s390/qeth: issue STARTLAN as first IPA command (bnc#1012382).\n- s390/qeth: use ip_lock for hsuid configuration (bnc#1070825, LTC#161871).\n- s390/runtime instrumention: fix possible memory corruption (bnc#1012382).\n- sched/autogroup: Fix autogroup_move_group() to never skip sched_move_task() (bnc#1012382).\n- sched: Make resched_cpu() unconditional (bnc#1012382).\n- sched/rt: Simplify the IPI based RT balancing logic (bnc#1012382).\n- scsi: aacraid: Check for PCI state of device in a generic way (bsc#1022607, FATE#321673).\n- scsi: aacraid: Fix controller initialization failure (FATE#320140).\n- scsi: bfa: fix access to bfad_im_port_s (bsc#1065101).\n- scsi: check for device state in __scsi_remove_target() (bsc#1072589).\n- scsi_devinfo: cleanly zero-pad devinfo strings (bsc#1062941).\n- scsi: fcoe: move fcoe_interface_remove() out of fcoe_interface_cleanup() (bsc#1039542).\n- scsi: fcoe: open-code fcoe_destroy_work() for NETDEV_UNREGISTER (bsc#1039542).\n- scsi: fcoe: separate out fcoe_vport_remove() (bsc#1039542).\n- scsi: ipr: Fix scsi-mq lockdep issue (bsc#1066213).\n- scsi: ipr: Set no_report_opcodes for RAID arrays (bsc#1066213).\n- scsi: libiscsi: fix shifting of DID_REQUEUE host byte (bsc#1056003).\n- scsi: lpfc: Add Buffer to Buffer credit recovery support (bsc#1052384).\n- scsi: lpfc: Add changes to assist in NVMET debugging (bsc#1041873).\n- scsi: lpfc: Add nvme initiator devloss support (bsc#1041873).\n- scsi: lpfc: Adjust default value of lpfc_nvmet_mrq (bsc#1067735).\n- scsi: lpfc: Break up IO ctx list into a separate get and put list (bsc#1045404).\n- scsi: lpfc: change version to 11.4.0.4 (bsc#1067735).\n- scsi: lpfc: convert info messages to standard messages (bsc#1052384).\n- scsi: lpfc: Correct driver deregistrations with host nvme transport (bsc#1067735).\n- scsi: lpfc: Correct issues with FAWWN and FDISCs (bsc#1052384).\n- scsi: lpfc: correct nvme sg segment count check (bsc#1067735).\n- scsi: lpfc: correct port registrations with nvme_fc (bsc#1067735).\n- scsi: lpfc: Correct return error codes to align with nvme_fc transport (bsc#1052384).\n- scsi: lpfc: Disable NPIV support if NVME is enabled (bsc#1067735).\n- scsi: lpfc: Driver fails to detect direct attach storage array (bsc#1067735).\n- scsi: lpfc: Expand WQE capability of every NVME hardware queue (bsc#1067735).\n- scsi: lpfc: Extend RDP support (bsc#1067735).\n- scsi: lpfc: Fix a precedence bug in lpfc_nvme_io_cmd_wqe_cmpl() (bsc#1056587).\n- scsi: lpfc: Fix bad sgl reposting after 2nd adapter reset (bsc#1052384).\n- scsi: lpfc: fix build issue if NVME_FC_TARGET is not defined (bsc#1040073).\n- scsi: lpfc: Fix counters so outstandng NVME IO count is accurate (bsc#1041873).\n- scsi: lpfc: Fix crash after bad bar setup on driver attachment (bsc#1067735).\n- scsi: lpfc: Fix crash during driver unload with running nvme traffic (bsc#1067735).\n- scsi: lpfc: Fix crash in lpfc_nvme_fcp_io_submit during LIP (bsc#1067735).\n- scsi: lpfc: Fix crash in lpfc nvmet when fc port is reset (bsc#1052384).\n- scsi: lpfc: Fix crash receiving ELS while detaching driver (bsc#1067735).\n- scsi: lpfc: Fix display for debugfs queInfo (bsc#1067735).\n- scsi: lpfc: Fix driver handling of nvme resources during unload (bsc#1067735).\n- scsi: lpfc: Fix duplicate NVME rport entries and namespaces (bsc#1052384).\n- scsi: lpfc: Fix FCP hba_wqidx assignment (bsc#1067735).\n- scsi: lpfc: Fix handling of FCP and NVME FC4 types in Pt2Pt topology (bsc#1052384).\n- scsi: lpfc: Fix hard lock up NMI in els timeout handling (bsc#1067735).\n- scsi: lpfc: fix 'integer constant too large' error on 32bit archs (bsc#1052384).\n- scsi: lpfc: Fix loop mode target discovery (bsc#1052384).\n- scsi: lpfc: Fix lpfc nvme host rejecting IO with Not Ready message (bsc#1067735).\n- scsi: lpfc: Fix Lun Priority level shown as NA (bsc#1041873).\n- scsi: lpfc: Fix ndlp ref count for pt2pt mode issue RSCN (bsc#1067735).\n- scsi: lpfc: Fix NVME LS abort_xri (bsc#1067735).\n- scsi: lpfc: Fix nvme port role handling in sysfs and debugfs handlers (bsc#1041873).\n- scsi: lpfc: Fix NVME PRLI handling during RSCN (bsc#1052384).\n- scsi: lpfc: Fix nvme target failure after 2nd adapter reset (bsc#1052384).\n- scsi: lpfc: Fix nvmet node ref count handling (bsc#1041873).\n- scsi: lpfc: Fix oops if nvmet_fc_register_targetport fails (bsc#1067735).\n- scsi: lpfc: Fix oops of nvme host during driver unload (bsc#1067735).\n- scsi: lpfc: Fix oops when NVME Target is discovered in a nonNVME environment.\n- scsi: lpfc: fix pci hot plug crash in list_add call (bsc#1067735).\n- scsi: lpfc: fix pci hot plug crash in timer management routines (bsc#1067735).\n- scsi: lpfc: Fix plogi collision that causes illegal state transition (bsc#1052384).\n- scsi: lpfc: Fix Port going offline after multiple resets (bsc#1041873).\n- scsi: lpfc: Fix PRLI retry handling when target rejects it (bsc#1041873).\n- scsi: lpfc: Fix rediscovery on switch blade pull (bsc#1052384).\n- scsi: lpfc: Fix relative offset error on large nvmet target ios (bsc#1052384).\n- scsi: lpfc: Fix return value of board_mode store routine in case of online failure (bsc#1041873).\n- scsi: lpfc: Fix secure firmware updates (bsc#1067735).\n- scsi: lpfc: Fix System panic after loading the driver (bsc#1041873).\n- scsi: lpfc: Fix transition nvme-i rport handling to nport only (bsc#1041873).\n- scsi: lpfc: Fix vports not logging into target (bsc#1041873).\n- scsi: lpfc: Fix warning messages when NVME_TARGET_FC not defined (bsc#1067735).\n- scsi: lpfc: FLOGI failures are reported when connected to a private loop (bsc#1067735).\n- scsi: lpfc: Handle XRI_ABORTED_CQE in soft IRQ (bsc#1067735).\n- scsi: lpfc: Limit amount of work processed in IRQ (bsc#1052384).\n- scsi: lpfc: Linux LPFC driver does not process all RSCNs (bsc#1067735).\n- scsi: lpfc: lpfc version bump 11.4.0.3 (bsc#1052384).\n- scsi: lpfc: Make ktime sampling more accurate (bsc#1067735).\n- scsi: lpfc: Move CQ processing to a soft IRQ (bsc#1067735).\n- scsi: lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (bsc#1041873).\n- scsi: lpfc: PLOGI failures during NPIV testing (bsc#1067735).\n- scsi: lpfc: Raise maximum NVME sg list size for 256 elements (bsc#1067735).\n- scsi: lpfc: Reduce log spew on controller reconnects (bsc#1067735).\n- scsi: lpfc: remove console log clutter (bsc#1052384).\n- scsi: lpfc: Revise NVME module parameter descriptions for better clarity (bsc#1067735).\n- scsi: lpfc: Set missing abort context (bsc#1067735).\n- scsi: lpfc: small sg cnt cleanup (bsc#1067735).\n- scsi: lpfc: spin_lock_irq() is not nestable (bsc#1045404).\n- scsi: lpfc: update driver version to 11.4.0.5 (bsc#1067735).\n- scsi: lpfc: update to revision to 11.4.0.0 (bsc#1041873).\n- scsi: megaraid_sas: mismatch of allocated MFI frame size and length exposed in MFI MPT pass through command (bsc#1066767).\n- scsi: qla2xxx: Cleanup debug message IDs (bsc#1043017).\n- scsi: qla2xxx: Correction to vha-\u003evref_count timeout (bsc#1066812).\n- scsi: qla2xxx: Fix name server relogin (bsc#1043017).\n- scsi: qla2xxx: Fix path recovery (bsc#1043017).\n- scsi: qla2xxx: Initialize Work element before requesting IRQs (bsc#1019675,FATE#321701).\n- scsi: qla2xxx: Replace usage of spin_lock with spin_lock_irqsave (bsc#1043017).\n- scsi: qla2xxx: Retain loop test for fwdump length exceeding buffer length (bsc#1043017).\n- scsi: qla2xxx: Turn on FW option for exchange check (bsc#1043017).\n- scsi: qla2xxx: Use BIT_6 to acquire FAWWPN from switch (bsc#1066812).\n- scsi: qla2xxx: Use fabric name for Get Port Speed command (bsc#1066812).\n- scsi: qla2xxx: Use flag PFLG_DISCONNECTED (bsc#1043017).\n- scsi: reset wait for IO completion (bsc#996376).\n- scsi: scsi_devinfo: fixup string compare (bsc#1062941). updated patches.fixes/scsi_devinfo-fixup-string-compare.patch to the version merged upstream.\n- scsi: scsi_devinfo: handle non-terminated strings (bsc#1062941).\n- scsi: scsi_dh_emc: return success in clariion_std_inquiry() (bnc#1012382).\n- scsi: sd_zbc: Fix sd_zbc_read_zoned_characteristics() (bsc#1066812).\n- scsi: sg: close race condition in sg_remove_sfp_usercontext() (bsc#1064206).\n- scsi: sg: do not return bogus Sg_requests (bsc#1064206).\n- scsi: sg: only check for dxfer_len greater than 256M (bsc#1064206).\n- scsi: sg: Re-fix off by one in sg_fill_request_table() (bnc#1012382).\n- scsi: ufs: add capability to keep auto bkops always enabled (bnc#1012382).\n- scsi: ufs-qcom: Fix module autoload (bnc#1012382).\n- scsi: zfcp: fix erp_action use-before-initialize in REC action trace (bnc#1012382).\n- sctp: add the missing sock_owned_by_user check in sctp_icmp_redirect (bnc#1012382).\n- sctp: do not peel off an assoc from one netns to another one (bnc#1012382).\n- sctp: do not peel off an assoc from one netns to another one (bnc#1012382).\n- sctp: potential read out of bounds in sctp_ulpevent_type_enabled() (bnc#1012382).\n- sctp: reset owner sk for data chunks on out queues when migrating a sock (bnc#1012382).\n- security/keys: add CONFIG_KEYS_COMPAT to Kconfig (bnc#1012382).\n- selftests: firmware: add empty string and async tests (bnc#1012382).\n- selftests: firmware: send expected errors to /dev/null (bnc#1012382).\n- serial: 8250_fintek: Fix rs485 disablement on invalid ioctl() (bsc#1031717).\n- serial: 8250_uniphier: fix serial port index in private data (bsc#1031717).\n- serial: Fix serial console on SNI RM400 machines (bsc#1031717).\n- serial: omap: Fix EFR write on RTS deassertion (bnc#1012382).\n- serial: Remove unused port type (bsc#1066045).\n- serial: sh-sci: Fix register offsets for the IRDA serial port (bnc#1012382).\n- slub: do not merge cache if slub_debug contains a never-merge flag (bnc#1012382).\n- smb3: Validate negotiate request must always be signed (bsc#1064597).\n- smb: fix leak of validate negotiate info response buffer (bsc#1064597).\n- smb: fix validate negotiate info uninitialised memory use (bsc#1064597).\n- sparc64: Migrate hvcons irq to panicked cpu (bnc#1012382).\n- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).\n- spi: uapi: spidev: add missing ioctl header (bnc#1012382).\n- staging: iio: cdc: fix improper return value (bnc#1012382).\n- staging: lustre: hsm: stack overrun in hai_dump_data_field (bnc#1012382).\n- staging: lustre: llite: do not invoke direct_IO for the EOF case (bnc#1012382).\n- staging: lustre: ptlrpc: skip lock if export failed (bnc#1012382).\n- staging: r8712u: Fix Sparse warning in rtl871x_xmit.c (bnc#1012382).\n- staging: rtl8188eu: fix incorrect ERROR tags from logs (bnc#1012382).\n- staging: rtl8712: fixed little endian problem (bnc#1012382).\n- staging: rtl8712u: Fix endian settings for structs describing network packets (bnc#1012382).\n- sunrpc: Fix tracepoint storage issues with svc_recv and svc_rqst_status (bnc#1012382).\n- supported.conf:\n- supported.conf: add test_syctl to new kselftests-kmp package FATE#323821 As per FATE#323821 we will require new FATE requests per each new selftest driver. We do not want to support these module on production runs but we do want to support them for QA / testing uses. The compromise is to package them into its own package, this will be the kselftests-kmp package. Selftests can also be used as proof of concept vehicle for issues by customers or ourselves. Vanilla kernels do not get test_sysctl given that driver was using built-in defaults, this also means we cannot run sefltests on config/s390x/zfcpdump which does not enable modules. Likeweise, since we had to *change* the kernel for test_syctl, it it also means we can't test test_syctl with vanilla kernels. It should be possible with other selftests drivers if they are present in vanilla kernels though.\n- supported.conf: Support spidev (bsc#1066696)\n- sysctl: add unsigned int range support (FATE#323821)\n- target: fix ALUA state file path truncation (bsc#1064606).\n- target: Fix node_acl demo-mode + uncached dynamic shutdown regression (bnc#1012382).\n- target: fix PR state file path truncation (bsc#1064606).\n- target: Fix QUEUE_FULL + SCSI task attribute handling (bnc#1012382).\n- target/iscsi: Fix unsolicited data seq_end_offset calculation (bnc#1012382 bsc#1036489).\n- target/rbd: handle zero length UNMAP requests early (bsc#1064320).\n- target/rbd: use target_configure_unmap_from_queue() helper (bsc#1064320).\n- tcp/dccp: fix ireq-\u003eopt races (bnc#1012382).\n- tcp/dccp: fix lockdep splat in inet_csk_route_req() (bnc#1012382).\n- tcp/dccp: fix other lockdep splats accessing ireq_opt (bnc#1012382).\n- tcp: do not mangle skb-\u003ecb[] in tcp_make_synack() (bnc#1012382).\n- tcp: fix tcp_mtu_probe() vs highest_sack (bnc#1012382).\n- test: firmware_class: report errors properly on failure (bnc#1012382).\n- test_sysctl: add dedicated proc sysctl test driver (FATE#323821)\n- test_sysctl: add generic script to expand on tests (FATE#323821)\n- test_sysctl: add simple proc_dointvec() case (FATE#323821).\n- test_sysctl: add simple proc_douintvec() case (bsc#323821).\n- test_sysctl: fix sysctl.sh by making it executable (FATE#323821).\n- test_sysctl: test against int proc_dointvec() array support (FATE#323821).\n- test_sysctl: test against PAGE_SIZE for int (FATE#323821)\n- timer: Prevent timer value 0 for MWAITX (bsc#1065717).\n- tipc: fix link attribute propagation bug (bnc#1012382).\n- tipc: use only positive error codes in messages (bnc#1012382).\n- tools: firmware: check for distro fallback udev cancel rule (bnc#1012382).\n- tpm: constify transmit data pointers (bsc#1020645, git-fixes).\n- tpm: kabi: do not bother with added const (bsc#1020645, git-fixes).\n- tpm_tis_spi: Use DMA-safe memory for SPI transfers (bsc#1020645, git-fixes).\n- tracing/samples: Fix creation and deletion of simple_thread_fn creation (bnc#1012382).\n- tun: allow positive return values on dev_get_valid_name() call (bnc#1012382).\n- tun: bail out from tun_get_user() if the skb is empty (bnc#1012382).\n- tun: call dev_get_valid_name() before register_netdevice() (bnc#1012382).\n- tun/tap: sanitize TUNSETSNDBUF input (bnc#1012382).\n- uapi: fix linux/mroute6.h userspace compilation errors (bnc#1012382).\n- uapi: fix linux/rds.h userspace compilation error (bnc#1012382).\n- uapi: fix linux/rds.h userspace compilation errors (bnc#1012382).\n- uapi: fix linux/rds.h userspace compilation errors (bnc#1012382).\n- udpv6: Fix the checksum computation when HW checksum does not apply (bnc#1012382).\n- Update config files to enable spidev on arm64. (bsc#1066696)\n- Update preliminary FC-NVMe patches to mainline status (bsc#1067734)\n- usb: Add delay-init quirk for Corsair K70 LUX keyboards (bnc#1012382).\n- usb: cdc_acm: Add quirk for Elatec TWN3 (bnc#1012382).\n- usb: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (bnc#1012382).\n- usb: devio: Revert 'USB: devio: Do not corrupt user memory' (bnc#1012382).\n- usb: dummy-hcd: Fix deadlock caused by disconnect detection (bnc#1012382).\n- usb: gadget: composite: Fix use-after-free in usb_composite_overwrite_options (bnc#1012382).\n- usb: hcd: initialize hcd-\u003eflags to 0 when rm hcd (bnc#1012382).\n- usb: hub: Allow reset retry for USB2 devices on connect bounce (bnc#1012382).\n- usb: musb: Check for host-mode using is_host_active() on reset interrupt (bnc#1012382).\n- usb: musb: sunxi: Explicitly release USB PHY on exit (bnc#1012382).\n- usb: quirks: add quirk for WORLDE MINI MIDI keyboard (bnc#1012382).\n- usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet (bnc#1012382).\n- usb: serial: console: fix use-after-free after failed setup (bnc#1012382).\n- usb: serial: cp210x: add support for ELV TFD500 (bnc#1012382).\n- usb: serial: ftdi_sio: add id for Cypress WICED dev board (bnc#1012382).\n- usb: serial: garmin_gps: fix I/O after failed probe and remove (bnc#1012382).\n- usb: serial: garmin_gps: fix memory leak on probe errors (bnc#1012382).\n- usb: serial: metro-usb: add MS7820 device id (bnc#1012382).\n- usb: serial: option: add support for TP-Link LTE module (bnc#1012382).\n- usb: serial: qcserial: add Dell DW5818, DW5819 (bnc#1012382).\n- usb: serial: qcserial: add pid/vid for Sierra Wireless EM7355 fw update (bnc#1012382).\n- usb: usbfs: compute urb-\u003eactual_length for isochronous (bnc#1012382).\n- usb: usbtest: fix NULL pointer dereference (bnc#1012382).\n- usb: xhci: Handle error condition in xhci_stop_device() (bnc#1012382).\n- vfs: expedite unmount (bsc#1024412).\n- video: fbdev: pmag-ba-fb: Remove bad `__init' annotation (bnc#1012382).\n- video: udlfb: Fix read EDID timeout (bsc#1031717).\n- vlan: fix a use-after-free in vlan_device_event() (bnc#1012382).\n- vsock: use new wait API for vsock_stream_sendmsg() (bnc#1012382).\n- vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit (bnc#1012382).\n- watchdog: kempld: fix gcc-4.3 build (bnc#1012382).\n- workqueue: Fix NULL pointer dereference (bnc#1012382).\n- workqueue: replace pool-\u003emanager_arb mutex with a flag (bnc#1012382).\n- x86/acpi/cstate: Allow ACPI C1 FFH MWAIT use on AMD systems (bsc#1069879).\n- x86/alternatives: Fix alt_max_short macro to really be a max() (bnc#1012382).\n- x86/decoder: Add new TEST instruction pattern (bnc#1012382).\n- x86/MCE/AMD: Always give panic severity for UC errors in kernel context (git-fixes bf80bbd7dcf5).\n- x86/microcode/AMD: Add support for fam17h microcode loading (bsc#1068032).\n- x86/microcode/intel: Disable late loading on model 79 (bnc#1012382).\n- x86/mm: fix use-after-free of vma during userfaultfd fault (Git-fixes, bsc#1069916).\n- x86/oprofile/ppro: Do not use __this_cpu*() in preemptible context (bnc#1012382).\n- x86/uaccess, sched/preempt: Verify access_ok() context (bnc#1012382).\n- xen: do not print error message in case of missing Xenstore entry (bnc#1012382).\n- xen/events: events_fifo: Do not use {get,put}_cpu() in xen_evtchn_fifo_init() (bnc#1065600).\n- xen: fix booting ballooned down hvm guest (bnc#1065600).\n- xen/gntdev: avoid out of bounds access in case of partial gntdev_mmap() (bnc#1012382).\n- xen/manage: correct return value check on xenbus_scanf() (bnc#1012382).\n- xen-netback: fix error handling output (bnc#1065600).\n- xen: x86: mark xen_find_pt_base as __init (bnc#1065600).\n- xen: xenbus driver must not accept invalid transaction ids (bnc#1012382).\n- zd1211rw: fix NULL-deref at probe (bsc#1031717).\n","status":"published","published":"2017-12-21T13:31:05Z","modified":"2026-02-04T03:58:30.400418Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2017:3410-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.103 to receive various security and bugfixes.\n\nThis update enables SMB encryption in the CIFS support in the Linux Kernel (fate#324404)\n\nThe following security bugs were fixed:\n\n- CVE-2017-1000410: The Linux kernel was affected by an information leak in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. (bnc#1070535).\n- CVE-2017-11600: net/xfrm/xfrm_policy.c in the Linux kernel did not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allowed local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message (bnc#1050231).\n- CVE-2017-12193: The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel mishandled node splitting, which allowed local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations (bnc#1066192).\n- CVE-2017-15115: The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel did not check whether the intended netns is used in a peel-off action, which allowed local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls (bnc#1068671).\n- CVE-2017-15265: Race condition in the ALSA subsystem in the Linux kernel allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c (bnc#1062520).\n- CVE-2017-16528: sound/core/seq_device.c in the Linux kernel allowed local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066629).\n- CVE-2017-16536: The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066606).\n- CVE-2017-16537: The imon_probe function in drivers/media/rc/imon.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066573).\n- CVE-2017-16645: The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel allowed local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1067132).\n- CVE-2017-16646: drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel allowed local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1067105).\n- CVE-2017-16994: The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel mishandled holes in hugetlb ranges, which allowed local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call (bnc#1069996).\n- CVE-2017-17448: net/netfilter/nfnetlink_cthelper.c in the Linux kernel did not require the CAP_NET_ADMIN capability for new, get, and del operations, which allowed local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces (bnc#1071693).\n- CVE-2017-17449: The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, did not restrict observations of Netlink messages to a single net namespace, which allowed local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system (bnc#1071694).\n- CVE-2017-17450: net/netfilter/xt_osf.c in the Linux kernel did not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allowed local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces (bnc#1071695).\n- CVE-2017-7482: Fixed an overflow when decoding a krb5 principal. (bnc#1046107).\n- CVE-2017-8824: The dccp_disconnect function in net/dccp/proto.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state (bnc#1070771).\n\nThe following non-security bugs were fixed:\n\n- adm80211: return an error if adm8211_alloc_rings() fails (bsc#1031717).\n- adv7604: Initialize drive strength to default when using DT (bnc#1012382).\n- af_netlink: ensure that NLMSG_DONE never fails in dumps (bnc#1012382).\n- alsa: au88x0: avoid theoretical uninitialized access (bnc#1012382).\n- alsa: caiaq: Fix stray URB at probe error path (bnc#1012382).\n- alsa: compress: Remove unused variable (bnc#1012382).\n- alsa: hda: Add Raven PCI ID (bnc#1012382).\n- alsa: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE (bnc#1012382).\n- alsa: hda/ca0132 - Fix memory leak at error path (bsc#1031717).\n- alsa: hda - fix headset mic problem for Dell machines with alc236 (bnc#1012382).\n- alsa: hda - No loopback on ALC299 codec (git-fixes).\n- alsa: hda/realtek: Add headset mic support for Intel NUC Skull Canyon (bsc#1031717).\n- alsa: hda/realtek - Add new codec ID ALC299 (bnc#1012382).\n- alsa: hda/realtek - Add support for ALC236/ALC3204 (bnc#1012382).\n- alsa: hda/realtek - Fix ALC700 family no sound issue (bsc#1031717).\n- alsa: hda: Remove superfluous '-' added by printk conversion (bnc#1012382).\n- alsa: line6: Fix leftover URB at error-path during probe (bnc#1012382).\n- alsa: pcm: update tstamp only if audio_tstamp changed (bsc#1031717).\n- alsa: seq: Avoid invalid lockdep class warning (bsc#1031717).\n- alsa: seq: Enable 'use' locking in all configurations (bnc#1012382).\n- alsa: seq: Fix copy_from_user() call inside lock (bnc#1012382).\n- alsa: seq: Fix nested rwsem annotation for lockdep splat (bnc#1012382).\n- alsa: seq: Fix OSS sysex delivery in OSS emulation (bnc#1012382).\n- alsa: timer: Add missing mutex lock for compat ioctls (bnc#1012382).\n- alsa: timer: Remove kernel warning at compat ioctl error paths (bsc#1031717).\n- alsa: usb-audio: Add native DSD support for Pro-Ject Pre Box S2 Digital (bnc#1012382).\n- alsa: usb-audio: Add sanity checks in v2 clock parsers (bsc#1031717).\n- alsa: usb-audio: Add sanity checks to FE parser (bsc#1031717).\n- alsa: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (bnc#1012382).\n- alsa: usb-audio: Fix potential out-of-bound access at parsing SU (bsc#1031717).\n- alsa: usb-audio: Kill stray URB at exiting (bnc#1012382).\n- alsa: usb-audio: uac1: Invalidate ctl on interrupt (bsc#1031717).\n- alsa: usx2y: Suppress kernel warning at page allocation failures (bnc#1012382).\n- alsa: vx: Do not try to update capture stream before running (bnc#1012382).\n- alsa: vx: Fix possible transfer overflow (bnc#1012382).\n- Apply generic ppc build fixes to vanilla (bsc#1070805)\n- arm64: dts: NS2: reserve memory for Nitro firmware (bnc#1012382).\n- arm64: ensure __dump_instr() checks addr_limit (bnc#1012382).\n- arm64: fix dump_instr when PAN and UAO are in use (bnc#1012382).\n- arm: 8635/1: nommu: allow enabling REMAP_VECTORS_TO_RAM (bnc#1012382).\n- arm: 8715/1: add a private asm/unaligned.h (bnc#1012382).\n- arm: 8720/1: ensure dump_instr() checks addr_limit (bnc#1012382).\n- arm: 8721/1: mm: dump: check hardware RO bit for LPAE (bnc#1012382).\n- arm: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE (bnc#1012382).\n- arm: crypto: reduce priority of bit-sliced AES cipher (bnc#1012382).\n- arm: dts: Fix am335x and dm814x scm syscon to probe children (bnc#1012382).\n- arm: dts: Fix compatible for ti81xx uarts for 8250 (bnc#1012382).\n- arm: dts: Fix omap3 off mode pull defines (bnc#1012382).\n- arm: dts: mvebu: pl310-cache disable double-linefill (bnc#1012382).\n- arm: dts: r8a7790: Use R-Car Gen 2 fallback binding for msiof nodes (bnc#1012382).\n- arm: OMAP2+: Fix init for multiple quirks for the same SoC (bnc#1012382).\n- arm: omap2plus_defconfig: Fix probe errors on UARTs 5 and 6 (bnc#1012382).\n- arm: pxa: Do not rely on public mmc header to include leds.h (bnc#1012382).\n- arm: remove duplicate 'const' annotations' (bnc#1012382).\n- asm/sections: add helpers to check for section data (bsc#1063026).\n- asoc: adau17x1: Workaround for noise bug in ADC (bnc#1012382).\n- asoc: cs42l56: Fix reset GPIO name in example DT binding (bsc#1031717).\n- asoc: dapm: fix some pointer error handling (bnc#1012382).\n- asoc: dapm: handle probe deferrals (bnc#1012382).\n- asoc: davinci-mcasp: Fix an error handling path in 'davinci_mcasp_probe()' (bsc#1031717).\n- asoc: rsnd: do not double free kctrl (bnc#1012382).\n- asoc: samsung: Fix possible double iounmap on s3c24xx driver probe failure (bsc#1031717).\n- asoc: wm_adsp: Do not overrun firmware file buffer when reading region data (bnc#1012382).\n- ata: ATA_BMDMA should depend on HAS_DMA (bnc#1012382).\n- ata: fixes kernel crash while tracing ata_eh_link_autopsy event (bnc#1012382).\n- ata: SATA_HIGHBANK should depend on HAS_DMA (bnc#1012382).\n- ata: SATA_MV should depend on HAS_DMA (bnc#1012382).\n- ath10k: convert warning about non-existent OTP board id to debug message (git-fixes).\n- ath10k: fix a warning during channel switch with multiple vaps (bsc#1031717).\n- ath10k: fix board data fetch error message (bsc#1031717).\n- ath10k: fix diag_read to collect data for larger memory (bsc#1031717).\n- ath10k: fix incorrect txpower set by P2P_DEVICE interface (bnc#1012382).\n- ath10k: fix potential memory leak in ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).\n- ath10k: free cached fw bin contents when get board id fails (bsc#1031717).\n- ath10k: ignore configuring the incorrect board_id (bnc#1012382).\n- ath10k: set CTS protection VDEV param only if VDEV is up (bnc#1012382).\n- ath9k_htc: check for underflow in ath9k_htc_rx_msg() (bsc#1031717).\n- ath9k: off by one in ath9k_hw_nvram_read_array() (bsc#1031717).\n- audit: log 32-bit socketcalls (bnc#1012382).\n- autofs: do not fail mount for transient error (bsc#1065180).\n- backlight: adp5520: Fix error handling in adp5520_bl_probe() (bnc#1012382).\n- backlight: lcd: Fix race condition during register (bnc#1012382).\n- bcache: check ca-\u003ealloc_thread initialized before wake up it (bnc#1012382).\n- block: Fix a race between blk_cleanup_queue() and timeout handling (FATE#319965, bsc#964944).\n- bluetooth: btusb: fix QCA Rome suspend/resume (bnc#1012382).\n- bnxt_en: Call firmware to approve the random VF MAC address (bsc#963575 FATE#320144).\n- bnxt_en: Do not setup MAC address in bnxt_hwrm_func_qcaps() (bsc#963575 FATE#320144).\n- bnxt_en: Fix possible corrupted NVRAM parameters from firmware response (bsc#963575 FATE#320144).\n- bnxt_en: Fix VF PCIe link speed and width logic (bsc#963575 FATE#320144).\n- bnxt_en: Re-arrange bnxt_hwrm_func_qcaps() (bsc#963575 FATE#320144).\n- bnxt_en: use eth_hw_addr_random() (bsc#963575 FATE#320144).\n- bonding: discard lowest hash bit for 802.3ad layer3+4 (bnc#1012382).\n- bpf: one perf event close won't free bpf program attached by another perf event (bnc#1012382).\n- bpf/verifier: reject BPF_ALU64|BPF_END (bnc#1012382).\n- brcmfmac: add length check in brcmf_cfg80211_escan_handler() (bnc#1012382).\n- brcmfmac: remove setting IBSS mode when stopping AP (bnc#1012382).\n- brcmfmac: setup passive scan if requested by user-space (bnc#1012382).\n- brcmsmac: make some local variables 'static const' to reduce stack size (bnc#1012382).\n- bridge: netlink: register netdevice before executing changelink (bnc#1012382).\n- bt8xx: fix memory leak (bnc#1012382).\n- btrfs: add a node counter to each of the rbtrees (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: add cond_resched() calls when resolving backrefs (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: allow backref search checks for shared extents (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: backref, add tracepoints for prelim_ref insertion and merging (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: backref, add unode_aux_to_inode_list helper (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: backref, cleanup __ namespace abuse (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: backref, constify some arguments (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: btrfs_check_shared should manage its own transaction (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: clean up extraneous computations in add_delayed_refs (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: constify tracepoint arguments (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: convert prelimary reference tracking to use rbtrees (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: fix leak and use-after-free in resolve_indirect_refs (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: Fix typo in may_commit_transaction Rather than comparing the result of the percpu comparison I was comparing the value of the percpu counter against 0 or 1.\n- btrfs: remove ref_tree implementation from backref.c (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- btrfs: return the actual error value from from btrfs_uuid_tree_iterate (bnc#1012382).\n- btrfs: struct-funcs, constify readers (bsc#974590 bsc#1030061 bsc#1022914 bsc#1017461).\n- bus: mbus: fix window size calculation for 4GB windows (bnc#1012382).\n- can: c_can: do not indicate triple sampling support for D_CAN (bnc#1012382).\n- can: esd_usb2: Fix can_dlc value for received RTR, frames (bnc#1012382).\n- can: gs_usb: fix busy loop if no more TX context is available (bnc#1012382).\n- can: kvaser_usb: Correct return value in printout (bnc#1012382).\n- can: kvaser_usb: Ignore CMD_FLUSH_QUEUE_REPLY messages (bnc#1012382).\n- can: sun4i: fix loopback mode (bnc#1012382).\n- can: sun4i: handle overrun in RX FIFO (bnc#1012382).\n- cdc_ncm: Set NTB format again after altsetting switch for Huawei devices (bnc#1012382).\n- ceph: avoid panic in create_session_open_msg() if utsname() returns NULL (bsc#1061451).\n- ceph: check negative offsets in ceph_llseek() (bsc#1061451).\n- ceph: clean up unsafe d_parent accesses in build_dentry_path (bnc#1012382).\n- ceph: unlock dangling spinlock in try_flush_caps() (bsc#1065639).\n- cgroup, net_cls: iterate the fds of only the tasks which are being migrated (bnc#1064926).\n- cifs: add build_path_from_dentry_optional_prefix() (fate#323482)\n- cifs: Add capability to decrypt big read responses (FATE#324404). Allow to decrypt transformed packets that are bigger than the big buffer size. In particular it is used for read responses that can only exceed the big buffer size.\n- cifs: Add capability to transform requests before sending (FATE#324404). This will allow us to do protocol specific tranformations of packets before sending to the server. For SMB3 it can be used to support encryption.\n- cifs: Add copy into pages callback for a read operation (FATE#324404). Since we have two different types of reads (pagecache and direct) we need to process such responses differently after decryption of a packet. The change allows to specify a callback that copies a read payload data into preallocated pages.\n- cifs: Add mid handle callback (FATE#324404). We need to process read responses differently because the data should go directly into preallocated pages. This can be done by specifying a mid handle callback.\n- cifs: Add soft dependencies (FATE#324404). List soft dependencies of cifs so that mkinitrd and dracut can include the required helper modules.\n- cifs: Add transform header handling callbacks (FATE#324404). We need to recognize and parse transformed packets in demultiplex thread to find a corresponsing mid and process it further.\n- cifs: add use_ipc flag to SMB2_ioctl() (fate#323482)\n- cifs: Allow to switch on encryption with seal mount  option (FATE#324404). This allows users to inforce encryption for SMB3 shares if a server supports it.\n- cifs: check MaxPathNameComponentLength != 0 before using it (bnc#1012382).\n- cifs: Decrypt and process small encrypted packets (FATE#324404). Allow to decrypt transformed packets, find a corresponding mid and process as usual further.\n- cifs: do not bother with kmap on read_pages side (FATE#324404). just do ITER_BVEC recvmsg\n- cifs: Enable encryption during session setup phase  (FATE#324404). In order to allow encryption on SMB connection we need to exchange a session key and generate encryption and decryption keys.\n- cifs: Encrypt SMB3 requests before sending (FATE#324404). This change allows to encrypt packets if it is required by a server for SMB sessions or tree connections.\n- cifs: fix circular locking dependency (bsc#1064701).\n- cifs: Fix some return values in case of error in 'crypt_message' (fate#324404).\n- cifs: Fix sparse warnings (fate#323482)\n- cifs: implement get_dfs_refer for SMB2+ (fate#323482)\n- cifs: let ses-\u003eipc_tid hold smb2 TreeIds (fate#323482)\n- cifs: Make send_cancel take rqst as argument (FATE#324404).\n- cifs: Make SendReceive2() takes resp iov (FATE#324404). Now SendReceive2 frees the first iov and returns a response buffer in it that increases a code complexity. Simplify this by making a caller responsible for freeing request buffer itself and returning a response buffer in a separate iov.\n- cifs: move DFS response parsing out of SMB1 code (fate#323482)\n- cifs: no need to wank with copying and advancing iovec on recvmsg side  either (FATE#324404).\n- cifs: Only select the required crypto modules (FATE#324404). The sha256 and cmac crypto modules are only needed for SMB2+, so move the select statements to config CIFS_SMB2. Also select CRYPTO_AES there as SMB2+ needs it.\n- cifs: Prepare for encryption support (first part). Add decryption and encryption key generation. (FATE#324404).\n- cifs_readv_receive: use cifs_read_from_socket() (FATE#324404).\n- cifs: Reconnect expired SMB sessions (bnc#1012382).\n- cifs: remove any preceding delimiter from prefix_path (fate#323482)\n- cifs: Send RFC1001 length in a separate iov (FATE#324404). In order to simplify further encryption support we need to separate RFC1001 length and SMB2 header when sending a request. Put the length field in iov[0] and the rest of the packet into following iovs.\n- cifs: Separate RFC1001 length processing for SMB2 read (FATE#324404). Allocate and initialize SMB2 read request without RFC1001 length field to directly call cifs_send_recv() rather than SendReceive2() in a read codepath.\n- cifs: Separate SMB2 header structure (FATE#324404). In order to support compounding and encryption we need to separate RFC1001 length field and SMB2 header structure because the protocol treats them differently. This change will allow to simplify parsing of such complex SMB2 packets further.\n- cifs: Separate SMB2 sync header processing (FATE#324404). Do not process RFC1001 length in smb2_hdr_assemble() because it is not a part of SMB2 header. This allows to cleanup the code and adds a possibility combine several SMB2 packets into one for compounding.\n- cifs: set signing flag in SMB2+ TreeConnect if needed (fate#323482)\n- cifs: Simplify SMB2 and SMB311 dependencies (FATE#324404).\n- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).\n- clk: ti: dra7-atl-clock: Fix of_node reference counting (bnc#1012382).\n- clockevents/drivers/cs5535: Improve resilience to spurious interrupts (bnc#1012382).\n- cma: fix calculation of aligned offset (VM Functionality, bsc#1050060).\n- coda: fix 'kernel memory exposure attempt' in fsync (bnc#1012382).\n- cpufreq: CPPC: add ACPI_PROCESSOR dependency (bnc#1012382).\n- crypto: shash - Fix zero-length shash ahash digest crash (bnc#1012382).\n- crypto: vmx - disable preemption to enable vsx in aes_ctr.c (bnc#1012382).\n- crypto: x86/sha1-mb - fix panic due to unaligned access (bnc#1012382).\n- crypto: xts - Add ECB dependency (bnc#1012382).\n- cx231xx: Fix I2C on Internal Master 3 Bus (bnc#1012382).\n- cxgb4: Fix error codes in c4iw_create_cq() (bsc#1021424).\n- cxl: Fix DAR check \u0026 use REGION_ID instead of opencoding (bsc#1066223).\n- cxl: Fix leaking pid refs in some error paths (bsc#1066223).\n- cxl: Force context lock during EEH flow (bsc#1066223).\n- cxl: Prevent adapter reset if an active context exists (bsc#1066223).\n- cxl: Route eeh events to all drivers in cxl_pci_error_detected() (bsc#1066223).\n- direct-io: Prevent NULL pointer access in submit_page_section (bnc#1012382).\n- Disable patches.kernel.org/4.4.93-022-fix-unbalanced-page-refcounting-in-bio_map_use.patch (bsc#1070767)\n- dmaengine: dmatest: warn user when dma test times out (bnc#1012382).\n- dmaengine: edma: Align the memcpy acnt array size with the transfer (bnc#1012382).\n- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).\n- dm bufio: fix integer overflow when limiting maximum cache size (bnc#1012382).\n- dm: fix race between dm_get_from_kobject() and __dm_destroy() (bnc#1012382).\n- driver core: platform: Do not read past the end of 'driver_override' buffer (bnc#1012382).\n- drivers: dma-mapping: Do not leave an invalid area-\u003epages pointer in dma_common_contiguous_remap() (Git-fixes, bsc#1065692).\n- drivers: firmware: psci: drop duplicate const from psci_of_match (bnc#1012382).\n- drivers: hv: fcopy: restore correct transfer length (bnc#1012382).\n- drm/amdgpu: when dpm disabled, also need to stop/start vce (bnc#1012382).\n- drm/amdkfd: fix improper return value on error (bnc#1012382).\n- drm/amdkfd: NULL dereference involving create_process() (bsc#1031717).\n- drm: Apply range restriction after color adjustment when allocation (bnc#1012382).\n- drm/armada: Fix compile fail (bnc#1012382).\n- drm: bridge: add DT bindings for TI ths8135 (bnc#1012382).\n- drm: drm_minor_register(): Clean up debugfs on failure (bnc#1012382).\n- drm_fourcc: Fix DRM_FORMAT_MOD_LINEAR #define (bnc#1012382).\n- drm: gma500: fix logic error (bsc#1031717).\n- drm/i915/bios: ignore HDMI on port A (bnc#1012382).\n- drm/i915/bxt: set min brightness from VBT (bsc#1031717).\n- drm/i915: Do not try indexed reads to alternate slave addresses (bsc#1031717).\n- drm/i915: fix backlight invert for non-zero minimum brightness (bsc#1031717).\n- drm/i915: Prevent zero length 'index' write (bsc#1031717).\n- drm/i915: Read timings from the correct transcoder in intel_crtc_mode_get() (bsc#1031717).\n- drm/msm: fix an integer overflow test (bnc#1012382).\n- drm/msm: Fix potential buffer overflow issue (bnc#1012382).\n- drm/nouveau/bsp/g92: disable by default (bnc#1012382).\n- drm/nouveau/gr: fallback to legacy paths during firmware lookup (bsc#1031717).\n- drm/nouveau/mmu: flush tlbs before deleting page tables (bnc#1012382).\n- drm/omap: Fix error handling path in 'omap_dmm_probe()' (bsc#1031717).\n- drm/panel: simple: Add missing panel_simple_unprepare() calls (bsc#1031717).\n- drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache (bnc#1012382).\n- drm/vc4: Fix leak of HDMI EDID (bsc#1031717).\n- drm/vmwgfx: Fix Ubuntu 17.10 Wayland black screen issue (bnc#1012382).\n- e1000e: Fix error path in link detection (bnc#1012382).\n- e1000e: Fix return value test (bnc#1012382).\n- e1000e: Separate signaling for link check/link up (bnc#1012382).\n- ecryptfs: fix dereference of NULL user_key_payload (bnc#1012382).\n- eCryptfs: use after free in ecryptfs_release_messaging() (bsc#1012829).\n- epoll: avoid calling ep_call_nested() from ep_poll_safewake() (bsc#1056427).\n- epoll: remove ep_call_nested() from ep_eventpoll_poll() (bsc#1056427).\n- ext4: cleanup goto next group (bsc#1066285).\n- ext4: do not allow encrypted operations without keys (bnc#1012382). patches.drivers/0001-iwlwifi-nvm-fix-up-phy-section-when-reading-it.patch.\n- ext4: do not use stripe_width if it is not set (bnc#1012382).\n- ext4: fix interaction between i_size, fallocate, and delalloc after a crash (bnc#1012382).\n- ext4: fix stripe-unaligned allocations (bnc#1012382).\n- ext4: in ext4_seek_{hole,data}, return -ENXIO for negative offsets (bnc#1012382).\n- ext4: reduce lock contention in __ext4_new_inode (bsc#1066285).\n- extcon: axp288: Use vbus-valid instead of -present to determine cable presence (bnc#1012382).\n- extcon: palmas: Check the parent instance to prevent the NULL (bnc#1012382).\n- exynos4-is: fimc-is: Unmap region obtained by of_iomap() (bnc#1012382).\n- exynos-gsc: Do not swap cb/cr for semi planar formats (bnc#1012382).\n- f2fs crypto: add missing locking for keyring_key access (bnc#1012382).\n- f2fs crypto: replace some BUG_ON()'s with error checks (bnc#1012382).\n- f2fs: do not wait for writeback in write_begin (bnc#1012382).\n- fealnx: Fix building error on MIPS (bnc#1012382).\n- fix a page leak in vhost_scsi_iov_to_sgl() error recovery (bnc#1012382).\n- Fix serial console on SNI RM400 machines (bsc#1031717).\n- Fix tracing sample code warning (bnc#1012382).\n- fix unbalanced page refcounting in bio_map_user_iov (bnc#1012382).\n- fix whitespace according to upstream commit\n- fm10k: request reset when mbx-\u003estate changes (bnc#1012382).\n- fm10k: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- fs/9p: Compare qid.path in v9fs_test_inode (bsc#1012829).\n- fs-cache: fix dereference of NULL user_key_payload (bnc#1012382).\n- fscrypt: fix dereference of NULL user_key_payload (bnc#1012382).\n- fscrypt: lock mutex before checking for bounce page pool (bnc#1012382).\n- fscrypto: require write access to mount to set encryption policy (bnc#1012382).\n- fs/epoll: cache leftmost node (bsc#1056427).\n- ftrace: Fix kmemleak in unregister_ftrace_graph (bnc#1012382).\n- fuse: fix READDIRPLUS skipping an entry (bnc#1012382).\n- gfs2: Fix reference to ERR_PTR in gfs2_glock_iter_next (bnc#1012382).\n- gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap (bnc#1012382).\n- hid: elo: clear BTN_LEFT mapping (bsc#1065866).\n- hid: i2c-hid: allocate hid buffers for real worst case (bnc#1012382).\n- hid: usbhid: fix out-of-bounds bug (bnc#1012382).\n- hpsa: correct lun data caching bitmap definition (bsc#1028971).\n- hsi: ssi_protocol: double free in ssip_pn_xmit() (bsc#1031717).\n- hwmon: (gl520sm) Fix overflows and crash seen when writing into limit attributes (bnc#1012382).\n- i2c: at91: ensure state is restored after suspending (bnc#1012382).\n- i2c: cadance: fix ctrl/addr reg write order (bsc#1031717).\n- i2c: imx: Use correct function to write to register (bsc#1031717).\n- i2c: ismt: Separate I2C block read from SMBus block read (bnc#1012382).\n- i2c: meson: fix wrong variable usage in meson_i2c_put_data (bnc#1012382).\n- i2c: riic: correctly finish transfers (bnc#1012382).\n- i2c: riic: fix restart condition (git-fixes).\n- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#969476 FATE#319648 bsc#969477 FATE#319816).\n- i40e: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- i40evf: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- i40iw: Add missing memory barriers (bsc#969476 FATE#319648 bsc#969477 FATE#319816).\n- i40iw: Fix port number for query QP (bsc#969476 FATE#319648 bsc#969477 FATE#319816).\n- ib/core: Fix calculation of maximum RoCE MTU (bsc#1022595 FATE#322350).\n- ib/core: Fix for core panic (bsc#1022595 FATE#322350).\n- ib/core: Fix the validations of a multicast LID in attach or detach operations (bsc#1022595 FATE#322350).\n- ib/core: Namespace is mandatory input for address resolution (bsc#1022595 FATE#322350).\n- ib/i40iw: Fix error code in i40iw_create_cq() (bsc#969476 FATE#319648 bsc#969477 FATE#319816).\n- ib/ipoib: Change list_del to list_del_init in the tx object (bnc#1012382).\n- ib/ipoib: Clean error paths in add port (bsc#1022595 FATE#322350).\n- ib/ipoib: Fix deadlock over vlan_mutex (bnc#1012382).\n- ib/ipoib: Prevent setting negative values to max_nonsrq_conn_qp (bsc#1022595 FATE#322350).\n- ib/ipoib: Remove double pointer assigning (bsc#1022595 FATE#322350).\n- ib/ipoib: Replace list_del of the neigh-\u003elist with list_del_init (bnc#1012382).\n- ib/ipoib: rtnl_unlock can not come after free_netdev (bnc#1012382).\n- ib/ipoib: Set IPOIB_NEIGH_TBL_FLUSH after flushed completion initialization (bsc#1022595 FATE#322350).\n- ib/mlx5: Fix Raw Packet QP event handler assignment (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- ib/mlx5: Fix RoCE Address Path fields (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- ibmvnic: Add netdev_dbg output for debugging (fate#323285).\n- ibmvnic: Add vnic client data to login buffer (bsc#1069942).\n- ibmvnic: Convert vnic server reported statistics to cpu endian (fate#323285).\n- ibmvnic: Enable scatter-gather support (bsc#1066382).\n- ibmvnic: Enable TSO support (bsc#1066382).\n- ibmvnic: Feature implementation of Vital Product Data (VPD) for the ibmvnic driver (bsc#1069942).\n- ibmvnic: Fix calculation of number of TX header descriptors (bsc#1066382).\n- ibmvnic: fix dma_mapping_error call (bsc#1069942).\n- ibmvnic: Fix failover error path for non-fatal resets (bsc#1066382).\n- ibmvnic: Implement .get_channels (fate#323285).\n- ibmvnic: Implement .get_ringparam (fate#323285).\n- ibmvnic: Implement per-queue statistics reporting (fate#323285).\n- ibmvnic: Let users change net device features (bsc#1066382).\n- ibmvnic: Set state UP (bsc#1062962).\n- ibmvnic: Update reset infrastructure to support tunable parameters (bsc#1066382).\n- ib/qib: fix false-postive maybe-uninitialized warning (bnc#1012382).\n- ib/srp: Avoid that a cable pull can trigger a kernel crash (bsc#1022595 FATE#322350).\n- ib/srpt: Do not accept invalid initiator port names (bnc#1012382).\n- ib/uverbs: Fix device cleanup (bsc#1022595 FATE#322350).\n- ib/uverbs: Fix NULL pointer dereference during device removal (bsc#1022595 FATE#322350).\n- igb: close/suspend race in netif_device_detach (bnc#1012382).\n- igb: Fix hw_dbg logging in igb_update_flash_i210 (bnc#1012382).\n- igb: re-assign hw address pointer on reset after PCI error (bnc#1012382).\n- igb: reset the PHY before reading the PHY ID (bnc#1012382).\n- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- igbvf: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- iio: ad7793: Fix the serial interface reset (bnc#1012382).\n- iio: adc: axp288: Drop bogus AXP288_ADC_TS_PIN_CTRL register modifications (bnc#1012382).\n- iio: adc: hx711: Add DT binding for avia,hx711 (bnc#1012382).\n- iio: adc: mcp320x: Fix oops on module unload (bnc#1012382).\n- iio: adc: mcp320x: Fix readout of negative voltages (bnc#1012382).\n- iio: adc: twl4030: Disable the vusb3v1 rugulator in the error handling path of 'twl4030_madc_probe()' (bnc#1012382).\n- iio: adc: twl4030: Fix an error handling path in 'twl4030_madc_probe()' (bnc#1012382).\n- iio: adc: xilinx: Fix error handling (bnc#1012382).\n- iio: ad_sigma_delta: Implement a dedicated reset function (bnc#1012382).\n- iio: core: Return error for failed read_reg (bnc#1012382).\n- iio: dummy: events: Add missing break (bsc#1031717).\n- iio: light: fix improper return value (bnc#1012382).\n- iio: trigger: free trigger resource correctly (bnc#1012382).\n- ima: do not update security.ima if appraisal status is not INTEGRITY_PASS (bnc#1012382).\n- input: ar1021_i2c - fix too long name in driver's device table (bsc#1031717).\n- input: edt-ft5x06 - fix setting gain, offset, and threshold via device tree (bsc#1031717).\n- input: elan_i2c - add ELAN060C to the ACPI table (bnc#1012382).\n- input: elan_i2c - add ELAN0611 to the ACPI table (bnc#1012382).\n- input: gtco - fix potential out-of-bound access (bnc#1012382).\n- input: mpr121 - handle multiple bits change of status register (bnc#1012382).\n- input: mpr121 - set missing event capability (bnc#1012382).\n- input: ti_am335x_tsc - fix incorrect step config for 5 wire touchscreen (bsc#1031717).\n- input: twl4030-pwrbutton - use correct device for irq request (bsc#1031717).\n- input: ucb1400_ts - fix suspend and resume handling (bsc#1031717).\n- input: uinput - avoid crash when sending FF request to device going away (bsc#1031717).\n- iommu/amd: Finish TLB flush in amd_iommu_unmap() (bnc#1012382).\n- iommu/arm-smmu-v3: Clear prior settings when updating STEs (bnc#1012382).\n- iommu/io-pgtable-arm: Check for leaf entry before dereferencing it (bnc#1012382).\n- iommu/vt-d: Do not register bus-notifier under dmar_global_lock (bsc#1069793).\n- ip6_gre: only increase err_count for some certain type icmpv6 in ip6gre_err (bnc#1012382).\n- ip6_gre: skb_push ipv6hdr before packing the header in ip6gre_header (bnc#1012382).\n- ipip: only increase err_count for some certain type icmp in ipip_err (bnc#1012382).\n- ipmi: Disable IPMI fix patches due to regression (bsc#1071833)\n- ipmi: fix unsigned long underflow (bnc#1012382).\n- ipmi: Pick up slave address from SMBIOS on an ACPI device (bsc#1070006).\n- ipmi: Prefer ACPI system interfaces over SMBIOS ones (bsc#1070006).\n- ipmi_si: Clean up printks (bsc#1070006).\n- ipmi_si: fix memory leak on new_smi (bsc#1070006).\n- ipsec: do not ignore crypto err in ah4 input (bnc#1012382).\n- ipv6: flowlabel: do not leave opt-\u003etot_len with garbage (bnc#1012382).\n- ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (bnc#1012382).\n- ipvs: make drop_entry protection effective for SIP-pe (bsc#1056365).\n- irqchip/crossbar: Fix incorrect type of local variables (bnc#1012382).\n- isa: Prevent NULL dereference in isa_bus driver callbacks (bsc#1031717).\n- iscsi-target: Fix non-immediate TMR reference leak (bnc#1012382).\n- isdn/i4l: fetch the ppp_write buffer in one shot (bnc#1012382).\n- isofs: fix timestamps beyond 2027 (bnc#1012382).\n- iwlwifi: add workaround to disable wide channels in 5GHz (bnc#1012382).\n- iwlwifi: mvm: fix the coex firmware API (bsc#1031717).\n- iwlwifi: mvm: return -ENODATA when reading the temperature with the FW down (bsc#1031717).\n- iwlwifi: mvm: set the RTS_MIMO_PROT bit in flag mask when sending sta to fw (bsc#1031717).\n- iwlwifi: mvm: use IWL_HCMD_NOCOPY for MCAST_FILTER_CMD (bnc#1012382).\n- iwlwifi: split the regulatory rules when the bandwidth flags require it (bsc#1031717).\n- ixgbe: add mask for 64 RSS queues (bnc#1012382).\n- ixgbe: do not disable FEC from the driver (bnc#1012382).\n- ixgbe: fix AER error handling (bnc#1012382).\n- ixgbe: Fix incorrect bitwise operations of PTP Rx timestamp flags (bsc#969474 FATE#319812 bsc#969475 FATE#319814).\n- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).\n- ixgbe: handle close/suspend race with netif_device_detach/present (bnc#1012382).\n- ixgbe: Reduce I2C retry count on X550 devices (bnc#1012382).\n- ixgbevf: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- kABI: protect struct l2tp_tunnel (kabi).\n- kABI: protect struct regulator_dev (kabi).\n- kABI: protect struct rm_data_op (kabi).\n- kABI: protect struct sdio_func (kabi).\n- kABI: protect structs rt_rq+root_domain (kabi).\n- kABI: protect typedef rds_rdma_cookie_t (kabi).\n- kernel-docs: unpack the source instead of using kernel-source (bsc#1057199).\n- kernel/sysctl.c: remove duplicate UINT_MAX check on do_proc_douintvec_conv() (bsc#1066470).\n- kernel/watchdog: Prevent false positives with turbo modes (bnc#1063516).\n- keys: do not let add_key() update an uninstantiated key (bnc#1012382).\n- keys: do not revoke uninstantiated key in request_key_auth_new() (bsc#1031717).\n- keys: encrypted: fix dereference of NULL user_key_payload (bnc#1012382).\n- keys: fix cred refcount leak in request_key_auth_new() (bsc#1031717).\n- keys: fix key refcount leak in keyctl_assume_authority() (bsc#1031717).\n- keys: fix key refcount leak in keyctl_read_key() (bsc#1031717).\n- keys: fix NULL pointer dereference during ASN.1 parsing [ver #2] (bnc#1012382).\n- keys: fix out-of-bounds read during ASN.1 parsing (bnc#1012382).\n- keys: Fix race between updating and finding a negative key (bnc#1012382).\n- keys: return full count in keyring_read() if buffer is too small (bnc#1012382).\n- keys: trusted: fix writing past end of buffer in trusted_read() (bnc#1012382).\n- keys: trusted: sanitize all key material (bnc#1012382).\n- kvm: nVMX: fix guest CR4 loading when emulating L2 to L1 exit (bnc#1012382).\n- kvm: nVMX: set IDTR and GDTR limits when loading L1 host state (bnc#1012382).\n- kvm: PPC: Book 3S: XICS: correct the real mode ICP rejecting counter (bnc#1012382).\n- kvm: SVM: obey guest PAT (bnc#1012382).\n- l2tp: Avoid schedule while atomic in exit_net (bnc#1012382).\n- l2tp: check ps-\u003esock before running pppol2tp_session_ioctl() (bnc#1012382).\n- l2tp: fix race condition in l2tp_tunnel_delete (bnc#1012382).\n- libata: transport: Remove circular dependency at free time (bnc#1012382).\n- lib/digsig: fix dereference of NULL user_key_payload (bnc#1012382).\n- libertas: Fix lbs_prb_rsp_limit_set() (bsc#1031717).\n- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).\n- libnvdimm, namespace: fix label initialization to use valid seq numbers (bnc#1012382).\n- libnvdimm, namespace: make 'resource' attribute only readable by root (bnc#1012382).\n- libnvdimm, pfn: make 'resource' attribute only readable by root (FATE#319858).\n- lib/ratelimit.c: use deferred printk() version (bsc#979928).\n- locking/lockdep: Add nest_lock integrity test (bnc#1012382).\n- lsm: fix smack_inode_removexattr and xattr_getsecurity memleak (bnc#1012382).\n- mac80211: agg-tx: call drv_wake_tx_queue in proper context (bsc#1031717).\n- mac80211: do not compare TKIP TX MIC key in reinstall prevention (bsc#1066472).\n- mac80211: do not send SMPS action frame in AP mode when not needed (bsc#1031717).\n- mac80211: Fix addition of mesh configuration element (git-fixes).\n- mac80211: Fix BW upgrade for TDLS peers (bsc#1031717).\n- mac80211: fix mgmt-tx abort cookie and leak (bsc#1031717).\n- mac80211: fix power saving clients handling in iwlwifi (bnc#1012382).\n- mac80211_hwsim: check HWSIM_ATTR_RADIO_NAME length (bnc#1012382).\n- mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl() (bsc#1031717).\n- mac80211: Remove invalid flag operations in mesh TSF synchronization (bnc#1012382).\n- mac80211: Remove unused 'beaconint_us' variable (bsc#1031717).\n- mac80211: Remove unused 'i' variable (bsc#1031717).\n- mac80211: Remove unused 'len' variable (bsc#1031717).\n- mac80211: Remove unused 'rates_idx' variable (bsc#1031717).\n- mac80211: Remove unused 'sband' and 'local' variables (bsc#1031717).\n- mac80211: Remove unused 'struct ieee80211_rx_status' ptr (bsc#1031717).\n- mac80211: Suppress NEW_PEER_CANDIDATE event if no room (bnc#1012382).\n- mac80211: TDLS: always downgrade invalid chandefs (bsc#1031717).\n- mac80211: TDLS: change BW calculation for WIDER_BW peers (bsc#1031717).\n- mac80211: use constant time comparison with keys (bsc#1066471).\n- md/linear: shutup lockdep warnning (bnc#1012382).\n- md/raid10: submit bio directly to replacement disk (bnc#1012382).\n- media: au0828: fix RC_CORE dependency (bsc#1031717).\n- media: Do not do DMA on stack for firmware upload in the AS102 driver (bnc#1012382).\n- media: em28xx: calculate left volume level correctly (bsc#1031717).\n- media: mceusb: fix memory leaks in error path (bsc#1031717).\n- media: rc: check for integer overflow (bnc#1012382).\n- media: v4l2-ctrl: Fix flags field on Control events (bnc#1012382).\n- megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (bsc#1027301).\n- mei: return error on notification request to a disconnected client (bnc#1012382).\n- mfd: ab8500-sysctrl: Handle probe deferral (bnc#1012382).\n- mfd: axp20x: Fix axp288 PEK_DBR and PEK_DBF irqs being swapped (bnc#1012382).\n- misc: panel: properly restore atomic counter on error path (bnc#1012382).\n- mlx5: Avoid that mlx5_ib_sg_to_klms() overflows the klms array (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- mm/backing-dev.c: fix an error handling path in 'cgwb_create()' (bnc#1063475).\n- mmc: block: return error on failed mmc_blk_get() (bsc#1031717).\n- mmc: core/mmci: restore pre/post_req behaviour (bsc#1031717).\n- mmc: dw_mmc: rockchip: Set the drive phase properly (bsc#1031717).\n- mm: check the return value of lookup_page_ext for all call sites (bnc#1068982).\n- mmc: host: omap_hsmmc: avoid possible overflow of timeout value (bsc#1031717).\n- mmc: host: omap_hsmmc: checking for NULL instead of IS_ERR() (bsc#1031717).\n- mmc: mediatek: Fixed size in dma_free_coherent (bsc#1031717).\n- mm,compaction: serialize waitqueue_active() checks (for real) (bsc#971975).\n- mmc: s3cmci: include linux/interrupt.h for tasklet_struct (bnc#1012382).\n- mmc: sdio: fix alignment issue in struct sdio_func (bnc#1012382).\n- mmc: sd: limit SD card power limit according to cards capabilities (bsc#1031717).\n- mm: discard memblock data later (bnc#1063460).\n- mm, hwpoison: fixup 'mm: check the return value of lookup_page_ext for all call sites' (bnc#1012382).\n- mm/madvise.c: fix madvise() infinite loop under special circumstances (bnc#1070964).\n- mm/memblock.c: reversed logic in memblock_discard() (bnc#1063460).\n- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).\n- mm/memory_hotplug: change pfn_to_section_nr/section_nr_to_pfn macro to inline function (bnc#1063501).\n- mm/memory_hotplug: define find_{smallest|biggest}_section_pfn as unsigned long (bnc#1063520).\n- mm/page_alloc.c: broken deferred calculation (bnc#1068980).\n- mm, page_alloc: fix potential false positive in __zone_watermark_ok (Git-fixes, bsc#1068978).\n- mm/page_ext.c: check if page_ext is not prepared (bnc#1068982).\n- mm/page_owner: avoid null pointer dereference (bnc#1068982).\n- mm/pagewalk.c: report holes in hugetlb ranges (bnc#1012382).\n- net: 3com: typhoon: typhoon_init_one: fix incorrect return values (bnc#1012382).\n- net: 3com: typhoon: typhoon_init_one: make return values more specific (bnc#1012382).\n- net/9p: Switch to wait_event_killable() (bnc#1012382).\n- net: Allow IP_MULTICAST_IF to set index to L3 slave (bnc#1012382).\n- net: cdc_ether: fix divide by 0 on bad descriptors (bnc#1012382).\n- net: cdc_ncm: GetNtbFormat endian fix (git-fixes).\n- net: core: Prevent from dereferencing null pointer when releasing SKB (bnc#1012382).\n- net: dsa: select NET_SWITCHDEV (bnc#1012382).\n- net: emac: Fix napi poll list corruption (bnc#1012382).\n- netfilter: invoke synchronize_rcu after set the _hook_ to NULL (bnc#1012382).\n- netfilter/ipvs: clear ipvs_property flag when SKB net namespace changed (bnc#1012382).\n- netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value (bnc#1012382).\n- netfilter: nfnl_cthelper: fix incorrect helper-\u003eexpect_class_max (bnc#1012382).\n- netfilter: nf_tables: fix oob access (bnc#1012382).\n- netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family (bnc#1012382).\n- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).\n- net: ibm: ibmvnic: constify vio_device_id (fate#323285).\n- net/mlx4_core: Enable 4K UAR if SRIOV module parameter is not enabled (bsc#966191 FATE#320230 bsc#966186 FATE#320228).\n- net/mlx4_core: Fix VF overwrite of module param which disables DMFS on new probed PFs (bnc#1012382).\n- net/mlx4_en: fix overflow in mlx4_en_init_timestamp() (bnc#1012382).\n- net/mlx5e: Fix wrong delay calculation for overflow check scheduling (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- net/mlx5e: Schedule overflow check work to mlx5e workqueue (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- net/mlx5: Skip mlx5_unload_one if mlx5_load_one fails (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- net: mvpp2: release reference to txq_cpu[] entry after unmapping (bnc#1012382).\n- net/packet: check length in getsockopt() called with PACKET_HDRLEN (bnc#1012382).\n- net: qmi_wwan: fix divide by 0 on bad descriptors (bnc#1012382).\n- net/sctp: Always set scope_id in sctp_inet6_skb_msgname (bnc#1012382).\n- net: Set sk_prot_creator when cloning sockets to the right proto (bnc#1012382).\n- net/unix: do not show information about sockets from other namespaces (bnc#1012382).\n- nfc: fix device-allocation error return (bnc#1012382).\n- nfsd/callback: Cleanup callback cred on shutdown (bnc#1012382).\n- nfsd: deal with revoked delegations appropriately (bnc#1012382).\n- nfs: Do not disconnect open-owner on NFS4ERR_BAD_SEQID (bsc#989261).\n- nfs: Fix typo in nomigration mount option (bnc#1012382).\n- nfs: Fix ugly referral attributes (bnc#1012382).\n- nilfs2: fix race condition that causes file system corruption (bnc#1012382).\n- nl80211: Define policy for packet pattern attributes (bnc#1012382).\n- nvme: Fix memory order on async queue deletion (bnc#1012382).\n- nvme: protect against simultaneous shutdown invocations (FATE#319965 bnc#1012382 bsc#964944).\n- ocfs2: fstrim: Fix start offset of first cluster group during fstrim (bnc#1012382).\n- ocfs2: should wait dio before inode lock in ocfs2_setattr() (bnc#1012382).\n- packet: avoid panic in packet_getsockopt() (bnc#1012382).\n- packet: only test po-\u003ehas_vnet_hdr once in packet_snd (bnc#1012382).\n- parisc: Avoid trashing sr2 and sr3 in LWS code (bnc#1012382).\n- parisc: Fix double-word compare and exchange in LWS code on 32-bit kernels (bnc#1012382).\n- parisc: Fix validity check of pointer size argument in new CAS implementation (bnc#1012382).\n- parisc: perf: Fix potential NULL pointer dereference (bnc#1012382).\n- partitions/efi: Fix integer overflow in GPT size calculation (bnc#1012382).\n- pci: Apply _HPX settings only to relevant devices (bnc#1012382).\n- pci: mvebu: Handle changes to the bridge windows while enabled (bnc#1012382).\n- percpu: make this_cpu_generic_read() atomic w.r.t. interrupts (bnc#1012382).\n- perf tools: Fix build failure on perl script context (bnc#1012382).\n- perf tools: Only increase index if perf_evsel__new_idx() succeeds (bnc#1012382).\n- perf/x86/intel/bts: Fix exclusive event reference leak (git-fixes d2878d642a4ed).\n- phy: increase size of MII_BUS_ID_SIZE and bus_id (bnc#1012382).\n- pkcs#7: fix unitialized boolean 'want' (bnc#1012382).\n- pkcs7: Prevent NULL pointer dereference, since sinfo is not always set (bnc#1012382).\n- platform/x86: acer-wmi: setup accelerometer when ACPI device was found (bsc#1031717).\n- platform/x86: hp-wmi: Do not shadow error values (bnc#1012382).\n- platform/x86: hp-wmi: Fix detection for dock and tablet mode (bnc#1012382).\n- platform/x86: hp-wmi: Fix error value for hp_wmi_tablet_state (bnc#1012382).\n- platform/x86: intel_mid_thermal: Fix module autoload (bnc#1012382).\n- platform/x86: sony-laptop: Fix error handling in sony_nc_setup_rfkill() (bsc#1031717).\n- pm / OPP: Add missing of_node_put(np) (bnc#1012382).\n- power: bq27xxx_battery: Fix bq27541 AveragePower register address (bsc#1031717).\n- power: bq27xxx: fix reading for bq27000 and bq27010 (bsc#1031717).\n- powerCap: Fix an error code in powercap_register_zone() (bsc#1031717).\n- power: ipaq-micro-battery: freeing the wrong variable (bsc#1031717).\n- powerpc/64: Fix race condition in setting lock bit in idle/wakeup code (bsc#1066223).\n- powerpc/bpf/jit: Disable classic BPF JIT on ppc64le (bsc#1066223).\n- powerpc/corenet: explicitly disable the SDHC controller on kmcoge4 (bnc#1012382).\n- powerpc: Correct instruction code for xxlor instruction (bsc#1066223).\n- powerpc: Fix VSX enabling/flushing to also test MSR_FP and MSR_VEC (bsc#1066223).\n- powerpc/mm: Fix check of multiple 16G pages from device tree (bsc#1066223).\n- powerpc/mm: Fix virt_addr_valid() etc. on 64-bit hash (bsc#1066223).\n- powerpc/mm/hash64: Fix subpage protection with 4K HPTE config (bsc#1010201, bsc#1066223).\n- powerpc/mm/hash: Free the subpage_prot_table correctly (bsc#1066223).\n- powerpc/numa: Fix multiple bugs in memory_hotplug_max() (bsc#1066223).\n- powerpc/numa: Fix whitespace in hot_add_drconf_memory_max() (bsc#1066223).\n- powerpc/opal: Fix EBUSY bug in acquiring tokens (bsc#1066223).\n- powerpc/perf: Remove PPMU_HAS_SSLOT flag for Power8 (bsc#1066223).\n- powerpc/powernv/ioda: Fix endianness when reading TCEs (bsc#1066223).\n- powerpc/powernv: Make opal_event_shutdown() callable from IRQ context (bsc#1066223).\n- powerpc/pseries/vio: Dispose of virq mapping on vdevice unregister (bsc#1067888).\n- powerpc/pseries/vio: Dispose of virq mapping on vdevice unregister (bsc#1067888).\n- powerpc/signal: Properly handle return value from uprobe_deny_signal() (bsc#1066223).\n- powerpc/sysrq: Fix oops whem ppmu is not registered (bsc#1066223).\n- power: supply: bq27xxx_battery: Fix register map for BQ27510 and BQ27520 ('bsc#1069270').\n- power: supply: isp1704: Fix unchecked return value of devm_kzalloc (bsc#1031717).\n- power: supply: lp8788: prevent out of bounds array access (bsc#1031717).\n- power_supply: tps65217-charger: Fix NULL deref during property export (bsc#1031717).\n- ppp: fix race in ppp device destruction (bnc#1012382).\n- printk/console: Always disable boot consoles that use init memory before it is freed (bsc#1063026).\n- printk/console: Enhance the check for consoles using init memory (bsc#1063026).\n- printk: include \u003casm/sections.h\u003e instead of \u003casm-generic/sections.h\u003e (bsc#1063026).\n- printk: only unregister boot consoles when necessary (bsc#1063026).\n- qed: Fix stack corruption on probe (bsc#966318 FATE#320158 bsc#966316 FATE#320159).\n- quota: Check for register_shrinker() failure (bsc#1012829).\n- r8169: Do not increment tx_dropped in TX ring cleaning (bsc#1031717).\n- rbd: use GFP_NOIO for parent stat and data requests (bnc#1012382).\n- rcu: Allow for page faults in NMI handlers (bnc#1012382).\n- rdma/uverbs: Prevent leak of reserved field (bsc#1022595 FATE#322350).\n- rds: ib: add error handle (bnc#1012382).\n- rds: rdma: Fix the composite message user notification (bnc#1012382).\n- rds: rdma: return appropriate error on rdma map failures (bnc#1012382).\n- regulator: core: Limit propagation of parent voltage count and list (bsc#1070145).\n- regulator: fan53555: fix I2C device ids (bnc#1012382).\n- Revert 'bpf: one perf event close won't free bpf program attached by another perf event' (kabi).\n- Revert 'bsg-lib: do not free job in bsg_prepare_job' (bnc#1012382).\n- Revert 'crypto: xts - Add ECB dependency' (bnc#1012382).\n- Revert 'drm: bridge: add DT bindings for TI ths8135' (bnc#1012382).\n- Revert 'KEYS: Fix race between updating and finding a negative key' (kabi).\n- Revert 'phy: increase size of MII_BUS_ID_SIZE and bus_id' (kabi).\n- Revert 'sctp: do not peel off an assoc from one netns to another one' (bnc#1012382).\n- Revert 'tty: goldfish: Fix a parameter of a call to free_irq' (bnc#1012382).\n- Revert 'uapi: fix linux/rds.h userspace compilation errors' (bnc#1012382).\n- rpm/kernel-binary.spec.in: add the kernel-binary dependencies to kernel-binary-base (bsc#1060333).\n- rpm/kernel-binary.spec.in: Correct supplements for recent SLE products (bsc#1067494)\n- rpm/kernel-binary.spec.in: only rewrite modules.dep if non-zero in size (bsc#1056979).\n- rtc: ds1307: Fix relying on reset value for weekday (bsc#1031717).\n- rtc: ds1374: wdt: Fix issue with timeout scaling from secs to wdt ticks (bsc#1031717).\n- rtc: ds1374: wdt: Fix stop/start ioctl always returning -EINVAL (bsc#1031717).\n- rtc: rtc-nuc900: fix loop timeout test (bsc#1031717).\n- rtc: sa1100: fix unbalanced clk_prepare_enable/clk_disable_unprepare (bsc#1031717).\n- rtlwifi: fix uninitialized rtlhal-\u003elast_suspend_sec time (bnc#1012382).\n- rtlwifi: rtl8192ee: Fix memory leak when loading firmware (bnc#1012382).\n- rtlwifi: rtl8821ae: Fix connection lost problem (bnc#1012382).\n- rtlwifi: rtl8821ae: Fix HW_VAR_NAV_UPPER operation (bsc#1031717).\n- s390/dasd: check for device error pointer within state change interrupts (bnc#1012382).\n- s390/disassembler: add missing end marker for e7 table (bnc#1012382).\n- s390/disassembler: correct disassembly lines alignment (bsc#1070825).\n- s390/disassembler: increase show_code buffer size (bnc#1012382).\n- s390: fix transactional execution control register handling (bnc#1012382).\n- s390/kbuild: enable modversions for symbols exported from asm (bnc#1012382).\n- s390/qeth: issue STARTLAN as first IPA command (bnc#1012382).\n- s390/runtime instrumention: fix possible memory corruption (bnc#1012382).\n- sched/autogroup: Fix autogroup_move_group() to never skip sched_move_task() (bnc#1012382).\n- sched/cpuset/pm: Fix cpuset vs. suspend-resume bugs (bnc#1012382).\n- sched: Make resched_cpu() unconditional (bnc#1012382).\n- sched/rt: Simplify the IPI based RT balancing logic (bnc#1012382).\n- scsi: aacraid: Process Error for response I/O (bnc#1012382).\n- scsi_devinfo: cleanly zero-pad devinfo strings (bsc#1062941).\n- scsi: hpsa: add 'ctlr_num' sysfs attribute (bsc#1028971).\n- scsi: hpsa: bump driver version (bsc#1022600 fate#321928).\n- scsi: hpsa: change driver version (bsc#1022600 bsc#1028971 fate#321928).\n- scsi: hpsa: Check for null device pointers (bsc#1028971).\n- scsi: hpsa: Check for null devices in ioaccel (bsc#1028971).\n- scsi: hpsa: Check for vpd support before sending (bsc#1028971).\n- scsi: hpsa: cleanup reset handler (bsc#1022600 fate#321928).\n- scsi: hpsa: correct call to hpsa_do_reset (bsc#1028971).\n- scsi: hpsa: correct logical resets (bsc#1028971).\n- scsi: hpsa: correct queue depth for externals (bsc#1022600 fate#321928).\n- scsi: hpsa: correct resets on retried commands (bsc#1022600 fate#321928).\n- scsi: hpsa: correct scsi 6byte lba calculation (bsc#1028971).\n- scsi: hpsa: Determine device external status earlier (bsc#1028971).\n- scsi: hpsa: do not get enclosure info for external devices (bsc#1022600 fate#321928).\n- scsi: hpsa: do not reset enclosures (bsc#1022600 fate#321928).\n- scsi: hpsa: do not timeout reset operations (bsc#1022600 bsc#1028971 fate#321928).\n- scsi: hpsa: fallback to use legacy REPORT PHYS command (bsc#1028971).\n- scsi: hpsa: fix volume offline state (bsc#1022600 bsc#1028971 fate#321928).\n- scsi: hpsa: limit outstanding rescans (bsc#1022600 bsc#1028971 fate#321928).\n- scsi: hpsa: Prevent sending bmic commands to externals (bsc#1028971).\n- scsi: hpsa: remove abort handler (bsc#1022600 fate#321928).\n- scsi: hpsa: remove coalescing settings for ioaccel2 (bsc#1028971).\n- scsi: hpsa: remove memory allocate failure message (bsc#1028971).\n- scsi: hpsa: Remove unneeded void pointer cast (bsc#1028971).\n- scsi: hpsa: rescan later if reset in progress (bsc#1022600 fate#321928).\n- scsi: hpsa: send ioaccel requests with 0 length down raid path (bsc#1022600 fate#321928).\n- scsi: hpsa: separate monitor events from rescan worker (bsc#1022600 fate#321928).\n- scsi: hpsa: update check for logical volume status (bsc#1022600 bsc#1028971 fate#321928).\n- scsi: hpsa: update identify physical device structure (bsc#1022600 fate#321928).\n- scsi: hpsa: update pci ids (bsc#1022600 bsc#1028971 fate#321928).\n- scsi: hpsa: update reset handler (bsc#1022600 fate#321928).\n- scsi: hpsa: use designated initializers (bsc#1028971).\n- scsi: hpsa: use %phN for short hex dumps (bsc#1028971).\n- scsi: ipr: Fix scsi-mq lockdep issue (bsc#1066213).\n- scsi: ipr: Set no_report_opcodes for RAID arrays (bsc#1066213).\n- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).\n- scsi: libiscsi: fix shifting of DID_REQUEUE host byte (bsc#1056003).\n- scsi: lpfc: Add missing memory barrier (bnc#1012382).\n- scsi: lpfc: Clear the VendorVersion in the PLOGI/PLOGI ACC payload (bnc#1012382).\n- scsi: lpfc: Correct host name in symbolic_name field (bnc#1012382).\n- scsi: lpfc: Correct issue leading to oops during link reset (bnc#1012382).\n- scsi: lpfc: FCoE VPort enable-disable does not bring up the VPort (bnc#1012382).\n- scsi: reset wait for IO completion (bsc#996376).\n- scsi: scsi_devinfo: fixup string compare (bsc#1062941). updated patches.fixes/scsi_devinfo-fixup-string-compare.patch to the version merged upstream.\n- scsi: scsi_devinfo: handle non-terminated strings (bsc#1062941).\n- scsi: scsi_dh_emc: return success in clariion_std_inquiry() (bnc#1012382).\n- scsi: scsi_transport_fc: Also check for NOTPRESENT in fc_remote_port_add() (bsc#1037890).\n- scsi: scsi_transport_fc: set scsi_target_id upon rescan (bsc#1058135).\n- scsi: sd: Do not override max_sectors_kb sysfs setting (bsc#1025461).\n- scsi: sd: Remove LBPRZ dependency for discards (bsc#1060985).\n- scsi: sg: close race condition in sg_remove_sfp_usercontext() (bsc#1064206).\n- scsi: sg: do not return bogus Sg_requests (bsc#1064206).\n- scsi: sg: only check for dxfer_len greater than 256M (bsc#1064206).\n- scsi: sg: Re-fix off by one in sg_fill_request_table() (bnc#1012382).\n- scsi: ufs: add capability to keep auto bkops always enabled (bnc#1012382).\n- scsi: ufs-qcom: Fix module autoload (bnc#1012382).\n- scsi: virtio_scsi: let host do exception handling (bsc#1060682).\n- scsi: zfcp: fix erp_action use-before-initialize in REC action trace (bnc#1012382).\n- sctp: add the missing sock_owned_by_user check in sctp_icmp_redirect (bnc#1012382).\n- sctp: do not peel off an assoc from one netns to another one (bnc#1012382).\n- sctp: do not peel off an assoc from one netns to another one (bnc#1012382).\n- sctp: potential read out of bounds in sctp_ulpevent_type_enabled() (bnc#1012382).\n- sctp: reset owner sk for data chunks on out queues when migrating a sock (bnc#1012382).\n- security/keys: add CONFIG_KEYS_COMPAT to Kconfig (bnc#1012382).\n- selftests: firmware: add empty string and async tests (bnc#1012382).\n- selftests: firmware: send expected errors to /dev/null (bnc#1012382).\n- serial: 8250_fintek: Fix rs485 disablement on invalid ioctl() (bsc#1031717).\n- serial: 8250_uniphier: fix serial port index in private data (bsc#1031717).\n- serial: omap: Fix EFR write on RTS deassertion (bnc#1012382).\n- serial: Remove unused port type (bsc#1066045).\n- serial: sh-sci: Fix register offsets for the IRDA serial port (bnc#1012382).\n- sh_eth: use correct name for ECMR_MPDE bit (bnc#1012382).\n- slub: do not merge cache if slub_debug contains a never-merge flag (bnc#1012382).\n- smb3: parsing for new snapshot timestamp mount parm (FATE#324404). New mount option 'snapshot=\u003ctime\u003e' to allow mounting an earlier version of the remote volume (if such a snapshot exists on the server). Note that eventually specifying a snapshot time of 1 will allow the user to mount the oldest snapshot. A subsequent patch add the processing for that and another for actually specifying the 'time warp' create context on SMB2/SMB3 open. Check to make sure SMB2 negotiated, and ensure that we use a different tcon if mount same share twice but with different snaphshot times\n- sparc64: Migrate hvcons irq to panicked cpu (bnc#1012382).\n- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).\n- spi: uapi: spidev: add missing ioctl header (bnc#1012382).\n- staging: iio: ad7192: Fix - use the dedicated reset function avoiding dma from stack (bnc#1012382).\n- staging: iio: cdc: fix improper return value (bnc#1012382).\n- staging: lustre: hsm: stack overrun in hai_dump_data_field (bnc#1012382).\n- staging: lustre: llite: do not invoke direct_IO for the EOF case (bnc#1012382).\n- staging: lustre: ptlrpc: skip lock if export failed (bnc#1012382).\n- staging: r8712u: Fix Sparse warning in rtl871x_xmit.c (bnc#1012382).\n- staging: rtl8188eu: fix incorrect ERROR tags from logs (bnc#1012382).\n- staging: rtl8712: fixed little endian problem (bnc#1012382).\n- staging: rtl8712u: Fix endian settings for structs describing network packets (bnc#1012382).\n- stm class: Fix a use-after-free (bnc#1012382).\n- sunrpc: Fix tracepoint storage issues with svc_recv and svc_rqst_status (bnc#1012382).\n- supported.conf: mark hid-multitouch as supported (FATE#323670)\n- target: fix ALUA state file path truncation (bsc#1071231).\n- target: Fix node_acl demo-mode + uncached dynamic shutdown regression (bnc#1012382).\n- target: fix PR state file path truncation (bsc#1071231).\n- target: Fix QUEUE_FULL + SCSI task attribute handling (bnc#1012382).\n- target/iscsi: Fix iSCSI task reassignment handling (bnc#1012382).\n- target/iscsi: Fix unsolicited data seq_end_offset calculation (bnc#1012382).\n- tcp/dccp: fix ireq-\u003eopt races (bnc#1012382).\n- tcp/dccp: fix lockdep splat in inet_csk_route_req() (bnc#1012382).\n- tcp/dccp: fix other lockdep splats accessing ireq_opt (bnc#1012382).\n- tcp: do not mangle skb-\u003ecb[] in tcp_make_synack() (bnc#1012382).\n- tcp: fix tcp_mtu_probe() vs highest_sack (bnc#1012382).\n- team: call netdev_change_features out of team lock (bsc#1055567).\n- team: fix memory leaks (bnc#1012382).\n- test: firmware_class: report errors properly on failure (bnc#1012382).\n- timer: Prevent timer value 0 for MWAITX (bsc#1065717).\n- tipc: fix link attribute propagation bug (bnc#1012382).\n- tipc: use only positive error codes in messages (bnc#1012382).\n- tools: firmware: check for distro fallback udev cancel rule (bnc#1012382).\n- tpm_tis: Do not fall back to a hardcoded address for TPM2 (bsc#1020645, fate#321435, fate#321507, fate#321600, bsc#1034048).\n- tracing/samples: Fix creation and deletion of simple_thread_fn creation (bnc#1012382).\n- ttpci: address stringop overflow warning (bnc#1012382).\n- tty: goldfish: Fix a parameter of a call to free_irq (bnc#1012382).\n- tun: allow positive return values on dev_get_valid_name() call (bnc#1012382).\n- tun: bail out from tun_get_user() if the skb is empty (bnc#1012382).\n- tun: call dev_get_valid_name() before register_netdevice() (bnc#1012382).\n- tun/tap: sanitize TUNSETSNDBUF input (bnc#1012382).\n- uapi: fix linux/mroute6.h userspace compilation errors (bnc#1012382).\n- uapi: fix linux/rds.h userspace compilation error (bnc#1012382).\n- uapi: fix linux/rds.h userspace compilation errors (bnc#1012382).\n- uapi: fix linux/rds.h userspace compilation errors (bnc#1012382).\n- udpv6: Fix the checksum computation when HW checksum does not apply (bnc#1012382).\n- usb: Add delay-init quirk for Corsair K70 LUX keyboards (bnc#1012382).\n- usb: cdc_acm: Add quirk for Elatec TWN3 (bnc#1012382).\n- usb: chipidea: vbus event may exist before starting gadget (bnc#1012382).\n- usb: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (bnc#1012382).\n- usb: core: harden cdc_parse_cdc_header (bnc#1012382).\n- usb: devio: Do not corrupt user memory (bnc#1012382).\n- usb: devio: Revert 'USB: devio: Do not corrupt user memory' (bnc#1012382).\n- usb: dummy-hcd: fix connection failures (wrong speed) (bnc#1012382).\n- usb: dummy-hcd: Fix deadlock caused by disconnect detection (bnc#1012382).\n- usb: dummy-hcd: Fix erroneous synchronization change (bnc#1012382).\n- usb: dummy-hcd: fix infinite-loop resubmission bug (bnc#1012382).\n- usb: fix out-of-bounds in usb_set_configuration (bnc#1012382).\n- usb: gadget: composite: Fix use-after-free in usb_composite_overwrite_options (bnc#1012382).\n- usb: gadgetfs: fix copy_to_user while holding spinlock (bnc#1012382).\n- usb: gadgetfs: Fix crash caused by inadequate synchronization (bnc#1012382).\n- usb: gadget: inode.c: fix unbalanced spin_lock in ep0_write (bnc#1012382).\n- usb: gadget: mass_storage: set msg_registered after msg registered (bnc#1012382).\n- usb: gadget: udc: atmel: set vbus irqflags explicitly (bnc#1012382).\n- usb: g_mass_storage: Fix deadlock when driver is unbound (bnc#1012382).\n- usb: hcd: initialize hcd-\u003eflags to 0 when rm hcd (bnc#1012382).\n- usb: hub: Allow reset retry for USB2 devices on connect bounce (bnc#1012382).\n- usb: Increase quirk delay for USB devices (bnc#1012382).\n- usb: musb: Check for host-mode using is_host_active() on reset interrupt (bnc#1012382).\n- usb: musb: sunxi: Explicitly release USB PHY on exit (bnc#1012382).\n- usb: pci-quirks.c: Corrected timeout values used in handshake (bnc#1012382).\n- usb: plusb: Add support for PL-27A1 (bnc#1012382).\n- usb: quirks: add quirk for WORLDE MINI MIDI keyboard (bnc#1012382).\n- usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet (bnc#1012382).\n- usb: renesas_usbhs: fix the BCLR setting condition for non-DCP pipe (bnc#1012382).\n- usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction (bnc#1012382).\n- usb: serial: console: fix use-after-free after failed setup (bnc#1012382).\n- usb: serial: cp210x: add support for ELV TFD500 (bnc#1012382).\n- usb: serial: ftdi_sio: add id for Cypress WICED dev board (bnc#1012382).\n- usb: serial: garmin_gps: fix I/O after failed probe and remove (bnc#1012382).\n- usb: serial: garmin_gps: fix memory leak on probe errors (bnc#1012382).\n- usb: serial: metro-usb: add MS7820 device id (bnc#1012382).\n- usb: serial: mos7720: fix control-message error handling (bnc#1012382).\n- usb: serial: mos7840: fix control-message error handling (bnc#1012382).\n- usb: serial: option: add support for TP-Link LTE module (bnc#1012382).\n- usb: serial: qcserial: add Dell DW5818, DW5819 (bnc#1012382).\n- usb: serial: qcserial: add pid/vid for Sierra Wireless EM7355 fw update (bnc#1012382).\n- usb-storage: unusual_devs entry to fix write-access regression for Seagate external drives (bnc#1012382).\n- usb: uas: fix bug in handling of alternate settings (bnc#1012382).\n- usb: usbfs: compute urb-\u003eactual_length for isochronous (bnc#1012382).\n- usb: usbtest: fix NULL pointer dereference (bnc#1012382).\n- usb: xhci: Handle error condition in xhci_stop_device() (bnc#1012382).\n- uwb: ensure that endpoint is interrupt (bnc#1012382).\n- uwb: properly check kthread_run return value (bnc#1012382).\n- vfs: expedite unmount (bsc#1024412).\n- video: fbdev: pmag-ba-fb: Remove bad `__init' annotation (bnc#1012382).\n- video: udlfb: Fix read EDID timeout (bsc#1031717).\n- vlan: fix a use-after-free in vlan_device_event() (bnc#1012382).\n- vsock: use new wait API for vsock_stream_sendmsg() (bnc#1012382).\n- vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit (bnc#1012382).\n- watchdog: kempld: fix gcc-4.3 build (bnc#1012382).\n- workqueue: Fix NULL pointer dereference (bnc#1012382).\n- workqueue: replace pool-\u003emanager_arb mutex with a flag (bnc#1012382).\n- x86/alternatives: Fix alt_max_short macro to really be a max() (bnc#1012382).\n- x86/decoder: Add new TEST instruction pattern (bnc#1012382).\n- x86/MCE/AMD: Always give panic severity for UC errors in kernel context (git-fixes bf80bbd7dcf5).\n- x86/microcode/AMD: Add support for fam17h microcode loading (bsc#1068032).\n- x86/microcode/intel: Disable late loading on model 79 (bnc#1012382).\n- x86/oprofile/ppro: Do not use __this_cpu*() in preemptible context (bnc#1012382).\n- x86/uaccess, sched/preempt: Verify access_ok() context (bnc#1012382).\n- xen: do not print error message in case of missing Xenstore entry (bnc#1012382).\n- xen/events: events_fifo: Do not use {get,put}_cpu() in xen_evtchn_fifo_init() (bnc#1065600).\n- xen: fix booting ballooned down hvm guest (bnc#1065600).\n- xen/gntdev: avoid out of bounds access in case of partial gntdev_mmap() (bnc#1012382).\n- xen/manage: correct return value check on xenbus_scanf() (bnc#1012382).\n- xen-netback: fix error handling output (bnc#1065600).\n- xen: x86: mark xen_find_pt_base as __init (bnc#1065600).\n- xen: xenbus driver must not accept invalid transaction ids (bnc#1012382).\n- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).\n- xfs: remove kmem_zalloc_greedy (bnc#1012382).\n- xhci: fix finding correct bus_state structure for USB 3.1 hosts (bnc#1012382).\n- zd1211rw: fix NULL-deref at probe (bsc#1031717).\n","status":"published","published":"2017-12-21T19:14:54Z","modified":"2026-02-04T04:27:22.245755Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0213-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 12 SP2 Realtime kernel was updated to 4.4.104 to receive various security and bugfixes.\n\nThis update adds mitigations for various side channel attacks against\nmodern CPUs that could disclose content of otherwise unreadable memory\n(bnc#1068032).\n\n- CVE-2017-5753: Local attackers on systems with modern CPUs featuring\n  deep instruction pipelining could use attacker controllable speculative\n  execution over code patterns in the Linux Kernel to leak content from\n  otherwise not readable memory in the same address space, allowing\n  retrieval of passwords, cryptographic keys and other secrets.\n\n  This problem is mitigated by adding speculative fencing on affected\n  code paths throughout the Linux kernel.\n\n- CVE-2017-5715: Local attackers on systems with modern CPUs featuring\n  branch prediction could use mispredicted branches to speculatively execute\n  code patterns that in turn could be made to leak other non-readable\n  content in the same address space, an attack similar to CVE-2017-5753.\n\n  This problem is mitigated by disabling predictive branches, depending\n  on CPU architecture either by firmware updates and/or fixes in the\n  user-kernel privilege boundaries.\n\n  This is done with help of Linux Kernel fixes on the Intel/AMD x86_64\n  architectures.\n  On x86_64, this requires also updates of the CPU microcode packages,\n  delivered in seperate updates.\n\n  As this feature can have a performance impact, it can be disabled\n  using the 'nospec' kernel commandline option.\n\n\n- CVE-2017-5754: Local attackers on systems with modern CPUs featuring\n  deep instruction pipelining could use code patterns in userspace to\n  speculative executive code that would read otherwise read protected\n  memory, an attack similar to CVE-2017-5753.\n\n  This problem is mitigated by unmapping the Linux Kernel from the user\n  address space during user code execution, following a approach called\n  'KAISER'. The terms used here are 'KAISER' / 'Kernel Address Isolation'\n  and 'PTI' / 'Page Table Isolation'.\n\n\nThe following security bugs were fixed:\n\n- CVE-2017-1000405: The Linux Kernel versions had a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original 'Dirty cow' because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it did allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp (bnc#1069496).\n- CVE-2017-1000410: The Linux kernel was affected by a vulnerability that lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. (bnc#1070535).\n- CVE-2017-11600: net/xfrm/xfrm_policy.c in the Linux kernel did not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allowed local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message (bnc#1050231).\n- CVE-2017-12193: The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel mishandled node splitting, which allowed local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations (bnc#1066192).\n- CVE-2017-15115: The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel did not check whether the intended netns is used in a peel-off action, which allowed local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls (bnc#1068671).\n- CVE-2017-16528: sound/core/seq_device.c in the Linux kernel allowed local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066629).\n- CVE-2017-16536: The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066606).\n- CVE-2017-16537: The imon_probe function in drivers/media/rc/imon.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066573).\n- CVE-2017-16645: The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel allowed local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1067132).\n- CVE-2017-16646: drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel allowed local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1067105).\n- CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages (bnc#1069702).\n- CVE-2017-16994: The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel mishandled holes in hugetlb ranges, which allowed local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call (bnc#1069996).\n- CVE-2017-17448: net/netfilter/nfnetlink_cthelper.c in the Linux kernel did not require the CAP_NET_ADMIN capability for new, get, and del operations, which allowed local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces (bnc#1071693).\n- CVE-2017-17449: The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel did not restrict observations of Netlink messages to a single net namespace, which allowed local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system (bnc#1071694).\n- CVE-2017-17450: net/netfilter/xt_osf.c in the Linux kernel did not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allowed local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces (bnc#1071695).\n- CVE-2017-17805: The Salsa20 encryption algorithm in the Linux kernel did not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable (bnc#1073792).\n- CVE-2017-17806: The HMAC implementation (crypto/hmac.c) in the Linux kernel did not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization (bnc#1073874).\n- CVE-2017-7482: Fixed an overflow when decoding a krb5 principal. (bnc#1046107).\n- CVE-2017-8824: The dccp_disconnect function in net/dccp/proto.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state (bnc#1070771).\n\nThe following non-security bugs were fixed:\n\n- Add undefine _unique_build_ids (bsc#964063)\n- adm80211: return an error if adm8211_alloc_rings() fails (bsc#1031717).\n- adv7604: Initialize drive strength to default when using DT (bnc#1012382).\n- af_netlink: ensure that NLMSG_DONE never fails in dumps (bnc#1012382).\n- alsa: hda - Add HP ZBook 15u G3 Conexant CX20724 GPIO mute leds (bsc#1031717).\n- alsa: hda - Add MIC_NO_PRESENCE fixup for 2 HP machines (bsc#1031717).\n- alsa: hda - Add mute led support for HP EliteBook 840 G3 (bsc#1031717).\n- alsa: hda - Add mute led support for HP ProBook 440 G4 (bsc#1031717).\n- alsa: hda: Add Raven PCI ID (bnc#1012382).\n- alsa: hda - add support for docking station for HP 820 G2 (bsc#1031717).\n- alsa: hda - add support for docking station for HP 840 G3 (bsc#1031717).\n- alsa: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE (bnc#1012382).\n- alsa: hda/ca0132 - Fix memory leak at error path (bsc#1031717).\n- alsa: hda - change the location for one mic on a Lenovo machine (bsc#1031717).\n- alsa: hda: Drop useless WARN_ON() (bsc#1031717).\n- alsa: hda - Fix click noises on Samsung Ativ Book 8 (bsc#1031717).\n- alsa: hda - fix headset mic detection issue on a Dell machine (bsc#1031717).\n- alsa: hda - fix headset mic problem for Dell machines with alc236 (bnc#1012382).\n- alsa: hda - fix headset mic problem for Dell machines with alc274 (bsc#1031717).\n- alsa: hda - Fix headset microphone detection for ASUS N551 and N751 (bsc#1031717).\n- alsa: hda - Fix mic regression by ASRock mobo fixup (bsc#1031717).\n- alsa: hda - Fix missing COEF init for ALC225/295/299 (bsc#1031717).\n- alsa: hda - Fix surround output pins for ASRock B150M mobo (bsc#1031717).\n- alsa: hda - No loopback on ALC299 codec (git-fixes).\n- alsa: hda - On-board speaker fixup on ACER Veriton (bsc#1031717).\n- alsa: hda/realtek - Add ALC256 HP depop function (bsc#1031717).\n- alsa: hda/realtek - Add default procedure for suspend and resume state (bsc#1031717).\n- alsa: hda/realtek: Add headset mic support for Intel NUC Skull Canyon (bsc#1031717).\n- alsa: hda/realtek - Add new codec ID ALC299 (bnc#1012382).\n- alsa: hda/realtek - Add support for Acer Aspire E5-475 headset mic (bsc#1031717).\n- alsa: hda/realtek - Add support for ALC1220 (bsc#1031717).\n- alsa: hda/realtek - Add support for ALC236/ALC3204 (bnc#1012382).\n- alsa: hda/realtek - Add support for headset MIC for ALC622 (bsc#1031717).\n- alsa: hda/realtek - ALC891 headset mode for Dell (bsc#1031717).\n- alsa: hda/realtek - change the location for one of two front microphones (bsc#1031717).\n- alsa: hda/realtek - Enable jack detection function for Intel ALC700 (bsc#1031717).\n- alsa: hda/realtek - Fix ALC275 no sound issue (bsc#1031717).\n- alsa: hda/realtek - Fix ALC700 family no sound issue (bsc#1031717).\n- alsa: hda/realtek - Fix Dell AIO LineOut issue (bsc#1031717).\n- alsa: hda/realtek - Fix headset and mic on several Asus laptops with ALC256 (bsc#1031717).\n- alsa: hda/realtek - Fix headset mic and speaker on Asus X441SA/X441UV (bsc#1031717).\n- alsa: hda/realtek - fix headset mic detection for MSI MS-B120 (bsc#1031717).\n- alsa: hda/realtek - Fix headset mic on several Asus laptops with ALC255 (bsc#1031717).\n- alsa: hda/realtek - Fix pincfg for Dell XPS 13 9370 (bsc#1031717).\n- alsa: hda/realtek - Fix speaker support for Asus AiO ZN270IE (bsc#1031717).\n- alsa: hda/realtek - Fix typo of pincfg for Dell quirk (bsc#1031717).\n- alsa: hda/realtek - New codec device ID for ALC1220 (bsc#1031717).\n- alsa: hda/realtek - New codecs support for ALC215/ALC285/ALC289 (bsc#1031717).\n- alsa: hda/realtek - New codec support for ALC257 (bsc#1031717).\n- alsa: hda/realtek - New codec support of ALC1220 (bsc#1031717).\n- alsa: hda/realtek - No loopback on ALC225/ALC295 codec (bsc#1031717).\n- alsa: hda/realtek - Remove ALC285 device ID (bsc#1031717).\n- alsa: hda/realtek - Support Dell headset mode for ALC3271 (bsc#1031717).\n- alsa: hda/realtek - Support headset mode for ALC234/ALC274/ALC294 (bsc#1031717).\n- alsa: hda/realtek - There is no loopback mixer in the ALC234/274/294 (bsc#1031717).\n- alsa: hda/realtek - Update headset mode for ALC225 (bsc#1031717).\n- alsa: hda/realtek - Update headset mode for ALC298 (bsc#1031717).\n- alsa: hda - Skip Realtek SKU check for Lenovo machines (bsc#1031717).\n- alsa: pcm: prevent UAF in snd_pcm_info (bsc#1031717).\n- alsa: pcm: update tstamp only if audio_tstamp changed (bsc#1031717).\n- alsa: rawmidi: Avoid racy info ioctl via ctl device (bsc#1031717).\n- alsa: seq: Avoid invalid lockdep class warning (bsc#1031717).\n- alsa: seq: Fix nested rwsem annotation for lockdep splat (bnc#1012382).\n- alsa: seq: Fix OSS sysex delivery in OSS emulation (bnc#1012382).\n- alsa: seq: Remove spurious WARN_ON() at timer check (bsc#1031717).\n- alsa: timer: Add missing mutex lock for compat ioctls (bnc#1012382).\n- alsa: timer: Remove kernel warning at compat ioctl error paths (bsc#1031717).\n- alsa: usb-audio: Add check return value for usb_string() (bsc#1031717).\n- alsa: usb-audio: Add sanity checks in v2 clock parsers (bsc#1031717).\n- alsa: usb-audio: Add sanity checks to FE parser (bsc#1031717).\n- alsa: usb-audio: Fix out-of-bound error (bsc#1031717).\n- alsa: usb-audio: Fix potential out-of-bound access at parsing SU (bsc#1031717).\n- alsa: usb-audio: Fix the missing ctl name suffix at parsing SU (bsc#1031717).\n- alsa: usb-audio: uac1: Invalidate ctl on interrupt (bsc#1031717).\n- alsa: vx: Do not try to update capture stream before running (bnc#1012382).\n- alsa: vx: Fix possible transfer overflow (bnc#1012382).\n- Always sign validate_negotiate_info reqs (bsc#1071009, fate#324404).\n- apei / ERST: Fix missing error handling in erst_reader() (bsc#1072556).\n- Apply generic ppc build fixes to vanilla (bsc#1070805)\n- arm64: dts: NS2: reserve memory for Nitro firmware (bnc#1012382).\n- arm64: ensure __dump_instr() checks addr_limit (bnc#1012382).\n- arm64: fix dump_instr when PAN and UAO are in use (bnc#1012382).\n- arm: 8715/1: add a private asm/unaligned.h (bnc#1012382).\n- arm: 8720/1: ensure dump_instr() checks addr_limit (bnc#1012382).\n- arm: 8721/1: mm: dump: check hardware RO bit for LPAE (bnc#1012382).\n- arm: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE (bnc#1012382).\n- arm: crypto: reduce priority of bit-sliced AES cipher (bnc#1012382).\n- arm: dts: Fix am335x and dm814x scm syscon to probe children (bnc#1012382).\n- arm: dts: Fix compatible for ti81xx uarts for 8250 (bnc#1012382).\n- arm: dts: Fix omap3 off mode pull defines (bnc#1012382).\n- arm: dts: mvebu: pl310-cache disable double-linefill (bnc#1012382).\n- arm: dts: omap3: logicpd-torpedo-37xx-devkit: Fix MMC1 cd-gpio (bnc#1012382).\n- arm: Hide finish_arch_post_lock_switch() from modules (bsc#1068032).\n- arm: OMAP2+: Fix init for multiple quirks for the same SoC (bnc#1012382).\n- arm: omap2plus_defconfig: Fix probe errors on UARTs 5 and 6 (bnc#1012382).\n- arm: pxa: Do not rely on public mmc header to include leds.h (bnc#1012382).\n- asm/sections: add helpers to check for section data (bsc#1063026).\n- asoc: adau17x1: Workaround for noise bug in ADC (bnc#1012382).\n- asoc: cs42l56: Fix reset GPIO name in example DT binding (bsc#1031717).\n- asoc: davinci-mcasp: Fix an error handling path in 'davinci_mcasp_probe()' (bsc#1031717).\n- asoc: fsl_ssi: AC'97 ops need regmap, clock and cleaning up on failure (bsc#1031717).\n- asoc: rsnd: do not double free kctrl (bnc#1012382).\n- asoc: samsung: Fix possible double iounmap on s3c24xx driver probe failure (bsc#1031717).\n- asoc: twl4030: fix child-node lookup (bsc#1031717).\n- asoc: wm_adsp: Do not overrun firmware file buffer when reading region data (bnc#1012382).\n- asoc: wm_adsp: Fix validation of firmware and coeff lengths (bsc#1031717).\n- ata: ATA_BMDMA should depend on HAS_DMA (bnc#1012382).\n- ata: fixes kernel crash while tracing ata_eh_link_autopsy event (bnc#1012382).\n- ata: SATA_HIGHBANK should depend on HAS_DMA (bnc#1012382).\n- ata: SATA_MV should depend on HAS_DMA (bnc#1012382).\n- ath10k: convert warning about non-existent OTP board id to debug message (git-fixes).\n- ath10k: fix a warning during channel switch with multiple vaps (bsc#1031717).\n- ath10k: fix board data fetch error message (bsc#1031717).\n- ath10k: fix diag_read to collect data for larger memory (bsc#1031717).\n- ath10k: fix incorrect txpower set by P2P_DEVICE interface (bnc#1012382).\n- ath10k: fix potential memory leak in ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).\n- ath10k: free cached fw bin contents when get board id fails (bsc#1031717).\n- ath10k: ignore configuring the incorrect board_id (bnc#1012382).\n- ath10k: set CTS protection VDEV param only if VDEV is up (bnc#1012382).\n- ath9k_htc: check for underflow in ath9k_htc_rx_msg() (bsc#1031717).\n- ath9k: off by one in ath9k_hw_nvram_read_array() (bsc#1031717).\n- autofs: do not fail mount for transient error (bsc#1065180).\n- autofs: fix careless error in recent commit (bnc#1012382 bsc#1065180).\n- backlight: adp5520: Fix error handling in adp5520_bl_probe() (bnc#1012382).\n- backlight: lcd: Fix race condition during register (bnc#1012382).\n- bcache: check ca-\u003ealloc_thread initialized before wake up it (bnc#1012382).\n- bcache: Fix building error on MIPS (bnc#1012382).\n- blacklist.conf: Add ath10k, mmc and rtl8192u commits (bsc#1031717)\n- blacklist.conf: Add drm/i915 blacklist (bsc#1031717)\n- blacklist.conf: added misc commits (bsc#1031717)\n- blacklist.conf: Add misc entries (bsc#1031717)\n- blacklist.conf: blacklist not-applicable patch (bsc#1071231)\n- blacklist.conf: Update blacklist (bsc#1031717)\n- blacklist.conf: Update iwlwifi blacklist (bsc#1031717)\n- blacklist.conf: yet another serial entry (bsc#1031717)\n- block: Fix a race between blk_cleanup_queue() and timeout handling (FATE#319965, bsc#964944).\n- Bluetooth: btusb: fix QCA Rome suspend/resume (bnc#1012382).\n- bnxt_en: Call firmware to approve the random VF MAC address (bsc#963575 FATE#320144).\n- bnxt_en: Do not setup MAC address in bnxt_hwrm_func_qcaps() (bsc#963575 FATE#320144).\n- bnxt_en: Fix possible corrupted NVRAM parameters from firmware response (bsc#963575 FATE#320144).\n- bnxt_en: Fix VF PCIe link speed and width logic (bsc#963575 FATE#320144).\n- bnxt_en: Re-arrange bnxt_hwrm_func_qcaps() (bsc#963575 FATE#320144).\n- bnxt_en: use eth_hw_addr_random() (bsc#963575 FATE#320144).\n- bonding: discard lowest hash bit for 802.3ad layer3+4 (bnc#1012382).\n- bpf: prevent speculative execution in eBPF interpreter (bnc#1068032).\n- brcmfmac: remove setting IBSS mode when stopping AP (bnc#1012382).\n- bt8xx: fix memory leak (bnc#1012382).\n- btrfs: clear space cache inode generation always (bnc#1012382).\n- btrfs: Fix typo in may_commit_transaction Rather than comparing the result of the percpu comparison I was comparing the value of the percpu counter against 0 or 1.\n- btrfs: return the actual error value from from btrfs_uuid_tree_iterate (bnc#1012382).\n- can: c_can: do not indicate triple sampling support for D_CAN (bnc#1012382).\n- can: kvaser_usb: Correct return value in printout (bnc#1012382).\n- can: kvaser_usb: Ignore CMD_FLUSH_QUEUE_REPLY messages (bnc#1012382).\n- can: sun4i: fix loopback mode (bnc#1012382).\n- can: sun4i: handle overrun in RX FIFO (bnc#1012382).\n- carl9170: prevent speculative execution (bnc#1068032).\n- cdc_ncm: Set NTB format again after altsetting switch for Huawei devices (bnc#1012382).\n- ceph: unlock dangling spinlock in try_flush_caps() (bsc#1065639).\n- cgroup, net_cls: iterate the fds of only the tasks which are being migrated (bnc#1064926).\n- Check cmdline_find_option() retval properly and use boot_cpu_has().\n- cifs: add build_path_from_dentry_optional_prefix() (fate#323482)\n- cifs: Add capability to decrypt big read responses (FATE#324404). Allow to decrypt transformed packets that are bigger than the big buffer size. In particular it is used for read responses that can only exceed the big buffer size.\n- cifs: Add capability to transform requests before sending (FATE#324404). This will allow us to do protocol specific tranformations of packets before sending to the server. For SMB3 it can be used to support encryption.\n- cifs: Add copy into pages callback for a read operation (FATE#324404). Since we have two different types of reads (pagecache and direct) we need to process such responses differently after decryption of a packet. The change allows to specify a callback that copies a read payload data into preallocated pages.\n- cifs: Add mid handle callback (FATE#324404). We need to process read responses differently because the data should go directly into preallocated pages. This can be done by specifying a mid handle callback.\n- cifs: Add soft dependencies (FATE#324404). List soft dependencies of cifs so that mkinitrd and dracut can include the required helper modules.\n- cifs: Add transform header handling callbacks (FATE#324404). We need to recognize and parse transformed packets in demultiplex thread to find a corresponsing mid and process it further.\n- cifs: add use_ipc flag to SMB2_ioctl() (fate#323482)\n- cifs: Allow to switch on encryption with seal mount  option (FATE#324404). This allows users to inforce encryption for SMB3 shares if a server supports it.\n- cifs: check MaxPathNameComponentLength != 0 before using it (bnc#1012382).\n- cifs: Decrypt and process small encrypted packets (FATE#324404). Allow to decrypt transformed packets, find a corresponding mid and process as usual further.\n- cifs: do not bother with kmap on read_pages side (FATE#324404). just do ITER_BVEC recvmsg\n- cifs: Enable encryption during session setup phase  (FATE#324404). In order to allow encryption on SMB connection we need to exchange a session key and generate encryption and decryption keys.\n- cifs: Encrypt SMB3 requests before sending (FATE#324404). This change allows to encrypt packets if it is required by a server for SMB sessions or tree connections.\n- cifs: Fix some return values in case of error in 'crypt_message' (fate#324404).\n- cifs: Fix sparse warnings (fate#323482)\n- cifs: implement get_dfs_refer for SMB2+ (fate#323482)\n- cifs: let ses-\u003eipc_tid hold smb2 TreeIds (fate#323482)\n- cifs: Make send_cancel take rqst as argument (FATE#324404).\n- cifs: Make SendReceive2() takes resp iov (FATE#324404). Now SendReceive2 frees the first iov and returns a response buffer in it that increases a code complexity. Simplify this by making a caller responsible for freeing request buffer itself and returning a response buffer in a separate iov.\n- cifs: move DFS response parsing out of SMB1 code (fate#323482)\n- cifs: no need to wank with copying and advancing iovec on recvmsg side  either (FATE#324404).\n- cifs: Only select the required crypto modules (FATE#324404). The sha256 and cmac crypto modules are only needed for SMB2+, so move the select statements to config CIFS_SMB2. Also select CRYPTO_AES there as SMB2+ needs it.\n- cifs: Prepare for encryption support (first part). Add decryption and encryption key generation. (FATE#324404).\n- cifs_readv_receive: use cifs_read_from_socket() (FATE#324404).\n- cifs: remove any preceding delimiter from prefix_path (fate#323482)\n- cifs: Send RFC1001 length in a separate iov (FATE#324404). In order to simplify further encryption support we need to separate RFC1001 length and SMB2 header when sending a request. Put the length field in iov[0] and the rest of the packet into following iovs.\n- cifs: Separate RFC1001 length processing for SMB2 read (FATE#324404). Allocate and initialize SMB2 read request without RFC1001 length field to directly call cifs_send_recv() rather than SendReceive2() in a read codepath.\n- cifs: Separate SMB2 header structure (FATE#324404). In order to support compounding and encryption we need to separate RFC1001 length field and SMB2 header structure because the protocol treats them differently. This change will allow to simplify parsing of such complex SMB2 packets further.\n- cifs: Separate SMB2 sync header processing (FATE#324404). Do not process RFC1001 length in smb2_hdr_assemble() because it is not a part of SMB2 header. This allows to cleanup the code and adds a possibility combine several SMB2 packets into one for compounding.\n- cifs: set signing flag in SMB2+ TreeConnect if needed (fate#323482)\n- cifs: Simplify SMB2 and SMB311 dependencies (FATE#324404). * CIFS_SMB2 depends on CIFS, which depends on INET and selects NLS. So these dependencies do not need to be repeated for CIFS_SMB2. * CIFS_SMB311 depends on CIFS_SMB2, which depends on INET. So this dependency does not need to be repeated for CIFS_SMB311.\n- cifs: use DFS pathnames in SMB2+ Create requests (fate#323482)\n- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).\n- clk: ti: dra7-atl-clock: Fix of_node reference counting (bnc#1012382).\n- cma: fix calculation of aligned offset (VM Functionality, bsc#1050060).\n- coda: fix 'kernel memory exposure attempt' in fsync (bnc#1012382).\n- crypto: vmx - disable preemption to enable vsx in aes_ctr.c (bnc#1012382).\n- crypto: x86/sha1-mb - fix panic due to unaligned access (bnc#1012382).\n- cw1200: prevent speculative execution (bnc#1068032).\n- cx231xx: Fix I2C on Internal Master 3 Bus (bnc#1012382).\n- cxgb4: Fix error codes in c4iw_create_cq() (bsc#1021424).\n- cxl: Fix DAR check \u0026 use REGION_ID instead of opencoding (bsc#1066223).\n- cxl: Fix leaking pid refs in some error paths (bsc#1066223).\n- cxl: Force context lock during EEH flow (bsc#1066223).\n- cxl: Prevent adapter reset if an active context exists (bsc#1066223).\n- cxl: Route eeh events to all drivers in cxl_pci_error_detected() (bsc#1066223).\n- Disable IPMI fix patches due to regression (bsc#1071833)\n- dmaengine: dmatest: warn user when dma test times out (bnc#1012382).\n- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).\n- dm bufio: fix integer overflow when limiting maximum cache size (bnc#1012382).\n- dm: fix race between dm_get_from_kobject() and __dm_destroy() (bnc#1012382).\n- drivers: dma-mapping: Do not leave an invalid area-\u003epages pointer in dma_common_contiguous_remap() (Git-fixes, bsc#1065692).\n- drm/amdgpu: when dpm disabled, also need to stop/start vce (bnc#1012382).\n- drm/amdkfd: NULL dereference involving create_process() (bsc#1031717).\n- drm: Apply range restriction after color adjustment when allocation (bnc#1012382).\n- drm/armada: Fix compile fail (bnc#1012382).\n- drm: drm_minor_register(): Clean up debugfs on failure (bnc#1012382).\n- drm: gma500: fix logic error (bsc#1031717).\n- drm/i915/bxt: set min brightness from VBT (bsc#1031717).\n- drm/i915: Do not try indexed reads to alternate slave addresses (bsc#1031717).\n- drm/i915: fix backlight invert for non-zero minimum brightness (bsc#1031717).\n- drm/i915: Prevent zero length 'index' write (bsc#1031717).\n- drm/i915: Read timings from the correct transcoder in intel_crtc_mode_get() (bsc#1031717).\n- drm/msm: fix an integer overflow test (bnc#1012382).\n- drm/msm: Fix potential buffer overflow issue (bnc#1012382).\n- drm/nouveau/gr: fallback to legacy paths during firmware lookup (bsc#1031717).\n- drm/omap: Fix error handling path in 'omap_dmm_probe()' (bsc#1031717).\n- drm/panel: simple: Add missing panel_simple_unprepare() calls (bsc#1031717).\n- drm/radeon: fix atombios on big endian (bnc#1012382).\n- drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache (bnc#1012382).\n- drm/vc4: Fix leak of HDMI EDID (bsc#1031717).\n- drm/vmwgfx: Fix Ubuntu 17.10 Wayland black screen issue (bnc#1012382).\n- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470 FATE#319819).\n- e1000e: Fix e1000_check_for_copper_link_ich8lan return value (bsc#1073809).\n- e1000e: Fix error path in link detection (bnc#1012382).\n- e1000e: Fix return value test (bnc#1012382).\n- e1000e: Separate signaling for link check/link up (bnc#1012382).\n- ecryptfs: fix dereference of NULL user_key_payload (bnc#1012382).\n- eCryptfs: use after free in ecryptfs_release_messaging() (bsc#1012829).\n- eeprom: at24: check at24_read/write arguments (bnc#1012382).\n- epoll: avoid calling ep_call_nested() from ep_poll_safewake() (bsc#1056427).\n- epoll: remove ep_call_nested() from ep_eventpoll_poll() (bsc#1056427).\n- ext4: cleanup goto next group (bsc#1066285).\n- ext4: do not use stripe_width if it is not set (bnc#1012382).\n- ext4: fix interaction between i_size, fallocate, and delalloc after a crash (bnc#1012382).\n- ext4: fix stripe-unaligned allocations (bnc#1012382).\n- ext4: reduce lock contention in __ext4_new_inode (bsc#1066285).\n- extcon: palmas: Check the parent instance to prevent the NULL (bnc#1012382).\n- exynos4-is: fimc-is: Unmap region obtained by of_iomap() (bnc#1012382).\n- fealnx: Fix building error on MIPS (bnc#1012382).\n- fix a page leak in vhost_scsi_iov_to_sgl() error recovery (bnc#1012382).\n- Fix leak of validate_negotiate_info resp (bsc#1071009, fate#324404).\n- Fix NULL pointer deref in SMB2_tcon() (bsc#1071009, fate#324404).\n- Fix serial console on SNI RM400 machines (bsc#1031717).\n- Fix tracing sample code warning (bnc#1012382).\n- Fix validate_negotiate_info uninitialized mem (bsc#1071009, fate#324404).\n- fm10k: request reset when mbx-\u003estate changes (bnc#1012382).\n- fm10k: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- fs/9p: Compare qid.path in v9fs_test_inode (bsc#1012829).\n- fscrypt: lock mutex before checking for bounce page pool (bnc#1012382).\n- fs: prevent speculative execution (bnc#1068032).\n- fuse: fix READDIRPLUS skipping an entry (bnc#1012382).\n- genwqe: Take R/W permissions into account when dealing with memory pages (bsc#1073090).\n- gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap (bnc#1012382).\n- hid: elo: clear BTN_LEFT mapping (bsc#1065866).\n- hsi: ssi_protocol: double free in ssip_pn_xmit() (bsc#1031717).\n- i2c: cadance: fix ctrl/addr reg write order (bsc#1031717).\n- i2c: imx: Use correct function to write to register (bsc#1031717).\n- i2c: riic: correctly finish transfers (bnc#1012382).\n- i2c: riic: fix restart condition (git-fixes).\n- i40e: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- i40evf: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- ib/core: Fix calculation of maximum RoCE MTU (bsc#1022595 FATE#322350).\n- ib/core: Namespace is mandatory input for address resolution (bsc#1022595 FATE#322350).\n- ib/ipoib: Change list_del to list_del_init in the tx object (bnc#1012382).\n- ib/ipoib: Clean error paths in add port (bsc#1022595 FATE#322350).\n- ib/ipoib: Prevent setting negative values to max_nonsrq_conn_qp (bsc#1022595 FATE#322350).\n- ib/ipoib: Remove double pointer assigning (bsc#1022595 FATE#322350).\n- ib/ipoib: Set IPOIB_NEIGH_TBL_FLUSH after flushed completion initialization (bsc#1022595 FATE#322350).\n- ib/mlx5: Fix RoCE Address Path fields (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- ibmvnic: Add netdev_dbg output for debugging (fate#323285).\n- ibmvnic: Add vnic client data to login buffer (bsc#1069942).\n- ibmvnic: Convert vnic server reported statistics to cpu endian (fate#323285).\n- ibmvnic: Enable scatter-gather support (bsc#1066382).\n- ibmvnic: Enable TSO support (bsc#1066382).\n- ibmvnic: Feature implementation of Vital Product Data (VPD) for the ibmvnic driver (bsc#1069942).\n- ibmvnic: Fix calculation of number of TX header descriptors (bsc#1066382).\n- ibmvnic: fix dma_mapping_error call (bsc#1069942).\n- ibmvnic: Fix failover error path for non-fatal resets (bsc#1066382).\n- ibmvnic: Implement .get_channels (fate#323285).\n- ibmvnic: Implement .get_ringparam (fate#323285).\n- ibmvnic: Implement per-queue statistics reporting (fate#323285).\n- ibmvnic: Include header descriptor support for ARP packets (bsc#1073912).\n- ibmvnic: Increase maximum number of RX/TX queues (bsc#1073912).\n- ibmvnic: Let users change net device features (bsc#1066382).\n- ibmvnic: Rename IBMVNIC_MAX_TX_QUEUES to IBMVNIC_MAX_QUEUES (bsc#1073912).\n- ibmvnic: Update reset infrastructure to support tunable parameters (bsc#1066382).\n- ib/srp: Avoid that a cable pull can trigger a kernel crash (bsc#1022595 FATE#322350).\n- ib/srpt: Do not accept invalid initiator port names (bnc#1012382).\n- ib/uverbs: Fix device cleanup (bsc#1022595 FATE#322350).\n- ib/uverbs: Fix NULL pointer dereference during device removal (bsc#1022595 FATE#322350).\n- igb: close/suspend race in netif_device_detach (bnc#1012382).\n- igb: Fix hw_dbg logging in igb_update_flash_i210 (bnc#1012382).\n- igb: reset the PHY before reading the PHY ID (bnc#1012382).\n- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- igbvf: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- iio: dummy: events: Add missing break (bsc#1031717).\n- iio: light: fix improper return value (bnc#1012382).\n- iio: trigger: free trigger resource correctly (bnc#1012382).\n- ima: do not update security.ima if appraisal status is not INTEGRITY_PASS (bnc#1012382).\n- input: ar1021_i2c - fix too long name in driver's device table (bsc#1031717).\n- input: edt-ft5x06 - fix setting gain, offset, and threshold via device tree (bsc#1031717).\n- input: elan_i2c - add ELAN060C to the ACPI table (bnc#1012382).\n- input: elan_i2c - add ELAN0611 to the ACPI table (bnc#1012382).\n- input: gtco - fix potential out-of-bound access (bnc#1012382).\n- input: mpr121 - handle multiple bits change of status register (bnc#1012382).\n- input: mpr121 - set missing event capability (bnc#1012382).\n- input: ti_am335x_tsc - fix incorrect step config for 5 wire touchscreen (bsc#1031717).\n- input: twl4030-pwrbutton - use correct device for irq request (bsc#1031717).\n- input: ucb1400_ts - fix suspend and resume handling (bsc#1031717).\n- input: uinput - avoid crash when sending FF request to device going away (bsc#1031717).\n- iommu/arm-smmu-v3: Clear prior settings when updating STEs (bnc#1012382).\n- iommu/vt-d: Do not register bus-notifier under dmar_global_lock (bsc#1069793).\n- ip6_gre: only increase err_count for some certain type icmpv6 in ip6gre_err (bnc#1012382).\n- ipip: only increase err_count for some certain type icmp in ipip_err (bnc#1012382).\n- ipmi: fix unsigned long underflow (bnc#1012382).\n- ipmi: Pick up slave address from SMBIOS on an ACPI device (bsc#1070006).\n- ipmi: Prefer ACPI system interfaces over SMBIOS ones (bsc#1070006).\n- ipmi_si: Clean up printks (bsc#1070006).\n- ipmi_si: fix memory leak on new_smi (bsc#1070006).\n- ipsec: do not ignore crypto err in ah4 input (bnc#1012382).\n- ipv6: flowlabel: do not leave opt-\u003etot_len with garbage (bnc#1012382).\n- ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (bnc#1012382).\n- ipv6: prevent speculative execution (bnc#1068032).\n- ipvs: make drop_entry protection effective for SIP-pe (bsc#1056365).\n- isa: Prevent NULL dereference in isa_bus driver callbacks (bsc#1031717).\n- iscsi-target: Fix non-immediate TMR reference leak (bnc#1012382).\n- isofs: fix timestamps beyond 2027 (bnc#1012382).\n- iwlwifi: mvm: fix the coex firmware API (bsc#1031717).\n- iwlwifi: mvm: return -ENODATA when reading the temperature with the FW down (bsc#1031717).\n- iwlwifi: mvm: set the RTS_MIMO_PROT bit in flag mask when sending sta to fw (bsc#1031717).\n- iwlwifi: split the regulatory rules when the bandwidth flags require it (bsc#1031717).\n- ixgbe: add mask for 64 RSS queues (bnc#1012382).\n- ixgbe: do not disable FEC from the driver (bnc#1012382).\n- ixgbe: fix AER error handling (bnc#1012382).\n- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).\n- ixgbe: handle close/suspend race with netif_device_detach/present (bnc#1012382).\n- ixgbe: Reduce I2C retry count on X550 devices (bnc#1012382).\n- ixgbevf: Use smp_rmb rather than read_barrier_depends (bnc#1012382).\n- kabi fix for new hash_cred function (bsc#1012917).\n- kABI: protect struct regulator_dev (kabi).\n- kABI: protect structs rt_rq+root_domain (kabi).\n- kABI: protect typedef rds_rdma_cookie_t (kabi).\n- kaiser: add 'nokaiser' boot option, using ALTERNATIVE.\n- kaiser: align addition to x86/mm/Makefile.\n- kaiser: asm/tlbflush.h handle noPGE at lower level.\n- kaiser: cleanups while trying for gold link.\n- kaiser: Disable on Xen PV.\n- kaiser: do not set _PAGE_NX on pgd_none.\n- kaiser: drop is_atomic arg to kaiser_pagetable_walk().\n- kaiser: enhanced by kernel and user PCIDs.\n- kaiser: ENOMEM if kaiser_pagetable_walk() NULL.\n- kaiser: fix build and FIXME in alloc_ldt_struct().\n- kaiser: fix perf crashes.\n- kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER.\n- kaiser: fix unlikely error in alloc_ldt_struct().\n- kaiser: KAISER depends on SMP.\n- kaiser: kaiser_flush_tlb_on_return_to_user() check PCID.\n- kaiser: kaiser_remove_mapping() move along the pgd.\n- kaiser: Kernel Address Isolation.\n- kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush.\n- kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user.\n- kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET.\n- kaiser: paranoid_entry pass cr3 need to paranoid_exit.\n- kaiser: PCID 0 for kernel and 128 for user.\n- kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls.\n- kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE.\n- kaiser: tidied up asm/kaiser.h somewhat.\n- kaiser: tidied up kaiser_add/remove_mapping slightly.\n- kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush.\n- kaiser: vmstat show NR_KAISERTABLE as nr_overhead.\n- kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user.\n- kernel-docs: unpack the source instead of using kernel-source (bsc#1057199).\n- kernel/sysctl.c: remove duplicate UINT_MAX check on do_proc_douintvec_conv() (bsc#1066470).\n- kernel/watchdog: Prevent false positives with turbo modes (bnc#1063516).\n- keys: do not revoke uninstantiated key in request_key_auth_new() (bsc#1031717).\n- keys: fix cred refcount leak in request_key_auth_new() (bsc#1031717).\n- keys: fix key refcount leak in keyctl_assume_authority() (bsc#1031717).\n- keys: fix key refcount leak in keyctl_read_key() (bsc#1031717).\n- keys: fix NULL pointer dereference during ASN.1 parsing [ver #2] (bnc#1012382).\n- keys: fix out-of-bounds read during ASN.1 parsing (bnc#1012382).\n- keys: return full count in keyring_read() if buffer is too small (bnc#1012382).\n- keys: trusted: fix writing past end of buffer in trusted_read() (bnc#1012382).\n- keys: trusted: sanitize all key material (bnc#1012382).\n- kvm: nVMX: set IDTR and GDTR limits when loading L1 host state (bnc#1012382).\n- kvm: PPC: Book 3S: XICS: correct the real mode ICP rejecting counter (bnc#1012382).\n- kvm: SVM: Do not intercept new speculative control MSRs (bsc#1068032).\n- kvm: SVM: obey guest PAT (bnc#1012382).\n- kvm: x86: Add speculative control CPUID support for guests (bsc#1068032).\n- kvm: x86: Exit to user-mode on #UD intercept when emulator requires (bnc#1012382).\n- kvm: x86: inject exceptions produced by x86_decode_insn (bnc#1012382).\n- kvm: x86: pvclock: Handle first-time write to pvclock-page contains random junk (bnc#1012382).\n- l2tp: check ps-\u003esock before running pppol2tp_session_ioctl() (bnc#1012382).\n- libertas: Fix lbs_prb_rsp_limit_set() (bsc#1031717).\n- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).\n- libnvdimm, namespace: fix label initialization to use valid seq numbers (bnc#1012382).\n- libnvdimm, namespace: make 'resource' attribute only readable by root (bnc#1012382).\n- libnvdimm, pfn: make 'resource' attribute only readable by root (FATE#319858).\n- lib/ratelimit.c: use deferred printk() version (bsc#979928).\n- locking/barriers: introduce new memory barrier gmb() (bnc#1068032).\n- mac80211: agg-tx: call drv_wake_tx_queue in proper context (bsc#1031717).\n- mac80211: do not compare TKIP TX MIC key in reinstall prevention (bsc#1066472).\n- mac80211: do not send SMPS action frame in AP mode when not needed (bsc#1031717).\n- mac80211: Fix addition of mesh configuration element (git-fixes).\n- mac80211: Fix BW upgrade for TDLS peers (bsc#1031717).\n- mac80211: fix mgmt-tx abort cookie and leak (bsc#1031717).\n- mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl() (bsc#1031717).\n- mac80211: Remove invalid flag operations in mesh TSF synchronization (bnc#1012382).\n- mac80211: Remove unused 'beaconint_us' variable (bsc#1031717).\n- mac80211: Remove unused 'i' variable (bsc#1031717).\n- mac80211: Remove unused 'len' variable (bsc#1031717).\n- mac80211: Remove unused 'rates_idx' variable (bsc#1031717).\n- mac80211: Remove unused 'sband' and 'local' variables (bsc#1031717).\n- mac80211: Remove unused 'struct ieee80211_rx_status' ptr (bsc#1031717).\n- mac80211: Suppress NEW_PEER_CANDIDATE event if no room (bnc#1012382).\n- mac80211: TDLS: always downgrade invalid chandefs (bsc#1031717).\n- mac80211: TDLS: change BW calculation for WIDER_BW peers (bsc#1031717).\n- mac80211: use constant time comparison with keys (bsc#1066471).\n- media: au0828: fix RC_CORE dependency (bsc#1031717).\n- media: Do not do DMA on stack for firmware upload in the AS102 driver (bnc#1012382).\n- media: em28xx: calculate left volume level correctly (bsc#1031717).\n- media: mceusb: fix memory leaks in error path (bsc#1031717).\n- media: rc: check for integer overflow (bnc#1012382).\n- media: v4l2-ctrl: Fix flags field on Control events (bnc#1012382).\n- megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (bsc#1027301).\n- mei: return error on notification request to a disconnected client (bnc#1012382).\n- mfd: ab8500-sysctrl: Handle probe deferral (bnc#1012382).\n- mfd: axp20x: Fix axp288 PEK_DBR and PEK_DBF irqs being swapped (bnc#1012382).\n- misc: panel: properly restore atomic counter on error path (bnc#1012382).\n- mmc: block: return error on failed mmc_blk_get() (bsc#1031717).\n- mmc: core: Do not leave the block driver in a suspended state (bnc#1012382).\n- mmc: core/mmci: restore pre/post_req behaviour (bsc#1031717).\n- mmc: dw_mmc: rockchip: Set the drive phase properly (bsc#1031717).\n- mm: check the return value of lookup_page_ext for all call sites (bnc#1068982).\n- mmc: host: omap_hsmmc: avoid possible overflow of timeout value (bsc#1031717).\n- mmc: host: omap_hsmmc: checking for NULL instead of IS_ERR() (bsc#1031717).\n- mmc: mediatek: Fixed size in dma_free_coherent (bsc#1031717).\n- mmc: s3cmci: include linux/interrupt.h for tasklet_struct (bnc#1012382).\n- mmc: sd: limit SD card power limit according to cards capabilities (bsc#1031717).\n- mm, hwpoison: fixup 'mm: check the return value of lookup_page_ext for all call sites' (bnc#1012382).\n- mm/madvise.c: fix madvise() infinite loop under special circumstances (bnc#1070964).\n- mm/mmu_context, sched/core: Fix mmu_context.h assumption (bsc#1068032).\n- mm/page_alloc.c: broken deferred calculation (bnc#1068980).\n- mm, page_alloc: fix potential false positive in __zone_watermark_ok (Git-fixes, bsc#1068978).\n- mm/page_ext.c: check if page_ext is not prepared (bnc#1068982).\n- mm/page_owner: avoid null pointer dereference (bnc#1068982).\n- mm/pagewalk.c: report holes in hugetlb ranges (bnc#1012382).\n- mtd: nand: Fix writing mtdoops to nand flash (bnc#1012382).\n- net: 3com: typhoon: typhoon_init_one: fix incorrect return values (bnc#1012382).\n- net: 3com: typhoon: typhoon_init_one: make return values more specific (bnc#1012382).\n- net/9p: Switch to wait_event_killable() (bnc#1012382).\n- net: Allow IP_MULTICAST_IF to set index to L3 slave (bnc#1012382).\n- net: cdc_ether: fix divide by 0 on bad descriptors (bnc#1012382).\n- net: cdc_ncm: GetNtbFormat endian fix (git-fixes).\n- net: dsa: select NET_SWITCHDEV (bnc#1012382).\n- netfilter/ipvs: clear ipvs_property flag when SKB net namespace changed (bnc#1012382).\n- netfilter: nf_tables: fix oob access (bnc#1012382).\n- netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family (bnc#1012382).\n- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).\n- net: ibm: ibmvnic: constify vio_device_id (fate#323285).\n- netlink: add a start callback for starting a netlink dump (bnc#1012382).\n- net: mpls: prevent speculative execution (bnc#1068032).\n- net: qmi_wwan: fix divide by 0 on bad descriptors (bnc#1012382).\n- net/sctp: Always set scope_id in sctp_inet6_skb_msgname (bnc#1012382).\n- net/unix: do not show information about sockets from other namespaces (bnc#1012382).\n- nfc: fix device-allocation error return (bnc#1012382).\n- nfsd: deal with revoked delegations appropriately (bnc#1012382).\n- nfsd: Fix another OPEN stateid race (bnc#1012382).\n- nfsd: Fix stateid races between OPEN and CLOSE (bnc#1012382).\n- nfsd: Make init_open_stateid() a bit more whole (bnc#1012382).\n- nfs: Do not disconnect open-owner on NFS4ERR_BAD_SEQID (bsc#989261).\n- nfs: Fix typo in nomigration mount option (bnc#1012382).\n- nfs: Fix ugly referral attributes (bnc#1012382).\n- nfs: improve shinking of access cache (bsc#1012917).\n- nfs: revalidate '.' etc correctly on 'open' (bsc#1068951).\n- nfs: revalidate '.' etc correctly on 'open' (git-fixes). Fix References tag.\n- nfsv4: always set NFS_LOCK_LOST when a lock is lost (bsc#1068951).\n- nilfs2: fix race condition that causes file system corruption (bnc#1012382).\n- nvme: Fix memory order on async queue deletion (bnc#1012382).\n- ocfs2: fstrim: Fix start offset of first cluster group during fstrim (bnc#1012382).\n- ocfs2: should wait dio before inode lock in ocfs2_setattr() (bnc#1012382).\n- p54: prevent speculative execution (bnc#1068032).\n- packet: avoid panic in packet_getsockopt() (bnc#1012382).\n- parisc: Fix validity check of pointer size argument in new CAS implementation (bnc#1012382).\n- pci: Apply _HPX settings only to relevant devices (bnc#1012382).\n- pci: mvebu: Handle changes to the bridge windows while enabled (bnc#1012382).\n- perf tools: Fix build failure on perl script context (bnc#1012382).\n- perf tools: Only increase index if perf_evsel__new_idx() succeeds (bnc#1012382).\n- perf/x86/intel/bts: Fix exclusive event reference leak (git-fixes d2878d642a4ed).\n- phy: increase size of MII_BUS_ID_SIZE and bus_id (bnc#1012382).\n- pkcs#7: fix unitialized boolean 'want' (bnc#1012382).\n- platform/x86: acer-wmi: setup accelerometer when ACPI device was found (bsc#1031717).\n- platform/x86: hp-wmi: Do not shadow error values (bnc#1012382).\n- platform/x86: hp-wmi: Fix detection for dock and tablet mode (bnc#1012382).\n- platform/x86: hp-wmi: Fix error value for hp_wmi_tablet_state (bnc#1012382).\n- platform/x86: intel_mid_thermal: Fix module autoload (bnc#1012382).\n- platform/x86: sony-laptop: Fix error handling in sony_nc_setup_rfkill() (bsc#1031717).\n- pm / OPP: Add missing of_node_put(np) (bnc#1012382).\n- power: bq27xxx_battery: Fix bq27541 AveragePower register address (bsc#1031717).\n- power: bq27xxx: fix reading for bq27000 and bq27010 (bsc#1031717).\n- powercap: Fix an error code in powercap_register_zone() (bsc#1031717).\n- power: ipaq-micro-battery: freeing the wrong variable (bsc#1031717).\n- powerpc/64: Fix race condition in setting lock bit in idle/wakeup code (bsc#1066223).\n- powerpc/barrier: add gmb.\n- powerpc/bpf/jit: Disable classic BPF JIT on ppc64le (bsc#1066223).\n- powerpc/corenet: explicitly disable the SDHC controller on kmcoge4 (bnc#1012382).\n- powerpc: Correct instruction code for xxlor instruction (bsc#1066223).\n- powerpc: Fix VSX enabling/flushing to also test MSR_FP and MSR_VEC (bsc#1066223).\n- powerpc/mm: Fix check of multiple 16G pages from device tree (bsc#1066223).\n- powerpc/mm: Fix virt_addr_valid() etc. on 64-bit hash (bsc#1066223).\n- powerpc/mm/hash64: Fix subpage protection with 4K HPTE config (bsc#1010201, bsc#1066223).\n- powerpc/mm/hash: Free the subpage_prot_table correctly (bsc#1066223).\n- powerpc/numa: Fix multiple bugs in memory_hotplug_max() (bsc#1066223).\n- powerpc/numa: Fix whitespace in hot_add_drconf_memory_max() (bsc#1066223).\n- powerpc/opal: Fix EBUSY bug in acquiring tokens (bsc#1066223).\n- powerpc/perf: Remove PPMU_HAS_SSLOT flag for Power8 (bsc#1066223).\n- powerpc/powernv/ioda: Fix endianness when reading TCEs (bsc#1066223).\n- powerpc/powernv: Make opal_event_shutdown() callable from IRQ context (bsc#1066223).\n- powerpc/pseries/vio: Dispose of virq mapping on vdevice unregister (bsc#1067888).\n- powerpc/pseries/vio: Dispose of virq mapping on vdevice unregister (bsc#1067888).\n- powerpc: Secure memory rfi flush (bsc#1068032).\n- powerpc/signal: Properly handle return value from uprobe_deny_signal() (bsc#1066223).\n- powerpc/sysrq: Fix oops whem ppmu is not registered (bsc#1066223).\n- power: supply: bq27xxx_battery: Fix register map for BQ27510 and BQ27520 ('bsc#1069270').\n- power: supply: isp1704: Fix unchecked return value of devm_kzalloc (bsc#1031717).\n- power: supply: lp8788: prevent out of bounds array access (bsc#1031717).\n- power_supply: tps65217-charger: Fix NULL deref during property export (bsc#1031717).\n- ppp: fix race in ppp device destruction (bnc#1012382).\n- Prevent timer value 0 for MWAITX (bsc#1065717).\n- printk/console: Always disable boot consoles that use init memory before it is freed (bsc#1063026).\n- printk/console: Enhance the check for consoles using init memory (bsc#1063026).\n- printk: include \u003casm/sections.h\u003e instead of \u003casm-generic/sections.h\u003e (bsc#1063026).\n- printk: only unregister boot consoles when necessary (bsc#1063026).\n- pti: unbreak EFI (bsc#1074709).\n- ptrace: Add a new thread access check (bsc#1068032).\n- qla2xxx: prevent speculative execution (bnc#1068032).\n- quota: Check for register_shrinker() failure (bsc#1012829).\n- r8169: Do not increment tx_dropped in TX ring cleaning (bsc#1031717).\n- rbd: use GFP_NOIO for parent stat and data requests (bnc#1012382).\n- rdma/uverbs: Prevent leak of reserved field (bsc#1022595 FATE#322350).\n- rds: RDMA: return appropriate error on rdma map failures (bnc#1012382).\n- Redo encryption backport to fix pkt signing (bsc#1071009, fate#324404).\n- regulator: core: Limit propagation of parent voltage count and list (bsc#1070145).\n- regulator: fan53555: fix I2C device ids (bnc#1012382).\n- Revert 'crypto: xts - Add ECB dependency' (bnc#1012382).\n- Revert 'drm: bridge: add DT bindings for TI ths8135' (bnc#1012382).\n- Revert 'drm/radeon: dont switch vt on suspend' (bnc#1012382).\n- Revert 'ipsec: Fix aborted xfrm policy dump crash' (kabi).\n- Revert 'netlink: add a start callback for starting a netlink dump' (kabi).\n- Revert 'phy: increase size of MII_BUS_ID_SIZE and bus_id' (kabi).\n- Revert 'sctp: do not peel off an assoc from one netns to another one' (bnc#1012382).\n- Revert 'uapi: fix linux/rds.h userspace compilation errors' (bnc#1012382).\n- rpm/kernel-binary.spec.in: add the kernel-binary dependencies to kernel-binary-base (bsc#1060333).\n- rpm/kernel-binary.spec.in: Correct supplements for recent SLE products (bsc#1067494)\n- rpm/kernel-binary.spec.in: only rewrite modules.dep if non-zero in size (bsc#1056979).\n- rtc: ds1307: Fix relying on reset value for weekday (bsc#1031717).\n- rtc: ds1374: wdt: Fix issue with timeout scaling from secs to wdt ticks (bsc#1031717).\n- rtc: ds1374: wdt: Fix stop/start ioctl always returning -EINVAL (bsc#1031717).\n- rtc: rtc-nuc900: fix loop timeout test (bsc#1031717).\n- rtc: sa1100: fix unbalanced clk_prepare_enable/clk_disable_unprepare (bsc#1031717).\n- rt/fs/dcache: Convert s_anon_lock to a raw spinlock for RT\n- rtlwifi: fix uninitialized rtlhal-\u003elast_suspend_sec time (bnc#1012382).\n- rtlwifi: rtl8192ee: Fix memory leak when loading firmware (bnc#1012382).\n- rtlwifi: rtl8821ae: Fix HW_VAR_NAV_UPPER operation (bsc#1031717).\n- s390: add ppa to system call and program check path (bsc#1068032).\n- s390/dasd: check for device error pointer within state change interrupts (bnc#1012382).\n- s390/disassembler: add missing end marker for e7 table (bnc#1012382).\n- s390/disassembler: correct disassembly lines alignment (bsc#1070825).\n- s390/disassembler: increase show_code buffer size (bnc#1012382).\n- s390: fix transactional execution control register handling (bnc#1012382).\n- s390: introduce CPU alternatives.\n- s390: introduce CPU alternatives (bsc#1068032).\n- s390/kbuild: enable modversions for symbols exported from asm (bnc#1012382).\n- s390/qeth: issue STARTLAN as first IPA command (bnc#1012382).\n- s390/runtime instrumention: fix possible memory corruption (bnc#1012382).\n- s390/spinlock: add gmb memory barrier\n- s390/spinlock: add gmb memory barrier (bsc#1068032).\n- s390/spinlock: add ppa to system call path Signoff the s390 patches.\n- sched/core: Add switch_mm_irqs_off() and use it in the scheduler (bsc#1068032).\n- sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off() (bsc#1068032).\n- sched: Make resched_cpu() unconditional (bnc#1012382).\n- sched/rt: Do not pull from current CPU if only one CPU to pull (bnc#1022476).\n- sched/rt: Simplify the IPI based RT balancing logic (bnc#1012382).\n- scsi: aacraid: Process Error for response I/O (bnc#1012382).\n- scsi_devinfo: cleanly zero-pad devinfo strings (bsc#1062941).\n- scsi_dh_alua: skip RTPG for devices only supporting active/optimized (bsc#1064311).\n- scsi: ipr: Fix scsi-mq lockdep issue (bsc#1066213).\n- scsi: ipr: Set no_report_opcodes for RAID arrays (bsc#1066213).\n- scsi: libiscsi: fix shifting of DID_REQUEUE host byte (bsc#1056003).\n- scsi: lpfc: Add missing memory barrier (bnc#1012382).\n- scsi: lpfc: Clear the VendorVersion in the PLOGI/PLOGI ACC payload (bnc#1012382).\n- scsi: lpfc: Correct host name in symbolic_name field (bnc#1012382).\n- scsi: lpfc: Correct issue leading to oops during link reset (bnc#1012382).\n- scsi: lpfc: FCoE VPort enable-disable does not bring up the VPort (bnc#1012382).\n- scsi_scan: Exit loop if TUR to LUN0 fails with 0x05/0x25 (bsc#1063043). This is specific to FUJITSU ETERNUS_DX* targets. They can return 'Illegal Request - Logical unit not supported' and processing should leave the timeout loop in this case.\n- scsi: scsi_devinfo: fixup string compare (bsc#1062941).\n- scsi: scsi_devinfo: handle non-terminated strings (bsc#1062941).\n- scsi: ses: check return code from ses_recv_diag() (bsc#1039616).\n- scsi: ses: Fixup error message 'failed to get diagnostic page 0xffffffea' (bsc#1039616).\n- scsi: ses: Fix wrong page error (bsc#1039616).\n- scsi: ses: make page2 support optional (bsc#1039616).\n- scsi: sg: Re-fix off by one in sg_fill_request_table() (bnc#1012382).\n- scsi: ufs: add capability to keep auto bkops always enabled (bnc#1012382).\n- scsi: ufs-qcom: Fix module autoload (bnc#1012382).\n- scsi: virtio_scsi: let host do exception handling (bsc#1060682).\n- scsi: zfcp: fix erp_action use-before-initialize in REC action trace (bnc#1012382).\n- sctp: add the missing sock_owned_by_user check in sctp_icmp_redirect (bnc#1012382).\n- sctp: do not peel off an assoc from one netns to another one (bnc#1012382).\n- sctp: do not peel off an assoc from one netns to another one (bnc#1012382).\n- sctp: reset owner sk for data chunks on out queues when migrating a sock (bnc#1012382).\n- security/keys: add CONFIG_KEYS_COMPAT to Kconfig (bnc#1012382).\n- selftests: firmware: add empty string and async tests (bnc#1012382).\n- selftests: firmware: send expected errors to /dev/null (bnc#1012382).\n- serial: 8250_fintek: Fix rs485 disablement on invalid ioctl() (bsc#1031717).\n- serial: 8250_uniphier: fix serial port index in private data (bsc#1031717).\n- serial: omap: Fix EFR write on RTS deassertion (bnc#1012382).\n- serial: Remove unused port type (bsc#1066045).\n- serial: sh-sci: Fix register offsets for the IRDA serial port (bnc#1012382).\n- smb2: Fix share type handling (bnc#1074392).\n- smb3: parsing for new snapshot timestamp mount parm (FATE#324404). New mount option 'snapshot=\u003ctime\u003e' to allow mounting an earlier version of the remote volume (if such a snapshot exists on the server). Note that eventually specifying a snapshot time of 1 will allow the user to mount the oldest snapshot. A subsequent patch add the processing for that and another for actually specifying the 'time warp' create context on SMB2/SMB3 open. Check to make sure SMB2 negotiated, and ensure that we use a different tcon if mount same share twice but with different snaphshot times\n- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).\n- spi: uapi: spidev: add missing ioctl header (bnc#1012382).\n- staging: iio: cdc: fix improper return value (bnc#1012382).\n- staging: lustre: hsm: stack overrun in hai_dump_data_field (bnc#1012382).\n- staging: lustre: llite: do not invoke direct_IO for the EOF case (bnc#1012382).\n- staging: lustre: ptlrpc: skip lock if export failed (bnc#1012382).\n- staging: r8712u: Fix Sparse warning in rtl871x_xmit.c (bnc#1012382).\n- staging: rtl8188eu: fix incorrect ERROR tags from logs (bnc#1012382).\n- staging: rtl8712: fixed little endian problem (bnc#1012382).\n- staging: rtl8712u: Fix endian settings for structs describing network packets (bnc#1012382).\n- sunrpc: add auth_unix hash_cred() function (bsc#1012917).\n- sunrpc: add generic_auth hash_cred() function (bsc#1012917).\n- sunrpc: add hash_cred() function to rpc_authops struct (bsc#1012917).\n- sunrpc: add RPCSEC_GSS hash_cred() function (bsc#1012917).\n- sunrpc: Fix tracepoint storage issues with svc_recv and svc_rqst_status (bnc#1012382).\n- sunrpc: replace generic auth_cred hash with auth-specific function (bsc#1012917).\n- sunrpc: use supplimental groups in auth hash (bsc#1012917).\n- target: fix ALUA state file path truncation (bsc#1071231).\n- target: Fix node_acl demo-mode + uncached dynamic shutdown regression (bnc#1012382).\n- target: fix PR state file path truncation (bsc#1071231).\n- target: Fix QUEUE_FULL + SCSI task attribute handling (bnc#1012382).\n- target/iscsi: Fix iSCSI task reassignment handling (bnc#1012382).\n- tcp/dccp: fix ireq-\u003eopt races (bnc#1012382).\n- tcp/dccp: fix lockdep splat in inet_csk_route_req() (bnc#1012382).\n- tcp/dccp: fix other lockdep splats accessing ireq_opt (bnc#1012382).\n- tcp: do not mangle skb-\u003ecb[] in tcp_make_synack() (bnc#1012382).\n- tcp: fix tcp_mtu_probe() vs highest_sack (bnc#1012382).\n- test: firmware_class: report errors properly on failure (bnc#1012382).\n- thermal/int340x: prevent speculative execution (bnc#1068032).\n- tipc: fix link attribute propagation bug (bnc#1012382).\n- tools: firmware: check for distro fallback udev cancel rule (bnc#1012382).\n- tracing/samples: Fix creation and deletion of simple_thread_fn creation (bnc#1012382).\n- tun: allow positive return values on dev_get_valid_name() call (bnc#1012382).\n- tun: call dev_get_valid_name() before register_netdevice() (bnc#1012382).\n- tun/tap: sanitize TUNSETSNDBUF input (bnc#1012382).\n- uapi: fix linux/rds.h userspace compilation error (bnc#1012382).\n- uapi: fix linux/rds.h userspace compilation errors (bnc#1012382).\n- udf: prevent speculative execution (bnc#1068032).\n- usb: Add delay-init quirk for Corsair K70 LUX keyboards (bnc#1012382).\n- usb: hcd: initialize hcd-\u003eflags to 0 when rm hcd (bnc#1012382).\n- usb: host: fix incorrect updating of offset (bsc#1047487).\n- usb: serial: garmin_gps: fix I/O after failed probe and remove (bnc#1012382).\n- usb: serial: garmin_gps: fix memory leak on probe errors (bnc#1012382).\n- usb: serial: qcserial: add pid/vid for Sierra Wireless EM7355 fw update (bnc#1012382).\n- usb: usbfs: compute urb-\u003eactual_length for isochronous (bnc#1012382).\n- usb: usbtest: fix NULL pointer dereference (bnc#1012382).\n- usb: xhci: Handle error condition in xhci_stop_device() (bnc#1012382).\n- userns: prevent speculative execution (bnc#1068032).\n- uvcvideo: prevent speculative execution (bnc#1068032).\n- vfs: expedite unmount (bsc#1024412).\n- video: fbdev: pmag-ba-fb: Remove bad `__init' annotation (bnc#1012382).\n- video: udlfb: Fix read EDID timeout (bsc#1031717).\n- vlan: fix a use-after-free in vlan_device_event() (bnc#1012382).\n- vsock: use new wait API for vsock_stream_sendmsg() (bnc#1012382).\n- vxlan: correctly handle ipv6.disable module parameter (bsc#1072962).\n- workqueue: Fix NULL pointer dereference (bnc#1012382).\n- workqueue: replace pool-\u003emanager_arb mutex with a flag (bnc#1012382).\n- x86/boot: Add early cmdline parsing for options with arguments.\n- x86/CPU/AMD: Add speculative control support for AMD (bsc#1068032).\n- x86/CPU/AMD: Make the LFENCE instruction serialized (bsc#1068032).\n- x86/CPU/AMD: Remove now unused definition of MFENCE_RDTSC feature (bsc#1068032).\n- x86/CPU: Check speculation control CPUID bit (bsc#1068032).\n- x86/decoder: Add new TEST instruction pattern (bnc#1012382).\n- x86/efi-bgrt: Fix kernel panic when mapping BGRT data (bnc#1012382).\n- x86/efi-bgrt: Replace early_memremap() with memremap() (bnc#1012382).\n- x86/efi: Build our own page table structures (bnc#1012382).\n- x86/efi: Hoist page table switching code into efi_call_virt() (bnc#1012382).\n- x86/enter: Add macros to set/clear IBRS and set IBPB (bsc#1068032).\n- x86/entry: Add a function to overwrite the RSB (bsc#1068032).\n- x86/entry: Stuff RSB for entry to kernel for non-SMEP platform (bsc#1068032).\n- x86/entry: Use IBRS on entry to kernel space (bsc#1068032).\n- x86/feature: Enable the x86 feature to control Speculation (bsc#1068032).\n- x86/idle: Disable IBRS when offlining a CPU and re-enable on wakeup (bsc#1068032).\n- x86/idle: Toggle IBRS when going idle (bsc#1068032).\n- x86/kaiser: Check boottime cmdline params.\n- x86/kaiser: Move feature detection up (bsc#1068032).\n- x86/kaiser: Reenable PARAVIRT.\n- x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling.\n- x86/kvm: Add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD to kvm (bsc#1068032).\n- x86/kvm: Flush IBP when switching VMs (bsc#1068032).\n- x86/kvm: Pad RSB on VM transition (bsc#1068032).\n- x86/kvm: Toggle IBRS on VM entry and exit (bsc#1068032).\n- x86/MCE/AMD: Always give panic severity for UC errors in kernel context (git-fixes bf80bbd7dcf5).\n- x86/microcode/AMD: Add support for fam17h microcode loading (bsc#1068032).\n- x86/microcode/intel: Disable late loading on model 79 (bnc#1012382).\n- x86/mm/64: Fix reboot interaction with CR4.PCIDE (bsc#1068032).\n- x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID (bsc#1068032).\n- x86/mm: Add INVPCID helpers (bsc#1068032).\n- x86/mm: Add the 'nopcid' boot option to turn off PCID (bsc#1068032).\n- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (bsc#1068032).\n- x86/mm: Enable CR4.PCIDE on supported systems (bsc#1068032).\n- x86/mm: Fix INVPCID asm constraint (bsc#1068032).\n- x86/mm: If INVPCID is available, use it to flush global mappings (bsc#1068032).\n- x86/mm: Make flush_tlb_mm_range() more predictable (bsc#1068032).\n- x86/mm: Only set IBPB when the new thread cannot ptrace current thread (bsc#1068032).\n- x86/mm/pat: Ensure cpa-\u003epfn only contains page frame numbers (bnc#1012382).\n- x86/mm: Reimplement flush_tlb_page() using flush_tlb_mm_range() (bsc#1068032).\n- x86/mm: Remove flush_tlb() and flush_tlb_current_task() (bsc#1068032).\n- x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code (bsc#1068032).\n- x86/mm, sched/core: Turn off IRQs in switch_mm() (bsc#1068032).\n- x86/mm, sched/core: Uninline switch_mm() (bsc#1068032).\n- x86/mm: Set IBPB upon context switch (bsc#1068032).\n- x86/MSR: Move native_*msr(.. u64) to msr.h (bsc#1068032).\n- x86/oprofile/ppro: Do not use __this_cpu*() in preemptible context (bnc#1012382).\n- x86/paravirt: Dont patch flush_tlb_single (bsc#1068032).\n- x86/spec: Add IBRS control functions (bsc#1068032).\n- x86/spec: Add 'nospec' chicken bit (bsc#1068032).\n- x86/spec: Check CPUID direclty post microcode reload to support IBPB feature (bsc#1068032).\n- x86/spec_ctrl: Add an Indirect Branch Predictor barrier (bsc#1068032).\n- x86/spec_ctrl: Check whether IBPB is enabled before using it (bsc#1068032).\n- x86/spec_ctrl: Check whether IBRS is enabled before using it (bsc#1068032).\n- x86/svm: Add code to clear registers on VM exit (bsc#1068032).\n- x86/svm: Clobber the RSB on VM exit (bsc#1068032).\n- x86/svm: Set IBPB when running a different VCPU (bsc#1068032).\n- x86/svm: Set IBRS value on VM entry and exit (bsc#1068032).\n- x86/uaccess, sched/preempt: Verify access_ok() context (bnc#1012382).\n- xen: do not print error message in case of missing Xenstore entry (bnc#1012382).\n- xen/events: events_fifo: Do not use {get,put}_cpu() in xen_evtchn_fifo_init() (bnc#1065600).\n- xen: fix booting ballooned down hvm guest (bnc#1065600).\n- xen/gntdev: avoid out of bounds access in case of partial gntdev_mmap() (bnc#1012382).\n- xen/manage: correct return value check on xenbus_scanf() (bnc#1012382).\n- xen-netback: fix error handling output (bnc#1065600).\n- xen: x86: mark xen_find_pt_base as __init (bnc#1065600).\n- xen: xenbus driver must not accept invalid transaction ids (bnc#1012382).\n- zd1211rw: fix NULL-deref at probe (bsc#1031717).\n","status":"published","published":"2018-01-25T09:17:00Z","modified":"2026-02-04T04:15:47.921406Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3377-2","title":"linux-hwe vulnerabilities","description":"USN-3377-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04.\nThis update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu\n16.04 LTS.\n\nFan Wu and Shixiong Zhao discovered a race condition between inotify events\nand vfs rename operations in the Linux kernel. An unprivileged local\nattacker could use this to cause a denial of service (system crash) or\nexecute arbitrary code. (CVE-2017-7533)\n\nIt was discovered that the Linux kernel did not properly restrict\nRLIMIT_STACK size. A local attacker could use this in conjunction with\nanother vulnerability to possibly execute arbitrary code.\n(CVE-2017-1000365)\n\n李强 discovered that the Virtio GPU driver in the Linux kernel did not\nproperly free memory in some situations. A local attacker could use this to\ncause a denial of service (memory consumption). (CVE-2017-10810)\n\n石磊 discovered that the RxRPC Kerberos 5 ticket handling code in the\nLinux kernel did not properly verify metadata. A remote attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-7482)\n","status":"published","published":"2017-08-03T17:14:49Z","modified":"2026-02-10T04:41:11Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3378-1","title":"linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities","description":"Fan Wu and Shixiong Zhao discovered a race condition between inotify events\nand vfs rename operations in the Linux kernel. An unprivileged local\nattacker could use this to cause a denial of service (system crash) or\nexecute arbitrary code. (CVE-2017-7533)\n\nIt was discovered that the Linux kernel did not properly restrict\nRLIMIT_STACK size. A local attacker could use this in conjunction with\nanother vulnerability to possibly execute arbitrary code.\n(CVE-2017-1000365)\n\n李强 discovered that the Virtio GPU driver in the Linux kernel did not\nproperly free memory in some situations. A local attacker could use this to\ncause a denial of service (memory consumption). (CVE-2017-10810)\n\n石磊 discovered that the RxRPC Kerberos 5 ticket handling code in the\nLinux kernel did not properly verify metadata. A remote attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-7482)\n","status":"published","published":"2017-08-03T16:52:23Z","modified":"2026-04-22T09:37:38.53298Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3378-2","title":"linux-lts-xenial vulnerabilities","description":"USN-3378-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu\n14.04 LTS.\n\nFan Wu and Shixiong Zhao discovered a race condition between inotify events\nand vfs rename operations in the Linux kernel. An unprivileged local\nattacker could use this to cause a denial of service (system crash) or\nexecute arbitrary code. (CVE-2017-7533)\n\nIt was discovered that the Linux kernel did not properly restrict\nRLIMIT_STACK size. A local attacker could use this in conjunction with\nanother vulnerability to possibly execute arbitrary code.\n(CVE-2017-1000365)\n\n李强 discovered that the Virtio GPU driver in the Linux kernel did not\nproperly free memory in some situations. A local attacker could use this to\ncause a denial of service (memory consumption). (CVE-2017-10810)\n\n石磊 discovered that the RxRPC Kerberos 5 ticket handling code in the\nLinux kernel did not properly verify metadata. A remote attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-7482)\n","status":"published","published":"2017-08-03T17:38:32Z","modified":"2026-02-10T04:41:11Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3381-1","title":"linux vulnerabilities","description":"Peter Pi discovered that the colormap handling for frame buffer devices in\nthe Linux kernel contained an integer overflow. A local attacker could use\nthis to disclose sensitive information (kernel memory). (CVE-2016-8405)\n\nIt was discovered that the Linux kernel did not properly restrict\nRLIMIT_STACK size. A local attacker could use this in conjunction with\nanother vulnerability to possibly execute arbitrary code.\n(CVE-2017-1000365)\n\nIt was discovered that SELinux in the Linux kernel did not properly handle\nempty writes to /proc/pid/attr. A local attacker could use this to cause a\ndenial of service (system crash). (CVE-2017-2618)\n\n石磊 discovered that the RxRPC Kerberos 5 ticket handling code in the\nLinux kernel did not properly verify metadata. A remote attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-7482)\n","status":"published","published":"2017-08-07T18:36:51Z","modified":"2026-04-22T09:38:05.132101Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}