{"id":"CVE-2021-38166","aliases":["A-197155069","AZL-6581","BELL-CVE-2021-38166","DEBIAN-CVE-2021-38166","DSA-4978-1","EUVD-2021-24636","GHSA-cg35-fr7p-33m9","MGASA-2021-0409","MGASA-2021-0410","PUB-A-197155069","SUSE-SU-2021:3179-1","SUSE-SU-2021:3205-1","SUSE-SU-2021:3205-2","UBUNTU-CVE-2021-38166","USN-5096-1","USN-5113-1","USN-5115-1","openSUSE-SU-2021:3179-1","openSUSE-SU-2021:3205-1","openSUSE-SU-2024:10728-1","openSUSE-SU-2024:13704-1"],"status":"published","title":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out...","description":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00318,"percentile":0.24879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190","CWE-787"],"published":"2021-08-07T17:50:52Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Azure Linux:2","package":"kernel","fixed_in":["5.10.78.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"linux","fixed_in":["5.14.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["5.14.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["5.14.6-1"],"sources":["osv"]},{"ecosystem":"Android","package":":linux_kernel:","fixed_in":[":2021-10-05"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","fixed_in":["5.11.0-1020.21~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","fixed_in":["5.11.0-1020.21~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","fixed_in":["5.11.0-1021.23~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","fixed_in":["5.11.0-38.42~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","fixed_in":["5.10.0-1050.52"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","fixed_in":["5.13.0-1014.18"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","fixed_in":["5.11.0-1020.21~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","fixed_in":["5.11.0-1021.22~20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.78.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.6-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.46-5"}]}],"versions":["5.10.46-4"],"bundled":15},{"source":"osv","ecosystem":"Mageia:8","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.60-2.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.26-1.2.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-1.20.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.60-1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"Android","package":":linux_kernel:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2021-10-05"}]}],"versions":["Kernel"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-38.22.2"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-38.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-38.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1.18.12.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP3","package":"kernel-livepatch-SLE15-SP3_Update_6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-7.5.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1.18.12.1"}]}],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1004.5~18.04.1","4.18.0-1005.6~18.04.1","4.18.0-1006.7~18.04.1","4.18.0-1007.8~18.04.1","4.18.0-1008.9~18.04.1","4.18.0-1009.10~18.04.1","4.18.0-1011.12~18.04.1","4.18.0-1012.13~18.04.1","4.18.0-1013.14~18.04.1","4.18.0-1015.16~18.04.1","5.0.0-1011.11~18.04.1","5.0.0-1013.13~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1020.21~20.04.2"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1020.21~20.04.1"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1021.23~20.04.1"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-38.42~20.04.1"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-1050.52"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13.0-1014.18"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1020.21~20.04.1"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1021.22~20.04.1"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13.0-1014.18"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16"],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1020.21~20.04.2"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1020.21~20.04.1"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1021.23~20.04.1"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-38.42~20.04.1"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1020.21~20.04.1"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-1050.52"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51"],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-38.22.2"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-38.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-38.22.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1.18.12.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-59.24.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.6-1.4"}]}],"bundled":119},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.17-1.1"}]}],"bundled":194}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://lore.kernel.org/bpf/20210806150419.109658-1-th.yasumatsu%40gmail.com/","tags":["x_refsource_MISC","x_transferred","Patch","web"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=c4eb1f403243fc7bbb7de644db8587c03de36da6","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUVLBJKZMWA3E3YXSH4SZ7BOYGJP4GXP/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UL6CH5M5PRLMA3KPBX4LPUO6Z73GRISO/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20210909-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4978","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38166","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUVLBJKZMWA3E3YXSH4SZ7BOYGJP4GXP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UL6CH5M5PRLMA3KPBX4LPUO6Z73GRISO"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GUVLBJKZMWA3E3YXSH4SZ7BOYGJP4GXP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UL6CH5M5PRLMA3KPBX4LPUO6Z73GRISO"},{"url":"https://lore.kernel.org/bpf/20210806150419.109658-1-th.yasumatsu%40gmail.com"},{"url":"https://lore.kernel.org/bpf/20210806150419.109658-1-th.yasumatsu@gmail.com"},{"url":"https://security.netapp.com/advisory/ntap-20210909-0001"},{"url":"https://github.com/advisories/GHSA-cg35-fr7p-33m9"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-38166","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-38166","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0409.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29384","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.57","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.58","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.59","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.60","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2021-0410.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29385","tags":["report"]},{"url":"https://source.android.com/security/bulletin/2021-10-01","tags":["advisory"]},{"url":"https://android.googlesource.com/kernel/common/+/c4eb1f403243fc7bbb7de644db8587c03de36da6","tags":["fix"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213179-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040364","tags":["report"]},{"url":"https://bugzilla.suse.com/1127650","tags":["report"]},{"url":"https://bugzilla.suse.com/1135481","tags":["report"]},{"url":"https://bugzilla.suse.com/1152489","tags":["report"]},{"url":"https://bugzilla.suse.com/1160010","tags":["report"]},{"url":"https://bugzilla.suse.com/1168202","tags":["report"]},{"url":"https://bugzilla.suse.com/1171420","tags":["report"]},{"url":"https://bugzilla.suse.com/1174969","tags":["report"]},{"url":"https://bugzilla.suse.com/1175052","tags":["report"]},{"url":"https://bugzilla.suse.com/1175543","tags":["report"]},{"url":"https://bugzilla.suse.com/1177399","tags":["report"]},{"url":"https://bugzilla.suse.com/1180100","tags":["report"]},{"url":"https://bugzilla.suse.com/1180141","tags":["report"]},{"url":"https://bugzilla.suse.com/1180347","tags":["report"]},{"url":"https://bugzilla.suse.com/1181006","tags":["report"]},{"url":"https://bugzilla.suse.com/1181148","tags":["report"]},{"url":"https://bugzilla.suse.com/1181972","tags":["report"]},{"url":"https://bugzilla.suse.com/1184180","tags":["report"]},{"url":"https://bugzilla.suse.com/1185902","tags":["report"]},{"url":"https://bugzilla.suse.com/1186264","tags":["report"]},{"url":"https://bugzilla.suse.com/1186731","tags":["report"]},{"url":"https://bugzilla.suse.com/1187211","tags":["report"]},{"url":"https://bugzilla.suse.com/1187455","tags":["report"]},{"url":"https://bugzilla.suse.com/1187468","tags":["report"]},{"url":"https://bugzilla.suse.com/1187483","tags":["report"]},{"url":"https://bugzilla.suse.com/1187619","tags":["report"]},{"url":"https://bugzilla.suse.com/1187959","tags":["report"]},{"url":"https://bugzilla.suse.com/1188067","tags":["report"]},{"url":"https://bugzilla.suse.com/1188172","tags":["report"]},{"url":"https://bugzilla.suse.com/1188231","tags":["report"]},{"url":"https://bugzilla.suse.com/1188270","tags":["report"]},{"url":"https://bugzilla.suse.com/1188412","tags":["report"]},{"url":"https://bugzilla.suse.com/1188418","tags":["report"]},{"url":"https://bugzilla.suse.com/1188616","tags":["report"]},{"url":"https://bugzilla.suse.com/1188700","tags":["report"]},{"url":"https://bugzilla.suse.com/1188780","tags":["report"]},{"url":"https://bugzilla.suse.com/1188781","tags":["report"]},{"url":"https://bugzilla.suse.com/1188782","tags":["report"]},{"url":"https://bugzilla.suse.com/1188783","tags":["report"]},{"url":"https://bugzilla.suse.com/1188784","tags":["report"]},{"url":"https://bugzilla.suse.com/1188786","tags":["report"]},{"url":"https://bugzilla.suse.com/1188787","tags":["report"]},{"url":"https://bugzilla.suse.com/1188788","tags":["report"]},{"url":"https://bugzilla.suse.com/1188790","tags":["report"]},{"url":"https://bugzilla.suse.com/1188878","tags":["report"]},{"url":"https://bugzilla.suse.com/1188885","tags":["report"]},{"url":"https://bugzilla.suse.com/1188924","tags":["report"]},{"url":"https://bugzilla.suse.com/1188982","tags":["report"]},{"url":"https://bugzilla.suse.com/1188983","tags":["report"]},{"url":"https://bugzilla.suse.com/1188985","tags":["report"]},{"url":"https://bugzilla.suse.com/1189021","tags":["report"]},{"url":"https://bugzilla.suse.com/1189057","tags":["report"]},{"url":"https://bugzilla.suse.com/1189077","tags":["report"]},{"url":"https://bugzilla.suse.com/1189153","tags":["report"]},{"url":"https://bugzilla.suse.com/1189197","tags":["report"]},{"url":"https://bugzilla.suse.com/1189209","tags":["report"]},{"url":"https://bugzilla.suse.com/1189210","tags":["report"]},{"url":"https://bugzilla.suse.com/1189212","tags":["report"]},{"url":"https://bugzilla.suse.com/1189213","tags":["report"]},{"url":"https://bugzilla.suse.com/1189214","tags":["report"]},{"url":"https://bugzilla.suse.com/1189215","tags":["report"]},{"url":"https://bugzilla.suse.com/1189216","tags":["report"]},{"url":"https://bugzilla.suse.com/1189217","tags":["report"]},{"url":"https://bugzilla.suse.com/1189218","tags":["report"]},{"url":"https://bugzilla.suse.com/1189219","tags":["report"]},{"url":"https://bugzilla.suse.com/1189220","tags":["report"]},{"url":"https://bugzilla.suse.com/1189221","tags":["report"]},{"url":"https://bugzilla.suse.com/1189222","tags":["report"]},{"url":"https://bugzilla.suse.com/1189225","tags":["report"]},{"url":"https://bugzilla.suse.com/1189229","tags":["report"]},{"url":"https://bugzilla.suse.com/1189233","tags":["report"]},{"url":"https://bugzilla.suse.com/1189262","tags":["report"]},{"url":"https://bugzilla.suse.com/1189291","tags":["report"]},{"url":"https://bugzilla.suse.com/1189292","tags":["report"]},{"url":"https://bugzilla.suse.com/1189296","tags":["report"]},{"url":"https://bugzilla.suse.com/1189298","tags":["report"]},{"url":"https://bugzilla.suse.com/1189301","tags":["report"]},{"url":"https://bugzilla.suse.com/1189305","tags":["report"]},{"url":"https://bugzilla.suse.com/1189323","tags":["report"]},{"url":"https://bugzilla.suse.com/1189384","tags":["report"]},{"url":"https://bugzilla.suse.com/1189385","tags":["report"]},{"url":"https://bugzilla.suse.com/1189392","tags":["report"]},{"url":"https://bugzilla.suse.com/1189393","tags":["report"]},{"url":"https://bugzilla.suse.com/1189399","tags":["report"]},{"url":"https://bugzilla.suse.com/1189400","tags":["report"]},{"url":"https://bugzilla.suse.com/1189427","tags":["report"]},{"url":"https://bugzilla.suse.com/1189503","tags":["report"]},{"url":"https://bugzilla.suse.com/1189504","tags":["report"]},{"url":"https://bugzilla.suse.com/1189505","tags":["report"]},{"url":"https://bugzilla.suse.com/1189506","tags":["report"]},{"url":"https://bugzilla.suse.com/1189507","tags":["report"]},{"url":"https://bugzilla.suse.com/1189562","tags":["report"]},{"url":"https://bugzilla.suse.com/1189563","tags":["report"]},{"url":"https://bugzilla.suse.com/1189564","tags":["report"]},{"url":"https://bugzilla.suse.com/1189565","tags":["report"]},{"url":"https://bugzilla.suse.com/1189566","tags":["report"]},{"url":"https://bugzilla.suse.com/1189567","tags":["report"]},{"url":"https://bugzilla.suse.com/1189568","tags":["report"]},{"url":"https://bugzilla.suse.com/1189569","tags":["report"]},{"url":"https://bugzilla.suse.com/1189573","tags":["report"]},{"url":"https://bugzilla.suse.com/1189574","tags":["report"]},{"url":"https://bugzilla.suse.com/1189575","tags":["report"]},{"url":"https://bugzilla.suse.com/1189576","tags":["report"]},{"url":"https://bugzilla.suse.com/1189577","tags":["report"]},{"url":"https://bugzilla.suse.com/1189579","tags":["report"]},{"url":"https://bugzilla.suse.com/1189581","tags":["report"]},{"url":"https://bugzilla.suse.com/1189582","tags":["report"]},{"url":"https://bugzilla.suse.com/1189583","tags":["report"]},{"url":"https://bugzilla.suse.com/1189585","tags":["report"]},{"url":"https://bugzilla.suse.com/1189586","tags":["report"]},{"url":"https://bugzilla.suse.com/1189587","tags":["report"]},{"url":"https://bugzilla.suse.com/1189696","tags":["report"]},{"url":"https://bugzilla.suse.com/1189706","tags":["report"]},{"url":"https://bugzilla.suse.com/1189760","tags":["report"]},{"url":"https://bugzilla.suse.com/1189762","tags":["report"]},{"url":"https://bugzilla.suse.com/1189832","tags":["report"]},{"url":"https://bugzilla.suse.com/1189841","tags":["report"]},{"url":"https://bugzilla.suse.com/1189870","tags":["report"]},{"url":"https://bugzilla.suse.com/1189872","tags":["report"]},{"url":"https://bugzilla.suse.com/1189883","tags":["report"]},{"url":"https://bugzilla.suse.com/1190022","tags":["report"]},{"url":"https://bugzilla.suse.com/1190025","tags":["report"]},{"url":"https://bugzilla.suse.com/1190115","tags":["report"]},{"url":"https://bugzilla.suse.com/1190117","tags":["report"]},{"url":"https://bugzilla.suse.com/1190412","tags":["report"]},{"url":"https://bugzilla.suse.com/1190413","tags":["report"]},{"url":"https://bugzilla.suse.com/1190428","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-35477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38209","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213205-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213205-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-38166","tags":["report"]},{"url":"https://lore.kernel.org/bpf/20210806150419.109658-1-th.yasumatsu@gmail.com/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5096-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5113-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5115-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-38166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-34556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-35477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-37159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-40490","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-3702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3743","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-42008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33624","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UNTKFNNFNHHX5QOW7C4SZXLANXGXQCYJ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AUF5M64CM26PNMNFO4R3S57DLRRNSTVG/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6610","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-38166","description":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.","status":"published","published":"2021-08-07T17:50:52Z","modified":"2026-10-08T21:03:29.217Z","updated_at":"2026-11-02T14:33:07.349244Z"}],"euvd":[{"id":"EUVD-2021-24636","description":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.","status":"published","published":"2021-08-07T17:50:52Z","modified":"2026-10-08T21:03:29Z","updated_at":"2026-11-02T17:27:26.856493Z"}],"ghsa":[{"id":"GHSA-cg35-fr7p-33m9","title":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out...","description":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.","status":"published","published":"2022-05-24T19:10:21Z","modified":"2026-08-05T18:32:25Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T15:10:07.926015Z"}],"nvd":[{"id":"CVE-2021-38166","description":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.","status":"published","published":"2021-08-07T18:15:07.043Z","modified":"2026-10-08T21:17:38.97Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T14:06:56.562207Z"}],"osv":[{"id":"AZL-6581","title":"CVE-2021-38166 affecting package kernel for versions less than 5.10.78.1-1","description":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.","status":"published","published":"2021-08-07T18:15:07Z","modified":"2026-04-21T04:37:42.868324Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"BELL-CVE-2021-38166","title":"CVE-2021-38166 does not affect BellSoft software","status":"withdrawn","published":"2021-08-07T18:15:00Z","modified":"2026-01-26T09:46:06.750108Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-38166","description":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.","status":"published","published":"2021-08-07T18:15:07.043Z","modified":"2026-04-16T04:35:35.249839623Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:20.843843Z"},{"id":"DEBIAN-CVE-2021-38166","description":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.","status":"published","published":"2021-08-07T18:15:07.043Z","modified":"2026-10-09T09:47:31.474010978Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"UBUNTU-CVE-2021-38166","description":"In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.","status":"published","published":"2021-08-07T18:15:00Z","modified":"2026-02-04T04:32:06.732401Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"DSA-4978-1","title":"linux - security update","status":"published","published":"2021-09-25T00:00:00Z","modified":"2026-03-09T02:11:22.124773Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0409","title":"Updated kernel packages fix security vulnerabilities","description":"This kernel update is based on upstream 5.10.60 and fixes at least the\nfollowing security issues:\n\nSpecifically timed and handcrafted traffic can cause internal errors\nin a WLAN device that lead to improper layer 2 Wi-Fi encryption with a\nconsequent possibility of information disclosure over the air for a\ndiscrete set of traffic in ath9k (CVE-2020-3702).\n\nA missing validation of the \"int_ctl\" VMCB field allows a malicious L1\nguest to enable AVIC support (Advanced Virtual Interrupt Controller)\nfor the L2 guest. The L2 guest is able to write to a limited but still\nrelatively large subset of the host physical memory, resulting in a\ncrash of the entire system, leak of sensitive data or potential\nguest-to-host escape (CVE-2021-3653).\n\nA missing validation of the \"virt_ext\" VMCB field and allows a\nmalicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS\n(Virtual VMLOAD/VMSAVE) for the L2 guest. Under these circumstances,\nthe L2 guest is able to run VMLOAD/VMSAVE unintercepted, and thus\nread/write portions of the host physical memory, resulting in a\ncrash of the entire system, leak of sensitive data or potential\nguest-to-host escape (CVE-2021-3656).\n\nIn kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is\nan integer overflow and out-of-bounds write when many elements are\nplaced in a single bucket (CVE-2021-38166).\n\ndrivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before\n5.13.3 makes it easier for attackers to defeat an ASLR protection\nmechanism because it prints a kernel pointer (CVE-2021-38205).\n\nOther fixes in this update:\n- cfi_cmdset_0002: fix crash when erasing/writing AMD cards\n\nFor other upstream fixes, see the referenced changelogs.\n","status":"published","published":"2021-08-23T05:28:48Z","modified":"2026-04-16T04:42:13.207743166Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"MGASA-2021-0410","title":"Updated kernel-linus packages fix security vulnerabilities","description":"This kernel-linus update is based on upstream 5.10.60 and fixes at least\nthe following security issues:\n\nA missing validation of the \"int_ctl\" VMCB field allows a malicious L1\nguest to enable AVIC support (Advanced Virtual Interrupt Controller)\nfor the L2 guest. The L2 guest is able to write to a limited but still\nrelatively large subset of the host physical memory, resulting in a\ncrash of the entire system, leak of sensitive data or potential\nguest-to-host escape (CVE-2021-3653).\n\nA missing validation of the \"virt_ext\" VMCB field and allows a\nmalicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS\n(Virtual VMLOAD/VMSAVE) for the L2 guest. Under these circumstances,\nthe L2 guest is able to run VMLOAD/VMSAVE unintercepted, and thus\nread/write portions of the host physical memory, resulting in a\ncrash of the entire system, leak of sensitive data or potential\nguest-to-host escape (CVE-2021-3656).\n\nIn kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is\nan integer overflow and out-of-bounds write when many elements are\nplaced in a single bucket (CVE-2021-38166).\n\ndrivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before\n5.13.3 makes it easier for attackers to defeat an ASLR protection\nmechanism because it prints a kernel pointer (CVE-2021-38205).\n\nFor other upstream fixes, see the referenced changelogs.\n","status":"published","published":"2021-08-23T05:28:48Z","modified":"2026-04-16T04:42:36.275748476Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:3179-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).\n- CVE-2021-3653: Missing validation of the `int_ctl` VMCB field and allows a malicious L1 guest to enable AVIC support for the L2 guest. (bsc#1189399).\n- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).\n- CVE-2021-3679: A lack of CPU resource in tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).\n- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).\n- CVE-2021-3739: Fixed a NULL pointer dereference when deleting device by invalid id (bsc#1189832 ).\n- CVE-2021-3743: Fixed OOB Read in qrtr_endpoint_post (bsc#1189883).\n- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).\n- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-\u003elen value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)\n- CVE-2021-38198: arch/x86/kvm/mmu/paging_tmpl.h incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault (bnc#1189262).\n- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).\n- CVE-2021-38205: drivers/net/ethernet/xilinx/xilinx_emaclite.c made it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer) (bnc#1189292).\n- CVE-2021-38207: drivers/net/ethernet/xilinx/ll_temac_main.c allowed remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes (bnc#1189298).\n- CVE-2021-38166: Fixed an integer overflow and out-of-bounds write when many elements are placed in a single bucket in kernel/bpf/hashtab.c (bnc#1189233 ).\n- CVE-2021-38209: Fixed allowed observation of changes in any net namespace via net/netfilter/nf_conntrack_standalone.c (bnc#1189393).\n- CVE-2021-38206: Fixed NULL pointer dereference in the radiotap parser inside the mac80211 subsystem (bnc#1189296).\n- CVE-2021-34556: Fixed side-channel attack via a Speculative Store Bypass via unprivileged BPF program that could have obtain sensitive information from kernel memory (bsc#1188983).\n- CVE-2021-35477: Fixed BPF stack frame pointer which could have been abused to disclose content of arbitrary kernel memory (bsc#1188985).\n- CVE-2021-3759: Unaccounted ipc objects in Linux kernel could have lead to breaking memcg limits and DoS attacks (bsc#1190115).\n- CVE-2020-12770: Fixed sg_remove_request call in a certain failure cases (bsc#1171420).\n\nThe following non-security bugs were fixed:\n\n- ACPI: NFIT: Fix support for virtual SPA ranges (git-fixes).\n- ACPI: processor: Clean up acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export function to claim _CST control (bsc#1175543)\n- ACPI: processor: Introduce acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Make ACPI_PROCESSOR_CSTATE depend on ACPI_PROCESSOR (bsc#1175543)\n- ALSA: hda - fix the 'Capture Switch' value change notifications (git-fixes).\n- ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (git-fixes).\n- ALSA: hda/hdmi: fix max DP-MST dev_num for Intel TGL+ platforms (git-fixes).\n- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically (git-fixes).\n- ALSA: hda/realtek - Add ALC285 HP init procedure (git-fixes).\n- ALSA: hda/realtek - Add type for ALC287 (git-fixes).\n- ALSA: hda/realtek: Change device names for quirks to barebone names (git-fixes).\n- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9510 laptop (git-fixes).\n- ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256) (git-fixes).\n- ALSA: hda/realtek: Limit mic boost on HP ProBook 445 G8 (git-fixes).\n- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (git-fixes).\n- ALSA: hda/realtek: fix mute led of the HP Pavilion 15-eh1xxx series (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 650 G8 Notebook PC (git-fixes).\n- ALSA: hda/via: Apply runtime PM workaround for ASUS B23E (git-fixes).\n- ALSA: hda: Add quirk for ASUS Flow x13 (git-fixes).\n- ALSA: hda: Fix hang during shutdown due to link reset (git-fixes).\n- ALSA: hda: Release controller display power during shutdown/reboot (git-fixes).\n- ALSA: pcm: Fix mmap breakage without explicit buffer setup (git-fixes).\n- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl (git-fixes).\n- ALSA: seq: Fix racy deletion of subscriber (git-fixes).\n- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (git-fixes).\n- ALSA: usb-audio: Avoid unnecessary or invalid connector selection at resume (git-fixes).\n- ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC (git-fixes).\n- ALSA: usb-audio: Fix superfluous autosuspend recovery (git-fixes).\n- ALSA: usb-audio: fix incorrect clock source setting (git-fixes).\n- ASoC: Intel: Skylake: Fix module resource and format selection (git-fixes).\n- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (git-fixes).\n- ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373 (git-fixes).\n- ASoC: SOF: Intel: hda-ipc: fix reply size checking (git-fixes).\n- ASoC: amd: Fix reference to PCM buffer address (git-fixes).\n- ASoC: component: Remove misplaced prefix handling in pin control functions (git-fixes).\n- ASoC: cs42l42: Correct definition of ADC Volume control (git-fixes).\n- ASoC: cs42l42: Do not allow SND_SOC_DAIFMT_LEFT_J (git-fixes).\n- ASoC: cs42l42: Fix LRCLK frame start edge (git-fixes).\n- ASoC: cs42l42: Fix inversion of ADC Notch Switch control (git-fixes).\n- ASoC: cs42l42: Remove duplicate control for WNF filter frequency (git-fixes).\n- ASoC: intel: atom: Fix breakage for PCM buffer address setup (git-fixes).\n- ASoC: intel: atom: Fix reference to PCM buffer address (git-fixes).\n- ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold again (git-fixes).\n- ASoC: rt5682: Fix the issue of garbled recording after powerd_dbus_suspend (git-fixes).\n- ASoC: ti: j721e-evm: Check for not initialized parent_clk_id (git-fixes).\n- ASoC: ti: j721e-evm: Fix unbalanced domain activity tracking during startup (git-fixes).\n- ASoC: tlv320aic31xx: Fix jack detection after suspend (git-fixes).\n- ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (git-fixes).\n- ASoC: uniphier: Fix reference to PCM buffer address (git-fixes).\n- ASoC: wcd9335: Disable irq on slave ports in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a double irq free in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (git-fixes).\n- ASoC: xilinx: Fix reference to PCM buffer address (git-fixes).\n- Avoid double printing SUSE specific flags in mod-\u003etaint (bsc#1190413).\n- Bluetooth: add timeout sanity check to hci_inquiry (git-fixes).\n- Bluetooth: btusb: Fix a unspported condition to set available debug features (git-fixes).\n- Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS (git-fixes).\n- Bluetooth: defer cleanup of resources in hci_unregister_dev() (git-fixes).\n- Bluetooth: fix repeated calls to sco_sock_kill (git-fixes).\n- Bluetooth: hidp: use correct wait queue when removing ctrl_wait (git-fixes).\n- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow (git-fixes).\n- Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd (git-fixes).\n- Bluetooth: sco: prevent information leak in sco_conn_defer_accept() (git-fixes).\n- Documentation: admin-guide: PM: Add intel_idle document (bsc#1175543)\n- KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() (bsc#1188786).\n- KVM: VMX: Enable machine check support for 32bit targets (bsc#1188787).\n- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (bsc#1188788).\n- KVM: VMX: Extend VMXs #AC interceptor to handle split lock #AC in guest (bsc#1187959).\n- KVM: nVMX: Handle split-lock #AC exceptions that happen in L2 (bsc#1187959).\n- KVM: nVMX: Really make emulated nested preemption timer pinned (bsc#1188780).\n- KVM: nVMX: Reset the segment cache when stuffing guest segs (bsc#1188781).\n- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1188782).\n- KVM: nVMX: Sync unsync'd vmcs02 state to vmcs12 on migration (bsc#1188783).\n- KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1188784).\n- KVM: x86: Emulate split-lock access as a write in emulator (bsc#1187959).\n- KVM: x86: bit 8 of non-leaf PDPEs is not reserved (bsc#1188790).\n- NFS: Correct size calculation for create reply length (bsc#1189870).\n- NFSv4.1: Do not rebind to the same source port when (bnc#1186264 bnc#1189021)\n- NFSv4/pNFS: Do not call _nfs4_pnfs_v3_ds_connect multiple times (git-fixes).\n- NFSv4: Initialise connection to the server in nfs4_alloc_client() (bsc#1040364).\n- PCI/MSI: Correct misleading comments (git-fixes).\n- PCI/MSI: Do not set invalid bits in MSI mask (git-fixes).\n- PCI/MSI: Enable and mask MSI-X early (git-fixes).\n- PCI/MSI: Mask all unused MSI-X entries (git-fixes).\n- PCI/MSI: Skip masking MSI-X on Xen PV (git-fixes).\n- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (git-fixes).\n- PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI (git-fixes).\n- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (git-fixes).\n- PCI: PM: Enable PME if it can be signaled from D3cold (git-fixes).\n- RDMA/bnxt_re: Fix stats counters (bsc#1188231).\n- SUNRPC: 'Directory with parent 'rpc_clnt' already present!' (bsc#1168202 bsc#1188924).\n- SUNRPC: Fix the batch tasks count wraparound (git-fixes).\n- SUNRPC: Should wake up the privileged task firstly (git-fixes).\n- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- SUNRPC: fix use-after-free in rpc_free_client_work() (bsc#1168202 bsc#1188924).\n- SUNRPC: improve error response to over-size gss credential (bsc#1190022).\n- SUNRPC: prevent port reuse on transports which do not request it (bnc#1186264 bnc#1189021).\n- USB: core: Avoid WARNings for 0-length descriptor requests (git-fixes).\n- USB: serial: ch341: fix character loss at high transfer rates (git-fixes).\n- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (git-fixes).\n- USB: serial: option: add Telit FD980 composition 0x1056 (git-fixes).\n- USB: usbtmc: Fix RCU stall warning (git-fixes).\n- USB:ehci:fix Kunpeng920 ehci hardware problem (git-fixes).\n- VMCI: fix NULL pointer dereference when unmapping queue pair (git-fixes).\n- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (git-fixes).\n- ath9k: Clear key cache explicitly on disabling hardware (git-fixes).\n- ath: Use safer key clearing with key cache entries (git-fixes).\n- bcma: Fix memory leak for internally-handled cores (git-fixes).\n- bdi: Do not use freezable workqueue (bsc#1189573).\n- blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (bsc#1189507).\n- blk-mq-sched: Fix blk_mq_sched_alloc_tags() error handling (bsc#1189506).\n- blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (bsc#1189503).\n- blk-wbt: make sure throttle is enabled properly (bsc#1189504).\n- block: fix trace completion for chained bio (bsc#1189505).\n- bnxt_en: Validate vlan protocol ID on RX packets (jsc#SLE-15075).\n- brcmfmac: pcie: fix oops on failure to resume and reprobe (git-fixes).\n- btrfs: Rename __btrfs_alloc_chunk to btrfs_alloc_chunk (bsc#1189079).\n- btrfs: add a trace class for dumping the current ENOSPC state (bsc#1135481).\n- btrfs: add a trace point for reserve tickets (bsc#1135481).\n- btrfs: adjust the flush trace point to include the source (bsc#1135481).\n- btrfs: check reclaim_size in need_preemptive_reclaim (bsc#1135481).\n- btrfs: factor out create_chunk() (bsc#1189077).\n- btrfs: factor out decide_stripe_size() (bsc#1189077).\n- btrfs: factor out gather_device_info() (bsc#1189077).\n- btrfs: factor out init_alloc_chunk_ctl (bsc#1189077).\n- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1135481).\n- btrfs: fix deadlock with concurrent chunk allocations involving system chunks (bsc#1189077).\n- btrfs: handle invalid profile in chunk allocation (bsc#1189077).\n- btrfs: implement space clamping for preemptive flushing (bsc#1135481).\n- btrfs: improve preemptive background space flushing (bsc#1135481).\n- btrfs: introduce a FORCE_COMMIT_TRANS flush operation (bsc#1135481).\n- btrfs: introduce alloc_chunk_ctl (bsc#1189077).\n- btrfs: introduce chunk allocation policy (bsc#1189077).\n- btrfs: make flush_space take a enum btrfs_flush_state instead of int (bsc#1135481).\n- btrfs: move the chunk_mutex in btrfs_read_chunk_tree (bsc#1189077).\n- btrfs: parameterize dev_extent_min for chunk allocation (bsc#1189077).\n- btrfs: refactor find_free_dev_extent_start() (bsc#1189077).\n- btrfs: remove FLUSH_DELAYED_REFS from data ENOSPC flushing (bsc#1135481).\n- btrfs: rename need_do_async_reclaim (bsc#1135481).\n- btrfs: rework btrfs_calc_reclaim_metadata_size (bsc#1135481).\n- btrfs: rework chunk allocation to avoid exhaustion of the system chunk array (bsc#1189077).\n- btrfs: rip out btrfs_space_info::total_bytes_pinned (bsc#1135481).\n- btrfs: rip the first_ticket_bytes logic from fail_all_tickets (bsc#1135481).\n- btrfs: simplify the logic in need_preemptive_flushing (bsc#1135481).\n- btrfs: tracepoints: convert flush states to using EM macros (bsc#1135481).\n- btrfs: tracepoints: fix btrfs_trigger_flush symbolic string for flags (bsc#1135481).\n- can: ti_hecc: Fix memleak in ti_hecc_probe (git-fixes).\n- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters (git-fixes).\n- ceph: clean up and optimize ceph_check_delayed_caps() (bsc#1187468).\n- ceph: reduce contention in ceph_check_delayed_caps() (bsc#1187468).\n- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1189427).\n- cifs: Remove unused inline function is_sysvol_or_netlogon() (bsc#1185902).\n- cifs: avoid starvation when refreshing dfs cache (bsc#1185902).\n- cifs: constify get_normalized_path() properly (bsc#1185902).\n- cifs: do not cargo-cult strndup() (bsc#1185902).\n- cifs: do not send tree disconnect to ipc shares (bsc#1185902).\n- cifs: do not share tcp servers with dfs mounts (bsc#1185902).\n- cifs: do not share tcp sessions of dfs connections (bsc#1185902).\n- cifs: fix check of dfs interlinks (bsc#1185902).\n- cifs: fix path comparison and hash calc (bsc#1185902).\n- cifs: get rid of @noreq param in __dfs_cache_find() (bsc#1185902).\n- cifs: handle different charsets in dfs cache (bsc#1185902).\n- cifs: keep referral server sessions alive (bsc#1185902).\n- cifs: missing null pointer check in cifs_mount (bsc#1185902).\n- cifs: prevent NULL deref in cifs_compose_mount_options() (bsc#1185902).\n- cifs: set a minimum of 2 minutes for refreshing dfs cache (bsc#1185902).\n- clk: fix leak on devm_clk_bulk_get_all() unwind (git-fixes).\n- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (git-fixes).\n- cpuidle: Allow idle states to be disabled by default (bsc#1175543)\n- cpuidle: Consolidate disabled state checks (bsc#1175543)\n- cpuidle: Drop disabled field from struct cpuidle_state (bsc#1175543)\n- cpuidle: Fix cpuidle_driver_state_disabled() (bsc#1175543)\n- cpuidle: Introduce cpuidle_driver_state_disabled() for driver quirks (bsc#1175543)\n- crypto: ccp - Annotate SEV Firmware file names (bsc#1189212).\n- crypto: qat - use proper type for vf_mask (git-fixes).\n- crypto: x86/curve25519 - fix cpu feature checking logic in mod_exit (git-fixes).\n- device-dax: Fix default return code of range_parse() (git-fixes).\n- dm integrity: fix missing goto in bitmap_flush_interval error handling (git-fixes).\n- dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (git-fixes).\n- dm verity: fix DM_VERITY_OPTS_MAX value (git-fixes).\n- dmaengine: idxd: fix setup sequence for MSIXPERM table (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-sdma: remove duplicated sdma_load_context (git-fixes).\n- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (git-fixes).\n- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (git-fixes).\n- dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers (git-fixes).\n- drivers/block/null_blk/main: Fix a double free in null_init (git-fixes).\n- drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X (git-fixes).\n- drm/amd/display: Fix comparison error in dcn21 DML (git-fixes).\n- drm/amd/display: Fix max vstartup calculation for modes with borders (git-fixes).\n- drm/amd/display: Remove invalid assert for ODM + MPC case (git-fixes).\n- drm/amd/display: use GFP_ATOMIC in amdgpu_dm_irq_schedule_work (git-fixes).\n- drm/amd/display: workaround for hard hang on HPD on native DP (git-fixes).\n- drm/amdgpu/acp: Make PM domain really work (git-fixes).\n- drm/amdgpu/display: fix DMUB firmware version info (git-fixes).\n- drm/amdgpu/display: only enable aux backlight control for OLED panels (git-fixes).\n- drm/amdgpu: do not enable baco on boco platforms in runpm (git-fixes).\n- drm/amdgpu: fix the doorbell missing when in CGPG issue for renoir (git-fixes).\n- drm/dp_mst: Fix return code on sideband message failure (git-fixes).\n- drm/i915/dg1: gmbus pin mapping (bsc#1188700).\n- drm/i915/dg1: provide port/phy mapping for vbt (bsc#1188700).\n- drm/i915/gen9_bc: Add W/A for missing STRAP config on TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce HPD pin mappings for TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce TGP PCH DDC pin mappings (bsc#1188700).\n- drm/i915/gen9_bc: Recognize TGP PCH + CML combos (bsc#1188700).\n- drm/i915/rkl: new rkl ddc map for different PCH (bsc#1188700).\n- drm/i915: Add VBT AUX CH H and I (bsc#1188700).\n- drm/i915: Add VBT DVO ports H and I (bsc#1188700).\n- drm/i915: Add more AUX CHs to the enum (bsc#1188700).\n- drm/i915: Configure GEN11_{TBT,TC}_HOTPLUG_CTL for ports TC5/6 (bsc#1188700).\n- drm/i915: Correct SFC_DONE register offset (git-fixes).\n- drm/i915: Introduce HPD_PORT_TC\u0026lt;n\u003e (bsc#1188700).\n- drm/i915: Move hpd_pin setup to encoder init (bsc#1188700).\n- drm/i915: Nuke the redundant TC/TBT HPD bit defines (bsc#1188700).\n- drm/i915: Only access SFC_DONE when media domain is not fused off (git-fixes).\n- drm/meson: fix colour distortion from HDR set during vendor u-boot (git-fixes).\n- drm/msi/mdp4: populate priv-\u003ekms in mdp4_kms_init (git-fixes).\n- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs (git-fixes).\n- drm/msm/dsi: Fix some reference counted resource leaks (git-fixes).\n- drm/msm: Fix error return code in msm_drm_init() (git-fixes).\n- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (git-fixes).\n- drm/of: free the iterator object on failure (git-fixes).\n- drm/of: free the right object (git-fixes).\n- drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() (git-fixes).\n- drm/prime: fix comment on PRIME Helpers (git-fixes).\n- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (bsc#1189568).\n- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (bsc#1189564).\n- ext4: fix avefreec in find_group_orlov (bsc#1189566).\n- ext4: fix kernel infoleak via ext4_extent_header (bsc#1189562).\n- ext4: fix potential htree corruption when growing large_dir directories (bsc#1189576).\n- ext4: remove check for zero nr_to_scan in ext4_es_scan() (bsc#1189565).\n- ext4: return error code when ext4_fill_flex_info() fails (bsc#1189563).\n- ext4: use ext4_grp_locked_error in mb_find_extent (bsc#1189567).\n- fanotify: fix copy_event_to_user() fid error clean up (bsc#1189574).\n- firmware_loader: fix use-after-free in firmware_fallback_sysfs (git-fixes).\n- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (git-fixes).\n- fixup 'rpm: support gz and zst compression methods' (bsc#1190358, bsc#1190428).\n- fpga: altera-freeze-bridge: Address warning about unused variable (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: xiilnx-spi: Address warning about unused variable (git-fixes).\n- fpga: zynqmp-fpga: Address warning about unused variable (git-fixes).\n- gpio: eic-sprd: break loop when getting NULL device resource (git-fixes).\n- gpio: tqmx86: really make IRQ optional (git-fixes).\n- i2c: dev: zero out array used for i2c reads from userspace (git-fixes).\n- i2c: highlander: add IRQ check (git-fixes).\n- i2c: iop3xx: fix deferred probing (git-fixes).\n- i2c: mt65xx: fix IRQ check (git-fixes).\n- i2c: s3c2410: fix IRQ check (git-fixes).\n- iio: adc: Fix incorrect exit of for-loop (git-fixes).\n- iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels (git-fixes).\n- iio: humidity: hdc100x: Add margin to the conversion time (git-fixes).\n- intel_idle: Add module parameter to prevent ACPI _CST from being used (bsc#1175543)\n- intel_idle: Allow ACPI _CST to be used for selected known processors (bsc#1175543)\n- intel_idle: Annotate init time data structures (bsc#1175543)\n- intel_idle: Customize IceLake server support (bsc#1175543)\n- intel_idle: Disable ACPI _CST on Haswell (bsc#1175543, bsc#1177399, bsc#1180347, bsc#1180141)\n- intel_idle: Fix max_cstate for processor models without C-state tables (bsc#1175543)\n- intel_idle: Ignore _CST if control cannot be taken from the platform (bsc#1175543)\n- intel_idle: Refactor intel_idle_cpuidle_driver_init() (bsc#1175543)\n- intel_idle: Use ACPI _CST for processor models without C-state tables (bsc#1175543)\n- iommu/amd: Fix extended features logging (bsc#1189213).\n- iommu/amd: Move Stoney Ridge check to detect_ivrs() (bsc#1189762).\n- iommu/arm-smmu-v3: Decrease the queue size of evtq and priq (bsc#1189210).\n- iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK (bsc#1189209).\n- iommu/dma: Fix IOVA reserve dma ranges (bsc#1189214).\n- iommu/dma: Fix compile warning in 32-bit builds (bsc#1189229).\n- iommu/vt-d: Check for allocation failure in aux_detach_device() (bsc#1189215).\n- iommu/vt-d: Define counter explicitly as unsigned int (bsc#1189216).\n- iommu/vt-d: Do not set then clear private data in prq_event_thread() (bsc#1189217).\n- iommu/vt-d: Fix sysfs leak in alloc_iommu() (bsc#1189218).\n- iommu/vt-d: Force to flush iotlb before creating superpage (bsc#1189219).\n- iommu/vt-d: Global devTLB flush when present context entry changed (bsc#1189220).\n- iommu/vt-d: Invalidate PASID cache when root/context entry changed (bsc#1189221).\n- iommu/vt-d: Reject unsupported page request modes (bsc#1189222).\n- ionic: add handling of larger descriptors (jsc#SLE-16649).\n- ionic: add new queue features to interface (jsc#SLE-16649).\n- ionic: aggregate Tx byte counting calls (jsc#SLE-16649).\n- ionic: block actions during fw reset (jsc#SLE-16649).\n- ionic: change mtu after queues are stopped (jsc#SLE-16649).\n- ionic: check for link after netdev registration (jsc#SLE-16649).\n- ionic: code cleanup details (jsc#SLE-16649).\n- ionic: fix sizeof usage (jsc#SLE-16649).\n- ionic: fix unchecked reference (jsc#SLE-16649).\n- ionic: fix up dim accounting for tx and rx (jsc#SLE-16649).\n- ionic: generic tx skb mapping (jsc#SLE-16649).\n- ionic: implement Rx page reuse (jsc#SLE-16649).\n- ionic: make all rx_mode work threadsafe (jsc#SLE-16649).\n- ionic: move rx_page_alloc and free (jsc#SLE-16649).\n- ionic: optimize fastpath struct usage (jsc#SLE-16649).\n- ionic: protect adminq from early destroy (jsc#SLE-16649).\n- ionic: rebuild debugfs on qcq swap (jsc#SLE-16649).\n- ionic: remove intr coalesce update from napi (jsc#SLE-16649).\n- ionic: remove some unnecessary oom messages (jsc#SLE-16649).\n- ionic: simplify TSO descriptor mapping (jsc#SLE-16649).\n- ionic: simplify rx skb alloc (jsc#SLE-16649).\n- ionic: simplify the intr_index use in txq_init (jsc#SLE-16649).\n- ionic: simplify tx clean (jsc#SLE-16649).\n- ionic: simplify use of completion types (jsc#SLE-16649).\n- ionic: start queues before announcing link up (jsc#SLE-16649).\n- ionic: stop watchdog when in broken state (jsc#SLE-16649).\n- ionic: useful names for booleans (jsc#SLE-16649).\n- iwlwifi: pnvm: accept multiple HW-type TLVs (git-fixes).\n- iwlwifi: rs-fw: do not support stbc for HE 160 (git-fixes).\n- iwlwifi: skip first element in the WTAS ACPI table (git-fixes).\n- kABI fix of usb_dcd_config_params (git-fixes).\n- kABI: Fix kABI after fixing vcpu-id indexed arrays (git-fixes).\n- kabi fix for NFSv4.1: Do not rebind to the same source port when reconnecting to the server (bnc#1186264 bnc#1189021)\n- kabi fix for SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (bsc#1189153).\n- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841).\n- leds: trigger: audio: Add an activate callback to ensure the initial brightness is set (git-fixes).\n- lib/mpi: use kcalloc in mpi_resize (git-fixes).\n- lib: Add zstd support to decompress (bsc#1187483, jsc#SLE-18766).\n- libata: fix ata_pio_sector for CONFIG_HIGHMEM (git-fixes).\n- mac80211: Fix insufficient headroom issue for AMSDU (git-fixes).\n- md/raid10: properly indicate failure when ending a failed write request (git-fixes).\n- md: revert io stats accounting (git-fixes).\n- media: TDA1997x: enable EDID support (git-fixes).\n- media: cxd2880-spi: Fix an error handling path (git-fixes).\n- media: drivers/media/usb: fix memory leak in zr364xx_probe (git-fixes).\n- media: dvb-usb: Fix error handling in dvb_usb_i2c_init (git-fixes).\n- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init (git-fixes).\n- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr (git-fixes).\n- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect (git-fixes).\n- media: go7007: fix memory leak in go7007_usb_probe (git-fixes).\n- media: go7007: remove redundant initialization (git-fixes).\n- media: rtl28xxu: fix zero-length control request (git-fixes).\n- media: stkwebcam: fix memory leak in stk_camera_probe (git-fixes).\n- media: venus: venc: Fix potential null pointer dereference on pointer fmt (git-fixes).\n- media: videobuf2-core: dequeue if start_streaming fails (git-fixes).\n- media: zr364xx: fix memory leaks in probe() (git-fixes).\n- media: zr364xx: propagate errors from zr364xx_start_readpipe() (git-fixes).\n- misc: atmel-ssc: lock with mutex instead of spinlock (git-fixes).\n- misc: rtsx: do not setting OC_POWER_DOWN reg in rtsx_pci_init_ocp() (git-fixes).\n- mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (bsc#1189569).\n- mm/vmscan: fix infinite loop in drop_slab_node (VM Functionality, bsc#1189301).\n- mm: fix memory_failure() handling of dax-namespace metadata (bsc#1189872).\n- mm: swap: properly update readahead statistics in unuse_pte_range() (bsc#1187619).\n- mmc: dw_mmc: Fix hang on data CRC error (git-fixes).\n- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: moxart: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: sdhci-iproc: Cap min clock frequency on BCM2711 (git-fixes).\n- mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711 (git-fixes).\n- mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards (git-fixes).\n- nbd: Aovid double completion of a request (git-fixes).\n- nbd: Fix NULL pointer in flush_workqueue (git-fixes).\n- net/mlx5: Add ts_cqe_to_dest_cqn related bits (bsc#1188412)\n- net/mlx5: Properly convey driver version to firmware (git-fixes).\n- net/mlx5e: Add missing capability check for uplink follow (bsc#1188412)\n- net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (git-fixes).\n- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (git-fixes).\n- net: stmmac: free tx skb buffer in stmmac_resume() (git-fixes).\n- net: usb: lan78xx: do not modify phy_device state concurrently (bsc#1188270)\n- nfs: fix acl memory leak of posix_acl_create() (git-fixes).\n- nvme-multipath: revalidate paths during rescan (bsc#1187211)\n- nvme-pci: Use u32 for nvme_dev.q_depth and nvme_queue.q_depth (bsc#1181972).\n- nvme-pci: fix NULL req in completion handler (bsc#1181972).\n- nvme-pci: limit maximum queue depth to 4095 (bsc#1181972).\n- nvme-pci: use unsigned for io queue depth (bsc#1181972).\n- nvme-tcp: Do not reset transport on data digest errors (bsc#1188418).\n- nvme-tcp: do not check blk_mq_tag_to_rq when receiving pdu data (bsc#1181972).\n- nvme: avoid possible double fetch in handling CQE (bsc#1181972).\n- nvme: code command_id with a genctr for use-after-free validation (bsc#1181972).\n- nvme: only call synchronize_srcu when clearing current path (bsc#1188067).\n- nvmet: use NVMET_MAX_NAMESPACES to set nn value (bsc#1189384).\n- ocfs2: fix snprintf() checking (bsc#1189581).\n- ocfs2: fix zero out valid data (bsc#1189579).\n- ocfs2: initialize ip_next_orphan (bsc#1186731).\n- ocfs2: issue zeroout to EOF blocks (bsc#1189582).\n- ovl: allow upperdir inside lowerdir (bsc#1189323).\n- ovl: expand warning in ovl_d_real() (bsc#1189323).\n- ovl: fix missing revert_creds() on error path (bsc#1189323).\n- ovl: perform vfs_getxattr() with mounter creds (bsc#1189323).\n- ovl: skip getxattr of security labels (bsc#1189323).\n- params: lift param_set_uint_minmax to common code (bsc#1181972).\n- pcmcia: i82092: fix a null pointer dereference bug (git-fixes).\n- perf/x86/amd: Do not touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (bsc#1189225).\n- pinctrl: tigerlake: Fix GPIO mapping for newer version of software (git-fixes).\n- platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables (git-fixes).\n- post.sh: detect /usr mountpoint too\n- power: supply: max17042: handle fails of reading status register (git-fixes).\n- powerpc/cacheinfo: Improve diagnostics about malformed cache lists (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Lookup cache by dt node and thread-group id (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Remove the redundant get_shared_cpu_map() (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Use name@unit instead of full DT path in debug messages (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769 git-fixes).\n- powerpc/papr_scm: Reduce error severity if nvdimm stats inaccessible (bsc#1189197 ltc#193906).\n- powerpc/pseries: Fix regression while building external modules (bsc#1160010 ltc#183046 git-fixes).\n- powerpc/pseries: Fix update of LPAR security flavor after LPM (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/smp: Make some symbols static (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/smp: Use existing L2 cache_map cpumask to find L3 cache siblings (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc: Fix is_kvm_guest() / kvm_para_available() (bsc#1181148 ltc#190702 git-fixes).\n- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (git-fixes).\n- regulator: vctrl: Avoid lockdep warning in enable/disable ops (git-fixes).\n- regulator: vctrl: Use locked regulator_get_voltage in probe path (git-fixes).\n- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.\n- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305)\n- rpm/kernel-source.rpmlintrc: ignore new include/config files In 5.13, since 0e0345b77ac4, config files have no longer .h suffix. Adapt the zero-length check. Based on Martin Liska's change.\n- rq-qos: fix missed wake-ups in rq_qos_throttle try two (bsc#1189575).\n- rsi: fix an error code in rsi_probe() (git-fixes).\n- rsi: fix error code in rsi_load_9116_firmware() (git-fixes).\n- s390/ap: Fix hanging ioctl caused by wrong msg counter (bsc#1188982 LTC#193817).\n- s390/boot: fix use of expolines in the DMA code (bsc#1188878 ltc#193771).\n- scsi: blkcg: Add app identifier support for blkcg (bsc#1189385 jsc#SLE-18970).\n- scsi: blkcg: Fix application ID config options (bsc#1189385 jsc#SLE-18970).\n- scsi: cgroup: Add cgroup_get_from_id() (bsc#1189385 jsc#SLE-18970).\n- scsi: core: Add scsi_prot_ref_tag() helper (bsc#1189392).\n- scsi: ibmvfc: Do not wait for initial device scan (bsc#1127650).\n- scsi: libfc: Fix array index out of bound exception (bsc#1188616).\n- scsi: lpfc: Add 256 Gb link speed support (bsc#1189385).\n- scsi: lpfc: Add PCI ID support for LPe37000/LPe38000 series adapters (bsc#1189385).\n- scsi: lpfc: Call discovery state machine when handling PLOGI/ADISC completions (bsc#1189385).\n- scsi: lpfc: Clear outstanding active mailbox during PCI function reset (bsc#1189385).\n- scsi: lpfc: Copyright updates for 12.8.0.11 patches (bsc#1189385).\n- scsi: lpfc: Copyright updates for 14.0.0.0 patches (bsc#1189385).\n- scsi: lpfc: Delay unregistering from transport until GIDFT or ADISC completes (bsc#1189385).\n- scsi: lpfc: Discovery state machine fixes for LOGO handling (bsc#1189385).\n- scsi: lpfc: Enable adisc discovery after RSCN by default (bsc#1189385).\n- scsi: lpfc: Fix KASAN slab-out-of-bounds in lpfc_unreg_rpi() routine (bsc#1189385).\n- scsi: lpfc: Fix NULL ptr dereference with NPIV ports for RDF handling (bsc#1189385).\n- scsi: lpfc: Fix NVMe support reporting in log message (bsc#1189385).\n- scsi: lpfc: Fix build error in lpfc_scsi.c (bsc#1189385).\n- scsi: lpfc: Fix cq_id truncation in rq create (bsc#1189385).\n- scsi: lpfc: Fix function description comments for vmid routines (bsc#1189385).\n- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (bsc#1189385).\n- scsi: lpfc: Fix possible ABBA deadlock in nvmet_xri_aborted() (bsc#1189385).\n- scsi: lpfc: Fix target reset handler from falsely returning FAILURE (bsc#1189385).\n- scsi: lpfc: Improve firmware download logging (bsc#1189385).\n- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1189385).\n- scsi: lpfc: Move initialization of phba-\u003epoll_list earlier to avoid crash (git-fixes).\n- scsi: lpfc: Remove REG_LOGIN check requirement to issue an ELS RDF (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer pcmd (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer temp_hdr (bsc#1189385).\n- scsi: lpfc: Remove use of kmalloc() in trace event logging (bsc#1189385).\n- scsi: lpfc: Revise Topology and RAS support checks for new adapters (bsc#1189385).\n- scsi: lpfc: Skip issuing ADISC when node is in NPR state (bsc#1189385).\n- scsi: lpfc: Skip reg_vpi when link is down for SLI3 in ADISC cmpl path (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 12.8.0.11 (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 14.0.0.0 (bsc#1189385).\n- scsi: lpfc: Use PBDE feature enabled bit to determine PBDE support (bsc#1189385).\n- scsi: lpfc: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189385).\n- scsi: lpfc: vmid: Add QFPA and VMID timeout check in worker thread (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add datastructure for supporting VMID in lpfc (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add support for VMID in mailbox command (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Append the VMID to the wqe before sending (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Functions to manage VMIDs (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement CT commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement ELS commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Introduce VMID in I/O path (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Timeout implementation for VMID (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: VMID parameter initialization (bsc#1189385 jsc#SLE-18970).\n- scsi: mpt3sas: Fix ReplyPostFree pool allocation (bsc#1181006).\n- scsi: qla2xxx: Add heartbeat check (bsc#1189392).\n- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() (bsc#1189392).\n- scsi: qla2xxx: Fix spelling mistakes 'allloc' -\u003e 'alloc' (bsc#1189392).\n- scsi: qla2xxx: Fix use after free in debug code (bsc#1189392).\n- scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (bsc#1189392).\n- scsi: qla2xxx: Remove duplicate declarations (bsc#1189392).\n- scsi: qla2xxx: Remove redundant assignment to rval (bsc#1189392).\n- scsi: qla2xxx: Remove redundant continue statement in a for-loop (bsc#1189392).\n- scsi: qla2xxx: Remove redundant initialization of variable num_cnt (bsc#1189392).\n- scsi: qla2xxx: Remove unused variable 'status' (bsc#1189392).\n- scsi: qla2xxx: Update version to 10.02.00.107-k (bsc#1189392).\n- scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189392).\n- scsi: qla2xxx: Use the proper SCSI midlayer interfaces for PI (bsc#1189392).\n- scsi: qla2xxx: edif: Add authentication pass + fail bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add detection of secure device (bsc#1189392).\n- scsi: qla2xxx: edif: Add doorbell notification for app (bsc#1189392).\n- scsi: qla2xxx: edif: Add encryption to I/O path (bsc#1189392).\n- scsi: qla2xxx: edif: Add extraction of auth_els from the wire (bsc#1189392).\n- scsi: qla2xxx: edif: Add getfcinfo and statistic bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add key update (bsc#1189392).\n- scsi: qla2xxx: edif: Add send, receive, and accept for auth_els (bsc#1189392).\n- scsi: qla2xxx: edif: Add start + stop bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Increment command and completion counts (bsc#1189392).\n- scsi: scsi_transport_srp: Do not block target in SRP_PORT_LOST state (bsc#1184180).\n- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (bsc#1189392).\n- scsi: zfcp: Report port fc_security as unknown early during remote cable pull (git-fixes).\n- serial: 8250: Mask out floating 16/32-bit bus bits (git-fixes).\n- serial: 8250_mtk: fix uart corruption issue when rx power off (git-fixes).\n- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts (git-fixes).\n- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (git-fixes).\n- serial: tegra: Only print FIFO error message when an error occurs (git-fixes).\n- slimbus: messaging: check for valid transaction id (git-fixes).\n- slimbus: messaging: start transaction ids from 1 instead of zero (git-fixes).\n- slimbus: ngd: reset dma setup during runtime pm (git-fixes).\n- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: aspeed: p2a-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: qcom: rpmhpd: Use corner in power_off (git-fixes).\n- soc: qcom: smsm: Fix missed interrupts if state changes while masked (git-fixes).\n- spi: imx: mx51-ecspi: Fix CONFIGREG delay comment (git-fixes).\n- spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (git-fixes).\n- spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (git-fixes).\n- spi: mediatek: Fix fifo transfer (git-fixes).\n- spi: meson-spicc: fix memory leak in meson_spicc_remove (git-fixes).\n- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: spi-pic32: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: sprd: Fix the wrong WDG_LOAD_VAL (git-fixes).\n- spi: stm32h7: fix full duplex irq handler handling (git-fixes).\n- staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (git-fixes).\n- staging: rtl8712: get rid of flush_scheduled_work (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name (git-fixes).\n- tracing / histogram: Give calculation hist_fields a size (git-fixes).\n- tracing: Reject string operand in the histogram expression (git-fixes).\n- tty: serial: fsl_lpuart: fix the wrong mapbase value (git-fixes).\n- ubifs: Fix error return code in alloc_wbufs() (bsc#1189585).\n- ubifs: Fix memleak in ubifs_init_authentication (bsc#1189583).\n- ubifs: Only check replay with inode type to judge if inode linked (bsc#1187455).\n- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (bsc#1189587).\n- ubifs: journal: Fix error return code in ubifs_jnl_write_inode() (bsc#1189586).\n- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available (git-fixes).\n- usb: dwc3: Disable phy suspend after power-on reset (git-fixes).\n- usb: dwc3: Separate field holding multiple properties (git-fixes).\n- usb: dwc3: Stop active transfers before halting the controller (git-fixes).\n- usb: dwc3: Use clk_bulk_prepare_enable() (git-fixes).\n- usb: dwc3: Use devres to get clocks (git-fixes).\n- usb: dwc3: core: do not do suspend for device mode if already suspended (git-fixes).\n- usb: dwc3: debug: Remove newline printout (git-fixes).\n- usb: dwc3: gadget: Check MPS of the request length (git-fixes).\n- usb: dwc3: gadget: Clear DCTL.ULSTCHNGREQ before set (git-fixes).\n- usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable (git-fixes).\n- usb: dwc3: gadget: Disable gadget IRQ during pullup disable (git-fixes).\n- usb: dwc3: gadget: Do not send unintended link state change (git-fixes).\n- usb: dwc3: gadget: Do not setup more than requested (git-fixes).\n- usb: dwc3: gadget: Fix dwc3_calc_trbs_left() (git-fixes).\n- usb: dwc3: gadget: Fix handling ZLP (git-fixes).\n- usb: dwc3: gadget: Give back staled requests (git-fixes).\n- usb: dwc3: gadget: Handle ZLP for sg requests (git-fixes).\n- usb: dwc3: gadget: Prevent EP queuing while stopping transfers (git-fixes).\n- usb: dwc3: gadget: Properly track pending and queued SG (git-fixes).\n- usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup (git-fixes).\n- usb: dwc3: gadget: Set BESL config parameter (git-fixes).\n- usb: dwc3: gadget: Set link state to RX_Detect on disconnect (git-fixes).\n- usb: dwc3: gadget: Stop EP0 transfers during pullup disable (git-fixes).\n- usb: dwc3: gadget: Workaround Mirosoft's BESL check (git-fixes).\n- usb: dwc3: meson-g12a: add IRQ check (git-fixes).\n- usb: dwc3: meson-g12a: check return of dwc3_meson_g12a_usb_init (git-fixes).\n- usb: dwc3: of-simple: add a shutdown (git-fixes).\n- usb: dwc3: st: Add of_dev_put() in probe function (git-fixes).\n- usb: dwc3: st: Add of_node_put() before return in probe function (git-fixes).\n- usb: dwc3: support continuous runtime PM with dual role (git-fixes).\n- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (git-fixes).\n- usb: gadget: Export recommended BESL values (git-fixes).\n- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (git-fixes).\n- usb: gadget: f_hid: fixed NULL pointer dereference (git-fixes).\n- usb: gadget: f_hid: idle uses the highest byte for duration (git-fixes).\n- usb: gadget: mv_u3d: request_irq() after initializing UDC (git-fixes).\n- usb: gadget: udc: at91: add IRQ check (git-fixes).\n- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (git-fixes).\n- usb: host: ohci-tmio: add IRQ check (git-fixes).\n- usb: host: xhci-rcar: Do not reload firmware after the completion (git-fixes).\n- usb: mtu3: fix the wrong HS mult value (git-fixes).\n- usb: mtu3: use @mult for HS isoc or intr (git-fixes).\n- usb: phy: fsl-usb: add IRQ check (git-fixes).\n- usb: phy: tahvo: add IRQ check (git-fixes).\n- usb: phy: twl6030: add IRQ checks (git-fixes).\n- usr: Add support for zstd compressed initramfs (bsc#1187483, jsc#SLE-18766).\n- virt_wifi: fix error on connect (git-fixes).\n- wireguard: allowedips: allocate nodes in kmem_cache (git-fixes).\n- wireguard: allowedips: free empty intermediate nodes when removing single node (git-fixes).\n- wireguard: allowedips: remove nodes in O(1) (git-fixes).\n- writeback: fix obtain a reference to a freeing memcg css (bsc#1189577).\n- x86/fpu: Limit xstate copy size in xstateregs_set() (bsc#1152489).\n- x86/fpu: Make init_fpstate correct with optimized XSAVE (bsc#1152489).\n- x86/fpu: Reset state for all signal restore failures (bsc#1152489).\n- x86/kvm: fix vcpu-id indexed array sizes (git-fixes).\n- x86/sev: Make sure IRQs are disabled while GHCB is active (jsc#SLE-14337).\n- x86/sev: Split up runtime #VC handler for correct state tracking (jsc#SLE-14337).\n- x86/sev: Use 'SEV: ' prefix for messages from sev.c (jsc#SLE-14337).\n- x86/signal: Detect and prevent an alternate signal stack overflow (bsc#1152489).\n- x86/split_lock: Provide handle_guest_split_lock() (bsc#1187959).\n- xen/events: Fix race in set_evtchn_to_irq (git-fixes).\n- xprtrdma: Pad optimization, revisited (bsc#1189760).\n","status":"published","published":"2021-09-21T14:28:59Z","modified":"2026-02-04T04:11:41.974151Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3205-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).\n- CVE-2021-3653: Missing validation of the `int_ctl` VMCB field and allows a malicious L1 guest to enable AVIC support for the L2 guest. (bsc#1189399).\n- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).\n- CVE-2021-3679: A lack of CPU resource in tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).\n- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).\n- CVE-2021-3739: Fixed a NULL pointer dereference when deleting device by invalid id (bsc#1189832 ).\n- CVE-2021-3743: Fixed OOB Read in qrtr_endpoint_post (bsc#1189883).\n- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).\n- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-\u003elen value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)\n- CVE-2021-38198: arch/x86/kvm/mmu/paging_tmpl.h incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault (bnc#1189262).\n- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).\n- CVE-2021-38205: drivers/net/ethernet/xilinx/xilinx_emaclite.c made it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer) (bnc#1189292).\n- CVE-2021-38207: drivers/net/ethernet/xilinx/ll_temac_main.c allowed remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes (bnc#1189298).\n- CVE-2021-38166: Fixed an integer overflow and out-of-bounds write when many elements are placed in a single bucket in kernel/bpf/hashtab.c (bnc#1189233 ).\n- CVE-2021-38209: Fixed allowed observation of changes in any net namespace via net/netfilter/nf_conntrack_standalone.c (bnc#1189393).\n- CVE-2021-38206: Fixed NULL pointer dereference in the radiotap parser inside the mac80211 subsystem (bnc#1189296).\n- CVE-2021-34556: Fixed side-channel attack via a Speculative Store Bypass via unprivileged BPF program that could have obtain sensitive information from kernel memory (bsc#1188983).\n- CVE-2021-35477: Fixed BPF stack frame pointer which could have been abused to disclose content of arbitrary kernel memory (bsc#1188985).\n- CVE-2021-3759: Unaccounted ipc objects in Linux kernel could have lead to breaking memcg limits and DoS attacks (bsc#1190115).\n- CVE-2020-12770: Fixed sg_remove_request call in a certain failure cases (bsc#1171420).\n\nThe following non-security bugs were fixed:\n\n- ACPI: NFIT: Fix support for virtual SPA ranges (git-fixes).\n- ACPI: processor: Clean up acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export function to claim _CST control (bsc#1175543)\n- ACPI: processor: Introduce acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Make ACPI_PROCESSOR_CSTATE depend on ACPI_PROCESSOR (bsc#1175543)\n- ALSA: hda - fix the 'Capture Switch' value change notifications (git-fixes).\n- ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (git-fixes).\n- ALSA: hda/hdmi: fix max DP-MST dev_num for Intel TGL+ platforms (git-fixes).\n- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically (git-fixes).\n- ALSA: hda/realtek - Add ALC285 HP init procedure (git-fixes).\n- ALSA: hda/realtek - Add type for ALC287 (git-fixes).\n- ALSA: hda/realtek: Change device names for quirks to barebone names (git-fixes).\n- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9510 laptop (git-fixes).\n- ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256) (git-fixes).\n- ALSA: hda/realtek: Limit mic boost on HP ProBook 445 G8 (git-fixes).\n- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (git-fixes).\n- ALSA: hda/realtek: fix mute led of the HP Pavilion 15-eh1xxx series (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 650 G8 Notebook PC (git-fixes).\n- ALSA: hda/via: Apply runtime PM workaround for ASUS B23E (git-fixes).\n- ALSA: hda: Add quirk for ASUS Flow x13 (git-fixes).\n- ALSA: hda: Fix hang during shutdown due to link reset (git-fixes).\n- ALSA: hda: Release controller display power during shutdown/reboot (git-fixes).\n- ALSA: pcm: Fix mmap breakage without explicit buffer setup (git-fixes).\n- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl (git-fixes).\n- ALSA: seq: Fix racy deletion of subscriber (git-fixes).\n- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (git-fixes).\n- ALSA: usb-audio: Avoid unnecessary or invalid connector selection at resume (git-fixes).\n- ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC (git-fixes).\n- ALSA: usb-audio: Fix superfluous autosuspend recovery (git-fixes).\n- ALSA: usb-audio: fix incorrect clock source setting (git-fixes).\n- ASoC: Intel: Skylake: Fix module resource and format selection (git-fixes).\n- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (git-fixes).\n- ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373 (git-fixes).\n- ASoC: SOF: Intel: hda-ipc: fix reply size checking (git-fixes).\n- ASoC: amd: Fix reference to PCM buffer address (git-fixes).\n- ASoC: component: Remove misplaced prefix handling in pin control functions (git-fixes).\n- ASoC: cs42l42: Correct definition of ADC Volume control (git-fixes).\n- ASoC: cs42l42: Do not allow SND_SOC_DAIFMT_LEFT_J (git-fixes).\n- ASoC: cs42l42: Fix LRCLK frame start edge (git-fixes).\n- ASoC: cs42l42: Fix inversion of ADC Notch Switch control (git-fixes).\n- ASoC: cs42l42: Remove duplicate control for WNF filter frequency (git-fixes).\n- ASoC: intel: atom: Fix breakage for PCM buffer address setup (git-fixes).\n- ASoC: intel: atom: Fix reference to PCM buffer address (git-fixes).\n- ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold again (git-fixes).\n- ASoC: rt5682: Fix the issue of garbled recording after powerd_dbus_suspend (git-fixes).\n- ASoC: ti: j721e-evm: Check for not initialized parent_clk_id (git-fixes).\n- ASoC: ti: j721e-evm: Fix unbalanced domain activity tracking during startup (git-fixes).\n- ASoC: tlv320aic31xx: Fix jack detection after suspend (git-fixes).\n- ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (git-fixes).\n- ASoC: uniphier: Fix reference to PCM buffer address (git-fixes).\n- ASoC: wcd9335: Disable irq on slave ports in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a double irq free in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (git-fixes).\n- ASoC: xilinx: Fix reference to PCM buffer address (git-fixes).\n- Avoid double printing SUSE specific flags in mod-\u003etaint (bsc#1190413).\n- Bluetooth: add timeout sanity check to hci_inquiry (git-fixes).\n- Bluetooth: btusb: Fix a unspported condition to set available debug features (git-fixes).\n- Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS (git-fixes).\n- Bluetooth: defer cleanup of resources in hci_unregister_dev() (git-fixes).\n- Bluetooth: fix repeated calls to sco_sock_kill (git-fixes).\n- Bluetooth: hidp: use correct wait queue when removing ctrl_wait (git-fixes).\n- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow (git-fixes).\n- Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd (git-fixes).\n- Bluetooth: sco: prevent information leak in sco_conn_defer_accept() (git-fixes).\n- Drop two intel_int0002_vgpio patches that cause Oops (bsc#1190412)\n- KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() (bsc#1188786).\n- KVM: VMX: Enable machine check support for 32bit targets (bsc#1188787).\n- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (bsc#1188788).\n- KVM: VMX: Extend VMXs #AC interceptor to handle split lock #AC in guest (bsc#1187959).\n- KVM: nVMX: Handle split-lock #AC exceptions that happen in L2 (bsc#1187959).\n- KVM: nVMX: Really make emulated nested preemption timer pinned (bsc#1188780).\n- KVM: nVMX: Reset the segment cache when stuffing guest segs (bsc#1188781).\n- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1188782).\n- KVM: nVMX: Sync unsync'd vmcs02 state to vmcs12 on migration (bsc#1188783).\n- KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1188784).\n- KVM: x86: Emulate split-lock access as a write in emulator (bsc#1187959).\n- KVM: x86: bit 8 of non-leaf PDPEs is not reserved (bsc#1188790).\n- NFS: Correct size calculation for create reply length (bsc#1189870).\n- NFSv4.1: Do not rebind to the same source port when (bnc#1186264 bnc#1189021)\n- NFSv4/pNFS: Do not call _nfs4_pnfs_v3_ds_connect multiple times (git-fixes).\n- NFSv4: Initialise connection to the server in nfs4_alloc_client() (bsc#1040364).\n- PCI/MSI: Correct misleading comments (git-fixes).\n- PCI/MSI: Do not set invalid bits in MSI mask (git-fixes).\n- PCI/MSI: Enable and mask MSI-X early (git-fixes).\n- PCI/MSI: Enforce MSI[X] entry updates to be visible (git-fixes).\n- PCI/MSI: Enforce that MSI-X table entry is masked for update (git-fixes).\n- PCI/MSI: Mask all unused MSI-X entries (git-fixes).\n- PCI/MSI: Skip masking MSI-X on Xen PV (git-fixes).\n- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (git-fixes).\n- PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI (git-fixes).\n- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (git-fixes).\n- PCI: PM: Enable PME if it can be signaled from D3cold (git-fixes).\n- RDMA/bnxt_re: Fix stats counters (bsc#1188231).\n- SUNRPC: 'Directory with parent 'rpc_clnt' already present!' (bsc#1168202 bsc#1188924).\n- SUNRPC: Fix the batch tasks count wraparound (git-fixes).\n- SUNRPC: Should wake up the privileged task firstly (git-fixes).\n- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- SUNRPC: fix use-after-free in rpc_free_client_work() (bsc#1168202 bsc#1188924).\n- SUNRPC: improve error response to over-size gss credential (bsc#1190022).\n- SUNRPC: prevent port reuse on transports which do not request it (bnc#1186264 bnc#1189021).\n- USB: core: Avoid WARNings for 0-length descriptor requests (git-fixes).\n- USB: serial: ch341: fix character loss at high transfer rates (git-fixes).\n- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (git-fixes).\n- USB: serial: option: add Telit FD980 composition 0x1056 (git-fixes).\n- USB: usbtmc: Fix RCU stall warning (git-fixes).\n- USB:ehci:fix Kunpeng920 ehci hardware problem (git-fixes).\n- VMCI: fix NULL pointer dereference when unmapping queue pair (git-fixes).\n- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (git-fixes).\n- ath9k: Clear key cache explicitly on disabling hardware (git-fixes).\n- ath: Use safer key clearing with key cache entries (git-fixes).\n- bcma: Fix memory leak for internally-handled cores (git-fixes).\n- bdi: Do not use freezable workqueue (bsc#1189573).\n- blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (bsc#1189507).\n- blk-mq-sched: Fix blk_mq_sched_alloc_tags() error handling (bsc#1189506).\n- blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (bsc#1189503).\n- blk-wbt: make sure throttle is enabled properly (bsc#1189504).\n- block: fix trace completion for chained bio (bsc#1189505).\n- bnxt_en: Validate vlan protocol ID on RX packets (jsc#SLE-15075).\n- brcmfmac: pcie: fix oops on failure to resume and reprobe (git-fixes).\n- btrfs: Rename __btrfs_alloc_chunk to btrfs_alloc_chunk (bsc#1189077).\n- btrfs: add a trace class for dumping the current ENOSPC state (bsc#1135481).\n- btrfs: add a trace point for reserve tickets (bsc#1135481).\n- btrfs: adjust the flush trace point to include the source (bsc#1135481).\n- btrfs: check reclaim_size in need_preemptive_reclaim (bsc#1135481).\n- btrfs: factor out create_chunk() (bsc#1189077).\n- btrfs: factor out decide_stripe_size() (bsc#1189077).\n- btrfs: factor out gather_device_info() (bsc#1189077).\n- btrfs: factor out init_alloc_chunk_ctl (bsc#1189077).\n- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1135481).\n- btrfs: fix deadlock with concurrent chunk allocations involving system chunks (bsc#1189077).\n- btrfs: handle invalid profile in chunk allocation (bsc#1189077).\n- btrfs: implement space clamping for preemptive flushing (bsc#1135481).\n- btrfs: improve preemptive background space flushing (bsc#1135481).\n- btrfs: introduce a FORCE_COMMIT_TRANS flush operation (bsc#1135481).\n- btrfs: introduce alloc_chunk_ctl (bsc#1189077).\n- btrfs: introduce chunk allocation policy (bsc#1189077).\n- btrfs: make flush_space take a enum btrfs_flush_state instead of int (bsc#1135481).\n- btrfs: move the chunk_mutex in btrfs_read_chunk_tree (bsc#1189077).\n- btrfs: parameterize dev_extent_min for chunk allocation (bsc#1189077).\n- btrfs: refactor find_free_dev_extent_start() (bsc#1189077).\n- btrfs: remove FLUSH_DELAYED_REFS from data ENOSPC flushing (bsc#1135481).\n- btrfs: rename need_do_async_reclaim (bsc#1135481).\n- btrfs: rework btrfs_calc_reclaim_metadata_size (bsc#1135481).\n- btrfs: rework chunk allocation to avoid exhaustion of the system chunk array (bsc#1189077).\n- btrfs: rip out btrfs_space_info::total_bytes_pinned (bsc#1135481).\n- btrfs: rip the first_ticket_bytes logic from fail_all_tickets (bsc#1135481).\n- btrfs: simplify the logic in need_preemptive_flushing (bsc#1135481).\n- btrfs: tracepoints: convert flush states to using EM macros (bsc#1135481).\n- btrfs: tracepoints: fix btrfs_trigger_flush symbolic string for flags (bsc#1135481).\n- can: ti_hecc: Fix memleak in ti_hecc_probe (git-fixes).\n- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters (git-fixes).\n- ceph: clean up and optimize ceph_check_delayed_caps() (bsc#1187468).\n- ceph: reduce contention in ceph_check_delayed_caps() (bsc#1187468).\n- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1189427).\n- cfg80211: Fix possible memory leak in function cfg80211_bss_update (git-fixes).\n- cifs: Remove unused inline function is_sysvol_or_netlogon() (bsc#1185902).\n- cifs: avoid starvation when refreshing dfs cache (bsc#1185902).\n- cifs: constify get_normalized_path() properly (bsc#1185902).\n- cifs: do not cargo-cult strndup() (bsc#1185902).\n- cifs: do not send tree disconnect to ipc shares (bsc#1185902).\n- cifs: do not share tcp servers with dfs mounts (bsc#1185902).\n- cifs: do not share tcp sessions of dfs connections (bsc#1185902).\n- cifs: fix check of dfs interlinks (bsc#1185902).\n- cifs: fix path comparison and hash calc (bsc#1185902).\n- cifs: get rid of @noreq param in __dfs_cache_find() (bsc#1185902).\n- cifs: handle different charsets in dfs cache (bsc#1185902).\n- cifs: keep referral server sessions alive (bsc#1185902).\n- cifs: missing null pointer check in cifs_mount (bsc#1185902).\n- cifs: prevent NULL deref in cifs_compose_mount_options() (bsc#1185902).\n- cifs: set a minimum of 2 minutes for refreshing dfs cache (bsc#1185902).\n- clk: fix leak on devm_clk_bulk_get_all() unwind (git-fixes).\n- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (git-fixes).\n- cpuidle: Allow idle states to be disabled by default (bsc#1175543)\n- cpuidle: Consolidate disabled state checks (bsc#1175543) \n- cpuidle: Drop disabled field from struct cpuidle_state (bsc#1175543)\n- cpuidle: Fix cpuidle_driver_state_disabled() (bsc#1175543)\n- cpuidle: Introduce cpuidle_driver_state_disabled() for driver quirks (bsc#1175543)\n- crypto: ccp - Annotate SEV Firmware file names (bsc#1189212).\n- crypto: qat - use proper type for vf_mask (git-fixes).\n- crypto: x86/curve25519 - fix cpu feature checking logic in mod_exit (git-fixes).\n- device-dax: Fix default return code of range_parse() (git-fixes).\n- dm integrity: fix missing goto in bitmap_flush_interval error handling (git-fixes).\n- dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (git-fixes).\n- dm verity: fix DM_VERITY_OPTS_MAX value (git-fixes).\n- dmaengine: idxd: fix setup sequence for MSIXPERM table (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-sdma: remove duplicated sdma_load_context (git-fixes).\n- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (git-fixes).\n- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (git-fixes).\n- dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers (git-fixes).\n- drivers/block/null_blk/main: Fix a double free in null_init (git-fixes).\n- drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X (git-fixes).\n- drm/amd/display: Fix comparison error in dcn21 DML (git-fixes).\n- drm/amd/display: Fix max vstartup calculation for modes with borders (git-fixes).\n- drm/amd/display: Remove invalid assert for ODM + MPC case (git-fixes).\n- drm/amd/display: use GFP_ATOMIC in amdgpu_dm_irq_schedule_work (git-fixes).\n- drm/amd/display: workaround for hard hang on HPD on native DP (git-fixes).\n- drm/amdgpu/acp: Make PM domain really work (git-fixes).\n- drm/amdgpu/display: fix DMUB firmware version info (git-fixes).\n- drm/amdgpu/display: only enable aux backlight control for OLED panels (git-fixes).\n- drm/amdgpu: do not enable baco on boco platforms in runpm (git-fixes).\n- drm/amdgpu: fix the doorbell missing when in CGPG issue for renoir (git-fixes).\n- drm/dp_mst: Fix return code on sideband message failure (git-fixes).\n- drm/i915/dg1: gmbus pin mapping (bsc#1188700).\n- drm/i915/dg1: provide port/phy mapping for vbt (bsc#1188700).\n- drm/i915/gen9_bc: Add W/A for missing STRAP config on TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce HPD pin mappings for TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce TGP PCH DDC pin mappings (bsc#1188700).\n- drm/i915/gen9_bc: Recognize TGP PCH + CML combos (bsc#1188700).\n- drm/i915/rkl: new rkl ddc map for different PCH (bsc#1188700).\n- drm/i915: Add VBT AUX CH H and I (bsc#1188700).\n- drm/i915: Add VBT DVO ports H and I (bsc#1188700).\n- drm/i915: Add more AUX CHs to the enum (bsc#1188700).\n- drm/i915: Configure GEN11_{TBT,TC}_HOTPLUG_CTL for ports TC5/6 (bsc#1188700).\n- drm/i915: Correct SFC_DONE register offset (git-fixes).\n- drm/i915: Introduce HPD_PORT_TC\u0026lt;n\u003e (bsc#1188700).\n- drm/i915: Move hpd_pin setup to encoder init (bsc#1188700).\n- drm/i915: Nuke the redundant TC/TBT HPD bit defines (bsc#1188700).\n- drm/i915: Only access SFC_DONE when media domain is not fused off (git-fixes).\n- drm/meson: fix colour distortion from HDR set during vendor u-boot (git-fixes).\n- drm/msi/mdp4: populate priv-\u003ekms in mdp4_kms_init (git-fixes).\n- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs (git-fixes).\n- drm/msm/dsi: Fix some reference counted resource leaks (git-fixes).\n- drm/msm: Fix error return code in msm_drm_init() (git-fixes).\n- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (git-fixes).\n- drm/of: free the iterator object on failure (git-fixes).\n- drm/of: free the right object (git-fixes).\n- drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() (git-fixes).\n- drm/prime: fix comment on PRIME Helpers (git-fixes).\n- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (bsc#1189568).\n- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (bsc#1189564).\n- ext4: fix avefreec in find_group_orlov (bsc#1189566).\n- ext4: fix kernel infoleak via ext4_extent_header (bsc#1189562).\n- ext4: fix potential htree corruption when growing large_dir directories (bsc#1189576).\n- ext4: remove check for zero nr_to_scan in ext4_es_scan() (bsc#1189565).\n- ext4: return error code when ext4_fill_flex_info() fails (bsc#1189563).\n- ext4: use ext4_grp_locked_error in mb_find_extent (bsc#1189567).\n- fanotify: fix copy_event_to_user() fid error clean up (bsc#1189574).\n- firmware_loader: fix use-after-free in firmware_fallback_sysfs (git-fixes).\n- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (git-fixes).\n- fixup 'rpm: support gz and zst compression methods' (bsc#1190358, bsc#1190428).\n- fpga: altera-freeze-bridge: Address warning about unused variable (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: xiilnx-spi: Address warning about unused variable (git-fixes).\n- fpga: zynqmp-fpga: Address warning about unused variable (git-fixes).\n- gpio: eic-sprd: break loop when getting NULL device resource (git-fixes).\n- gpio: tqmx86: really make IRQ optional (git-fixes).\n- i2c: dev: zero out array used for i2c reads from userspace (git-fixes).\n- i2c: highlander: add IRQ check (git-fixes).\n- i2c: iop3xx: fix deferred probing (git-fixes).\n- i2c: mt65xx: fix IRQ check (git-fixes).\n- i2c: s3c2410: fix IRQ check (git-fixes).\n- iio: adc: Fix incorrect exit of for-loop (git-fixes).\n- iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels (git-fixes).\n- iio: humidity: hdc100x: Add margin to the conversion time (git-fixes).\n- intel_idle: Add module parameter to prevent ACPI _CST from being used (bsc#1175543)\n- intel_idle: Allow ACPI _CST to be used for selected known processors (bsc#1175543)\n- intel_idle: Annotate init time data structures (bsc#1175543)\n- intel_idle: Customize IceLake server support (bsc#1175543)\n- intel_idle: Disable ACPI _CST on Haswell (bsc#1175543, bsc#1177399, bsc#1180347, bsc#1180141)\n- intel_idle: Fix max_cstate for processor models without C-state tables (bsc#1175543)\n- intel_idle: Ignore _CST if control cannot be taken from the platform (bsc#1175543)\n- intel_idle: Refactor intel_idle_cpuidle_driver_init() (bsc#1175543)\n- intel_idle: Use ACPI _CST for processor models without C-state tables (bsc#1175543)\n- iommu/amd: Fix extended features logging (bsc#1189213).\n- iommu/amd: Move Stoney Ridge check to detect_ivrs() (bsc#1189762).\n- iommu/arm-smmu-v3: Decrease the queue size of evtq and priq (bsc#1189210).\n- iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK (bsc#1189209).\n- iommu/dma: Fix IOVA reserve dma ranges (bsc#1189214).\n- iommu/dma: Fix compile warning in 32-bit builds (bsc#1189229).\n- iommu/vt-d: Check for allocation failure in aux_detach_device() (bsc#1189215).\n- iommu/vt-d: Define counter explicitly as unsigned int (bsc#1189216).\n- iommu/vt-d: Do not set then clear private data in prq_event_thread() (bsc#1189217).\n- iommu/vt-d: Fix sysfs leak in alloc_iommu() (bsc#1189218).\n- iommu/vt-d: Force to flush iotlb before creating superpage (bsc#1189219).\n- iommu/vt-d: Global devTLB flush when present context entry changed (bsc#1189220).\n- iommu/vt-d: Invalidate PASID cache when root/context entry changed (bsc#1189221).\n- iommu/vt-d: Reject unsupported page request modes (bsc#1189222).\n- ionic: add handling of larger descriptors (jsc#SLE-16649).\n- ionic: add new queue features to interface (jsc#SLE-16649).\n- ionic: aggregate Tx byte counting calls (jsc#SLE-16649).\n- ionic: block actions during fw reset (jsc#SLE-16649).\n- ionic: change mtu after queues are stopped (jsc#SLE-16649).\n- ionic: check for link after netdev registration (jsc#SLE-16649).\n- ionic: code cleanup details (jsc#SLE-16649).\n- ionic: fix sizeof usage (jsc#SLE-16649).\n- ionic: fix unchecked reference (jsc#SLE-16649).\n- ionic: fix up dim accounting for tx and rx (jsc#SLE-16649).\n- ionic: generic tx skb mapping (jsc#SLE-16649).\n- ionic: implement Rx page reuse (jsc#SLE-16649).\n- ionic: make all rx_mode work threadsafe (jsc#SLE-16649).\n- ionic: move rx_page_alloc and free (jsc#SLE-16649).\n- ionic: optimize fastpath struct usage (jsc#SLE-16649).\n- ionic: protect adminq from early destroy (jsc#SLE-16649).\n- ionic: rebuild debugfs on qcq swap (jsc#SLE-16649).\n- ionic: remove intr coalesce update from napi (jsc#SLE-16649).\n- ionic: remove some unnecessary oom messages (jsc#SLE-16649).\n- ionic: simplify TSO descriptor mapping (jsc#SLE-16649).\n- ionic: simplify rx skb alloc (jsc#SLE-16649).\n- ionic: simplify the intr_index use in txq_init (jsc#SLE-16649).\n- ionic: simplify tx clean (jsc#SLE-16649).\n- ionic: simplify use of completion types (jsc#SLE-16649).\n- ionic: start queues before announcing link up (jsc#SLE-16649).\n- ionic: stop watchdog when in broken state (jsc#SLE-16649).\n- ionic: useful names for booleans (jsc#SLE-16649).\n- iwlwifi: pnvm: accept multiple HW-type TLVs (git-fixes).\n- iwlwifi: rs-fw: do not support stbc for HE 160 (git-fixes).\n- iwlwifi: skip first element in the WTAS ACPI table (git-fixes).\n- kABI fix of usb_dcd_config_params (git-fixes).\n- kABI: Fix kABI after fixing vcpu-id indexed arrays (git-fixes).\n- kabi fix for NFSv4.1: Do not rebind to the same source port when reconnecting to the server (bnc#1186264 bnc#1189021)\n- kabi fix for SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (bsc#1189153).\n- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841).\n- leds: trigger: audio: Add an activate callback to ensure the initial brightness is set (git-fixes).\n- lib/mpi: use kcalloc in mpi_resize (git-fixes).\n- lib: Add zstd support to decompress (bsc#1187483, jsc#SLE-18766).\n- libata: fix ata_pio_sector for CONFIG_HIGHMEM (git-fixes).\n- mac80211: Fix insufficient headroom issue for AMSDU (git-fixes).\n- md/raid10: properly indicate failure when ending a failed write request (git-fixes).\n- md: revert io stats accounting (git-fixes).\n- media: TDA1997x: enable EDID support (git-fixes).\n- media: cxd2880-spi: Fix an error handling path (git-fixes).\n- media: drivers/media/usb: fix memory leak in zr364xx_probe (git-fixes).\n- media: dvb-usb: Fix error handling in dvb_usb_i2c_init (git-fixes).\n- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init (git-fixes).\n- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr (git-fixes).\n- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect (git-fixes).\n- media: go7007: fix memory leak in go7007_usb_probe (git-fixes).\n- media: go7007: remove redundant initialization (git-fixes).\n- media: rtl28xxu: fix zero-length control request (git-fixes).\n- media: stkwebcam: fix memory leak in stk_camera_probe (git-fixes).\n- media: venus: venc: Fix potential null pointer dereference on pointer fmt (git-fixes).\n- media: videobuf2-core: dequeue if start_streaming fails (git-fixes).\n- media: zr364xx: fix memory leaks in probe() (git-fixes).\n- media: zr364xx: propagate errors from zr364xx_start_readpipe() (git-fixes).\n- misc: atmel-ssc: lock with mutex instead of spinlock (git-fixes).\n- misc: rtsx: do not setting OC_POWER_DOWN reg in rtsx_pci_init_ocp() (git-fixes).\n- mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (bsc#1189569).\n- mm/vmscan: fix infinite loop in drop_slab_node (VM Functionality, bsc#1189301).\n- mm: fix memory_failure() handling of dax-namespace metadata (bsc#1189872).\n- mm: swap: properly update readahead statistics in unuse_pte_range() (bsc#1187619).\n- mmc: dw_mmc: Fix hang on data CRC error (git-fixes).\n- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: moxart: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: sdhci-iproc: Cap min clock frequency on BCM2711 (git-fixes).\n- mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711 (git-fixes).\n- mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards (git-fixes).\n- nbd: Aovid double completion of a request (git-fixes).\n- nbd: Fix NULL pointer in flush_workqueue (git-fixes).\n- net/mlx5: Add ts_cqe_to_dest_cqn related bits (bsc#1188412)\n- net/mlx5: Properly convey driver version to firmware (git-fixes).\n- net/mlx5e: Add missing capability check for uplink follow (bsc#1188412)\n- net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (git-fixes).\n- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (git-fixes).\n- net: stmmac: free tx skb buffer in stmmac_resume() (git-fixes).\n- net: usb: lan78xx: do not modify phy_device state concurrently (bsc#1188270)\n- nfs: fix acl memory leak of posix_acl_create() (git-fixes).\n- nvme-multipath: revalidate paths during rescan (bsc#1187211)\n- nvme-pci: Use u32 for nvme_dev.q_depth and nvme_queue.q_depth (bsc#1181972).\n- nvme-pci: fix NULL req in completion handler (bsc#1181972).\n- nvme-pci: limit maximum queue depth to 4095 (bsc#1181972).\n- nvme-pci: use unsigned for io queue depth (bsc#1181972).\n- nvme-tcp: Do not reset transport on data digest errors (bsc#1188418).\n- nvme-tcp: do not check blk_mq_tag_to_rq when receiving pdu data (bsc#1181972).\n- nvme: avoid possible double fetch in handling CQE (bsc#1181972).\n- nvme: code command_id with a genctr for use-after-free validation (bsc#1181972).\n- nvme: only call synchronize_srcu when clearing current path (bsc#1188067).\n- nvmet: use NVMET_MAX_NAMESPACES to set nn value (bsc#1189384).\n- ocfs2: fix snprintf() checking (bsc#1189581).\n- ocfs2: fix zero out valid data (bsc#1189579).\n- ocfs2: initialize ip_next_orphan (bsc#1186731).\n- ocfs2: issue zeroout to EOF blocks (bsc#1189582).\n- ovl: allow upperdir inside lowerdir (bsc#1189323).\n- ovl: expand warning in ovl_d_real() (bsc#1189323).\n- ovl: fix missing revert_creds() on error path (bsc#1189323).\n- ovl: perform vfs_getxattr() with mounter creds (bsc#1189323).\n- ovl: skip getxattr of security labels (bsc#1189323).\n- params: lift param_set_uint_minmax to common code (bsc#1181972).\n- pcmcia: i82092: fix a null pointer dereference bug (git-fixes).\n- perf/x86/amd: Do not touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (bsc#1189225).\n- pinctrl: tigerlake: Fix GPIO mapping for newer version of software (git-fixes).\n- platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables (git-fixes).\n- post.sh: detect /usr mountpoint too\n- power: supply: max17042: handle fails of reading status register (git-fixes).\n- powerpc/cacheinfo: Improve diagnostics about malformed cache lists (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Lookup cache by dt node and thread-group id (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Remove the redundant get_shared_cpu_map() (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Use name@unit instead of full DT path in debug messages (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769 git-fixes).\n- powerpc/papr_scm: Reduce error severity if nvdimm stats inaccessible (bsc#1189197 ltc#193906).\n- powerpc/pseries: Fix regression while building external modules (bsc#1160010 ltc#183046 git-fixes). This changes a GPL symbol to general symbol which is kABI change but not kABI break.\n- powerpc/pseries: Fix update of LPAR security flavor after LPM (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/smp: Make some symbols static (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/smp: Use existing L2 cache_map cpumask to find L3 cache siblings (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc: Fix is_kvm_guest() / kvm_para_available() (bsc#1181148 ltc#190702 git-fixes).\n- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (git-fixes).\n- regulator: vctrl: Avoid lockdep warning in enable/disable ops (git-fixes).\n- regulator: vctrl: Use locked regulator_get_voltage in probe path (git-fixes).\n- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.\n- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305)\n- rpm/kernel-source.rpmlintrc: ignore new include/config files In 5.13, since 0e0345b77ac4, config files have no longer .h suffix. Adapt the zero-length check. Based on Martin Liska's change.\n- rq-qos: fix missed wake-ups in rq_qos_throttle try two (bsc#1189575).\n- rsi: fix an error code in rsi_probe() (git-fixes).\n- rsi: fix error code in rsi_load_9116_firmware() (git-fixes).\n- s390/ap: Fix hanging ioctl caused by wrong msg counter (bsc#1188982 LTC#193817).\n- s390/boot: fix use of expolines in the DMA code (bsc#1188878 ltc#193771).\n- scsi: blkcg: Add app identifier support for blkcg (bsc#1189385 jsc#SLE-18970).\n- scsi: blkcg: Fix application ID config options (bsc#1189385 jsc#SLE-18970).\n- scsi: cgroup: Add cgroup_get_from_id() (bsc#1189385 jsc#SLE-18970).\n- scsi: core: Add scsi_prot_ref_tag() helper (bsc#1189392).\n- scsi: ibmvfc: Do not wait for initial device scan (bsc#1127650).\n- scsi: libfc: Fix array index out of bound exception (bsc#1188616).\n- scsi: lpfc: Add 256 Gb link speed support (bsc#1189385).\n- scsi: lpfc: Add PCI ID support for LPe37000/LPe38000 series adapters (bsc#1189385).\n- scsi: lpfc: Call discovery state machine when handling PLOGI/ADISC completions (bsc#1189385).\n- scsi: lpfc: Clear outstanding active mailbox during PCI function reset (bsc#1189385).\n- scsi: lpfc: Copyright updates for 12.8.0.11 patches (bsc#1189385).\n- scsi: lpfc: Copyright updates for 14.0.0.0 patches (bsc#1189385).\n- scsi: lpfc: Delay unregistering from transport until GIDFT or ADISC completes (bsc#1189385).\n- scsi: lpfc: Discovery state machine fixes for LOGO handling (bsc#1189385).\n- scsi: lpfc: Enable adisc discovery after RSCN by default (bsc#1189385).\n- scsi: lpfc: Fix KASAN slab-out-of-bounds in lpfc_unreg_rpi() routine (bsc#1189385).\n- scsi: lpfc: Fix NULL ptr dereference with NPIV ports for RDF handling (bsc#1189385).\n- scsi: lpfc: Fix NVMe support reporting in log message (bsc#1189385).\n- scsi: lpfc: Fix build error in lpfc_scsi.c (bsc#1189385).\n- scsi: lpfc: Fix cq_id truncation in rq create (bsc#1189385).\n- scsi: lpfc: Fix function description comments for vmid routines (bsc#1189385).\n- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (bsc#1189385).\n- scsi: lpfc: Fix possible ABBA deadlock in nvmet_xri_aborted() (bsc#1189385).\n- scsi: lpfc: Fix target reset handler from falsely returning FAILURE (bsc#1189385).\n- scsi: lpfc: Improve firmware download logging (bsc#1189385).\n- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1189385).\n- scsi: lpfc: Move initialization of phba-\u003epoll_list earlier to avoid crash (git-fixes).\n- scsi: lpfc: Remove REG_LOGIN check requirement to issue an ELS RDF (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer pcmd (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer temp_hdr (bsc#1189385).\n- scsi: lpfc: Remove use of kmalloc() in trace event logging (bsc#1189385).\n- scsi: lpfc: Revise Topology and RAS support checks for new adapters (bsc#1189385).\n- scsi: lpfc: Skip issuing ADISC when node is in NPR state (bsc#1189385).\n- scsi: lpfc: Skip reg_vpi when link is down for SLI3 in ADISC cmpl path (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 12.8.0.11 (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 14.0.0.0 (bsc#1189385).\n- scsi: lpfc: Use PBDE feature enabled bit to determine PBDE support (bsc#1189385).\n- scsi: lpfc: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189385).\n- scsi: lpfc: vmid: Add QFPA and VMID timeout check in worker thread (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add datastructure for supporting VMID in lpfc (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add support for VMID in mailbox command (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Append the VMID to the wqe before sending (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Functions to manage VMIDs (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement CT commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement ELS commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Introduce VMID in I/O path (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Timeout implementation for VMID (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: VMID parameter initialization (bsc#1189385 jsc#SLE-18970).\n- scsi: mpt3sas: Fix ReplyPostFree pool allocation (bsc#1181006).\n- scsi: qla2xxx: Add heartbeat check (bsc#1189392).\n- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() (bsc#1189392).\n- scsi: qla2xxx: Fix spelling mistakes 'allloc' -\u003e 'alloc' (bsc#1189392).\n- scsi: qla2xxx: Fix use after free in debug code (bsc#1189392).\n- scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (bsc#1189392).\n- scsi: qla2xxx: Remove duplicate declarations (bsc#1189392).\n- scsi: qla2xxx: Remove redundant assignment to rval (bsc#1189392).\n- scsi: qla2xxx: Remove redundant continue statement in a for-loop (bsc#1189392).\n- scsi: qla2xxx: Remove redundant initialization of variable num_cnt (bsc#1189392).\n- scsi: qla2xxx: Remove unused variable 'status' (bsc#1189392).\n- scsi: qla2xxx: Update version to 10.02.00.107-k (bsc#1189392).\n- scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189392).\n- scsi: qla2xxx: Use the proper SCSI midlayer interfaces for PI (bsc#1189392).\n- scsi: qla2xxx: edif: Add authentication pass + fail bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add detection of secure device (bsc#1189392).\n- scsi: qla2xxx: edif: Add doorbell notification for app (bsc#1189392).\n- scsi: qla2xxx: edif: Add encryption to I/O path (bsc#1189392).\n- scsi: qla2xxx: edif: Add extraction of auth_els from the wire (bsc#1189392).\n- scsi: qla2xxx: edif: Add getfcinfo and statistic bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add key update (bsc#1189392).\n- scsi: qla2xxx: edif: Add send, receive, and accept for auth_els (bsc#1189392).\n- scsi: qla2xxx: edif: Add start + stop bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Increment command and completion counts (bsc#1189392).\n- scsi: scsi_transport_srp: Do not block target in SRP_PORT_LOST state (bsc#1184180).\n- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (bsc#1189392).\n- scsi: zfcp: Report port fc_security as unknown early during remote cable pull (git-fixes).\n- serial: 8250: Mask out floating 16/32-bit bus bits (git-fixes).\n- serial: 8250_mtk: fix uart corruption issue when rx power off (git-fixes).\n- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts (git-fixes).\n- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (git-fixes).\n- serial: tegra: Only print FIFO error message when an error occurs (git-fixes).\n- slimbus: messaging: check for valid transaction id (git-fixes).\n- slimbus: messaging: start transaction ids from 1 instead of zero (git-fixes).\n- slimbus: ngd: reset dma setup during runtime pm (git-fixes).\n- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: aspeed: p2a-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: qcom: rpmhpd: Use corner in power_off (git-fixes).\n- soc: qcom: smsm: Fix missed interrupts if state changes while masked (git-fixes).\n- spi: imx: mx51-ecspi: Fix CONFIGREG delay comment (git-fixes).\n- spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (git-fixes).\n- spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (git-fixes).\n- spi: mediatek: Fix fifo transfer (git-fixes).\n- spi: meson-spicc: fix memory leak in meson_spicc_remove (git-fixes).\n- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: spi-pic32: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: sprd: Fix the wrong WDG_LOAD_VAL (git-fixes).\n- spi: stm32h7: fix full duplex irq handler handling (git-fixes).\n- staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (git-fixes).\n- staging: rtl8712: get rid of flush_scheduled_work (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name (git-fixes).\n- tracing / histogram: Give calculation hist_fields a size (git-fixes).\n- tracing: Reject string operand in the histogram expression (git-fixes).\n- tty: serial: fsl_lpuart: fix the wrong mapbase value (git-fixes).\n- ubifs: Fix error return code in alloc_wbufs() (bsc#1189585).\n- ubifs: Fix memleak in ubifs_init_authentication (bsc#1189583).\n- ubifs: Only check replay with inode type to judge if inode linked (bsc#1187455).\n- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (bsc#1189587).\n- ubifs: journal: Fix error return code in ubifs_jnl_write_inode() (bsc#1189586).\n- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available (git-fixes).\n- usb: dwc3: Disable phy suspend after power-on reset (git-fixes).\n- usb: dwc3: Separate field holding multiple properties (git-fixes).\n- usb: dwc3: Stop active transfers before halting the controller (git-fixes).\n- usb: dwc3: Use clk_bulk_prepare_enable() (git-fixes).\n- usb: dwc3: Use devres to get clocks (git-fixes).\n- usb: dwc3: core: do not do suspend for device mode if already suspended (git-fixes).\n- usb: dwc3: debug: Remove newline printout (git-fixes).\n- usb: dwc3: gadget: Check MPS of the request length (git-fixes).\n- usb: dwc3: gadget: Clear DCTL.ULSTCHNGREQ before set (git-fixes).\n- usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable (git-fixes).\n- usb: dwc3: gadget: Disable gadget IRQ during pullup disable (git-fixes).\n- usb: dwc3: gadget: Do not send unintended link state change (git-fixes).\n- usb: dwc3: gadget: Do not setup more than requested (git-fixes).\n- usb: dwc3: gadget: Fix dwc3_calc_trbs_left() (git-fixes).\n- usb: dwc3: gadget: Fix handling ZLP (git-fixes).\n- usb: dwc3: gadget: Give back staled requests (git-fixes).\n- usb: dwc3: gadget: Handle ZLP for sg requests (git-fixes).\n- usb: dwc3: gadget: Prevent EP queuing while stopping transfers (git-fixes).\n- usb: dwc3: gadget: Properly track pending and queued SG (git-fixes).\n- usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup (git-fixes).\n- usb: dwc3: gadget: Set BESL config parameter (git-fixes).\n- usb: dwc3: gadget: Set link state to RX_Detect on disconnect (git-fixes).\n- usb: dwc3: gadget: Stop EP0 transfers during pullup disable (git-fixes).\n- usb: dwc3: gadget: Workaround Mirosoft's BESL check (git-fixes).\n- usb: dwc3: meson-g12a: add IRQ check (git-fixes).\n- usb: dwc3: meson-g12a: check return of dwc3_meson_g12a_usb_init (git-fixes).\n- usb: dwc3: of-simple: add a shutdown (git-fixes).\n- usb: dwc3: st: Add of_dev_put() in probe function (git-fixes).\n- usb: dwc3: st: Add of_node_put() before return in probe function (git-fixes).\n- usb: dwc3: support continuous runtime PM with dual role (git-fixes).\n- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (git-fixes).\n- usb: gadget: Export recommended BESL values (git-fixes).\n- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (git-fixes).\n- usb: gadget: f_hid: fixed NULL pointer dereference (git-fixes).\n- usb: gadget: f_hid: idle uses the highest byte for duration (git-fixes).\n- usb: gadget: mv_u3d: request_irq() after initializing UDC (git-fixes).\n- usb: gadget: udc: at91: add IRQ check (git-fixes).\n- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (git-fixes).\n- usb: host: ohci-tmio: add IRQ check (git-fixes).\n- usb: host: xhci-rcar: Do not reload firmware after the completion (git-fixes).\n- usb: mtu3: fix the wrong HS mult value (git-fixes).\n- usb: mtu3: use @mult for HS isoc or intr (git-fixes).\n- usb: phy: fsl-usb: add IRQ check (git-fixes).\n- usb: phy: tahvo: add IRQ check (git-fixes).\n- usb: phy: twl6030: add IRQ checks (git-fixes).\n- usr: Add support for zstd compressed initramfs (bsc#1187483, jsc#SLE-18766).\n- virt_wifi: fix error on connect (git-fixes).\n- wireguard: allowedips: allocate nodes in kmem_cache (git-fixes).\n- wireguard: allowedips: free empty intermediate nodes when removing single node (git-fixes).\n- wireguard: allowedips: remove nodes in O(1) (git-fixes).\n- writeback: fix obtain a reference to a freeing memcg css (bsc#1189577).\n- x86/fpu: Limit xstate copy size in xstateregs_set() (bsc#1152489).\n- x86/fpu: Make init_fpstate correct with optimized XSAVE (bsc#1152489).\n- x86/fpu: Reset state for all signal restore failures (bsc#1152489).\n- x86/kvm: fix vcpu-id indexed array sizes (git-fixes).\n- x86/sev: Make sure IRQs are disabled while GHCB is active (jsc#SLE-14337).\n- x86/sev: Split up runtime #VC handler for correct state tracking (jsc#SLE-14337).\n- x86/sev: Use 'SEV: ' prefix for messages from sev.c (jsc#SLE-14337).\n- x86/signal: Detect and prevent an alternate signal stack overflow (bsc#1152489).\n- x86/split_lock: Provide handle_guest_split_lock() (bsc#1187959).\n- xen/events: Fix race in set_evtchn_to_irq (git-fixes).\n- xprtrdma: Pad optimization, revisited (bsc#1189760).\n","status":"published","published":"2021-09-23T14:15:43Z","modified":"2026-02-04T04:05:50.247444Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10728-1","title":"kernel-devel-5.14.6-1.4 on GA media","description":"These are all security issues fixed in the kernel-devel-5.14.6-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:31:50.908235Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:13704-1","title":"kernel-devel-longterm-6.6.17-1.1 on GA media","description":"These are all security issues fixed in the kernel-devel-longterm-6.6.17-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:07:48.417979Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"PUB-A-197155069","description":"In __htab_map_lookup_and_delete_batch of hashtab.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2021-10-01T00:00:00Z","modified":"2026-11-09T16:40:10.884737887Z","updated_at":"2026-11-09T17:05:18.698671Z"},{"id":"SUSE-SU-2021:3179-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).\n- CVE-2021-3653: Missing validation of the `int_ctl` VMCB field and allows a malicious L1 guest to enable AVIC support for the L2 guest. (bsc#1189399).\n- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).\n- CVE-2021-3679: A lack of CPU resource in tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).\n- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).\n- CVE-2021-3739: Fixed a NULL pointer dereference when deleting device by invalid id (bsc#1189832 ).\n- CVE-2021-3743: Fixed OOB Read in qrtr_endpoint_post (bsc#1189883).\n- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).\n- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-\u003elen value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)\n- CVE-2021-38198: arch/x86/kvm/mmu/paging_tmpl.h incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault (bnc#1189262).\n- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).\n- CVE-2021-38205: drivers/net/ethernet/xilinx/xilinx_emaclite.c made it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer) (bnc#1189292).\n- CVE-2021-38207: drivers/net/ethernet/xilinx/ll_temac_main.c allowed remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes (bnc#1189298).\n- CVE-2021-38166: Fixed an integer overflow and out-of-bounds write when many elements are placed in a single bucket in kernel/bpf/hashtab.c (bnc#1189233 ).\n- CVE-2021-38209: Fixed allowed observation of changes in any net namespace via net/netfilter/nf_conntrack_standalone.c (bnc#1189393).\n- CVE-2021-38206: Fixed NULL pointer dereference in the radiotap parser inside the mac80211 subsystem (bnc#1189296).\n- CVE-2021-34556: Fixed side-channel attack via a Speculative Store Bypass via unprivileged BPF program that could have obtain sensitive information from kernel memory (bsc#1188983).\n- CVE-2021-35477: Fixed BPF stack frame pointer which could have been abused to disclose content of arbitrary kernel memory (bsc#1188985).\n- CVE-2021-3759: Unaccounted ipc objects in Linux kernel could have lead to breaking memcg limits and DoS attacks (bsc#1190115).\n- CVE-2020-12770: Fixed sg_remove_request call in a certain failure cases (bsc#1171420).\n\nThe following non-security bugs were fixed:\n\n- ACPI: NFIT: Fix support for virtual SPA ranges (git-fixes).\n- ACPI: processor: Clean up acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export function to claim _CST control (bsc#1175543)\n- ACPI: processor: Introduce acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Make ACPI_PROCESSOR_CSTATE depend on ACPI_PROCESSOR (bsc#1175543)\n- ALSA: hda - fix the 'Capture Switch' value change notifications (git-fixes).\n- ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (git-fixes).\n- ALSA: hda/hdmi: fix max DP-MST dev_num for Intel TGL+ platforms (git-fixes).\n- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically (git-fixes).\n- ALSA: hda/realtek - Add ALC285 HP init procedure (git-fixes).\n- ALSA: hda/realtek - Add type for ALC287 (git-fixes).\n- ALSA: hda/realtek: Change device names for quirks to barebone names (git-fixes).\n- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9510 laptop (git-fixes).\n- ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256) (git-fixes).\n- ALSA: hda/realtek: Limit mic boost on HP ProBook 445 G8 (git-fixes).\n- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (git-fixes).\n- ALSA: hda/realtek: fix mute led of the HP Pavilion 15-eh1xxx series (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 650 G8 Notebook PC (git-fixes).\n- ALSA: hda/via: Apply runtime PM workaround for ASUS B23E (git-fixes).\n- ALSA: hda: Add quirk for ASUS Flow x13 (git-fixes).\n- ALSA: hda: Fix hang during shutdown due to link reset (git-fixes).\n- ALSA: hda: Release controller display power during shutdown/reboot (git-fixes).\n- ALSA: pcm: Fix mmap breakage without explicit buffer setup (git-fixes).\n- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl (git-fixes).\n- ALSA: seq: Fix racy deletion of subscriber (git-fixes).\n- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (git-fixes).\n- ALSA: usb-audio: Avoid unnecessary or invalid connector selection at resume (git-fixes).\n- ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC (git-fixes).\n- ALSA: usb-audio: Fix superfluous autosuspend recovery (git-fixes).\n- ALSA: usb-audio: fix incorrect clock source setting (git-fixes).\n- ASoC: Intel: Skylake: Fix module resource and format selection (git-fixes).\n- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (git-fixes).\n- ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373 (git-fixes).\n- ASoC: SOF: Intel: hda-ipc: fix reply size checking (git-fixes).\n- ASoC: amd: Fix reference to PCM buffer address (git-fixes).\n- ASoC: component: Remove misplaced prefix handling in pin control functions (git-fixes).\n- ASoC: cs42l42: Correct definition of ADC Volume control (git-fixes).\n- ASoC: cs42l42: Do not allow SND_SOC_DAIFMT_LEFT_J (git-fixes).\n- ASoC: cs42l42: Fix LRCLK frame start edge (git-fixes).\n- ASoC: cs42l42: Fix inversion of ADC Notch Switch control (git-fixes).\n- ASoC: cs42l42: Remove duplicate control for WNF filter frequency (git-fixes).\n- ASoC: intel: atom: Fix breakage for PCM buffer address setup (git-fixes).\n- ASoC: intel: atom: Fix reference to PCM buffer address (git-fixes).\n- ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold again (git-fixes).\n- ASoC: rt5682: Fix the issue of garbled recording after powerd_dbus_suspend (git-fixes).\n- ASoC: ti: j721e-evm: Check for not initialized parent_clk_id (git-fixes).\n- ASoC: ti: j721e-evm: Fix unbalanced domain activity tracking during startup (git-fixes).\n- ASoC: tlv320aic31xx: Fix jack detection after suspend (git-fixes).\n- ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (git-fixes).\n- ASoC: uniphier: Fix reference to PCM buffer address (git-fixes).\n- ASoC: wcd9335: Disable irq on slave ports in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a double irq free in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (git-fixes).\n- ASoC: xilinx: Fix reference to PCM buffer address (git-fixes).\n- Avoid double printing SUSE specific flags in mod-\u003etaint (bsc#1190413).\n- Bluetooth: add timeout sanity check to hci_inquiry (git-fixes).\n- Bluetooth: btusb: Fix a unspported condition to set available debug features (git-fixes).\n- Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS (git-fixes).\n- Bluetooth: defer cleanup of resources in hci_unregister_dev() (git-fixes).\n- Bluetooth: fix repeated calls to sco_sock_kill (git-fixes).\n- Bluetooth: hidp: use correct wait queue when removing ctrl_wait (git-fixes).\n- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow (git-fixes).\n- Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd (git-fixes).\n- Bluetooth: sco: prevent information leak in sco_conn_defer_accept() (git-fixes).\n- Documentation: admin-guide: PM: Add intel_idle document (bsc#1175543)\n- KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() (bsc#1188786).\n- KVM: VMX: Enable machine check support for 32bit targets (bsc#1188787).\n- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (bsc#1188788).\n- KVM: VMX: Extend VMXs #AC interceptor to handle split lock #AC in guest (bsc#1187959).\n- KVM: nVMX: Handle split-lock #AC exceptions that happen in L2 (bsc#1187959).\n- KVM: nVMX: Really make emulated nested preemption timer pinned (bsc#1188780).\n- KVM: nVMX: Reset the segment cache when stuffing guest segs (bsc#1188781).\n- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1188782).\n- KVM: nVMX: Sync unsync'd vmcs02 state to vmcs12 on migration (bsc#1188783).\n- KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1188784).\n- KVM: x86: Emulate split-lock access as a write in emulator (bsc#1187959).\n- KVM: x86: bit 8 of non-leaf PDPEs is not reserved (bsc#1188790).\n- NFS: Correct size calculation for create reply length (bsc#1189870).\n- NFSv4.1: Do not rebind to the same source port when (bnc#1186264 bnc#1189021)\n- NFSv4/pNFS: Do not call _nfs4_pnfs_v3_ds_connect multiple times (git-fixes).\n- NFSv4: Initialise connection to the server in nfs4_alloc_client() (bsc#1040364).\n- PCI/MSI: Correct misleading comments (git-fixes).\n- PCI/MSI: Do not set invalid bits in MSI mask (git-fixes).\n- PCI/MSI: Enable and mask MSI-X early (git-fixes).\n- PCI/MSI: Mask all unused MSI-X entries (git-fixes).\n- PCI/MSI: Skip masking MSI-X on Xen PV (git-fixes).\n- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (git-fixes).\n- PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI (git-fixes).\n- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (git-fixes).\n- PCI: PM: Enable PME if it can be signaled from D3cold (git-fixes).\n- RDMA/bnxt_re: Fix stats counters (bsc#1188231).\n- SUNRPC: 'Directory with parent 'rpc_clnt' already present!' (bsc#1168202 bsc#1188924).\n- SUNRPC: Fix the batch tasks count wraparound (git-fixes).\n- SUNRPC: Should wake up the privileged task firstly (git-fixes).\n- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- SUNRPC: fix use-after-free in rpc_free_client_work() (bsc#1168202 bsc#1188924).\n- SUNRPC: improve error response to over-size gss credential (bsc#1190022).\n- SUNRPC: prevent port reuse on transports which do not request it (bnc#1186264 bnc#1189021).\n- USB: core: Avoid WARNings for 0-length descriptor requests (git-fixes).\n- USB: serial: ch341: fix character loss at high transfer rates (git-fixes).\n- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (git-fixes).\n- USB: serial: option: add Telit FD980 composition 0x1056 (git-fixes).\n- USB: usbtmc: Fix RCU stall warning (git-fixes).\n- USB:ehci:fix Kunpeng920 ehci hardware problem (git-fixes).\n- VMCI: fix NULL pointer dereference when unmapping queue pair (git-fixes).\n- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (git-fixes).\n- ath9k: Clear key cache explicitly on disabling hardware (git-fixes).\n- ath: Use safer key clearing with key cache entries (git-fixes).\n- bcma: Fix memory leak for internally-handled cores (git-fixes).\n- bdi: Do not use freezable workqueue (bsc#1189573).\n- blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (bsc#1189507).\n- blk-mq-sched: Fix blk_mq_sched_alloc_tags() error handling (bsc#1189506).\n- blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (bsc#1189503).\n- blk-wbt: make sure throttle is enabled properly (bsc#1189504).\n- block: fix trace completion for chained bio (bsc#1189505).\n- bnxt_en: Validate vlan protocol ID on RX packets (jsc#SLE-15075).\n- brcmfmac: pcie: fix oops on failure to resume and reprobe (git-fixes).\n- btrfs: Rename __btrfs_alloc_chunk to btrfs_alloc_chunk (bsc#1189079).\n- btrfs: add a trace class for dumping the current ENOSPC state (bsc#1135481).\n- btrfs: add a trace point for reserve tickets (bsc#1135481).\n- btrfs: adjust the flush trace point to include the source (bsc#1135481).\n- btrfs: check reclaim_size in need_preemptive_reclaim (bsc#1135481).\n- btrfs: factor out create_chunk() (bsc#1189077).\n- btrfs: factor out decide_stripe_size() (bsc#1189077).\n- btrfs: factor out gather_device_info() (bsc#1189077).\n- btrfs: factor out init_alloc_chunk_ctl (bsc#1189077).\n- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1135481).\n- btrfs: fix deadlock with concurrent chunk allocations involving system chunks (bsc#1189077).\n- btrfs: handle invalid profile in chunk allocation (bsc#1189077).\n- btrfs: implement space clamping for preemptive flushing (bsc#1135481).\n- btrfs: improve preemptive background space flushing (bsc#1135481).\n- btrfs: introduce a FORCE_COMMIT_TRANS flush operation (bsc#1135481).\n- btrfs: introduce alloc_chunk_ctl (bsc#1189077).\n- btrfs: introduce chunk allocation policy (bsc#1189077).\n- btrfs: make flush_space take a enum btrfs_flush_state instead of int (bsc#1135481).\n- btrfs: move the chunk_mutex in btrfs_read_chunk_tree (bsc#1189077).\n- btrfs: parameterize dev_extent_min for chunk allocation (bsc#1189077).\n- btrfs: refactor find_free_dev_extent_start() (bsc#1189077).\n- btrfs: remove FLUSH_DELAYED_REFS from data ENOSPC flushing (bsc#1135481).\n- btrfs: rename need_do_async_reclaim (bsc#1135481).\n- btrfs: rework btrfs_calc_reclaim_metadata_size (bsc#1135481).\n- btrfs: rework chunk allocation to avoid exhaustion of the system chunk array (bsc#1189077).\n- btrfs: rip out btrfs_space_info::total_bytes_pinned (bsc#1135481).\n- btrfs: rip the first_ticket_bytes logic from fail_all_tickets (bsc#1135481).\n- btrfs: simplify the logic in need_preemptive_flushing (bsc#1135481).\n- btrfs: tracepoints: convert flush states to using EM macros (bsc#1135481).\n- btrfs: tracepoints: fix btrfs_trigger_flush symbolic string for flags (bsc#1135481).\n- can: ti_hecc: Fix memleak in ti_hecc_probe (git-fixes).\n- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters (git-fixes).\n- ceph: clean up and optimize ceph_check_delayed_caps() (bsc#1187468).\n- ceph: reduce contention in ceph_check_delayed_caps() (bsc#1187468).\n- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1189427).\n- cifs: Remove unused inline function is_sysvol_or_netlogon() (bsc#1185902).\n- cifs: avoid starvation when refreshing dfs cache (bsc#1185902).\n- cifs: constify get_normalized_path() properly (bsc#1185902).\n- cifs: do not cargo-cult strndup() (bsc#1185902).\n- cifs: do not send tree disconnect to ipc shares (bsc#1185902).\n- cifs: do not share tcp servers with dfs mounts (bsc#1185902).\n- cifs: do not share tcp sessions of dfs connections (bsc#1185902).\n- cifs: fix check of dfs interlinks (bsc#1185902).\n- cifs: fix path comparison and hash calc (bsc#1185902).\n- cifs: get rid of @noreq param in __dfs_cache_find() (bsc#1185902).\n- cifs: handle different charsets in dfs cache (bsc#1185902).\n- cifs: keep referral server sessions alive (bsc#1185902).\n- cifs: missing null pointer check in cifs_mount (bsc#1185902).\n- cifs: prevent NULL deref in cifs_compose_mount_options() (bsc#1185902).\n- cifs: set a minimum of 2 minutes for refreshing dfs cache (bsc#1185902).\n- clk: fix leak on devm_clk_bulk_get_all() unwind (git-fixes).\n- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (git-fixes).\n- cpuidle: Allow idle states to be disabled by default (bsc#1175543)\n- cpuidle: Consolidate disabled state checks (bsc#1175543)\n- cpuidle: Drop disabled field from struct cpuidle_state (bsc#1175543)\n- cpuidle: Fix cpuidle_driver_state_disabled() (bsc#1175543)\n- cpuidle: Introduce cpuidle_driver_state_disabled() for driver quirks (bsc#1175543)\n- crypto: ccp - Annotate SEV Firmware file names (bsc#1189212).\n- crypto: qat - use proper type for vf_mask (git-fixes).\n- crypto: x86/curve25519 - fix cpu feature checking logic in mod_exit (git-fixes).\n- device-dax: Fix default return code of range_parse() (git-fixes).\n- dm integrity: fix missing goto in bitmap_flush_interval error handling (git-fixes).\n- dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (git-fixes).\n- dm verity: fix DM_VERITY_OPTS_MAX value (git-fixes).\n- dmaengine: idxd: fix setup sequence for MSIXPERM table (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-sdma: remove duplicated sdma_load_context (git-fixes).\n- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (git-fixes).\n- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (git-fixes).\n- dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers (git-fixes).\n- drivers/block/null_blk/main: Fix a double free in null_init (git-fixes).\n- drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X (git-fixes).\n- drm/amd/display: Fix comparison error in dcn21 DML (git-fixes).\n- drm/amd/display: Fix max vstartup calculation for modes with borders (git-fixes).\n- drm/amd/display: Remove invalid assert for ODM + MPC case (git-fixes).\n- drm/amd/display: use GFP_ATOMIC in amdgpu_dm_irq_schedule_work (git-fixes).\n- drm/amd/display: workaround for hard hang on HPD on native DP (git-fixes).\n- drm/amdgpu/acp: Make PM domain really work (git-fixes).\n- drm/amdgpu/display: fix DMUB firmware version info (git-fixes).\n- drm/amdgpu/display: only enable aux backlight control for OLED panels (git-fixes).\n- drm/amdgpu: do not enable baco on boco platforms in runpm (git-fixes).\n- drm/amdgpu: fix the doorbell missing when in CGPG issue for renoir (git-fixes).\n- drm/dp_mst: Fix return code on sideband message failure (git-fixes).\n- drm/i915/dg1: gmbus pin mapping (bsc#1188700).\n- drm/i915/dg1: provide port/phy mapping for vbt (bsc#1188700).\n- drm/i915/gen9_bc: Add W/A for missing STRAP config on TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce HPD pin mappings for TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce TGP PCH DDC pin mappings (bsc#1188700).\n- drm/i915/gen9_bc: Recognize TGP PCH + CML combos (bsc#1188700).\n- drm/i915/rkl: new rkl ddc map for different PCH (bsc#1188700).\n- drm/i915: Add VBT AUX CH H and I (bsc#1188700).\n- drm/i915: Add VBT DVO ports H and I (bsc#1188700).\n- drm/i915: Add more AUX CHs to the enum (bsc#1188700).\n- drm/i915: Configure GEN11_{TBT,TC}_HOTPLUG_CTL for ports TC5/6 (bsc#1188700).\n- drm/i915: Correct SFC_DONE register offset (git-fixes).\n- drm/i915: Introduce HPD_PORT_TC\u0026lt;n\u003e (bsc#1188700).\n- drm/i915: Move hpd_pin setup to encoder init (bsc#1188700).\n- drm/i915: Nuke the redundant TC/TBT HPD bit defines (bsc#1188700).\n- drm/i915: Only access SFC_DONE when media domain is not fused off (git-fixes).\n- drm/meson: fix colour distortion from HDR set during vendor u-boot (git-fixes).\n- drm/msi/mdp4: populate priv-\u003ekms in mdp4_kms_init (git-fixes).\n- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs (git-fixes).\n- drm/msm/dsi: Fix some reference counted resource leaks (git-fixes).\n- drm/msm: Fix error return code in msm_drm_init() (git-fixes).\n- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (git-fixes).\n- drm/of: free the iterator object on failure (git-fixes).\n- drm/of: free the right object (git-fixes).\n- drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() (git-fixes).\n- drm/prime: fix comment on PRIME Helpers (git-fixes).\n- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (bsc#1189568).\n- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (bsc#1189564).\n- ext4: fix avefreec in find_group_orlov (bsc#1189566).\n- ext4: fix kernel infoleak via ext4_extent_header (bsc#1189562).\n- ext4: fix potential htree corruption when growing large_dir directories (bsc#1189576).\n- ext4: remove check for zero nr_to_scan in ext4_es_scan() (bsc#1189565).\n- ext4: return error code when ext4_fill_flex_info() fails (bsc#1189563).\n- ext4: use ext4_grp_locked_error in mb_find_extent (bsc#1189567).\n- fanotify: fix copy_event_to_user() fid error clean up (bsc#1189574).\n- firmware_loader: fix use-after-free in firmware_fallback_sysfs (git-fixes).\n- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (git-fixes).\n- fixup 'rpm: support gz and zst compression methods' (bsc#1190358, bsc#1190428).\n- fpga: altera-freeze-bridge: Address warning about unused variable (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: xiilnx-spi: Address warning about unused variable (git-fixes).\n- fpga: zynqmp-fpga: Address warning about unused variable (git-fixes).\n- gpio: eic-sprd: break loop when getting NULL device resource (git-fixes).\n- gpio: tqmx86: really make IRQ optional (git-fixes).\n- i2c: dev: zero out array used for i2c reads from userspace (git-fixes).\n- i2c: highlander: add IRQ check (git-fixes).\n- i2c: iop3xx: fix deferred probing (git-fixes).\n- i2c: mt65xx: fix IRQ check (git-fixes).\n- i2c: s3c2410: fix IRQ check (git-fixes).\n- iio: adc: Fix incorrect exit of for-loop (git-fixes).\n- iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels (git-fixes).\n- iio: humidity: hdc100x: Add margin to the conversion time (git-fixes).\n- intel_idle: Add module parameter to prevent ACPI _CST from being used (bsc#1175543)\n- intel_idle: Allow ACPI _CST to be used for selected known processors (bsc#1175543)\n- intel_idle: Annotate init time data structures (bsc#1175543)\n- intel_idle: Customize IceLake server support (bsc#1175543)\n- intel_idle: Disable ACPI _CST on Haswell (bsc#1175543, bsc#1177399, bsc#1180347, bsc#1180141)\n- intel_idle: Fix max_cstate for processor models without C-state tables (bsc#1175543)\n- intel_idle: Ignore _CST if control cannot be taken from the platform (bsc#1175543)\n- intel_idle: Refactor intel_idle_cpuidle_driver_init() (bsc#1175543)\n- intel_idle: Use ACPI _CST for processor models without C-state tables (bsc#1175543)\n- iommu/amd: Fix extended features logging (bsc#1189213).\n- iommu/amd: Move Stoney Ridge check to detect_ivrs() (bsc#1189762).\n- iommu/arm-smmu-v3: Decrease the queue size of evtq and priq (bsc#1189210).\n- iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK (bsc#1189209).\n- iommu/dma: Fix IOVA reserve dma ranges (bsc#1189214).\n- iommu/dma: Fix compile warning in 32-bit builds (bsc#1189229).\n- iommu/vt-d: Check for allocation failure in aux_detach_device() (bsc#1189215).\n- iommu/vt-d: Define counter explicitly as unsigned int (bsc#1189216).\n- iommu/vt-d: Do not set then clear private data in prq_event_thread() (bsc#1189217).\n- iommu/vt-d: Fix sysfs leak in alloc_iommu() (bsc#1189218).\n- iommu/vt-d: Force to flush iotlb before creating superpage (bsc#1189219).\n- iommu/vt-d: Global devTLB flush when present context entry changed (bsc#1189220).\n- iommu/vt-d: Invalidate PASID cache when root/context entry changed (bsc#1189221).\n- iommu/vt-d: Reject unsupported page request modes (bsc#1189222).\n- ionic: add handling of larger descriptors (jsc#SLE-16649).\n- ionic: add new queue features to interface (jsc#SLE-16649).\n- ionic: aggregate Tx byte counting calls (jsc#SLE-16649).\n- ionic: block actions during fw reset (jsc#SLE-16649).\n- ionic: change mtu after queues are stopped (jsc#SLE-16649).\n- ionic: check for link after netdev registration (jsc#SLE-16649).\n- ionic: code cleanup details (jsc#SLE-16649).\n- ionic: fix sizeof usage (jsc#SLE-16649).\n- ionic: fix unchecked reference (jsc#SLE-16649).\n- ionic: fix up dim accounting for tx and rx (jsc#SLE-16649).\n- ionic: generic tx skb mapping (jsc#SLE-16649).\n- ionic: implement Rx page reuse (jsc#SLE-16649).\n- ionic: make all rx_mode work threadsafe (jsc#SLE-16649).\n- ionic: move rx_page_alloc and free (jsc#SLE-16649).\n- ionic: optimize fastpath struct usage (jsc#SLE-16649).\n- ionic: protect adminq from early destroy (jsc#SLE-16649).\n- ionic: rebuild debugfs on qcq swap (jsc#SLE-16649).\n- ionic: remove intr coalesce update from napi (jsc#SLE-16649).\n- ionic: remove some unnecessary oom messages (jsc#SLE-16649).\n- ionic: simplify TSO descriptor mapping (jsc#SLE-16649).\n- ionic: simplify rx skb alloc (jsc#SLE-16649).\n- ionic: simplify the intr_index use in txq_init (jsc#SLE-16649).\n- ionic: simplify tx clean (jsc#SLE-16649).\n- ionic: simplify use of completion types (jsc#SLE-16649).\n- ionic: start queues before announcing link up (jsc#SLE-16649).\n- ionic: stop watchdog when in broken state (jsc#SLE-16649).\n- ionic: useful names for booleans (jsc#SLE-16649).\n- iwlwifi: pnvm: accept multiple HW-type TLVs (git-fixes).\n- iwlwifi: rs-fw: do not support stbc for HE 160 (git-fixes).\n- iwlwifi: skip first element in the WTAS ACPI table (git-fixes).\n- kABI fix of usb_dcd_config_params (git-fixes).\n- kABI: Fix kABI after fixing vcpu-id indexed arrays (git-fixes).\n- kabi fix for NFSv4.1: Do not rebind to the same source port when reconnecting to the server (bnc#1186264 bnc#1189021)\n- kabi fix for SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (bsc#1189153).\n- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841).\n- leds: trigger: audio: Add an activate callback to ensure the initial brightness is set (git-fixes).\n- lib/mpi: use kcalloc in mpi_resize (git-fixes).\n- lib: Add zstd support to decompress (bsc#1187483, jsc#SLE-18766).\n- libata: fix ata_pio_sector for CONFIG_HIGHMEM (git-fixes).\n- mac80211: Fix insufficient headroom issue for AMSDU (git-fixes).\n- md/raid10: properly indicate failure when ending a failed write request (git-fixes).\n- md: revert io stats accounting (git-fixes).\n- media: TDA1997x: enable EDID support (git-fixes).\n- media: cxd2880-spi: Fix an error handling path (git-fixes).\n- media: drivers/media/usb: fix memory leak in zr364xx_probe (git-fixes).\n- media: dvb-usb: Fix error handling in dvb_usb_i2c_init (git-fixes).\n- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init (git-fixes).\n- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr (git-fixes).\n- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect (git-fixes).\n- media: go7007: fix memory leak in go7007_usb_probe (git-fixes).\n- media: go7007: remove redundant initialization (git-fixes).\n- media: rtl28xxu: fix zero-length control request (git-fixes).\n- media: stkwebcam: fix memory leak in stk_camera_probe (git-fixes).\n- media: venus: venc: Fix potential null pointer dereference on pointer fmt (git-fixes).\n- media: videobuf2-core: dequeue if start_streaming fails (git-fixes).\n- media: zr364xx: fix memory leaks in probe() (git-fixes).\n- media: zr364xx: propagate errors from zr364xx_start_readpipe() (git-fixes).\n- misc: atmel-ssc: lock with mutex instead of spinlock (git-fixes).\n- misc: rtsx: do not setting OC_POWER_DOWN reg in rtsx_pci_init_ocp() (git-fixes).\n- mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (bsc#1189569).\n- mm/vmscan: fix infinite loop in drop_slab_node (VM Functionality, bsc#1189301).\n- mm: fix memory_failure() handling of dax-namespace metadata (bsc#1189872).\n- mm: swap: properly update readahead statistics in unuse_pte_range() (bsc#1187619).\n- mmc: dw_mmc: Fix hang on data CRC error (git-fixes).\n- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: moxart: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: sdhci-iproc: Cap min clock frequency on BCM2711 (git-fixes).\n- mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711 (git-fixes).\n- mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards (git-fixes).\n- nbd: Aovid double completion of a request (git-fixes).\n- nbd: Fix NULL pointer in flush_workqueue (git-fixes).\n- net/mlx5: Add ts_cqe_to_dest_cqn related bits (bsc#1188412)\n- net/mlx5: Properly convey driver version to firmware (git-fixes).\n- net/mlx5e: Add missing capability check for uplink follow (bsc#1188412)\n- net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (git-fixes).\n- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (git-fixes).\n- net: stmmac: free tx skb buffer in stmmac_resume() (git-fixes).\n- net: usb: lan78xx: do not modify phy_device state concurrently (bsc#1188270)\n- nfs: fix acl memory leak of posix_acl_create() (git-fixes).\n- nvme-multipath: revalidate paths during rescan (bsc#1187211)\n- nvme-pci: Use u32 for nvme_dev.q_depth and nvme_queue.q_depth (bsc#1181972).\n- nvme-pci: fix NULL req in completion handler (bsc#1181972).\n- nvme-pci: limit maximum queue depth to 4095 (bsc#1181972).\n- nvme-pci: use unsigned for io queue depth (bsc#1181972).\n- nvme-tcp: Do not reset transport on data digest errors (bsc#1188418).\n- nvme-tcp: do not check blk_mq_tag_to_rq when receiving pdu data (bsc#1181972).\n- nvme: avoid possible double fetch in handling CQE (bsc#1181972).\n- nvme: code command_id with a genctr for use-after-free validation (bsc#1181972).\n- nvme: only call synchronize_srcu when clearing current path (bsc#1188067).\n- nvmet: use NVMET_MAX_NAMESPACES to set nn value (bsc#1189384).\n- ocfs2: fix snprintf() checking (bsc#1189581).\n- ocfs2: fix zero out valid data (bsc#1189579).\n- ocfs2: initialize ip_next_orphan (bsc#1186731).\n- ocfs2: issue zeroout to EOF blocks (bsc#1189582).\n- ovl: allow upperdir inside lowerdir (bsc#1189323).\n- ovl: expand warning in ovl_d_real() (bsc#1189323).\n- ovl: fix missing revert_creds() on error path (bsc#1189323).\n- ovl: perform vfs_getxattr() with mounter creds (bsc#1189323).\n- ovl: skip getxattr of security labels (bsc#1189323).\n- params: lift param_set_uint_minmax to common code (bsc#1181972).\n- pcmcia: i82092: fix a null pointer dereference bug (git-fixes).\n- perf/x86/amd: Do not touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (bsc#1189225).\n- pinctrl: tigerlake: Fix GPIO mapping for newer version of software (git-fixes).\n- platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables (git-fixes).\n- post.sh: detect /usr mountpoint too\n- power: supply: max17042: handle fails of reading status register (git-fixes).\n- powerpc/cacheinfo: Improve diagnostics about malformed cache lists (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Lookup cache by dt node and thread-group id (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Remove the redundant get_shared_cpu_map() (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Use name@unit instead of full DT path in debug messages (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769 git-fixes).\n- powerpc/papr_scm: Reduce error severity if nvdimm stats inaccessible (bsc#1189197 ltc#193906).\n- powerpc/pseries: Fix regression while building external modules (bsc#1160010 ltc#183046 git-fixes).\n- powerpc/pseries: Fix update of LPAR security flavor after LPM (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/smp: Make some symbols static (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/smp: Use existing L2 cache_map cpumask to find L3 cache siblings (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc: Fix is_kvm_guest() / kvm_para_available() (bsc#1181148 ltc#190702 git-fixes).\n- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (git-fixes).\n- regulator: vctrl: Avoid lockdep warning in enable/disable ops (git-fixes).\n- regulator: vctrl: Use locked regulator_get_voltage in probe path (git-fixes).\n- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.\n- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305)\n- rpm/kernel-source.rpmlintrc: ignore new include/config files In 5.13, since 0e0345b77ac4, config files have no longer .h suffix. Adapt the zero-length check. Based on Martin Liska's change.\n- rq-qos: fix missed wake-ups in rq_qos_throttle try two (bsc#1189575).\n- rsi: fix an error code in rsi_probe() (git-fixes).\n- rsi: fix error code in rsi_load_9116_firmware() (git-fixes).\n- s390/ap: Fix hanging ioctl caused by wrong msg counter (bsc#1188982 LTC#193817).\n- s390/boot: fix use of expolines in the DMA code (bsc#1188878 ltc#193771).\n- scsi: blkcg: Add app identifier support for blkcg (bsc#1189385 jsc#SLE-18970).\n- scsi: blkcg: Fix application ID config options (bsc#1189385 jsc#SLE-18970).\n- scsi: cgroup: Add cgroup_get_from_id() (bsc#1189385 jsc#SLE-18970).\n- scsi: core: Add scsi_prot_ref_tag() helper (bsc#1189392).\n- scsi: ibmvfc: Do not wait for initial device scan (bsc#1127650).\n- scsi: libfc: Fix array index out of bound exception (bsc#1188616).\n- scsi: lpfc: Add 256 Gb link speed support (bsc#1189385).\n- scsi: lpfc: Add PCI ID support for LPe37000/LPe38000 series adapters (bsc#1189385).\n- scsi: lpfc: Call discovery state machine when handling PLOGI/ADISC completions (bsc#1189385).\n- scsi: lpfc: Clear outstanding active mailbox during PCI function reset (bsc#1189385).\n- scsi: lpfc: Copyright updates for 12.8.0.11 patches (bsc#1189385).\n- scsi: lpfc: Copyright updates for 14.0.0.0 patches (bsc#1189385).\n- scsi: lpfc: Delay unregistering from transport until GIDFT or ADISC completes (bsc#1189385).\n- scsi: lpfc: Discovery state machine fixes for LOGO handling (bsc#1189385).\n- scsi: lpfc: Enable adisc discovery after RSCN by default (bsc#1189385).\n- scsi: lpfc: Fix KASAN slab-out-of-bounds in lpfc_unreg_rpi() routine (bsc#1189385).\n- scsi: lpfc: Fix NULL ptr dereference with NPIV ports for RDF handling (bsc#1189385).\n- scsi: lpfc: Fix NVMe support reporting in log message (bsc#1189385).\n- scsi: lpfc: Fix build error in lpfc_scsi.c (bsc#1189385).\n- scsi: lpfc: Fix cq_id truncation in rq create (bsc#1189385).\n- scsi: lpfc: Fix function description comments for vmid routines (bsc#1189385).\n- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (bsc#1189385).\n- scsi: lpfc: Fix possible ABBA deadlock in nvmet_xri_aborted() (bsc#1189385).\n- scsi: lpfc: Fix target reset handler from falsely returning FAILURE (bsc#1189385).\n- scsi: lpfc: Improve firmware download logging (bsc#1189385).\n- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1189385).\n- scsi: lpfc: Move initialization of phba-\u003epoll_list earlier to avoid crash (git-fixes).\n- scsi: lpfc: Remove REG_LOGIN check requirement to issue an ELS RDF (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer pcmd (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer temp_hdr (bsc#1189385).\n- scsi: lpfc: Remove use of kmalloc() in trace event logging (bsc#1189385).\n- scsi: lpfc: Revise Topology and RAS support checks for new adapters (bsc#1189385).\n- scsi: lpfc: Skip issuing ADISC when node is in NPR state (bsc#1189385).\n- scsi: lpfc: Skip reg_vpi when link is down for SLI3 in ADISC cmpl path (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 12.8.0.11 (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 14.0.0.0 (bsc#1189385).\n- scsi: lpfc: Use PBDE feature enabled bit to determine PBDE support (bsc#1189385).\n- scsi: lpfc: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189385).\n- scsi: lpfc: vmid: Add QFPA and VMID timeout check in worker thread (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add datastructure for supporting VMID in lpfc (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add support for VMID in mailbox command (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Append the VMID to the wqe before sending (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Functions to manage VMIDs (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement CT commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement ELS commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Introduce VMID in I/O path (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Timeout implementation for VMID (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: VMID parameter initialization (bsc#1189385 jsc#SLE-18970).\n- scsi: mpt3sas: Fix ReplyPostFree pool allocation (bsc#1181006).\n- scsi: qla2xxx: Add heartbeat check (bsc#1189392).\n- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() (bsc#1189392).\n- scsi: qla2xxx: Fix spelling mistakes 'allloc' -\u003e 'alloc' (bsc#1189392).\n- scsi: qla2xxx: Fix use after free in debug code (bsc#1189392).\n- scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (bsc#1189392).\n- scsi: qla2xxx: Remove duplicate declarations (bsc#1189392).\n- scsi: qla2xxx: Remove redundant assignment to rval (bsc#1189392).\n- scsi: qla2xxx: Remove redundant continue statement in a for-loop (bsc#1189392).\n- scsi: qla2xxx: Remove redundant initialization of variable num_cnt (bsc#1189392).\n- scsi: qla2xxx: Remove unused variable 'status' (bsc#1189392).\n- scsi: qla2xxx: Update version to 10.02.00.107-k (bsc#1189392).\n- scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189392).\n- scsi: qla2xxx: Use the proper SCSI midlayer interfaces for PI (bsc#1189392).\n- scsi: qla2xxx: edif: Add authentication pass + fail bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add detection of secure device (bsc#1189392).\n- scsi: qla2xxx: edif: Add doorbell notification for app (bsc#1189392).\n- scsi: qla2xxx: edif: Add encryption to I/O path (bsc#1189392).\n- scsi: qla2xxx: edif: Add extraction of auth_els from the wire (bsc#1189392).\n- scsi: qla2xxx: edif: Add getfcinfo and statistic bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add key update (bsc#1189392).\n- scsi: qla2xxx: edif: Add send, receive, and accept for auth_els (bsc#1189392).\n- scsi: qla2xxx: edif: Add start + stop bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Increment command and completion counts (bsc#1189392).\n- scsi: scsi_transport_srp: Do not block target in SRP_PORT_LOST state (bsc#1184180).\n- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (bsc#1189392).\n- scsi: zfcp: Report port fc_security as unknown early during remote cable pull (git-fixes).\n- serial: 8250: Mask out floating 16/32-bit bus bits (git-fixes).\n- serial: 8250_mtk: fix uart corruption issue when rx power off (git-fixes).\n- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts (git-fixes).\n- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (git-fixes).\n- serial: tegra: Only print FIFO error message when an error occurs (git-fixes).\n- slimbus: messaging: check for valid transaction id (git-fixes).\n- slimbus: messaging: start transaction ids from 1 instead of zero (git-fixes).\n- slimbus: ngd: reset dma setup during runtime pm (git-fixes).\n- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: aspeed: p2a-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: qcom: rpmhpd: Use corner in power_off (git-fixes).\n- soc: qcom: smsm: Fix missed interrupts if state changes while masked (git-fixes).\n- spi: imx: mx51-ecspi: Fix CONFIGREG delay comment (git-fixes).\n- spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (git-fixes).\n- spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (git-fixes).\n- spi: mediatek: Fix fifo transfer (git-fixes).\n- spi: meson-spicc: fix memory leak in meson_spicc_remove (git-fixes).\n- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: spi-pic32: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: sprd: Fix the wrong WDG_LOAD_VAL (git-fixes).\n- spi: stm32h7: fix full duplex irq handler handling (git-fixes).\n- staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (git-fixes).\n- staging: rtl8712: get rid of flush_scheduled_work (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name (git-fixes).\n- tracing / histogram: Give calculation hist_fields a size (git-fixes).\n- tracing: Reject string operand in the histogram expression (git-fixes).\n- tty: serial: fsl_lpuart: fix the wrong mapbase value (git-fixes).\n- ubifs: Fix error return code in alloc_wbufs() (bsc#1189585).\n- ubifs: Fix memleak in ubifs_init_authentication (bsc#1189583).\n- ubifs: Only check replay with inode type to judge if inode linked (bsc#1187455).\n- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (bsc#1189587).\n- ubifs: journal: Fix error return code in ubifs_jnl_write_inode() (bsc#1189586).\n- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available (git-fixes).\n- usb: dwc3: Disable phy suspend after power-on reset (git-fixes).\n- usb: dwc3: Separate field holding multiple properties (git-fixes).\n- usb: dwc3: Stop active transfers before halting the controller (git-fixes).\n- usb: dwc3: Use clk_bulk_prepare_enable() (git-fixes).\n- usb: dwc3: Use devres to get clocks (git-fixes).\n- usb: dwc3: core: do not do suspend for device mode if already suspended (git-fixes).\n- usb: dwc3: debug: Remove newline printout (git-fixes).\n- usb: dwc3: gadget: Check MPS of the request length (git-fixes).\n- usb: dwc3: gadget: Clear DCTL.ULSTCHNGREQ before set (git-fixes).\n- usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable (git-fixes).\n- usb: dwc3: gadget: Disable gadget IRQ during pullup disable (git-fixes).\n- usb: dwc3: gadget: Do not send unintended link state change (git-fixes).\n- usb: dwc3: gadget: Do not setup more than requested (git-fixes).\n- usb: dwc3: gadget: Fix dwc3_calc_trbs_left() (git-fixes).\n- usb: dwc3: gadget: Fix handling ZLP (git-fixes).\n- usb: dwc3: gadget: Give back staled requests (git-fixes).\n- usb: dwc3: gadget: Handle ZLP for sg requests (git-fixes).\n- usb: dwc3: gadget: Prevent EP queuing while stopping transfers (git-fixes).\n- usb: dwc3: gadget: Properly track pending and queued SG (git-fixes).\n- usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup (git-fixes).\n- usb: dwc3: gadget: Set BESL config parameter (git-fixes).\n- usb: dwc3: gadget: Set link state to RX_Detect on disconnect (git-fixes).\n- usb: dwc3: gadget: Stop EP0 transfers during pullup disable (git-fixes).\n- usb: dwc3: gadget: Workaround Mirosoft's BESL check (git-fixes).\n- usb: dwc3: meson-g12a: add IRQ check (git-fixes).\n- usb: dwc3: meson-g12a: check return of dwc3_meson_g12a_usb_init (git-fixes).\n- usb: dwc3: of-simple: add a shutdown (git-fixes).\n- usb: dwc3: st: Add of_dev_put() in probe function (git-fixes).\n- usb: dwc3: st: Add of_node_put() before return in probe function (git-fixes).\n- usb: dwc3: support continuous runtime PM with dual role (git-fixes).\n- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (git-fixes).\n- usb: gadget: Export recommended BESL values (git-fixes).\n- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (git-fixes).\n- usb: gadget: f_hid: fixed NULL pointer dereference (git-fixes).\n- usb: gadget: f_hid: idle uses the highest byte for duration (git-fixes).\n- usb: gadget: mv_u3d: request_irq() after initializing UDC (git-fixes).\n- usb: gadget: udc: at91: add IRQ check (git-fixes).\n- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (git-fixes).\n- usb: host: ohci-tmio: add IRQ check (git-fixes).\n- usb: host: xhci-rcar: Do not reload firmware after the completion (git-fixes).\n- usb: mtu3: fix the wrong HS mult value (git-fixes).\n- usb: mtu3: use @mult for HS isoc or intr (git-fixes).\n- usb: phy: fsl-usb: add IRQ check (git-fixes).\n- usb: phy: tahvo: add IRQ check (git-fixes).\n- usb: phy: twl6030: add IRQ checks (git-fixes).\n- usr: Add support for zstd compressed initramfs (bsc#1187483, jsc#SLE-18766).\n- virt_wifi: fix error on connect (git-fixes).\n- wireguard: allowedips: allocate nodes in kmem_cache (git-fixes).\n- wireguard: allowedips: free empty intermediate nodes when removing single node (git-fixes).\n- wireguard: allowedips: remove nodes in O(1) (git-fixes).\n- writeback: fix obtain a reference to a freeing memcg css (bsc#1189577).\n- x86/fpu: Limit xstate copy size in xstateregs_set() (bsc#1152489).\n- x86/fpu: Make init_fpstate correct with optimized XSAVE (bsc#1152489).\n- x86/fpu: Reset state for all signal restore failures (bsc#1152489).\n- x86/kvm: fix vcpu-id indexed array sizes (git-fixes).\n- x86/sev: Make sure IRQs are disabled while GHCB is active (jsc#SLE-14337).\n- x86/sev: Split up runtime #VC handler for correct state tracking (jsc#SLE-14337).\n- x86/sev: Use 'SEV: ' prefix for messages from sev.c (jsc#SLE-14337).\n- x86/signal: Detect and prevent an alternate signal stack overflow (bsc#1152489).\n- x86/split_lock: Provide handle_guest_split_lock() (bsc#1187959).\n- xen/events: Fix race in set_evtchn_to_irq (git-fixes).\n- xprtrdma: Pad optimization, revisited (bsc#1189760).\n","status":"published","published":"2021-09-21T14:28:58Z","modified":"2026-02-04T04:18:51.931357Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3205-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).\n- CVE-2021-3653: Missing validation of the `int_ctl` VMCB field and allows a malicious L1 guest to enable AVIC support for the L2 guest. (bsc#1189399).\n- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).\n- CVE-2021-3679: A lack of CPU resource in tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).\n- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).\n- CVE-2021-3739: Fixed a NULL pointer dereference when deleting device by invalid id (bsc#1189832 ).\n- CVE-2021-3743: Fixed OOB Read in qrtr_endpoint_post (bsc#1189883).\n- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).\n- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-\u003elen value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)\n- CVE-2021-38198: arch/x86/kvm/mmu/paging_tmpl.h incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault (bnc#1189262).\n- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).\n- CVE-2021-38205: drivers/net/ethernet/xilinx/xilinx_emaclite.c made it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer) (bnc#1189292).\n- CVE-2021-38207: drivers/net/ethernet/xilinx/ll_temac_main.c allowed remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes (bnc#1189298).\n- CVE-2021-38166: Fixed an integer overflow and out-of-bounds write when many elements are placed in a single bucket in kernel/bpf/hashtab.c (bnc#1189233 ).\n- CVE-2021-38209: Fixed allowed observation of changes in any net namespace via net/netfilter/nf_conntrack_standalone.c (bnc#1189393).\n- CVE-2021-38206: Fixed NULL pointer dereference in the radiotap parser inside the mac80211 subsystem (bnc#1189296).\n- CVE-2021-34556: Fixed side-channel attack via a Speculative Store Bypass via unprivileged BPF program that could have obtain sensitive information from kernel memory (bsc#1188983).\n- CVE-2021-35477: Fixed BPF stack frame pointer which could have been abused to disclose content of arbitrary kernel memory (bsc#1188985).\n- CVE-2021-3759: Unaccounted ipc objects in Linux kernel could have lead to breaking memcg limits and DoS attacks (bsc#1190115).\n- CVE-2020-12770: Fixed sg_remove_request call in a certain failure cases (bsc#1171420).\n\nThe following non-security bugs were fixed:\n\n- ACPI: NFIT: Fix support for virtual SPA ranges (git-fixes).\n- ACPI: processor: Clean up acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export function to claim _CST control (bsc#1175543)\n- ACPI: processor: Introduce acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Make ACPI_PROCESSOR_CSTATE depend on ACPI_PROCESSOR (bsc#1175543)\n- ALSA: hda - fix the 'Capture Switch' value change notifications (git-fixes).\n- ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (git-fixes).\n- ALSA: hda/hdmi: fix max DP-MST dev_num for Intel TGL+ platforms (git-fixes).\n- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically (git-fixes).\n- ALSA: hda/realtek - Add ALC285 HP init procedure (git-fixes).\n- ALSA: hda/realtek - Add type for ALC287 (git-fixes).\n- ALSA: hda/realtek: Change device names for quirks to barebone names (git-fixes).\n- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9510 laptop (git-fixes).\n- ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256) (git-fixes).\n- ALSA: hda/realtek: Limit mic boost on HP ProBook 445 G8 (git-fixes).\n- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (git-fixes).\n- ALSA: hda/realtek: fix mute led of the HP Pavilion 15-eh1xxx series (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 650 G8 Notebook PC (git-fixes).\n- ALSA: hda/via: Apply runtime PM workaround for ASUS B23E (git-fixes).\n- ALSA: hda: Add quirk for ASUS Flow x13 (git-fixes).\n- ALSA: hda: Fix hang during shutdown due to link reset (git-fixes).\n- ALSA: hda: Release controller display power during shutdown/reboot (git-fixes).\n- ALSA: pcm: Fix mmap breakage without explicit buffer setup (git-fixes).\n- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl (git-fixes).\n- ALSA: seq: Fix racy deletion of subscriber (git-fixes).\n- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (git-fixes).\n- ALSA: usb-audio: Avoid unnecessary or invalid connector selection at resume (git-fixes).\n- ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC (git-fixes).\n- ALSA: usb-audio: Fix superfluous autosuspend recovery (git-fixes).\n- ALSA: usb-audio: fix incorrect clock source setting (git-fixes).\n- ASoC: Intel: Skylake: Fix module resource and format selection (git-fixes).\n- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (git-fixes).\n- ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373 (git-fixes).\n- ASoC: SOF: Intel: hda-ipc: fix reply size checking (git-fixes).\n- ASoC: amd: Fix reference to PCM buffer address (git-fixes).\n- ASoC: component: Remove misplaced prefix handling in pin control functions (git-fixes).\n- ASoC: cs42l42: Correct definition of ADC Volume control (git-fixes).\n- ASoC: cs42l42: Do not allow SND_SOC_DAIFMT_LEFT_J (git-fixes).\n- ASoC: cs42l42: Fix LRCLK frame start edge (git-fixes).\n- ASoC: cs42l42: Fix inversion of ADC Notch Switch control (git-fixes).\n- ASoC: cs42l42: Remove duplicate control for WNF filter frequency (git-fixes).\n- ASoC: intel: atom: Fix breakage for PCM buffer address setup (git-fixes).\n- ASoC: intel: atom: Fix reference to PCM buffer address (git-fixes).\n- ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold again (git-fixes).\n- ASoC: rt5682: Fix the issue of garbled recording after powerd_dbus_suspend (git-fixes).\n- ASoC: ti: j721e-evm: Check for not initialized parent_clk_id (git-fixes).\n- ASoC: ti: j721e-evm: Fix unbalanced domain activity tracking during startup (git-fixes).\n- ASoC: tlv320aic31xx: Fix jack detection after suspend (git-fixes).\n- ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (git-fixes).\n- ASoC: uniphier: Fix reference to PCM buffer address (git-fixes).\n- ASoC: wcd9335: Disable irq on slave ports in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a double irq free in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (git-fixes).\n- ASoC: xilinx: Fix reference to PCM buffer address (git-fixes).\n- Avoid double printing SUSE specific flags in mod-\u003etaint (bsc#1190413).\n- Bluetooth: add timeout sanity check to hci_inquiry (git-fixes).\n- Bluetooth: btusb: Fix a unspported condition to set available debug features (git-fixes).\n- Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS (git-fixes).\n- Bluetooth: defer cleanup of resources in hci_unregister_dev() (git-fixes).\n- Bluetooth: fix repeated calls to sco_sock_kill (git-fixes).\n- Bluetooth: hidp: use correct wait queue when removing ctrl_wait (git-fixes).\n- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow (git-fixes).\n- Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd (git-fixes).\n- Bluetooth: sco: prevent information leak in sco_conn_defer_accept() (git-fixes).\n- Drop two intel_int0002_vgpio patches that cause Oops (bsc#1190412)\n- KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() (bsc#1188786).\n- KVM: VMX: Enable machine check support for 32bit targets (bsc#1188787).\n- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (bsc#1188788).\n- KVM: VMX: Extend VMXs #AC interceptor to handle split lock #AC in guest (bsc#1187959).\n- KVM: nVMX: Handle split-lock #AC exceptions that happen in L2 (bsc#1187959).\n- KVM: nVMX: Really make emulated nested preemption timer pinned (bsc#1188780).\n- KVM: nVMX: Reset the segment cache when stuffing guest segs (bsc#1188781).\n- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1188782).\n- KVM: nVMX: Sync unsync'd vmcs02 state to vmcs12 on migration (bsc#1188783).\n- KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1188784).\n- KVM: x86: Emulate split-lock access as a write in emulator (bsc#1187959).\n- KVM: x86: bit 8 of non-leaf PDPEs is not reserved (bsc#1188790).\n- NFS: Correct size calculation for create reply length (bsc#1189870).\n- NFSv4.1: Do not rebind to the same source port when (bnc#1186264 bnc#1189021)\n- NFSv4/pNFS: Do not call _nfs4_pnfs_v3_ds_connect multiple times (git-fixes).\n- NFSv4: Initialise connection to the server in nfs4_alloc_client() (bsc#1040364).\n- PCI/MSI: Correct misleading comments (git-fixes).\n- PCI/MSI: Do not set invalid bits in MSI mask (git-fixes).\n- PCI/MSI: Enable and mask MSI-X early (git-fixes).\n- PCI/MSI: Enforce MSI[X] entry updates to be visible (git-fixes).\n- PCI/MSI: Enforce that MSI-X table entry is masked for update (git-fixes).\n- PCI/MSI: Mask all unused MSI-X entries (git-fixes).\n- PCI/MSI: Skip masking MSI-X on Xen PV (git-fixes).\n- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (git-fixes).\n- PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI (git-fixes).\n- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (git-fixes).\n- PCI: PM: Enable PME if it can be signaled from D3cold (git-fixes).\n- RDMA/bnxt_re: Fix stats counters (bsc#1188231).\n- SUNRPC: 'Directory with parent 'rpc_clnt' already present!' (bsc#1168202 bsc#1188924).\n- SUNRPC: Fix the batch tasks count wraparound (git-fixes).\n- SUNRPC: Should wake up the privileged task firstly (git-fixes).\n- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- SUNRPC: fix use-after-free in rpc_free_client_work() (bsc#1168202 bsc#1188924).\n- SUNRPC: improve error response to over-size gss credential (bsc#1190022).\n- SUNRPC: prevent port reuse on transports which do not request it (bnc#1186264 bnc#1189021).\n- USB: core: Avoid WARNings for 0-length descriptor requests (git-fixes).\n- USB: serial: ch341: fix character loss at high transfer rates (git-fixes).\n- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (git-fixes).\n- USB: serial: option: add Telit FD980 composition 0x1056 (git-fixes).\n- USB: usbtmc: Fix RCU stall warning (git-fixes).\n- USB:ehci:fix Kunpeng920 ehci hardware problem (git-fixes).\n- VMCI: fix NULL pointer dereference when unmapping queue pair (git-fixes).\n- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (git-fixes).\n- ath9k: Clear key cache explicitly on disabling hardware (git-fixes).\n- ath: Use safer key clearing with key cache entries (git-fixes).\n- bcma: Fix memory leak for internally-handled cores (git-fixes).\n- bdi: Do not use freezable workqueue (bsc#1189573).\n- blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (bsc#1189507).\n- blk-mq-sched: Fix blk_mq_sched_alloc_tags() error handling (bsc#1189506).\n- blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (bsc#1189503).\n- blk-wbt: make sure throttle is enabled properly (bsc#1189504).\n- block: fix trace completion for chained bio (bsc#1189505).\n- bnxt_en: Validate vlan protocol ID on RX packets (jsc#SLE-15075).\n- brcmfmac: pcie: fix oops on failure to resume and reprobe (git-fixes).\n- btrfs: Rename __btrfs_alloc_chunk to btrfs_alloc_chunk (bsc#1189077).\n- btrfs: add a trace class for dumping the current ENOSPC state (bsc#1135481).\n- btrfs: add a trace point for reserve tickets (bsc#1135481).\n- btrfs: adjust the flush trace point to include the source (bsc#1135481).\n- btrfs: check reclaim_size in need_preemptive_reclaim (bsc#1135481).\n- btrfs: factor out create_chunk() (bsc#1189077).\n- btrfs: factor out decide_stripe_size() (bsc#1189077).\n- btrfs: factor out gather_device_info() (bsc#1189077).\n- btrfs: factor out init_alloc_chunk_ctl (bsc#1189077).\n- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1135481).\n- btrfs: fix deadlock with concurrent chunk allocations involving system chunks (bsc#1189077).\n- btrfs: handle invalid profile in chunk allocation (bsc#1189077).\n- btrfs: implement space clamping for preemptive flushing (bsc#1135481).\n- btrfs: improve preemptive background space flushing (bsc#1135481).\n- btrfs: introduce a FORCE_COMMIT_TRANS flush operation (bsc#1135481).\n- btrfs: introduce alloc_chunk_ctl (bsc#1189077).\n- btrfs: introduce chunk allocation policy (bsc#1189077).\n- btrfs: make flush_space take a enum btrfs_flush_state instead of int (bsc#1135481).\n- btrfs: move the chunk_mutex in btrfs_read_chunk_tree (bsc#1189077).\n- btrfs: parameterize dev_extent_min for chunk allocation (bsc#1189077).\n- btrfs: refactor find_free_dev_extent_start() (bsc#1189077).\n- btrfs: remove FLUSH_DELAYED_REFS from data ENOSPC flushing (bsc#1135481).\n- btrfs: rename need_do_async_reclaim (bsc#1135481).\n- btrfs: rework btrfs_calc_reclaim_metadata_size (bsc#1135481).\n- btrfs: rework chunk allocation to avoid exhaustion of the system chunk array (bsc#1189077).\n- btrfs: rip out btrfs_space_info::total_bytes_pinned (bsc#1135481).\n- btrfs: rip the first_ticket_bytes logic from fail_all_tickets (bsc#1135481).\n- btrfs: simplify the logic in need_preemptive_flushing (bsc#1135481).\n- btrfs: tracepoints: convert flush states to using EM macros (bsc#1135481).\n- btrfs: tracepoints: fix btrfs_trigger_flush symbolic string for flags (bsc#1135481).\n- can: ti_hecc: Fix memleak in ti_hecc_probe (git-fixes).\n- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters (git-fixes).\n- ceph: clean up and optimize ceph_check_delayed_caps() (bsc#1187468).\n- ceph: reduce contention in ceph_check_delayed_caps() (bsc#1187468).\n- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1189427).\n- cfg80211: Fix possible memory leak in function cfg80211_bss_update (git-fixes).\n- cifs: Remove unused inline function is_sysvol_or_netlogon() (bsc#1185902).\n- cifs: avoid starvation when refreshing dfs cache (bsc#1185902).\n- cifs: constify get_normalized_path() properly (bsc#1185902).\n- cifs: do not cargo-cult strndup() (bsc#1185902).\n- cifs: do not send tree disconnect to ipc shares (bsc#1185902).\n- cifs: do not share tcp servers with dfs mounts (bsc#1185902).\n- cifs: do not share tcp sessions of dfs connections (bsc#1185902).\n- cifs: fix check of dfs interlinks (bsc#1185902).\n- cifs: fix path comparison and hash calc (bsc#1185902).\n- cifs: get rid of @noreq param in __dfs_cache_find() (bsc#1185902).\n- cifs: handle different charsets in dfs cache (bsc#1185902).\n- cifs: keep referral server sessions alive (bsc#1185902).\n- cifs: missing null pointer check in cifs_mount (bsc#1185902).\n- cifs: prevent NULL deref in cifs_compose_mount_options() (bsc#1185902).\n- cifs: set a minimum of 2 minutes for refreshing dfs cache (bsc#1185902).\n- clk: fix leak on devm_clk_bulk_get_all() unwind (git-fixes).\n- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (git-fixes).\n- cpuidle: Allow idle states to be disabled by default (bsc#1175543)\n- cpuidle: Consolidate disabled state checks (bsc#1175543) \n- cpuidle: Drop disabled field from struct cpuidle_state (bsc#1175543)\n- cpuidle: Fix cpuidle_driver_state_disabled() (bsc#1175543)\n- cpuidle: Introduce cpuidle_driver_state_disabled() for driver quirks (bsc#1175543)\n- crypto: ccp - Annotate SEV Firmware file names (bsc#1189212).\n- crypto: qat - use proper type for vf_mask (git-fixes).\n- crypto: x86/curve25519 - fix cpu feature checking logic in mod_exit (git-fixes).\n- device-dax: Fix default return code of range_parse() (git-fixes).\n- dm integrity: fix missing goto in bitmap_flush_interval error handling (git-fixes).\n- dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (git-fixes).\n- dm verity: fix DM_VERITY_OPTS_MAX value (git-fixes).\n- dmaengine: idxd: fix setup sequence for MSIXPERM table (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-sdma: remove duplicated sdma_load_context (git-fixes).\n- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (git-fixes).\n- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (git-fixes).\n- dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers (git-fixes).\n- drivers/block/null_blk/main: Fix a double free in null_init (git-fixes).\n- drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X (git-fixes).\n- drm/amd/display: Fix comparison error in dcn21 DML (git-fixes).\n- drm/amd/display: Fix max vstartup calculation for modes with borders (git-fixes).\n- drm/amd/display: Remove invalid assert for ODM + MPC case (git-fixes).\n- drm/amd/display: use GFP_ATOMIC in amdgpu_dm_irq_schedule_work (git-fixes).\n- drm/amd/display: workaround for hard hang on HPD on native DP (git-fixes).\n- drm/amdgpu/acp: Make PM domain really work (git-fixes).\n- drm/amdgpu/display: fix DMUB firmware version info (git-fixes).\n- drm/amdgpu/display: only enable aux backlight control for OLED panels (git-fixes).\n- drm/amdgpu: do not enable baco on boco platforms in runpm (git-fixes).\n- drm/amdgpu: fix the doorbell missing when in CGPG issue for renoir (git-fixes).\n- drm/dp_mst: Fix return code on sideband message failure (git-fixes).\n- drm/i915/dg1: gmbus pin mapping (bsc#1188700).\n- drm/i915/dg1: provide port/phy mapping for vbt (bsc#1188700).\n- drm/i915/gen9_bc: Add W/A for missing STRAP config on TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce HPD pin mappings for TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce TGP PCH DDC pin mappings (bsc#1188700).\n- drm/i915/gen9_bc: Recognize TGP PCH + CML combos (bsc#1188700).\n- drm/i915/rkl: new rkl ddc map for different PCH (bsc#1188700).\n- drm/i915: Add VBT AUX CH H and I (bsc#1188700).\n- drm/i915: Add VBT DVO ports H and I (bsc#1188700).\n- drm/i915: Add more AUX CHs to the enum (bsc#1188700).\n- drm/i915: Configure GEN11_{TBT,TC}_HOTPLUG_CTL for ports TC5/6 (bsc#1188700).\n- drm/i915: Correct SFC_DONE register offset (git-fixes).\n- drm/i915: Introduce HPD_PORT_TC\u0026lt;n\u003e (bsc#1188700).\n- drm/i915: Move hpd_pin setup to encoder init (bsc#1188700).\n- drm/i915: Nuke the redundant TC/TBT HPD bit defines (bsc#1188700).\n- drm/i915: Only access SFC_DONE when media domain is not fused off (git-fixes).\n- drm/meson: fix colour distortion from HDR set during vendor u-boot (git-fixes).\n- drm/msi/mdp4: populate priv-\u003ekms in mdp4_kms_init (git-fixes).\n- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs (git-fixes).\n- drm/msm/dsi: Fix some reference counted resource leaks (git-fixes).\n- drm/msm: Fix error return code in msm_drm_init() (git-fixes).\n- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (git-fixes).\n- drm/of: free the iterator object on failure (git-fixes).\n- drm/of: free the right object (git-fixes).\n- drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() (git-fixes).\n- drm/prime: fix comment on PRIME Helpers (git-fixes).\n- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (bsc#1189568).\n- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (bsc#1189564).\n- ext4: fix avefreec in find_group_orlov (bsc#1189566).\n- ext4: fix kernel infoleak via ext4_extent_header (bsc#1189562).\n- ext4: fix potential htree corruption when growing large_dir directories (bsc#1189576).\n- ext4: remove check for zero nr_to_scan in ext4_es_scan() (bsc#1189565).\n- ext4: return error code when ext4_fill_flex_info() fails (bsc#1189563).\n- ext4: use ext4_grp_locked_error in mb_find_extent (bsc#1189567).\n- fanotify: fix copy_event_to_user() fid error clean up (bsc#1189574).\n- firmware_loader: fix use-after-free in firmware_fallback_sysfs (git-fixes).\n- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (git-fixes).\n- fixup 'rpm: support gz and zst compression methods' (bsc#1190358, bsc#1190428).\n- fpga: altera-freeze-bridge: Address warning about unused variable (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: xiilnx-spi: Address warning about unused variable (git-fixes).\n- fpga: zynqmp-fpga: Address warning about unused variable (git-fixes).\n- gpio: eic-sprd: break loop when getting NULL device resource (git-fixes).\n- gpio: tqmx86: really make IRQ optional (git-fixes).\n- i2c: dev: zero out array used for i2c reads from userspace (git-fixes).\n- i2c: highlander: add IRQ check (git-fixes).\n- i2c: iop3xx: fix deferred probing (git-fixes).\n- i2c: mt65xx: fix IRQ check (git-fixes).\n- i2c: s3c2410: fix IRQ check (git-fixes).\n- iio: adc: Fix incorrect exit of for-loop (git-fixes).\n- iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels (git-fixes).\n- iio: humidity: hdc100x: Add margin to the conversion time (git-fixes).\n- intel_idle: Add module parameter to prevent ACPI _CST from being used (bsc#1175543)\n- intel_idle: Allow ACPI _CST to be used for selected known processors (bsc#1175543)\n- intel_idle: Annotate init time data structures (bsc#1175543)\n- intel_idle: Customize IceLake server support (bsc#1175543)\n- intel_idle: Disable ACPI _CST on Haswell (bsc#1175543, bsc#1177399, bsc#1180347, bsc#1180141)\n- intel_idle: Fix max_cstate for processor models without C-state tables (bsc#1175543)\n- intel_idle: Ignore _CST if control cannot be taken from the platform (bsc#1175543)\n- intel_idle: Refactor intel_idle_cpuidle_driver_init() (bsc#1175543)\n- intel_idle: Use ACPI _CST for processor models without C-state tables (bsc#1175543)\n- iommu/amd: Fix extended features logging (bsc#1189213).\n- iommu/amd: Move Stoney Ridge check to detect_ivrs() (bsc#1189762).\n- iommu/arm-smmu-v3: Decrease the queue size of evtq and priq (bsc#1189210).\n- iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK (bsc#1189209).\n- iommu/dma: Fix IOVA reserve dma ranges (bsc#1189214).\n- iommu/dma: Fix compile warning in 32-bit builds (bsc#1189229).\n- iommu/vt-d: Check for allocation failure in aux_detach_device() (bsc#1189215).\n- iommu/vt-d: Define counter explicitly as unsigned int (bsc#1189216).\n- iommu/vt-d: Do not set then clear private data in prq_event_thread() (bsc#1189217).\n- iommu/vt-d: Fix sysfs leak in alloc_iommu() (bsc#1189218).\n- iommu/vt-d: Force to flush iotlb before creating superpage (bsc#1189219).\n- iommu/vt-d: Global devTLB flush when present context entry changed (bsc#1189220).\n- iommu/vt-d: Invalidate PASID cache when root/context entry changed (bsc#1189221).\n- iommu/vt-d: Reject unsupported page request modes (bsc#1189222).\n- ionic: add handling of larger descriptors (jsc#SLE-16649).\n- ionic: add new queue features to interface (jsc#SLE-16649).\n- ionic: aggregate Tx byte counting calls (jsc#SLE-16649).\n- ionic: block actions during fw reset (jsc#SLE-16649).\n- ionic: change mtu after queues are stopped (jsc#SLE-16649).\n- ionic: check for link after netdev registration (jsc#SLE-16649).\n- ionic: code cleanup details (jsc#SLE-16649).\n- ionic: fix sizeof usage (jsc#SLE-16649).\n- ionic: fix unchecked reference (jsc#SLE-16649).\n- ionic: fix up dim accounting for tx and rx (jsc#SLE-16649).\n- ionic: generic tx skb mapping (jsc#SLE-16649).\n- ionic: implement Rx page reuse (jsc#SLE-16649).\n- ionic: make all rx_mode work threadsafe (jsc#SLE-16649).\n- ionic: move rx_page_alloc and free (jsc#SLE-16649).\n- ionic: optimize fastpath struct usage (jsc#SLE-16649).\n- ionic: protect adminq from early destroy (jsc#SLE-16649).\n- ionic: rebuild debugfs on qcq swap (jsc#SLE-16649).\n- ionic: remove intr coalesce update from napi (jsc#SLE-16649).\n- ionic: remove some unnecessary oom messages (jsc#SLE-16649).\n- ionic: simplify TSO descriptor mapping (jsc#SLE-16649).\n- ionic: simplify rx skb alloc (jsc#SLE-16649).\n- ionic: simplify the intr_index use in txq_init (jsc#SLE-16649).\n- ionic: simplify tx clean (jsc#SLE-16649).\n- ionic: simplify use of completion types (jsc#SLE-16649).\n- ionic: start queues before announcing link up (jsc#SLE-16649).\n- ionic: stop watchdog when in broken state (jsc#SLE-16649).\n- ionic: useful names for booleans (jsc#SLE-16649).\n- iwlwifi: pnvm: accept multiple HW-type TLVs (git-fixes).\n- iwlwifi: rs-fw: do not support stbc for HE 160 (git-fixes).\n- iwlwifi: skip first element in the WTAS ACPI table (git-fixes).\n- kABI fix of usb_dcd_config_params (git-fixes).\n- kABI: Fix kABI after fixing vcpu-id indexed arrays (git-fixes).\n- kabi fix for NFSv4.1: Do not rebind to the same source port when reconnecting to the server (bnc#1186264 bnc#1189021)\n- kabi fix for SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (bsc#1189153).\n- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841).\n- leds: trigger: audio: Add an activate callback to ensure the initial brightness is set (git-fixes).\n- lib/mpi: use kcalloc in mpi_resize (git-fixes).\n- lib: Add zstd support to decompress (bsc#1187483, jsc#SLE-18766).\n- libata: fix ata_pio_sector for CONFIG_HIGHMEM (git-fixes).\n- mac80211: Fix insufficient headroom issue for AMSDU (git-fixes).\n- md/raid10: properly indicate failure when ending a failed write request (git-fixes).\n- md: revert io stats accounting (git-fixes).\n- media: TDA1997x: enable EDID support (git-fixes).\n- media: cxd2880-spi: Fix an error handling path (git-fixes).\n- media: drivers/media/usb: fix memory leak in zr364xx_probe (git-fixes).\n- media: dvb-usb: Fix error handling in dvb_usb_i2c_init (git-fixes).\n- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init (git-fixes).\n- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr (git-fixes).\n- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect (git-fixes).\n- media: go7007: fix memory leak in go7007_usb_probe (git-fixes).\n- media: go7007: remove redundant initialization (git-fixes).\n- media: rtl28xxu: fix zero-length control request (git-fixes).\n- media: stkwebcam: fix memory leak in stk_camera_probe (git-fixes).\n- media: venus: venc: Fix potential null pointer dereference on pointer fmt (git-fixes).\n- media: videobuf2-core: dequeue if start_streaming fails (git-fixes).\n- media: zr364xx: fix memory leaks in probe() (git-fixes).\n- media: zr364xx: propagate errors from zr364xx_start_readpipe() (git-fixes).\n- misc: atmel-ssc: lock with mutex instead of spinlock (git-fixes).\n- misc: rtsx: do not setting OC_POWER_DOWN reg in rtsx_pci_init_ocp() (git-fixes).\n- mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (bsc#1189569).\n- mm/vmscan: fix infinite loop in drop_slab_node (VM Functionality, bsc#1189301).\n- mm: fix memory_failure() handling of dax-namespace metadata (bsc#1189872).\n- mm: swap: properly update readahead statistics in unuse_pte_range() (bsc#1187619).\n- mmc: dw_mmc: Fix hang on data CRC error (git-fixes).\n- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: moxart: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: sdhci-iproc: Cap min clock frequency on BCM2711 (git-fixes).\n- mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711 (git-fixes).\n- mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards (git-fixes).\n- nbd: Aovid double completion of a request (git-fixes).\n- nbd: Fix NULL pointer in flush_workqueue (git-fixes).\n- net/mlx5: Add ts_cqe_to_dest_cqn related bits (bsc#1188412)\n- net/mlx5: Properly convey driver version to firmware (git-fixes).\n- net/mlx5e: Add missing capability check for uplink follow (bsc#1188412)\n- net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (git-fixes).\n- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (git-fixes).\n- net: stmmac: free tx skb buffer in stmmac_resume() (git-fixes).\n- net: usb: lan78xx: do not modify phy_device state concurrently (bsc#1188270)\n- nfs: fix acl memory leak of posix_acl_create() (git-fixes).\n- nvme-multipath: revalidate paths during rescan (bsc#1187211)\n- nvme-pci: Use u32 for nvme_dev.q_depth and nvme_queue.q_depth (bsc#1181972).\n- nvme-pci: fix NULL req in completion handler (bsc#1181972).\n- nvme-pci: limit maximum queue depth to 4095 (bsc#1181972).\n- nvme-pci: use unsigned for io queue depth (bsc#1181972).\n- nvme-tcp: Do not reset transport on data digest errors (bsc#1188418).\n- nvme-tcp: do not check blk_mq_tag_to_rq when receiving pdu data (bsc#1181972).\n- nvme: avoid possible double fetch in handling CQE (bsc#1181972).\n- nvme: code command_id with a genctr for use-after-free validation (bsc#1181972).\n- nvme: only call synchronize_srcu when clearing current path (bsc#1188067).\n- nvmet: use NVMET_MAX_NAMESPACES to set nn value (bsc#1189384).\n- ocfs2: fix snprintf() checking (bsc#1189581).\n- ocfs2: fix zero out valid data (bsc#1189579).\n- ocfs2: initialize ip_next_orphan (bsc#1186731).\n- ocfs2: issue zeroout to EOF blocks (bsc#1189582).\n- ovl: allow upperdir inside lowerdir (bsc#1189323).\n- ovl: expand warning in ovl_d_real() (bsc#1189323).\n- ovl: fix missing revert_creds() on error path (bsc#1189323).\n- ovl: perform vfs_getxattr() with mounter creds (bsc#1189323).\n- ovl: skip getxattr of security labels (bsc#1189323).\n- params: lift param_set_uint_minmax to common code (bsc#1181972).\n- pcmcia: i82092: fix a null pointer dereference bug (git-fixes).\n- perf/x86/amd: Do not touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (bsc#1189225).\n- pinctrl: tigerlake: Fix GPIO mapping for newer version of software (git-fixes).\n- platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables (git-fixes).\n- post.sh: detect /usr mountpoint too\n- power: supply: max17042: handle fails of reading status register (git-fixes).\n- powerpc/cacheinfo: Improve diagnostics about malformed cache lists (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Lookup cache by dt node and thread-group id (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Remove the redundant get_shared_cpu_map() (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Use name@unit instead of full DT path in debug messages (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769 git-fixes).\n- powerpc/papr_scm: Reduce error severity if nvdimm stats inaccessible (bsc#1189197 ltc#193906).\n- powerpc/pseries: Fix regression while building external modules (bsc#1160010 ltc#183046 git-fixes). This changes a GPL symbol to general symbol which is kABI change but not kABI break.\n- powerpc/pseries: Fix update of LPAR security flavor after LPM (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/smp: Make some symbols static (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/smp: Use existing L2 cache_map cpumask to find L3 cache siblings (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc: Fix is_kvm_guest() / kvm_para_available() (bsc#1181148 ltc#190702 git-fixes).\n- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (git-fixes).\n- regulator: vctrl: Avoid lockdep warning in enable/disable ops (git-fixes).\n- regulator: vctrl: Use locked regulator_get_voltage in probe path (git-fixes).\n- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.\n- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305)\n- rpm/kernel-source.rpmlintrc: ignore new include/config files In 5.13, since 0e0345b77ac4, config files have no longer .h suffix. Adapt the zero-length check. Based on Martin Liska's change.\n- rq-qos: fix missed wake-ups in rq_qos_throttle try two (bsc#1189575).\n- rsi: fix an error code in rsi_probe() (git-fixes).\n- rsi: fix error code in rsi_load_9116_firmware() (git-fixes).\n- s390/ap: Fix hanging ioctl caused by wrong msg counter (bsc#1188982 LTC#193817).\n- s390/boot: fix use of expolines in the DMA code (bsc#1188878 ltc#193771).\n- scsi: blkcg: Add app identifier support for blkcg (bsc#1189385 jsc#SLE-18970).\n- scsi: blkcg: Fix application ID config options (bsc#1189385 jsc#SLE-18970).\n- scsi: cgroup: Add cgroup_get_from_id() (bsc#1189385 jsc#SLE-18970).\n- scsi: core: Add scsi_prot_ref_tag() helper (bsc#1189392).\n- scsi: ibmvfc: Do not wait for initial device scan (bsc#1127650).\n- scsi: libfc: Fix array index out of bound exception (bsc#1188616).\n- scsi: lpfc: Add 256 Gb link speed support (bsc#1189385).\n- scsi: lpfc: Add PCI ID support for LPe37000/LPe38000 series adapters (bsc#1189385).\n- scsi: lpfc: Call discovery state machine when handling PLOGI/ADISC completions (bsc#1189385).\n- scsi: lpfc: Clear outstanding active mailbox during PCI function reset (bsc#1189385).\n- scsi: lpfc: Copyright updates for 12.8.0.11 patches (bsc#1189385).\n- scsi: lpfc: Copyright updates for 14.0.0.0 patches (bsc#1189385).\n- scsi: lpfc: Delay unregistering from transport until GIDFT or ADISC completes (bsc#1189385).\n- scsi: lpfc: Discovery state machine fixes for LOGO handling (bsc#1189385).\n- scsi: lpfc: Enable adisc discovery after RSCN by default (bsc#1189385).\n- scsi: lpfc: Fix KASAN slab-out-of-bounds in lpfc_unreg_rpi() routine (bsc#1189385).\n- scsi: lpfc: Fix NULL ptr dereference with NPIV ports for RDF handling (bsc#1189385).\n- scsi: lpfc: Fix NVMe support reporting in log message (bsc#1189385).\n- scsi: lpfc: Fix build error in lpfc_scsi.c (bsc#1189385).\n- scsi: lpfc: Fix cq_id truncation in rq create (bsc#1189385).\n- scsi: lpfc: Fix function description comments for vmid routines (bsc#1189385).\n- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (bsc#1189385).\n- scsi: lpfc: Fix possible ABBA deadlock in nvmet_xri_aborted() (bsc#1189385).\n- scsi: lpfc: Fix target reset handler from falsely returning FAILURE (bsc#1189385).\n- scsi: lpfc: Improve firmware download logging (bsc#1189385).\n- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1189385).\n- scsi: lpfc: Move initialization of phba-\u003epoll_list earlier to avoid crash (git-fixes).\n- scsi: lpfc: Remove REG_LOGIN check requirement to issue an ELS RDF (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer pcmd (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer temp_hdr (bsc#1189385).\n- scsi: lpfc: Remove use of kmalloc() in trace event logging (bsc#1189385).\n- scsi: lpfc: Revise Topology and RAS support checks for new adapters (bsc#1189385).\n- scsi: lpfc: Skip issuing ADISC when node is in NPR state (bsc#1189385).\n- scsi: lpfc: Skip reg_vpi when link is down for SLI3 in ADISC cmpl path (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 12.8.0.11 (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 14.0.0.0 (bsc#1189385).\n- scsi: lpfc: Use PBDE feature enabled bit to determine PBDE support (bsc#1189385).\n- scsi: lpfc: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189385).\n- scsi: lpfc: vmid: Add QFPA and VMID timeout check in worker thread (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add datastructure for supporting VMID in lpfc (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add support for VMID in mailbox command (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Append the VMID to the wqe before sending (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Functions to manage VMIDs (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement CT commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement ELS commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Introduce VMID in I/O path (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Timeout implementation for VMID (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: VMID parameter initialization (bsc#1189385 jsc#SLE-18970).\n- scsi: mpt3sas: Fix ReplyPostFree pool allocation (bsc#1181006).\n- scsi: qla2xxx: Add heartbeat check (bsc#1189392).\n- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() (bsc#1189392).\n- scsi: qla2xxx: Fix spelling mistakes 'allloc' -\u003e 'alloc' (bsc#1189392).\n- scsi: qla2xxx: Fix use after free in debug code (bsc#1189392).\n- scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (bsc#1189392).\n- scsi: qla2xxx: Remove duplicate declarations (bsc#1189392).\n- scsi: qla2xxx: Remove redundant assignment to rval (bsc#1189392).\n- scsi: qla2xxx: Remove redundant continue statement in a for-loop (bsc#1189392).\n- scsi: qla2xxx: Remove redundant initialization of variable num_cnt (bsc#1189392).\n- scsi: qla2xxx: Remove unused variable 'status' (bsc#1189392).\n- scsi: qla2xxx: Update version to 10.02.00.107-k (bsc#1189392).\n- scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189392).\n- scsi: qla2xxx: Use the proper SCSI midlayer interfaces for PI (bsc#1189392).\n- scsi: qla2xxx: edif: Add authentication pass + fail bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add detection of secure device (bsc#1189392).\n- scsi: qla2xxx: edif: Add doorbell notification for app (bsc#1189392).\n- scsi: qla2xxx: edif: Add encryption to I/O path (bsc#1189392).\n- scsi: qla2xxx: edif: Add extraction of auth_els from the wire (bsc#1189392).\n- scsi: qla2xxx: edif: Add getfcinfo and statistic bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add key update (bsc#1189392).\n- scsi: qla2xxx: edif: Add send, receive, and accept for auth_els (bsc#1189392).\n- scsi: qla2xxx: edif: Add start + stop bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Increment command and completion counts (bsc#1189392).\n- scsi: scsi_transport_srp: Do not block target in SRP_PORT_LOST state (bsc#1184180).\n- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (bsc#1189392).\n- scsi: zfcp: Report port fc_security as unknown early during remote cable pull (git-fixes).\n- serial: 8250: Mask out floating 16/32-bit bus bits (git-fixes).\n- serial: 8250_mtk: fix uart corruption issue when rx power off (git-fixes).\n- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts (git-fixes).\n- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (git-fixes).\n- serial: tegra: Only print FIFO error message when an error occurs (git-fixes).\n- slimbus: messaging: check for valid transaction id (git-fixes).\n- slimbus: messaging: start transaction ids from 1 instead of zero (git-fixes).\n- slimbus: ngd: reset dma setup during runtime pm (git-fixes).\n- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: aspeed: p2a-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: qcom: rpmhpd: Use corner in power_off (git-fixes).\n- soc: qcom: smsm: Fix missed interrupts if state changes while masked (git-fixes).\n- spi: imx: mx51-ecspi: Fix CONFIGREG delay comment (git-fixes).\n- spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (git-fixes).\n- spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (git-fixes).\n- spi: mediatek: Fix fifo transfer (git-fixes).\n- spi: meson-spicc: fix memory leak in meson_spicc_remove (git-fixes).\n- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: spi-pic32: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: sprd: Fix the wrong WDG_LOAD_VAL (git-fixes).\n- spi: stm32h7: fix full duplex irq handler handling (git-fixes).\n- staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (git-fixes).\n- staging: rtl8712: get rid of flush_scheduled_work (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name (git-fixes).\n- tracing / histogram: Give calculation hist_fields a size (git-fixes).\n- tracing: Reject string operand in the histogram expression (git-fixes).\n- tty: serial: fsl_lpuart: fix the wrong mapbase value (git-fixes).\n- ubifs: Fix error return code in alloc_wbufs() (bsc#1189585).\n- ubifs: Fix memleak in ubifs_init_authentication (bsc#1189583).\n- ubifs: Only check replay with inode type to judge if inode linked (bsc#1187455).\n- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (bsc#1189587).\n- ubifs: journal: Fix error return code in ubifs_jnl_write_inode() (bsc#1189586).\n- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available (git-fixes).\n- usb: dwc3: Disable phy suspend after power-on reset (git-fixes).\n- usb: dwc3: Separate field holding multiple properties (git-fixes).\n- usb: dwc3: Stop active transfers before halting the controller (git-fixes).\n- usb: dwc3: Use clk_bulk_prepare_enable() (git-fixes).\n- usb: dwc3: Use devres to get clocks (git-fixes).\n- usb: dwc3: core: do not do suspend for device mode if already suspended (git-fixes).\n- usb: dwc3: debug: Remove newline printout (git-fixes).\n- usb: dwc3: gadget: Check MPS of the request length (git-fixes).\n- usb: dwc3: gadget: Clear DCTL.ULSTCHNGREQ before set (git-fixes).\n- usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable (git-fixes).\n- usb: dwc3: gadget: Disable gadget IRQ during pullup disable (git-fixes).\n- usb: dwc3: gadget: Do not send unintended link state change (git-fixes).\n- usb: dwc3: gadget: Do not setup more than requested (git-fixes).\n- usb: dwc3: gadget: Fix dwc3_calc_trbs_left() (git-fixes).\n- usb: dwc3: gadget: Fix handling ZLP (git-fixes).\n- usb: dwc3: gadget: Give back staled requests (git-fixes).\n- usb: dwc3: gadget: Handle ZLP for sg requests (git-fixes).\n- usb: dwc3: gadget: Prevent EP queuing while stopping transfers (git-fixes).\n- usb: dwc3: gadget: Properly track pending and queued SG (git-fixes).\n- usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup (git-fixes).\n- usb: dwc3: gadget: Set BESL config parameter (git-fixes).\n- usb: dwc3: gadget: Set link state to RX_Detect on disconnect (git-fixes).\n- usb: dwc3: gadget: Stop EP0 transfers during pullup disable (git-fixes).\n- usb: dwc3: gadget: Workaround Mirosoft's BESL check (git-fixes).\n- usb: dwc3: meson-g12a: add IRQ check (git-fixes).\n- usb: dwc3: meson-g12a: check return of dwc3_meson_g12a_usb_init (git-fixes).\n- usb: dwc3: of-simple: add a shutdown (git-fixes).\n- usb: dwc3: st: Add of_dev_put() in probe function (git-fixes).\n- usb: dwc3: st: Add of_node_put() before return in probe function (git-fixes).\n- usb: dwc3: support continuous runtime PM with dual role (git-fixes).\n- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (git-fixes).\n- usb: gadget: Export recommended BESL values (git-fixes).\n- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (git-fixes).\n- usb: gadget: f_hid: fixed NULL pointer dereference (git-fixes).\n- usb: gadget: f_hid: idle uses the highest byte for duration (git-fixes).\n- usb: gadget: mv_u3d: request_irq() after initializing UDC (git-fixes).\n- usb: gadget: udc: at91: add IRQ check (git-fixes).\n- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (git-fixes).\n- usb: host: ohci-tmio: add IRQ check (git-fixes).\n- usb: host: xhci-rcar: Do not reload firmware after the completion (git-fixes).\n- usb: mtu3: fix the wrong HS mult value (git-fixes).\n- usb: mtu3: use @mult for HS isoc or intr (git-fixes).\n- usb: phy: fsl-usb: add IRQ check (git-fixes).\n- usb: phy: tahvo: add IRQ check (git-fixes).\n- usb: phy: twl6030: add IRQ checks (git-fixes).\n- usr: Add support for zstd compressed initramfs (bsc#1187483, jsc#SLE-18766).\n- virt_wifi: fix error on connect (git-fixes).\n- wireguard: allowedips: allocate nodes in kmem_cache (git-fixes).\n- wireguard: allowedips: free empty intermediate nodes when removing single node (git-fixes).\n- wireguard: allowedips: remove nodes in O(1) (git-fixes).\n- writeback: fix obtain a reference to a freeing memcg css (bsc#1189577).\n- x86/fpu: Limit xstate copy size in xstateregs_set() (bsc#1152489).\n- x86/fpu: Make init_fpstate correct with optimized XSAVE (bsc#1152489).\n- x86/fpu: Reset state for all signal restore failures (bsc#1152489).\n- x86/kvm: fix vcpu-id indexed array sizes (git-fixes).\n- x86/sev: Make sure IRQs are disabled while GHCB is active (jsc#SLE-14337).\n- x86/sev: Split up runtime #VC handler for correct state tracking (jsc#SLE-14337).\n- x86/sev: Use 'SEV: ' prefix for messages from sev.c (jsc#SLE-14337).\n- x86/signal: Detect and prevent an alternate signal stack overflow (bsc#1152489).\n- x86/split_lock: Provide handle_guest_split_lock() (bsc#1187959).\n- xen/events: Fix race in set_evtchn_to_irq (git-fixes).\n- xprtrdma: Pad optimization, revisited (bsc#1189760).\n","status":"published","published":"2021-09-23T14:16:08Z","modified":"2026-02-04T04:09:31.645655Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3205-2","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).\n- CVE-2021-3653: Missing validation of the `int_ctl` VMCB field and allows a malicious L1 guest to enable AVIC support for the L2 guest. (bsc#1189399).\n- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).\n- CVE-2021-3679: A lack of CPU resource in tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).\n- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).\n- CVE-2021-3739: Fixed a NULL pointer dereference when deleting device by invalid id (bsc#1189832 ).\n- CVE-2021-3743: Fixed OOB Read in qrtr_endpoint_post (bsc#1189883).\n- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).\n- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-\u003elen value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)\n- CVE-2021-38198: arch/x86/kvm/mmu/paging_tmpl.h incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault (bnc#1189262).\n- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).\n- CVE-2021-38205: drivers/net/ethernet/xilinx/xilinx_emaclite.c made it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer) (bnc#1189292).\n- CVE-2021-38207: drivers/net/ethernet/xilinx/ll_temac_main.c allowed remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes (bnc#1189298).\n- CVE-2021-38166: Fixed an integer overflow and out-of-bounds write when many elements are placed in a single bucket in kernel/bpf/hashtab.c (bnc#1189233 ).\n- CVE-2021-38209: Fixed allowed observation of changes in any net namespace via net/netfilter/nf_conntrack_standalone.c (bnc#1189393).\n- CVE-2021-38206: Fixed NULL pointer dereference in the radiotap parser inside the mac80211 subsystem (bnc#1189296).\n- CVE-2021-34556: Fixed side-channel attack via a Speculative Store Bypass via unprivileged BPF program that could have obtain sensitive information from kernel memory (bsc#1188983).\n- CVE-2021-35477: Fixed BPF stack frame pointer which could have been abused to disclose content of arbitrary kernel memory (bsc#1188985).\n- CVE-2021-3759: Unaccounted ipc objects in Linux kernel could have lead to breaking memcg limits and DoS attacks (bsc#1190115).\n- CVE-2020-12770: Fixed sg_remove_request call in a certain failure cases (bsc#1171420).\n\nThe following non-security bugs were fixed:\n\n- ACPI: NFIT: Fix support for virtual SPA ranges (git-fixes).\n- ACPI: processor: Clean up acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Export function to claim _CST control (bsc#1175543)\n- ACPI: processor: Introduce acpi_processor_evaluate_cst() (bsc#1175543)\n- ACPI: processor: Make ACPI_PROCESSOR_CSTATE depend on ACPI_PROCESSOR (bsc#1175543)\n- ALSA: hda - fix the 'Capture Switch' value change notifications (git-fixes).\n- ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (git-fixes).\n- ALSA: hda/hdmi: fix max DP-MST dev_num for Intel TGL+ platforms (git-fixes).\n- ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically (git-fixes).\n- ALSA: hda/realtek - Add ALC285 HP init procedure (git-fixes).\n- ALSA: hda/realtek - Add type for ALC287 (git-fixes).\n- ALSA: hda/realtek: Change device names for quirks to barebone names (git-fixes).\n- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9510 laptop (git-fixes).\n- ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256) (git-fixes).\n- ALSA: hda/realtek: Limit mic boost on HP ProBook 445 G8 (git-fixes).\n- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (git-fixes).\n- ALSA: hda/realtek: fix mute led of the HP Pavilion 15-eh1xxx series (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 650 G8 Notebook PC (git-fixes).\n- ALSA: hda/via: Apply runtime PM workaround for ASUS B23E (git-fixes).\n- ALSA: hda: Add quirk for ASUS Flow x13 (git-fixes).\n- ALSA: hda: Fix hang during shutdown due to link reset (git-fixes).\n- ALSA: hda: Release controller display power during shutdown/reboot (git-fixes).\n- ALSA: pcm: Fix mmap breakage without explicit buffer setup (git-fixes).\n- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl (git-fixes).\n- ALSA: seq: Fix racy deletion of subscriber (git-fixes).\n- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (git-fixes).\n- ALSA: usb-audio: Avoid unnecessary or invalid connector selection at resume (git-fixes).\n- ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC (git-fixes).\n- ALSA: usb-audio: Fix superfluous autosuspend recovery (git-fixes).\n- ALSA: usb-audio: fix incorrect clock source setting (git-fixes).\n- ASoC: Intel: Skylake: Fix module resource and format selection (git-fixes).\n- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (git-fixes).\n- ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373 (git-fixes).\n- ASoC: SOF: Intel: hda-ipc: fix reply size checking (git-fixes).\n- ASoC: amd: Fix reference to PCM buffer address (git-fixes).\n- ASoC: component: Remove misplaced prefix handling in pin control functions (git-fixes).\n- ASoC: cs42l42: Correct definition of ADC Volume control (git-fixes).\n- ASoC: cs42l42: Do not allow SND_SOC_DAIFMT_LEFT_J (git-fixes).\n- ASoC: cs42l42: Fix LRCLK frame start edge (git-fixes).\n- ASoC: cs42l42: Fix inversion of ADC Notch Switch control (git-fixes).\n- ASoC: cs42l42: Remove duplicate control for WNF filter frequency (git-fixes).\n- ASoC: intel: atom: Fix breakage for PCM buffer address setup (git-fixes).\n- ASoC: intel: atom: Fix reference to PCM buffer address (git-fixes).\n- ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold (git-fixes).\n- ASoC: rt5682: Adjust headset volume button threshold again (git-fixes).\n- ASoC: rt5682: Fix the issue of garbled recording after powerd_dbus_suspend (git-fixes).\n- ASoC: ti: j721e-evm: Check for not initialized parent_clk_id (git-fixes).\n- ASoC: ti: j721e-evm: Fix unbalanced domain activity tracking during startup (git-fixes).\n- ASoC: tlv320aic31xx: Fix jack detection after suspend (git-fixes).\n- ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (git-fixes).\n- ASoC: uniphier: Fix reference to PCM buffer address (git-fixes).\n- ASoC: wcd9335: Disable irq on slave ports in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a double irq free in the remove function (git-fixes).\n- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (git-fixes).\n- ASoC: xilinx: Fix reference to PCM buffer address (git-fixes).\n- Avoid double printing SUSE specific flags in mod-\u003etaint (bsc#1190413).\n- Bluetooth: add timeout sanity check to hci_inquiry (git-fixes).\n- Bluetooth: btusb: Fix a unspported condition to set available debug features (git-fixes).\n- Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS (git-fixes).\n- Bluetooth: defer cleanup of resources in hci_unregister_dev() (git-fixes).\n- Bluetooth: fix repeated calls to sco_sock_kill (git-fixes).\n- Bluetooth: hidp: use correct wait queue when removing ctrl_wait (git-fixes).\n- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow (git-fixes).\n- Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd (git-fixes).\n- Bluetooth: sco: prevent information leak in sco_conn_defer_accept() (git-fixes).\n- Drop two intel_int0002_vgpio patches that cause Oops (bsc#1190412)\n- KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() (bsc#1188786).\n- KVM: VMX: Enable machine check support for 32bit targets (bsc#1188787).\n- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (bsc#1188788).\n- KVM: VMX: Extend VMXs #AC interceptor to handle split lock #AC in guest (bsc#1187959).\n- KVM: nVMX: Handle split-lock #AC exceptions that happen in L2 (bsc#1187959).\n- KVM: nVMX: Really make emulated nested preemption timer pinned (bsc#1188780).\n- KVM: nVMX: Reset the segment cache when stuffing guest segs (bsc#1188781).\n- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1188782).\n- KVM: nVMX: Sync unsync'd vmcs02 state to vmcs12 on migration (bsc#1188783).\n- KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1188784).\n- KVM: x86: Emulate split-lock access as a write in emulator (bsc#1187959).\n- KVM: x86: bit 8 of non-leaf PDPEs is not reserved (bsc#1188790).\n- NFS: Correct size calculation for create reply length (bsc#1189870).\n- NFSv4.1: Do not rebind to the same source port when (bnc#1186264 bnc#1189021)\n- NFSv4/pNFS: Do not call _nfs4_pnfs_v3_ds_connect multiple times (git-fixes).\n- NFSv4: Initialise connection to the server in nfs4_alloc_client() (bsc#1040364).\n- PCI/MSI: Correct misleading comments (git-fixes).\n- PCI/MSI: Do not set invalid bits in MSI mask (git-fixes).\n- PCI/MSI: Enable and mask MSI-X early (git-fixes).\n- PCI/MSI: Enforce MSI[X] entry updates to be visible (git-fixes).\n- PCI/MSI: Enforce that MSI-X table entry is masked for update (git-fixes).\n- PCI/MSI: Mask all unused MSI-X entries (git-fixes).\n- PCI/MSI: Skip masking MSI-X on Xen PV (git-fixes).\n- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (git-fixes).\n- PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI (git-fixes).\n- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (git-fixes).\n- PCI: PM: Enable PME if it can be signaled from D3cold (git-fixes).\n- RDMA/bnxt_re: Fix stats counters (bsc#1188231).\n- SUNRPC: 'Directory with parent 'rpc_clnt' already present!' (bsc#1168202 bsc#1188924).\n- SUNRPC: Fix the batch tasks count wraparound (git-fixes).\n- SUNRPC: Should wake up the privileged task firstly (git-fixes).\n- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- SUNRPC: fix use-after-free in rpc_free_client_work() (bsc#1168202 bsc#1188924).\n- SUNRPC: improve error response to over-size gss credential (bsc#1190022).\n- SUNRPC: prevent port reuse on transports which do not request it (bnc#1186264 bnc#1189021).\n- USB: core: Avoid WARNings for 0-length descriptor requests (git-fixes).\n- USB: serial: ch341: fix character loss at high transfer rates (git-fixes).\n- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (git-fixes).\n- USB: serial: option: add Telit FD980 composition 0x1056 (git-fixes).\n- USB: usbtmc: Fix RCU stall warning (git-fixes).\n- USB:ehci:fix Kunpeng920 ehci hardware problem (git-fixes).\n- VMCI: fix NULL pointer dereference when unmapping queue pair (git-fixes).\n- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (git-fixes).\n- ath9k: Clear key cache explicitly on disabling hardware (git-fixes).\n- ath: Use safer key clearing with key cache entries (git-fixes).\n- bcma: Fix memory leak for internally-handled cores (git-fixes).\n- bdi: Do not use freezable workqueue (bsc#1189573).\n- blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (bsc#1189507).\n- blk-mq-sched: Fix blk_mq_sched_alloc_tags() error handling (bsc#1189506).\n- blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (bsc#1189503).\n- blk-wbt: make sure throttle is enabled properly (bsc#1189504).\n- block: fix trace completion for chained bio (bsc#1189505).\n- bnxt_en: Validate vlan protocol ID on RX packets (jsc#SLE-15075).\n- brcmfmac: pcie: fix oops on failure to resume and reprobe (git-fixes).\n- btrfs: Rename __btrfs_alloc_chunk to btrfs_alloc_chunk (bsc#1189077).\n- btrfs: add a trace class for dumping the current ENOSPC state (bsc#1135481).\n- btrfs: add a trace point for reserve tickets (bsc#1135481).\n- btrfs: adjust the flush trace point to include the source (bsc#1135481).\n- btrfs: check reclaim_size in need_preemptive_reclaim (bsc#1135481).\n- btrfs: factor out create_chunk() (bsc#1189077).\n- btrfs: factor out decide_stripe_size() (bsc#1189077).\n- btrfs: factor out gather_device_info() (bsc#1189077).\n- btrfs: factor out init_alloc_chunk_ctl (bsc#1189077).\n- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1135481).\n- btrfs: fix deadlock with concurrent chunk allocations involving system chunks (bsc#1189077).\n- btrfs: handle invalid profile in chunk allocation (bsc#1189077).\n- btrfs: implement space clamping for preemptive flushing (bsc#1135481).\n- btrfs: improve preemptive background space flushing (bsc#1135481).\n- btrfs: introduce a FORCE_COMMIT_TRANS flush operation (bsc#1135481).\n- btrfs: introduce alloc_chunk_ctl (bsc#1189077).\n- btrfs: introduce chunk allocation policy (bsc#1189077).\n- btrfs: make flush_space take a enum btrfs_flush_state instead of int (bsc#1135481).\n- btrfs: move the chunk_mutex in btrfs_read_chunk_tree (bsc#1189077).\n- btrfs: parameterize dev_extent_min for chunk allocation (bsc#1189077).\n- btrfs: refactor find_free_dev_extent_start() (bsc#1189077).\n- btrfs: remove FLUSH_DELAYED_REFS from data ENOSPC flushing (bsc#1135481).\n- btrfs: rename need_do_async_reclaim (bsc#1135481).\n- btrfs: rework btrfs_calc_reclaim_metadata_size (bsc#1135481).\n- btrfs: rework chunk allocation to avoid exhaustion of the system chunk array (bsc#1189077).\n- btrfs: rip out btrfs_space_info::total_bytes_pinned (bsc#1135481).\n- btrfs: rip the first_ticket_bytes logic from fail_all_tickets (bsc#1135481).\n- btrfs: simplify the logic in need_preemptive_flushing (bsc#1135481).\n- btrfs: tracepoints: convert flush states to using EM macros (bsc#1135481).\n- btrfs: tracepoints: fix btrfs_trigger_flush symbolic string for flags (bsc#1135481).\n- can: ti_hecc: Fix memleak in ti_hecc_probe (git-fixes).\n- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters (git-fixes).\n- ceph: clean up and optimize ceph_check_delayed_caps() (bsc#1187468).\n- ceph: reduce contention in ceph_check_delayed_caps() (bsc#1187468).\n- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1189427).\n- cfg80211: Fix possible memory leak in function cfg80211_bss_update (git-fixes).\n- cifs: Remove unused inline function is_sysvol_or_netlogon() (bsc#1185902).\n- cifs: avoid starvation when refreshing dfs cache (bsc#1185902).\n- cifs: constify get_normalized_path() properly (bsc#1185902).\n- cifs: do not cargo-cult strndup() (bsc#1185902).\n- cifs: do not send tree disconnect to ipc shares (bsc#1185902).\n- cifs: do not share tcp servers with dfs mounts (bsc#1185902).\n- cifs: do not share tcp sessions of dfs connections (bsc#1185902).\n- cifs: fix check of dfs interlinks (bsc#1185902).\n- cifs: fix path comparison and hash calc (bsc#1185902).\n- cifs: get rid of @noreq param in __dfs_cache_find() (bsc#1185902).\n- cifs: handle different charsets in dfs cache (bsc#1185902).\n- cifs: keep referral server sessions alive (bsc#1185902).\n- cifs: missing null pointer check in cifs_mount (bsc#1185902).\n- cifs: prevent NULL deref in cifs_compose_mount_options() (bsc#1185902).\n- cifs: set a minimum of 2 minutes for refreshing dfs cache (bsc#1185902).\n- clk: fix leak on devm_clk_bulk_get_all() unwind (git-fixes).\n- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (git-fixes).\n- cpuidle: Allow idle states to be disabled by default (bsc#1175543)\n- cpuidle: Consolidate disabled state checks (bsc#1175543) \n- cpuidle: Drop disabled field from struct cpuidle_state (bsc#1175543)\n- cpuidle: Fix cpuidle_driver_state_disabled() (bsc#1175543)\n- cpuidle: Introduce cpuidle_driver_state_disabled() for driver quirks (bsc#1175543)\n- crypto: ccp - Annotate SEV Firmware file names (bsc#1189212).\n- crypto: qat - use proper type for vf_mask (git-fixes).\n- crypto: x86/curve25519 - fix cpu feature checking logic in mod_exit (git-fixes).\n- device-dax: Fix default return code of range_parse() (git-fixes).\n- dm integrity: fix missing goto in bitmap_flush_interval error handling (git-fixes).\n- dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (git-fixes).\n- dm verity: fix DM_VERITY_OPTS_MAX value (git-fixes).\n- dmaengine: idxd: fix setup sequence for MSIXPERM table (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-dma: configure the generic DMA type to make it work (git-fixes).\n- dmaengine: imx-sdma: remove duplicated sdma_load_context (git-fixes).\n- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (git-fixes).\n- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (git-fixes).\n- dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers (git-fixes).\n- drivers/block/null_blk/main: Fix a double free in null_init (git-fixes).\n- drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X (git-fixes).\n- drm/amd/display: Fix comparison error in dcn21 DML (git-fixes).\n- drm/amd/display: Fix max vstartup calculation for modes with borders (git-fixes).\n- drm/amd/display: Remove invalid assert for ODM + MPC case (git-fixes).\n- drm/amd/display: use GFP_ATOMIC in amdgpu_dm_irq_schedule_work (git-fixes).\n- drm/amd/display: workaround for hard hang on HPD on native DP (git-fixes).\n- drm/amdgpu/acp: Make PM domain really work (git-fixes).\n- drm/amdgpu/display: fix DMUB firmware version info (git-fixes).\n- drm/amdgpu/display: only enable aux backlight control for OLED panels (git-fixes).\n- drm/amdgpu: do not enable baco on boco platforms in runpm (git-fixes).\n- drm/amdgpu: fix the doorbell missing when in CGPG issue for renoir (git-fixes).\n- drm/dp_mst: Fix return code on sideband message failure (git-fixes).\n- drm/i915/dg1: gmbus pin mapping (bsc#1188700).\n- drm/i915/dg1: provide port/phy mapping for vbt (bsc#1188700).\n- drm/i915/gen9_bc: Add W/A for missing STRAP config on TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce HPD pin mappings for TGP PCH + CML combos (bsc#1188700).\n- drm/i915/gen9_bc: Introduce TGP PCH DDC pin mappings (bsc#1188700).\n- drm/i915/gen9_bc: Recognize TGP PCH + CML combos (bsc#1188700).\n- drm/i915/rkl: new rkl ddc map for different PCH (bsc#1188700).\n- drm/i915: Add VBT AUX CH H and I (bsc#1188700).\n- drm/i915: Add VBT DVO ports H and I (bsc#1188700).\n- drm/i915: Add more AUX CHs to the enum (bsc#1188700).\n- drm/i915: Configure GEN11_{TBT,TC}_HOTPLUG_CTL for ports TC5/6 (bsc#1188700).\n- drm/i915: Correct SFC_DONE register offset (git-fixes).\n- drm/i915: Introduce HPD_PORT_TC\u0026lt;n\u003e (bsc#1188700).\n- drm/i915: Move hpd_pin setup to encoder init (bsc#1188700).\n- drm/i915: Nuke the redundant TC/TBT HPD bit defines (bsc#1188700).\n- drm/i915: Only access SFC_DONE when media domain is not fused off (git-fixes).\n- drm/meson: fix colour distortion from HDR set during vendor u-boot (git-fixes).\n- drm/msi/mdp4: populate priv-\u003ekms in mdp4_kms_init (git-fixes).\n- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs (git-fixes).\n- drm/msm/dsi: Fix some reference counted resource leaks (git-fixes).\n- drm/msm: Fix error return code in msm_drm_init() (git-fixes).\n- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (git-fixes).\n- drm/of: free the iterator object on failure (git-fixes).\n- drm/of: free the right object (git-fixes).\n- drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() (git-fixes).\n- drm/prime: fix comment on PRIME Helpers (git-fixes).\n- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (bsc#1189568).\n- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (bsc#1189564).\n- ext4: fix avefreec in find_group_orlov (bsc#1189566).\n- ext4: fix kernel infoleak via ext4_extent_header (bsc#1189562).\n- ext4: fix potential htree corruption when growing large_dir directories (bsc#1189576).\n- ext4: remove check for zero nr_to_scan in ext4_es_scan() (bsc#1189565).\n- ext4: return error code when ext4_fill_flex_info() fails (bsc#1189563).\n- ext4: use ext4_grp_locked_error in mb_find_extent (bsc#1189567).\n- fanotify: fix copy_event_to_user() fid error clean up (bsc#1189574).\n- firmware_loader: fix use-after-free in firmware_fallback_sysfs (git-fixes).\n- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (git-fixes).\n- fixup 'rpm: support gz and zst compression methods' (bsc#1190358, bsc#1190428).\n- fpga: altera-freeze-bridge: Address warning about unused variable (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: dfl: fme: Fix cpu hotplug issue in performance reporting (git-fixes).\n- fpga: xiilnx-spi: Address warning about unused variable (git-fixes).\n- fpga: zynqmp-fpga: Address warning about unused variable (git-fixes).\n- gpio: eic-sprd: break loop when getting NULL device resource (git-fixes).\n- gpio: tqmx86: really make IRQ optional (git-fixes).\n- i2c: dev: zero out array used for i2c reads from userspace (git-fixes).\n- i2c: highlander: add IRQ check (git-fixes).\n- i2c: iop3xx: fix deferred probing (git-fixes).\n- i2c: mt65xx: fix IRQ check (git-fixes).\n- i2c: s3c2410: fix IRQ check (git-fixes).\n- iio: adc: Fix incorrect exit of for-loop (git-fixes).\n- iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels (git-fixes).\n- iio: humidity: hdc100x: Add margin to the conversion time (git-fixes).\n- intel_idle: Add module parameter to prevent ACPI _CST from being used (bsc#1175543)\n- intel_idle: Allow ACPI _CST to be used for selected known processors (bsc#1175543)\n- intel_idle: Annotate init time data structures (bsc#1175543)\n- intel_idle: Customize IceLake server support (bsc#1175543)\n- intel_idle: Disable ACPI _CST on Haswell (bsc#1175543, bsc#1177399, bsc#1180347, bsc#1180141)\n- intel_idle: Fix max_cstate for processor models without C-state tables (bsc#1175543)\n- intel_idle: Ignore _CST if control cannot be taken from the platform (bsc#1175543)\n- intel_idle: Refactor intel_idle_cpuidle_driver_init() (bsc#1175543)\n- intel_idle: Use ACPI _CST for processor models without C-state tables (bsc#1175543)\n- iommu/amd: Fix extended features logging (bsc#1189213).\n- iommu/amd: Move Stoney Ridge check to detect_ivrs() (bsc#1189762).\n- iommu/arm-smmu-v3: Decrease the queue size of evtq and priq (bsc#1189210).\n- iommu/arm-smmu-v3: add bit field SFM into GERROR_ERR_MASK (bsc#1189209).\n- iommu/dma: Fix IOVA reserve dma ranges (bsc#1189214).\n- iommu/dma: Fix compile warning in 32-bit builds (bsc#1189229).\n- iommu/vt-d: Check for allocation failure in aux_detach_device() (bsc#1189215).\n- iommu/vt-d: Define counter explicitly as unsigned int (bsc#1189216).\n- iommu/vt-d: Do not set then clear private data in prq_event_thread() (bsc#1189217).\n- iommu/vt-d: Fix sysfs leak in alloc_iommu() (bsc#1189218).\n- iommu/vt-d: Force to flush iotlb before creating superpage (bsc#1189219).\n- iommu/vt-d: Global devTLB flush when present context entry changed (bsc#1189220).\n- iommu/vt-d: Invalidate PASID cache when root/context entry changed (bsc#1189221).\n- iommu/vt-d: Reject unsupported page request modes (bsc#1189222).\n- ionic: add handling of larger descriptors (jsc#SLE-16649).\n- ionic: add new queue features to interface (jsc#SLE-16649).\n- ionic: aggregate Tx byte counting calls (jsc#SLE-16649).\n- ionic: block actions during fw reset (jsc#SLE-16649).\n- ionic: change mtu after queues are stopped (jsc#SLE-16649).\n- ionic: check for link after netdev registration (jsc#SLE-16649).\n- ionic: code cleanup details (jsc#SLE-16649).\n- ionic: fix sizeof usage (jsc#SLE-16649).\n- ionic: fix unchecked reference (jsc#SLE-16649).\n- ionic: fix up dim accounting for tx and rx (jsc#SLE-16649).\n- ionic: generic tx skb mapping (jsc#SLE-16649).\n- ionic: implement Rx page reuse (jsc#SLE-16649).\n- ionic: make all rx_mode work threadsafe (jsc#SLE-16649).\n- ionic: move rx_page_alloc and free (jsc#SLE-16649).\n- ionic: optimize fastpath struct usage (jsc#SLE-16649).\n- ionic: protect adminq from early destroy (jsc#SLE-16649).\n- ionic: rebuild debugfs on qcq swap (jsc#SLE-16649).\n- ionic: remove intr coalesce update from napi (jsc#SLE-16649).\n- ionic: remove some unnecessary oom messages (jsc#SLE-16649).\n- ionic: simplify TSO descriptor mapping (jsc#SLE-16649).\n- ionic: simplify rx skb alloc (jsc#SLE-16649).\n- ionic: simplify the intr_index use in txq_init (jsc#SLE-16649).\n- ionic: simplify tx clean (jsc#SLE-16649).\n- ionic: simplify use of completion types (jsc#SLE-16649).\n- ionic: start queues before announcing link up (jsc#SLE-16649).\n- ionic: stop watchdog when in broken state (jsc#SLE-16649).\n- ionic: useful names for booleans (jsc#SLE-16649).\n- iwlwifi: pnvm: accept multiple HW-type TLVs (git-fixes).\n- iwlwifi: rs-fw: do not support stbc for HE 160 (git-fixes).\n- iwlwifi: skip first element in the WTAS ACPI table (git-fixes).\n- kABI fix of usb_dcd_config_params (git-fixes).\n- kABI: Fix kABI after fixing vcpu-id indexed arrays (git-fixes).\n- kabi fix for NFSv4.1: Do not rebind to the same source port when reconnecting to the server (bnc#1186264 bnc#1189021)\n- kabi fix for SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202 bsc#1188924).\n- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (bsc#1189153).\n- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841).\n- leds: trigger: audio: Add an activate callback to ensure the initial brightness is set (git-fixes).\n- lib/mpi: use kcalloc in mpi_resize (git-fixes).\n- lib: Add zstd support to decompress (bsc#1187483, jsc#SLE-18766).\n- libata: fix ata_pio_sector for CONFIG_HIGHMEM (git-fixes).\n- mac80211: Fix insufficient headroom issue for AMSDU (git-fixes).\n- md/raid10: properly indicate failure when ending a failed write request (git-fixes).\n- md: revert io stats accounting (git-fixes).\n- media: TDA1997x: enable EDID support (git-fixes).\n- media: cxd2880-spi: Fix an error handling path (git-fixes).\n- media: drivers/media/usb: fix memory leak in zr364xx_probe (git-fixes).\n- media: dvb-usb: Fix error handling in dvb_usb_i2c_init (git-fixes).\n- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init (git-fixes).\n- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr (git-fixes).\n- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect (git-fixes).\n- media: go7007: fix memory leak in go7007_usb_probe (git-fixes).\n- media: go7007: remove redundant initialization (git-fixes).\n- media: rtl28xxu: fix zero-length control request (git-fixes).\n- media: stkwebcam: fix memory leak in stk_camera_probe (git-fixes).\n- media: venus: venc: Fix potential null pointer dereference on pointer fmt (git-fixes).\n- media: videobuf2-core: dequeue if start_streaming fails (git-fixes).\n- media: zr364xx: fix memory leaks in probe() (git-fixes).\n- media: zr364xx: propagate errors from zr364xx_start_readpipe() (git-fixes).\n- misc: atmel-ssc: lock with mutex instead of spinlock (git-fixes).\n- misc: rtsx: do not setting OC_POWER_DOWN reg in rtsx_pci_init_ocp() (git-fixes).\n- mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (bsc#1189569).\n- mm/vmscan: fix infinite loop in drop_slab_node (VM Functionality, bsc#1189301).\n- mm: fix memory_failure() handling of dax-namespace metadata (bsc#1189872).\n- mm: swap: properly update readahead statistics in unuse_pte_range() (bsc#1187619).\n- mmc: dw_mmc: Fix hang on data CRC error (git-fixes).\n- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: moxart: Fix issue with uninitialized dma_slave_config (git-fixes).\n- mmc: sdhci-iproc: Cap min clock frequency on BCM2711 (git-fixes).\n- mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711 (git-fixes).\n- mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards (git-fixes).\n- nbd: Aovid double completion of a request (git-fixes).\n- nbd: Fix NULL pointer in flush_workqueue (git-fixes).\n- net/mlx5: Add ts_cqe_to_dest_cqn related bits (bsc#1188412)\n- net/mlx5: Properly convey driver version to firmware (git-fixes).\n- net/mlx5e: Add missing capability check for uplink follow (bsc#1188412)\n- net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (git-fixes).\n- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (git-fixes).\n- net: stmmac: free tx skb buffer in stmmac_resume() (git-fixes).\n- net: usb: lan78xx: do not modify phy_device state concurrently (bsc#1188270)\n- nfs: fix acl memory leak of posix_acl_create() (git-fixes).\n- nvme-multipath: revalidate paths during rescan (bsc#1187211)\n- nvme-pci: Use u32 for nvme_dev.q_depth and nvme_queue.q_depth (bsc#1181972).\n- nvme-pci: fix NULL req in completion handler (bsc#1181972).\n- nvme-pci: limit maximum queue depth to 4095 (bsc#1181972).\n- nvme-pci: use unsigned for io queue depth (bsc#1181972).\n- nvme-tcp: Do not reset transport on data digest errors (bsc#1188418).\n- nvme-tcp: do not check blk_mq_tag_to_rq when receiving pdu data (bsc#1181972).\n- nvme: avoid possible double fetch in handling CQE (bsc#1181972).\n- nvme: code command_id with a genctr for use-after-free validation (bsc#1181972).\n- nvme: only call synchronize_srcu when clearing current path (bsc#1188067).\n- nvmet: use NVMET_MAX_NAMESPACES to set nn value (bsc#1189384).\n- ocfs2: fix snprintf() checking (bsc#1189581).\n- ocfs2: fix zero out valid data (bsc#1189579).\n- ocfs2: initialize ip_next_orphan (bsc#1186731).\n- ocfs2: issue zeroout to EOF blocks (bsc#1189582).\n- ovl: allow upperdir inside lowerdir (bsc#1189323).\n- ovl: expand warning in ovl_d_real() (bsc#1189323).\n- ovl: fix missing revert_creds() on error path (bsc#1189323).\n- ovl: perform vfs_getxattr() with mounter creds (bsc#1189323).\n- ovl: skip getxattr of security labels (bsc#1189323).\n- params: lift param_set_uint_minmax to common code (bsc#1181972).\n- pcmcia: i82092: fix a null pointer dereference bug (git-fixes).\n- perf/x86/amd: Do not touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (bsc#1189225).\n- pinctrl: tigerlake: Fix GPIO mapping for newer version of software (git-fixes).\n- platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables (git-fixes).\n- post.sh: detect /usr mountpoint too\n- power: supply: max17042: handle fails of reading status register (git-fixes).\n- powerpc/cacheinfo: Improve diagnostics about malformed cache lists (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Lookup cache by dt node and thread-group id (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Remove the redundant get_shared_cpu_map() (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/cacheinfo: Use name@unit instead of full DT path in debug messages (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable (bsc#1175052 jsc#SLE-13823 bsc#1174969 jsc#SLE-12769 git-fixes).\n- powerpc/papr_scm: Reduce error severity if nvdimm stats inaccessible (bsc#1189197 ltc#193906).\n- powerpc/pseries: Fix regression while building external modules (bsc#1160010 ltc#183046 git-fixes). This changes a GPL symbol to general symbol which is kABI change but not kABI break.\n- powerpc/pseries: Fix update of LPAR security flavor after LPM (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/smp: Make some symbols static (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc/smp: Use existing L2 cache_map cpumask to find L3 cache siblings (jsc#SLE-13615 bsc#1180100 ltc#190257 git-fixes).\n- powerpc: Fix is_kvm_guest() / kvm_para_available() (bsc#1181148 ltc#190702 git-fixes).\n- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (git-fixes).\n- regulator: vctrl: Avoid lockdep warning in enable/disable ops (git-fixes).\n- regulator: vctrl: Use locked regulator_get_voltage in probe path (git-fixes).\n- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.\n- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305)\n- rpm/kernel-source.rpmlintrc: ignore new include/config files In 5.13, since 0e0345b77ac4, config files have no longer .h suffix. Adapt the zero-length check. Based on Martin Liska's change.\n- rq-qos: fix missed wake-ups in rq_qos_throttle try two (bsc#1189575).\n- rsi: fix an error code in rsi_probe() (git-fixes).\n- rsi: fix error code in rsi_load_9116_firmware() (git-fixes).\n- s390/ap: Fix hanging ioctl caused by wrong msg counter (bsc#1188982 LTC#193817).\n- s390/boot: fix use of expolines in the DMA code (bsc#1188878 ltc#193771).\n- scsi: blkcg: Add app identifier support for blkcg (bsc#1189385 jsc#SLE-18970).\n- scsi: blkcg: Fix application ID config options (bsc#1189385 jsc#SLE-18970).\n- scsi: cgroup: Add cgroup_get_from_id() (bsc#1189385 jsc#SLE-18970).\n- scsi: core: Add scsi_prot_ref_tag() helper (bsc#1189392).\n- scsi: ibmvfc: Do not wait for initial device scan (bsc#1127650).\n- scsi: libfc: Fix array index out of bound exception (bsc#1188616).\n- scsi: lpfc: Add 256 Gb link speed support (bsc#1189385).\n- scsi: lpfc: Add PCI ID support for LPe37000/LPe38000 series adapters (bsc#1189385).\n- scsi: lpfc: Call discovery state machine when handling PLOGI/ADISC completions (bsc#1189385).\n- scsi: lpfc: Clear outstanding active mailbox during PCI function reset (bsc#1189385).\n- scsi: lpfc: Copyright updates for 12.8.0.11 patches (bsc#1189385).\n- scsi: lpfc: Copyright updates for 14.0.0.0 patches (bsc#1189385).\n- scsi: lpfc: Delay unregistering from transport until GIDFT or ADISC completes (bsc#1189385).\n- scsi: lpfc: Discovery state machine fixes for LOGO handling (bsc#1189385).\n- scsi: lpfc: Enable adisc discovery after RSCN by default (bsc#1189385).\n- scsi: lpfc: Fix KASAN slab-out-of-bounds in lpfc_unreg_rpi() routine (bsc#1189385).\n- scsi: lpfc: Fix NULL ptr dereference with NPIV ports for RDF handling (bsc#1189385).\n- scsi: lpfc: Fix NVMe support reporting in log message (bsc#1189385).\n- scsi: lpfc: Fix build error in lpfc_scsi.c (bsc#1189385).\n- scsi: lpfc: Fix cq_id truncation in rq create (bsc#1189385).\n- scsi: lpfc: Fix function description comments for vmid routines (bsc#1189385).\n- scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (bsc#1189385).\n- scsi: lpfc: Fix possible ABBA deadlock in nvmet_xri_aborted() (bsc#1189385).\n- scsi: lpfc: Fix target reset handler from falsely returning FAILURE (bsc#1189385).\n- scsi: lpfc: Improve firmware download logging (bsc#1189385).\n- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1189385).\n- scsi: lpfc: Move initialization of phba-\u003epoll_list earlier to avoid crash (git-fixes).\n- scsi: lpfc: Remove REG_LOGIN check requirement to issue an ELS RDF (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer pcmd (bsc#1189385).\n- scsi: lpfc: Remove redundant assignment to pointer temp_hdr (bsc#1189385).\n- scsi: lpfc: Remove use of kmalloc() in trace event logging (bsc#1189385).\n- scsi: lpfc: Revise Topology and RAS support checks for new adapters (bsc#1189385).\n- scsi: lpfc: Skip issuing ADISC when node is in NPR state (bsc#1189385).\n- scsi: lpfc: Skip reg_vpi when link is down for SLI3 in ADISC cmpl path (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 12.8.0.11 (bsc#1189385).\n- scsi: lpfc: Update lpfc version to 14.0.0.0 (bsc#1189385).\n- scsi: lpfc: Use PBDE feature enabled bit to determine PBDE support (bsc#1189385).\n- scsi: lpfc: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189385).\n- scsi: lpfc: vmid: Add QFPA and VMID timeout check in worker thread (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add datastructure for supporting VMID in lpfc (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Add support for VMID in mailbox command (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Append the VMID to the wqe before sending (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Functions to manage VMIDs (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement CT commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Implement ELS commands for appid (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Introduce VMID in I/O path (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: Timeout implementation for VMID (bsc#1189385 jsc#SLE-18970).\n- scsi: lpfc: vmid: VMID parameter initialization (bsc#1189385 jsc#SLE-18970).\n- scsi: mpt3sas: Fix ReplyPostFree pool allocation (bsc#1181006).\n- scsi: qla2xxx: Add heartbeat check (bsc#1189392).\n- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() (bsc#1189392).\n- scsi: qla2xxx: Fix spelling mistakes 'allloc' -\u003e 'alloc' (bsc#1189392).\n- scsi: qla2xxx: Fix use after free in debug code (bsc#1189392).\n- scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (bsc#1189392).\n- scsi: qla2xxx: Remove duplicate declarations (bsc#1189392).\n- scsi: qla2xxx: Remove redundant assignment to rval (bsc#1189392).\n- scsi: qla2xxx: Remove redundant continue statement in a for-loop (bsc#1189392).\n- scsi: qla2xxx: Remove redundant initialization of variable num_cnt (bsc#1189392).\n- scsi: qla2xxx: Remove unused variable 'status' (bsc#1189392).\n- scsi: qla2xxx: Update version to 10.02.00.107-k (bsc#1189392).\n- scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (bsc#1189392).\n- scsi: qla2xxx: Use the proper SCSI midlayer interfaces for PI (bsc#1189392).\n- scsi: qla2xxx: edif: Add authentication pass + fail bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add detection of secure device (bsc#1189392).\n- scsi: qla2xxx: edif: Add doorbell notification for app (bsc#1189392).\n- scsi: qla2xxx: edif: Add encryption to I/O path (bsc#1189392).\n- scsi: qla2xxx: edif: Add extraction of auth_els from the wire (bsc#1189392).\n- scsi: qla2xxx: edif: Add getfcinfo and statistic bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Add key update (bsc#1189392).\n- scsi: qla2xxx: edif: Add send, receive, and accept for auth_els (bsc#1189392).\n- scsi: qla2xxx: edif: Add start + stop bsgs (bsc#1189392).\n- scsi: qla2xxx: edif: Increment command and completion counts (bsc#1189392).\n- scsi: scsi_transport_srp: Do not block target in SRP_PORT_LOST state (bsc#1184180).\n- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (bsc#1189392).\n- scsi: zfcp: Report port fc_security as unknown early during remote cable pull (git-fixes).\n- serial: 8250: Mask out floating 16/32-bit bus bits (git-fixes).\n- serial: 8250_mtk: fix uart corruption issue when rx power off (git-fixes).\n- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts (git-fixes).\n- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (git-fixes).\n- serial: tegra: Only print FIFO error message when an error occurs (git-fixes).\n- slimbus: messaging: check for valid transaction id (git-fixes).\n- slimbus: messaging: start transaction ids from 1 instead of zero (git-fixes).\n- slimbus: ngd: reset dma setup during runtime pm (git-fixes).\n- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: aspeed: p2a-ctrl: Fix boundary check for mmap (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx/qmgr: fix invalid __iomem access (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: ixp4xx: fix printing resources (git-fixes).\n- soc: qcom: rpmhpd: Use corner in power_off (git-fixes).\n- soc: qcom: smsm: Fix missed interrupts if state changes while masked (git-fixes).\n- spi: imx: mx51-ecspi: Fix CONFIGREG delay comment (git-fixes).\n- spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (git-fixes).\n- spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (git-fixes).\n- spi: mediatek: Fix fifo transfer (git-fixes).\n- spi: meson-spicc: fix memory leak in meson_spicc_remove (git-fixes).\n- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: spi-pic32: Fix issue with uninitialized dma_slave_config (git-fixes).\n- spi: sprd: Fix the wrong WDG_LOAD_VAL (git-fixes).\n- spi: stm32h7: fix full duplex irq handler handling (git-fixes).\n- staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (git-fixes).\n- staging: rtl8712: get rid of flush_scheduled_work (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (git-fixes).\n- tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name (git-fixes).\n- tracing / histogram: Give calculation hist_fields a size (git-fixes).\n- tracing: Reject string operand in the histogram expression (git-fixes).\n- tty: serial: fsl_lpuart: fix the wrong mapbase value (git-fixes).\n- ubifs: Fix error return code in alloc_wbufs() (bsc#1189585).\n- ubifs: Fix memleak in ubifs_init_authentication (bsc#1189583).\n- ubifs: Only check replay with inode type to judge if inode linked (bsc#1187455).\n- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (bsc#1189587).\n- ubifs: journal: Fix error return code in ubifs_jnl_write_inode() (bsc#1189586).\n- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available (git-fixes).\n- usb: dwc3: Disable phy suspend after power-on reset (git-fixes).\n- usb: dwc3: Separate field holding multiple properties (git-fixes).\n- usb: dwc3: Stop active transfers before halting the controller (git-fixes).\n- usb: dwc3: Use clk_bulk_prepare_enable() (git-fixes).\n- usb: dwc3: Use devres to get clocks (git-fixes).\n- usb: dwc3: core: do not do suspend for device mode if already suspended (git-fixes).\n- usb: dwc3: debug: Remove newline printout (git-fixes).\n- usb: dwc3: gadget: Check MPS of the request length (git-fixes).\n- usb: dwc3: gadget: Clear DCTL.ULSTCHNGREQ before set (git-fixes).\n- usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable (git-fixes).\n- usb: dwc3: gadget: Disable gadget IRQ during pullup disable (git-fixes).\n- usb: dwc3: gadget: Do not send unintended link state change (git-fixes).\n- usb: dwc3: gadget: Do not setup more than requested (git-fixes).\n- usb: dwc3: gadget: Fix dwc3_calc_trbs_left() (git-fixes).\n- usb: dwc3: gadget: Fix handling ZLP (git-fixes).\n- usb: dwc3: gadget: Give back staled requests (git-fixes).\n- usb: dwc3: gadget: Handle ZLP for sg requests (git-fixes).\n- usb: dwc3: gadget: Prevent EP queuing while stopping transfers (git-fixes).\n- usb: dwc3: gadget: Properly track pending and queued SG (git-fixes).\n- usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup (git-fixes).\n- usb: dwc3: gadget: Set BESL config parameter (git-fixes).\n- usb: dwc3: gadget: Set link state to RX_Detect on disconnect (git-fixes).\n- usb: dwc3: gadget: Stop EP0 transfers during pullup disable (git-fixes).\n- usb: dwc3: gadget: Workaround Mirosoft's BESL check (git-fixes).\n- usb: dwc3: meson-g12a: add IRQ check (git-fixes).\n- usb: dwc3: meson-g12a: check return of dwc3_meson_g12a_usb_init (git-fixes).\n- usb: dwc3: of-simple: add a shutdown (git-fixes).\n- usb: dwc3: st: Add of_dev_put() in probe function (git-fixes).\n- usb: dwc3: st: Add of_node_put() before return in probe function (git-fixes).\n- usb: dwc3: support continuous runtime PM with dual role (git-fixes).\n- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (git-fixes).\n- usb: gadget: Export recommended BESL values (git-fixes).\n- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (git-fixes).\n- usb: gadget: f_hid: fixed NULL pointer dereference (git-fixes).\n- usb: gadget: f_hid: idle uses the highest byte for duration (git-fixes).\n- usb: gadget: mv_u3d: request_irq() after initializing UDC (git-fixes).\n- usb: gadget: udc: at91: add IRQ check (git-fixes).\n- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (git-fixes).\n- usb: host: ohci-tmio: add IRQ check (git-fixes).\n- usb: host: xhci-rcar: Do not reload firmware after the completion (git-fixes).\n- usb: mtu3: fix the wrong HS mult value (git-fixes).\n- usb: mtu3: use @mult for HS isoc or intr (git-fixes).\n- usb: phy: fsl-usb: add IRQ check (git-fixes).\n- usb: phy: tahvo: add IRQ check (git-fixes).\n- usb: phy: twl6030: add IRQ checks (git-fixes).\n- usr: Add support for zstd compressed initramfs (bsc#1187483, jsc#SLE-18766).\n- virt_wifi: fix error on connect (git-fixes).\n- wireguard: allowedips: allocate nodes in kmem_cache (git-fixes).\n- wireguard: allowedips: free empty intermediate nodes when removing single node (git-fixes).\n- wireguard: allowedips: remove nodes in O(1) (git-fixes).\n- writeback: fix obtain a reference to a freeing memcg css (bsc#1189577).\n- x86/fpu: Limit xstate copy size in xstateregs_set() (bsc#1152489).\n- x86/fpu: Make init_fpstate correct with optimized XSAVE (bsc#1152489).\n- x86/fpu: Reset state for all signal restore failures (bsc#1152489).\n- x86/kvm: fix vcpu-id indexed array sizes (git-fixes).\n- x86/sev: Make sure IRQs are disabled while GHCB is active (jsc#SLE-14337).\n- x86/sev: Split up runtime #VC handler for correct state tracking (jsc#SLE-14337).\n- x86/sev: Use 'SEV: ' prefix for messages from sev.c (jsc#SLE-14337).\n- x86/signal: Detect and prevent an alternate signal stack overflow (bsc#1152489).\n- x86/split_lock: Provide handle_guest_split_lock() (bsc#1187959).\n- xen/events: Fix race in set_evtchn_to_irq (git-fixes).\n- xprtrdma: Pad optimization, revisited (bsc#1189760).\n","status":"published","published":"2021-10-13T08:47:25Z","modified":"2025-05-02T04:09:42.833521Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-5096-1","title":"linux-oem-5.13 vulnerabilities","description":"Valentina Palmiotti discovered that the io_uring subsystem in the Linux\nkernel could be coerced to free adjacent memory. A local attacker could use\nthis to execute arbitrary code. (CVE-2021-41073)\n\nBenedict Schlueter discovered that the BPF subsystem in the Linux kernel\ndid not properly protect against Speculative Store Bypass (SSB) side-\nchannel attacks in some situations. A local attacker could possibly use\nthis to expose sensitive information. (CVE-2021-34556)\n\nPiotr Krysiuk discovered that the BPF subsystem in the Linux kernel did not\nproperly protect against Speculative Store Bypass (SSB) side-channel\nattacks in some situations. A local attacker could possibly use this to\nexpose sensitive information. (CVE-2021-35477)\n\nMurray McAllister discovered that the joystick device interface in the\nLinux kernel did not properly validate data passed via an ioctl(). A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code on systems with a joystick device\nregistered. (CVE-2021-3612)\n\nIt was discovered that the tracing subsystem in the Linux kernel did not\nproperly keep track of per-cpu ring buffer state. A privileged attacker\ncould use this to cause a denial of service. (CVE-2021-3679)\n\nIt was discovered that the Option USB High Speed Mobile device driver in\nthe Linux kernel did not properly handle error conditions. A physically\nproximate attacker could use this to cause a denial of service (system\ncrash) or possibly execute arbitrary code. (CVE-2021-37159)\n\nAlois Wohlschlager discovered that the overlay file system in the Linux\nkernel did not restrict private clones in some situations. An attacker\ncould use this to expose sensitive information. (CVE-2021-3732)\n\nIt was discovered that the Virtio console implementation in the Linux\nkernel did not properly validate input lengths in some situations. A local\nattacker could possibly use this to cause a denial of service (system\ncrash). (CVE-2021-38160)\n\nIt was discovered that the BPF subsystem in the Linux kernel contained an\ninteger overflow in its hash table implementation. A local attacker could\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2021-38166)\n\nMichael Wakabayashi discovered that the NFSv4 client implementation in the\nLinux kernel did not properly order connection setup operations. An\nattacker controlling a remote NFS server could use this to cause a denial\nof service on the client. (CVE-2021-38199)\n\nIt was discovered that the Sun RPC implementation in the Linux kernel\ncontained an out-of-bounds access error. A remote attacker could possibly\nuse this to cause a denial of service (system crash). (CVE-2021-38201)\n\nIt was discovered that the NFS server implementation in the Linux kernel\ncontained an out-of-bounds read when the trace even framework is being used\nfor nfsd. A remote attacker could possibly use this to cause a denial of\nservice (system crash). (CVE-2021-38202)\n\nNaohiro Aota discovered that the btrfs file system in the Linux kernel\ncontained a race condition in situations that triggered allocations of new\nsystem chunks. A local attacker could possibly use this to cause a denial\nof service (deadlock). (CVE-2021-38203)\n\nIt was discovered that the MAX-3421 host USB device driver in the Linux\nkernel did not properly handle device removal events. A physically\nproximate attacker could use this to cause a denial of service (system\ncrash). (CVE-2021-38204)\n\nIt was discovered that the Xilinx 10/100 Ethernet Lite device driver in the\nLinux kernel could report pointer addresses in some situations. An attacker\ncould use this information to ease the exploitation of another\nvulnerability. (CVE-2021-38205)\n\nIt was discovered that the ext4 file system in the Linux kernel contained a\nrace condition when writing xattrs to an inode. A local attacker could use\nthis to cause a denial of service or possibly gain administrative\nprivileges. (CVE-2021-40490)\n","status":"published","published":"2021-09-29T22:27:08Z","modified":"2026-09-09T14:32:44.012948981Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5113-1","title":"linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-gcp, linux-gcp-5.11, linux-hwe-5.11, linux-kvm, linux-oracle, linux-oracle-5.11, linux-raspi vulnerabilities","description":"It was discovered that a race condition existed in the Atheros Ath9k WiFi\ndriver in the Linux kernel. An attacker could possibly use this to expose\nsensitive information (WiFi network traffic). (CVE-2020-3702)\n\nAlois Wohlschlager discovered that the overlay file system in the Linux\nkernel did not restrict private clones in some situations. An attacker\ncould use this to expose sensitive information. (CVE-2021-3732)\n\nIt was discovered that the btrfs file system in the Linux kernel did not\nproperly handle removing a non-existent device id. An attacker with\nCAP_SYS_ADMIN could use this to cause a denial of service. (CVE-2021-3739)\n\nIt was discovered that the Qualcomm IPC Router protocol implementation in\nthe Linux kernel did not properly validate metadata in some situations. A\nlocal attacker could use this to cause a denial of service (system crash)\nor expose sensitive information. (CVE-2021-3743)\n\nIt was discovered that the virtual terminal (vt) device implementation in\nthe Linux kernel contained a race condition in its ioctl handling that led\nto an out-of-bounds read vulnerability. A local attacker could possibly use\nthis to expose sensitive information. (CVE-2021-3753)\n\nIt was discovered that the BPF subsystem in the Linux kernel contained an\ninteger overflow in its hash table implementation. A local attacker could\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2021-38166)\n\nIt was discovered that the ext4 file system in the Linux kernel contained a\nrace condition when writing xattrs to an inode. A local attacker could use\nthis to cause a denial of service or possibly gain administrative\nprivileges. (CVE-2021-40490)\n\nIt was discovered that the 6pack network protocol driver in the Linux\nkernel did not properly perform validation checks. A privileged attacker\ncould use this to cause a denial of service (system crash) or execute\narbitrary code. (CVE-2021-42008)\n","status":"published","published":"2021-10-19T22:30:36Z","modified":"2026-09-09T14:32:52.484969965Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5115-1","title":"linux-oem-5.10 vulnerabilities","description":"It was discovered that a race condition existed in the Atheros Ath9k WiFi\ndriver in the Linux kernel. An attacker could possibly use this to expose\nsensitive information (WiFi network traffic). (CVE-2020-3702)\n\nOfek Kirzner, Adam Morrison, Benedict Schlueter, and Piotr Krysiuk\ndiscovered that the BPF verifier in the Linux kernel missed possible\nmispredicted branches due to type confusion, allowing a side-channel\nattack. An attacker could use this to expose sensitive information.\n(CVE-2021-33624)\n\nBenedict Schlueter discovered that the BPF subsystem in the Linux kernel\ndid not properly protect against Speculative Store Bypass (SSB) side-\nchannel attacks in some situations. A local attacker could possibly use\nthis to expose sensitive information. (CVE-2021-34556)\n\nPiotr Krysiuk discovered that the BPF subsystem in the Linux kernel did not\nproperly protect against Speculative Store Bypass (SSB) side-channel\nattacks in some situations. A local attacker could possibly use this to\nexpose sensitive information. (CVE-2021-35477)\n\nIt was discovered that the tracing subsystem in the Linux kernel did not\nproperly keep track of per-cpu ring buffer state. A privileged attacker\ncould use this to cause a denial of service. (CVE-2021-3679)\n\nIt was discovered that the Option USB High Speed Mobile device driver in\nthe Linux kernel did not properly handle error conditions. A physically\nproximate attacker could use this to cause a denial of service (system\ncrash) or possibly execute arbitrary code. (CVE-2021-37159)\n\nAlois Wohlschlager discovered that the overlay file system in the Linux\nkernel did not restrict private clones in some situations. An attacker\ncould use this to expose sensitive information. (CVE-2021-3732)\n\nIt was discovered that the btrfs file system in the Linux kernel did not\nproperly handle removing a non-existent device id. An attacker with\nCAP_SYS_ADMIN could use this to cause a denial of service. (CVE-2021-3739)\n\nIt was discovered that the Qualcomm IPC Router protocol implementation in\nthe Linux kernel did not properly validate metadata in some situations. A\nlocal attacker could use this to cause a denial of service (system crash)\nor expose sensitive information. (CVE-2021-3743)\n\nIt was discovered that the virtual terminal (vt) device implementation in\nthe Linux kernel contained a race condition in its ioctl handling that led\nto an out-of-bounds read vulnerability. A local attacker could possibly use\nthis to expose sensitive information. (CVE-2021-3753)\n\nIt was discovered that the Linux kernel did not properly account for the\nmemory usage of certain IPC objects. A local attacker could use this to\ncause a denial of service (memory exhaustion). (CVE-2021-3759)\n\nIt was discovered that the BPF subsystem in the Linux kernel contained an\ninteger overflow in its hash table implementation. A local attacker could\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2021-38166)\n\nIt was discovered that the MAX-3421 host USB device driver in the Linux\nkernel did not properly handle device removal events. A physically\nproximate attacker could use this to cause a denial of service (system\ncrash). (CVE-2021-38204)\n\nIt was discovered that the Xilinx 10/100 Ethernet Lite device driver in the\nLinux kernel could report pointer addresses in some situations. An attacker\ncould use this information to ease the exploitation of another\nvulnerability. (CVE-2021-38205)\n\nIt was discovered that the ext4 file system in the Linux kernel contained a\nrace condition when writing xattrs to an inode. A local attacker could use\nthis to cause a denial of service or possibly gain administrative\nprivileges. (CVE-2021-40490)\n\nIt was discovered that the 6pack network protocol driver in the Linux\nkernel did not properly perform validation checks. A privileged attacker\ncould use this to cause a denial of service (system crash) or execute\narbitrary code. (CVE-2021-42008)\n","status":"published","published":"2021-10-20T18:39:34Z","modified":"2026-09-14T11:16:36.092555153Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}