{"id":"CVE-2023-3610","aliases":["ALSA-2023:5069","ALSA-2023:5091","AZL-27673","BELL-CVE-2023-3610","DEBIAN-CVE-2023-3610","DLA-3512-1","DSA-5461-1","EUVD-2023-44259","GHSA-gcrv-hhf7-6qvh","OESA-2023-1467","OESA-2023-1468","OESA-2023-1471","RHSA-2023:5069","RHSA-2023:5091","RHSA-2023:5093","RLSA-2023:5091","SUSE-SU-2023:3599-1","SUSE-SU-2023:3599-2","SUSE-SU-2023:3600-1","SUSE-SU-2023:3600-2","SUSE-SU-2023:3656-1","SUSE-SU-2023:3682-1","SUSE-SU-2023:3964-1","SUSE-SU-2023:3969-1","SUSE-SU-2023:3971-1","SUSE-SU-2023:3988-1","SUSE-SU-2023:4766-1","SUSE-SU-2023:4805-1","SUSE-SU-2023:4822-1","SUSE-SU-2023:4841-1","SUSE-SU-2023:4848-1","SUSE-SU-2023:4849-1","SUSE-SU-2023:4872-1","SUSE-SU-2024:3190-1","SUSE-SU-2024:3209-1","SUSE-SU-2024:3483-1","UBUNTU-CVE-2023-3610","USN-6285-1","USN-6315-1","USN-6318-1","USN-6325-1","USN-6330-1","USN-6332-1","USN-6348-1","USN-6385-1"],"status":"published","title":"Use-after-free in Linux kernel's netfilter: nf_tables component","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00253,"percentile":0.16834,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-07-21T20:48:13Z","modified":"2026-10-29T11:31:30Z","fixes":[{"ecosystem":"Azure Linux:2","package":"kernel","fixed_in":["5.15.122.1-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"linux-lts","fixed_in":["6.1.74-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"linux","fixed_in":["6.1.37-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["6.3.11-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["6.3.11-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.15","fixed_in":["5.15.0-1043.48~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.15","fixed_in":["5.15.0-1045.52~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.15","fixed_in":["5.15.0-1040.48~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","fixed_in":["5.15.0-1026.31~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.15","fixed_in":["5.15.0-82.91~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-ibm-5.15","fixed_in":["5.15.0-1036.39~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-iotg-5.15","fixed_in":["5.15.0-1038.43~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-lowlatency-hwe-5.15","fixed_in":["5.15.0-82.91~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-nvidia-tegra-5.15","fixed_in":["5.15.0-1017.17~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.15","fixed_in":["5.15.0-1041.47~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.15","fixed_in":["5.15.0-1039.43~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux","fixed_in":["5.15.0-82.91"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","fixed_in":["5.15.0-1043.48"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","fixed_in":["6.2.0-1010.10~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","fixed_in":["5.15.0-1045.52"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","fixed_in":["5.15.0-1045.52.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","fixed_in":["5.15.0-1040.48"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.2","fixed_in":["6.2.0-1012.12~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","fixed_in":["5.15.0-1040.45"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","fixed_in":["5.15.0-1026.31"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","fixed_in":["6.2.0-31.31~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","fixed_in":["5.15.0-1036.39"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","fixed_in":["5.15.0-1038.43"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","fixed_in":["5.15.0-1040.45"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","fixed_in":["5.15.0-82.91"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","fixed_in":["6.2.0-1011.11~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","fixed_in":["5.15.0-1031.31"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra","fixed_in":["5.15.0-1017.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra-igx","fixed_in":["5.15.0-1004.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","fixed_in":["6.0.0-1021.21"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","fixed_in":["6.1.0-1019.19"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","fixed_in":["5.15.0-1041.47"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","fixed_in":["5.15.0-1036.39"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-xilinx-zynqmp","fixed_in":["5.15.0-1025.29"],"sources":["osv"]},{"ecosystem":"Ubuntu:Nvidia-BlueField:22.04:LTS","package":"linux-bluefield","fixed_in":["5.15.0-1022.24"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-intel-iot-realtime","fixed_in":["5.15.0-1037.39"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","fixed_in":["5.15.0-1044.49"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-debug-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-zfcpdump-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-zfcpdump-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rtla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Azure Linux:2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.122.1-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.33-r0"},{"fixed":"6.1.74-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.37-1"}]}],"versions":["6.1.27-1"]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.11-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.11-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"linux-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.179-3~deb10u1"}]}],"versions":["5.10.136-1~deb10u1","5.10.136-1~deb10u2","5.10.136-1~deb10u3","5.10.149-2~deb10u1","5.10.158-2~deb10u1","5.10.162-1~deb10u1","5.10.178-3~deb10u1","5.10.179-1~deb10u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:11","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.179-3"}]}],"versions":["5.10.103-1","5.10.103-1~bpo10+1","5.10.106-1","5.10.113-1","5.10.120-1","5.10.120-1~bpo10+1","5.10.127-1","5.10.127-2","5.10.127-2~bpo10+1","5.10.136-1","5.10.140-1","5.10.148-1","5.10.149-1","5.10.149-2","5.10.158-1","5.10.158-2","5.10.162-1","5.10.178-1","5.10.178-2","5.10.178-3","5.10.179-1","5.10.179-2","5.10.46-4","5.10.46-5","5.10.70-1","5.10.70-1~bpo10+1","5.10.84-1","5.10.92-1","5.10.92-1~bpo10+1","5.10.92-2"],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-136.43.0.121.oe2203sp1"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-153.21.0.97.oe2203sp2"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-60.105.0.132.oe2203"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-64k-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"kernel-zfcpdump-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rtla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debug-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.el9_2"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::nfv","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::realtime","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpatch-patch-5_14_0-284_11_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-5.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpatch-patch-5_14_0-284_11_1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-5.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpatch-patch-5_14_0-284_11_1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-5.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpatch-patch-5_14_0-284_18_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-4.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpatch-patch-5_14_0-284_18_1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-4.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpatch-patch-5_14_0-284_18_1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-4.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpatch-patch-5_14_0-284_25_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-3.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpatch-patch-5_14_0-284_25_1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-3.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"kpatch-patch-5_14_0-284_25_1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-3.el9_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:9","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.30.1.rt14.315.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5-RT_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150500.11.3.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5-RT_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150500.11.3.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4-RT_Update_12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150400.1.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4-RT_Update_12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150400.1.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.17.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.17.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.17.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.17.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.17.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.17.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.66.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.66.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.66.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.66.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.66.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.66.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4-RT_Update_13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150400.1.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.53.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1.150400.24.40.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1.150400.24.40.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1.150400.24.40.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4_Update_18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150400.9.3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1.150400.24.40.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.88.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1.150500.6.11.2"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1.150500.6.11.2"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5_Update_5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150500.11.5.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1.150500.6.11.2"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.28.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.18.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5-RT_Update_5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150500.11.3.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.18.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.18.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.18.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.18.1"}]}],"bundled":24},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.18.1"}]}],"bundled":24},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.18.1"}]}],"bundled":24},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.18.1"}]}],"bundled":24},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.18.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4-RT_Update_2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11-150400.2.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5-RT_Update_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6-150500.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4_Update_15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5-150400.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5_Update_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6-150500.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4_Update_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8-150400.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5_Update_2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5-150500.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4-RT_Update_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12-150400.2.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5_Update_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4-150500.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14-150400.2.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4_Update_16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4-150400.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.66.1"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.66.1"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.66.1"}]}],"bundled":292},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.66.1"}]}],"bundled":292},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.66.1"}]}],"bundled":292},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.66.1"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.3"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.3"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5-RT_Update_19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150500.11.3.2"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.3"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.3"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.3"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.1"}]}],"bundled":292},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.3"}]}],"bundled":292},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.3"}]}],"bundled":292},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.3"}]}],"bundled":292},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.3"}]}],"bundled":292},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.67.1"}]}],"bundled":292},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2.150500.6.35.6"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2.150500.6.35.6"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.1"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.1"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5_Update_19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150500.11.3.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2.150500.6.35.6"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.1"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2.150500.6.35.6"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.1"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.1"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.1"}]}],"bundled":296},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.80.2"}]}],"bundled":296},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1025.25~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1042.44~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1","5.4.0-1052.55~18.04.1","5.4.0-1053.56~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1071.76~18.04.3","5.4.0-1072.77~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1076.82~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.86~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gkeop-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.1","5.4.0-1003.3","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1007.8~18.04.1","5.4.0-1008.9~18.04.1","5.4.0-1009.10~18.04.1","5.4.0-1010.11~18.04.1","5.4.0-1011.12~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1013.14~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.19~18.04.1","5.4.0-1021.22~18.04.1","5.4.0-1022.23~18.04.1","5.4.0-1023.24~18.04.1","5.4.0-1024.25~18.04.1","5.4.0-1025.26~18.04.1","5.4.0-1026.27~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.30~18.04.2","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1033.34~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1036.37~18.04.1","5.4.0-1037.38~18.04.1","5.4.0-1038.39~18.04.1","5.4.0-1039.40~18.04.1","5.4.0-1040.41~18.04.1","5.4.0-1043.44~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1048.51~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1043.48~20.04.1"}]}],"versions":["5.15.0-1014.18~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1017.21~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.24~20.04.1","5.15.0-1021.25~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.1","5.15.0-1037.41~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1","5.15.0-1040.45~20.04.1","5.15.0-1041.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1045.52~20.04.1"}]}],"versions":["5.15.0-1007.8~20.04.1","5.15.0-1008.9~20.04.1","5.15.0-1013.16~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1017.20~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.29~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1033.40~20.04.1","5.15.0-1034.41~20.04.1","5.15.0-1035.42~20.04.1","5.15.0-1036.43~20.04.1","5.15.0-1037.44~20.04.1","5.15.0-1038.45~20.04.1","5.15.0-1039.46~20.04.1","5.15.0-1040.47~20.04.1","5.15.0-1041.48~20.04.1","5.15.0-1042.49~20.04.1","5.15.0-1043.50~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.48~20.04.1"}]}],"versions":["5.15.0-1006.9~20.04.1","5.15.0-1012.17~20.04.1","5.15.0-1013.18~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.23~20.04.2","5.15.0-1018.24~20.04.1","5.15.0-1021.28~20.04.1","5.15.0-1022.29~20.04.1","5.15.0-1025.32~20.04.2","5.15.0-1026.33~20.04.1","5.15.0-1027.34~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1032.40~20.04.1","5.15.0-1033.41~20.04.1","5.15.0-1034.42~20.04.1","5.15.0-1035.43~20.04.1","5.15.0-1036.44~20.04.1","5.15.0-1037.45~20.04.1","5.15.0-1038.46~20.04.1","5.15.0-1039.47~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1026.31~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1","5.15.0-1008.12~20.04.1","5.15.0-1011.15~20.04.2","5.15.0-1012.16~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1024.29~20.04.1","5.15.0-1025.30~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-82.91~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-41.44~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-57.63~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.86~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-ibm-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1036.39~20.04.1"}]}],"versions":["5.15.0-1033.36~20.04.1","5.15.0-1034.37~20.04.1","5.15.0-1035.38~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-iotg-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1038.43~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.1","5.15.0-1008.11~20.04.1","5.15.0-1010.14~20.04.1","5.15.0-1015.20~20.04.2","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-lowlatency-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-82.91~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-42.45~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.88~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-nvidia-tegra-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1017.17~20.04.1"}]}],"versions":["5.15.0-1009.9~20.04.1","5.15.0-1010.10~20.04.1","5.15.0-1012.12~20.04.1","5.15.0-1014.14~20.04.1","5.15.0-1015.15~20.04.1","5.15.0-1016.16~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1041.47~20.04.1"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1","5.15.0-1022.28~20.04.1","5.15.0-1025.31~20.04.2","5.15.0-1027.33~20.04.1","5.15.0-1029.35~20.04.1","5.15.0-1030.36~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1039.43~20.04.2"}]}],"versions":["5.15.0-1015.17~20.04.1","5.15.0-1017.19~20.04.1","5.15.0-1018.21~20.04.1","5.15.0-1019.22~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1029.33~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1032.36~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.2","5.15.0-1037.41~20.04.2","5.15.0-1038.42~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1023.28~20.04.2","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1029.34~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1032.37~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-82.91"}]}],"versions":["5.13.0-19.19","5.15.0-17.17","5.15.0-18.18","5.15.0-22.22","5.15.0-23.23","5.15.0-25.25","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.51","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.86"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-allwinner-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1007.7~22.04.1","5.19.0-1009.9~22.04.1","5.19.0-1010.10~22.04.1","5.19.0-1011.11~22.04.1","5.19.0-1012.12~22.04.1","5.19.0-1013.13~22.04.1","5.19.0-1014.14~22.04.1","5.19.0-1015.15~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1043.48"}]}],"versions":["5.13.0-1005.6","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1008.10","5.15.0-1009.11","5.15.0-1011.14","5.15.0-1013.17","5.15.0-1014.18","5.15.0-1015.19","5.15.0-1017.21","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.25","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1033.37","5.15.0-1034.38","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1042.47"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1019.20~22.04.1","5.19.0-1020.21~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1026.27~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1029.30~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-1010.10~22.04.1"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1045.52"}]}],"versions":["5.13.0-1006.7","5.15.0-1001.2","5.15.0-1002.3","5.15.0-1003.4","5.15.0-1005.6","5.15.0-1007.8","5.15.0-1008.9","5.15.0-1010.12","5.15.0-1012.15","5.15.0-1013.16","5.15.0-1014.17","5.15.0-1017.20","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.29","5.15.0-1024.30","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1033.40","5.15.0-1034.41","5.15.0-1035.42","5.15.0-1036.43","5.15.0-1037.44","5.15.0-1038.45","5.15.0-1039.46","5.15.0-1040.47","5.15.0-1041.48","5.15.0-1042.49","5.15.0-1044.51"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.21~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1025.28~22.04.1","5.19.0-1026.29~22.04.1","5.19.0-1027.30~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1","6.2.0-1019.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1045.52.1"}]}],"versions":["5.15.0-1019.24.1","5.15.0-1024.30.1","5.15.0-1029.36.1","5.15.0-1030.37.1","5.15.0-1031.38.1","5.15.0-1033.40.1","5.15.0-1034.41.1","5.15.0-1035.42.1","5.15.0-1036.43.1","5.15.0-1037.44.1","5.15.0-1038.45.1","5.15.0-1039.46.1","5.15.0-1041.48.1","5.15.0-1042.49.1","5.15.0-1044.51.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1025.28~22.04.1.1","5.19.0-1026.29~22.04.1.1","5.19.0-1027.30~22.04.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1.1","6.2.0-1009.9~22.04.3.1","6.2.0-1011.11~22.04.1.1","6.2.0-1012.12~22.04.1.1","6.2.0-1014.14~22.04.1.1","6.2.0-1015.15~22.04.1.1","6.2.0-1016.16~22.04.1.1","6.2.0-1017.17~22.04.1.1","6.2.0-1018.18~22.04.1.1","6.2.0-1019.19~22.04.1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.48"}]}],"versions":["5.13.0-1005.6","5.15.0-1001.3","5.15.0-1002.5","5.15.0-1003.6","5.15.0-1004.7","5.15.0-1005.8","5.15.0-1006.9","5.15.0-1008.12","5.15.0-1010.15","5.15.0-1013.18","5.15.0-1016.21","5.15.0-1017.23","5.15.0-1018.24","5.15.0-1019.25","5.15.0-1021.28","5.15.0-1022.29","5.15.0-1025.32","5.15.0-1026.33","5.15.0-1027.34","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1032.40","5.15.0-1034.42","5.15.0-1035.43","5.15.0-1036.44","5.15.0-1037.45","5.15.0-1038.46","5.15.0-1039.47"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.22~22.04.2","5.19.0-1021.23~22.04.1","5.19.0-1022.24~22.04.1","5.19.0-1024.26~22.04.1","5.19.0-1025.27~22.04.1","5.19.0-1026.28~22.04.1","5.19.0-1027.29~22.04.1","5.19.0-1030.32~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-1012.12~22.04.1"}]}],"versions":["6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1011.11~22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.45"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.5","5.15.0-1005.6","5.15.0-1006.7","5.15.0-1008.10","5.15.0-1010.13","5.15.0-1011.14","5.15.0-1014.17","5.15.0-1015.18","5.15.0-1016.19","5.15.0-1017.20","5.15.0-1019.23","5.15.0-1020.25","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1026.31"}]}],"versions":["5.15.0-1001.2","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1007.10","5.15.0-1008.12","5.15.0-1011.15","5.15.0-1012.16","5.15.0-1013.17","5.15.0-1015.19","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1025.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-28.29~22.04.1","5.19.0-32.33~22.04.1","5.19.0-35.36~22.04.1","5.19.0-38.39~22.04.1","5.19.0-40.41~22.04.1","5.19.0-41.42~22.04.1","5.19.0-42.43~22.04.1","5.19.0-43.44~22.04.1","5.19.0-45.46~22.04.1","5.19.0-46.47~22.04.1","5.19.0-50.50"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-31.31~22.04.1"}]}],"versions":["6.2.0-25.25~22.04.2","6.2.0-26.26~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1036.39"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.8","5.15.0-1009.11","5.15.0-1010.12","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1015.17","5.15.0-1017.20","5.15.0-1018.21","5.15.0-1021.24","5.15.0-1022.25","5.15.0-1023.26","5.15.0-1025.28","5.15.0-1026.29","5.15.0-1027.30","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1031.34","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1038.43"}]}],"versions":["5.15.0-1004.6","5.15.0-1008.11","5.15.0-1010.14","5.15.0-1013.17","5.15.0-1015.20","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1021.26","5.15.0-1023.28","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.45"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1010.11","5.15.0-1012.14","5.15.0-1013.16","5.15.0-1016.19","5.15.0-1017.21","5.15.0-1018.22","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.26","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1028.33","5.15.0-1029.34","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-82.91"}]}],"versions":["5.15.0-22.22","5.15.0-23.23","5.15.0-24.24","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.53","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.88"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1030.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-1011.11~22.04.1"}]}],"versions":["6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1031.31"}]}],"versions":["5.15.0-1005.5","5.15.0-1007.7","5.15.0-1010.10","5.15.0-1015.15","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1023.23","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1003.3~22.04.1","6.2.0-1009.9","6.2.0-1010.10","6.2.0-1011.11","6.2.0-1012.12","6.2.0-1013.13","6.2.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1017.17"}]}],"versions":["5.15.0-1009.9","5.15.0-1010.10","5.15.0-1012.12","5.15.0-1013.13","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-tegra-igx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1004.4"}]}],"versions":["5.15.0-1001.1","5.15.0-1002.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-1021.21"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-1019.19"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1041.47"}]}],"versions":["5.13.0-1008.10","5.15.0-1001.3","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1006.8","5.15.0-1007.9","5.15.0-1009.12","5.15.0-1011.15","5.15.0-1013.17","5.15.0-1016.20","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1021.27","5.15.0-1022.28","5.15.0-1025.31","5.15.0-1026.32","5.15.0-1027.33","5.15.0-1029.35","5.15.0-1030.36","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1036.39"}]}],"versions":["5.13.0-1008.9","5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1008.8","5.15.0-1011.13","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.20","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1025.27","5.15.0-1026.28","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1029.31","5.15.0-1030.32","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1012.13~22.04.1","5.19.0-1015.16~22.04.1","5.19.0-1016.17~22.04.1","5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1","5.19.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1014.16~22.04.1","5.19.0-1015.17~22.04.1","5.19.0-1016.18~22.04.1","5.19.0-1017.19~22.04.1","5.19.0-1018.20~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1025.29"}]}],"versions":["5.15.0-1022.26","5.15.0-1023.27"]},{"source":"osv","ecosystem":"Ubuntu:Nvidia-BlueField:22.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1022.24"}]}],"versions":["5.15.0-1011.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1017.19","5.15.0-1019.21","5.15.0-1021.23"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1037.39"}]}],"versions":["5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1028.33","5.15.0-1033.35","5.15.0-1034.36","5.15.0-1035.37","5.15.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1044.49"}]}],"versions":["5.15.0-1006.6","5.15.0-1007.7","5.15.0-1009.9","5.15.0-1011.11","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1024.25","5.15.0-1025.28","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1036.39","5.15.0-1037.40","5.15.0-1038.41","5.15.0-1039.42","5.15.0-1040.45","5.15.0-1041.46","5.15.0-1042.47","5.15.0-1043.48"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-73.80+fips1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-1019.19"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1043.48~20.04.1"}]}],"versions":["5.15.0-1014.18~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1017.21~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.24~20.04.1","5.15.0-1021.25~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.1","5.15.0-1037.41~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1","5.15.0-1040.45~20.04.1","5.15.0-1041.46~20.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-82.91~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-41.44~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-57.63~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.86~20.04.2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-lowlatency-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-82.91~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-42.45~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1","5.15.0-78.85~20.04.1","5.15.0-79.88~20.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1041.47~20.04.1"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1","5.15.0-1022.28~20.04.1","5.15.0-1025.31~20.04.2","5.15.0-1027.33~20.04.1","5.15.0-1029.35~20.04.1","5.15.0-1030.36~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-82.91"}]}],"versions":["5.13.0-19.19","5.15.0-17.17","5.15.0-18.18","5.15.0-22.22","5.15.0-23.23","5.15.0-25.25","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.51","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.86"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1043.48"}]}],"versions":["5.13.0-1005.6","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1008.10","5.15.0-1009.11","5.15.0-1011.14","5.15.0-1013.17","5.15.0-1014.18","5.15.0-1015.19","5.15.0-1017.21","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.25","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1033.37","5.15.0-1034.38","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.43","5.15.0-1039.44","5.15.0-1040.45","5.15.0-1042.47"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.48"}]}],"versions":["5.13.0-1005.6","5.15.0-1001.3","5.15.0-1002.5","5.15.0-1003.6","5.15.0-1004.7","5.15.0-1005.8","5.15.0-1006.9","5.15.0-1008.12","5.15.0-1010.15","5.15.0-1013.18","5.15.0-1016.21","5.15.0-1017.23","5.15.0-1018.24","5.15.0-1019.25","5.15.0-1021.28","5.15.0-1022.29","5.15.0-1025.32","5.15.0-1026.33","5.15.0-1027.34","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1032.40","5.15.0-1034.42","5.15.0-1035.43","5.15.0-1036.44","5.15.0-1037.45","5.15.0-1038.46","5.15.0-1039.47"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.45"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.5","5.15.0-1005.6","5.15.0-1006.7","5.15.0-1008.10","5.15.0-1010.13","5.15.0-1011.14","5.15.0-1014.17","5.15.0-1015.18","5.15.0-1016.19","5.15.0-1017.20","5.15.0-1019.23","5.15.0-1020.25","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1026.31"}]}],"versions":["5.15.0-1001.2","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1007.10","5.15.0-1008.12","5.15.0-1011.15","5.15.0-1012.16","5.15.0-1013.17","5.15.0-1015.19","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1025.30"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1036.39"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.8","5.15.0-1009.11","5.15.0-1010.12","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1015.17","5.15.0-1017.20","5.15.0-1018.21","5.15.0-1021.24","5.15.0-1022.25","5.15.0-1023.26","5.15.0-1025.28","5.15.0-1026.29","5.15.0-1027.30","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1031.34","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.45"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1010.11","5.15.0-1012.14","5.15.0-1013.16","5.15.0-1016.19","5.15.0-1017.21","5.15.0-1018.22","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.26","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1028.33","5.15.0-1029.34","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1037.42","5.15.0-1038.43","5.15.0-1039.44"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-82.91"}]}],"versions":["5.15.0-22.22","5.15.0-23.23","5.15.0-24.24","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.53","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83","5.15.0-78.85","5.15.0-79.88"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1031.31"}]}],"versions":["5.15.0-1005.5","5.15.0-1007.7","5.15.0-1010.10","5.15.0-1015.15","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1023.23","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28","5.15.0-1029.29","5.15.0-1030.30"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1041.47"}]}],"versions":["5.13.0-1008.10","5.15.0-1001.3","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1006.8","5.15.0-1007.9","5.15.0-1009.12","5.15.0-1011.15","5.15.0-1013.17","5.15.0-1016.20","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1021.27","5.15.0-1022.28","5.15.0-1025.31","5.15.0-1026.32","5.15.0-1027.33","5.15.0-1029.35","5.15.0-1030.36","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44","5.15.0-1039.45","5.15.0-1040.46"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-1010.10~22.04.1"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-31.31~22.04.1"}]}],"versions":["6.2.0-25.25~22.04.2","6.2.0-26.26~22.04.1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-1011.11~22.04.1"}]}],"versions":["6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1026.31~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1","5.15.0-1008.12~20.04.1","5.15.0-1011.15~20.04.2","5.15.0-1012.16~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1024.29~20.04.1","5.15.0-1025.30~20.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1038.43"}]}],"versions":["5.15.0-1004.6","5.15.0-1008.11","5.15.0-1010.14","5.15.0-1013.17","5.15.0-1015.20","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1021.26","5.15.0-1023.28","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.48~20.04.1"}]}],"versions":["5.15.0-1006.9~20.04.1","5.15.0-1012.17~20.04.1","5.15.0-1013.18~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.23~20.04.2","5.15.0-1018.24~20.04.1","5.15.0-1021.28~20.04.1","5.15.0-1022.29~20.04.1","5.15.0-1025.32~20.04.2","5.15.0-1026.33~20.04.1","5.15.0-1027.34~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1032.40~20.04.1","5.15.0-1033.41~20.04.1","5.15.0-1034.42~20.04.1","5.15.0-1035.43~20.04.1","5.15.0-1036.44~20.04.1","5.15.0-1037.45~20.04.1","5.15.0-1038.46~20.04.1","5.15.0-1039.47~20.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1045.52~20.04.1"}]}],"versions":["5.15.0-1007.8~20.04.1","5.15.0-1008.9~20.04.1","5.15.0-1013.16~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1017.20~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.29~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1033.40~20.04.1","5.15.0-1034.41~20.04.1","5.15.0-1035.42~20.04.1","5.15.0-1036.43~20.04.1","5.15.0-1037.44~20.04.1","5.15.0-1038.45~20.04.1","5.15.0-1039.46~20.04.1","5.15.0-1040.47~20.04.1","5.15.0-1041.48~20.04.1","5.15.0-1042.49~20.04.1","5.15.0-1043.50~20.04.1"],"bundled":35},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1045.52"}]}],"versions":["5.13.0-1006.7","5.15.0-1001.2","5.15.0-1002.3","5.15.0-1003.4","5.15.0-1005.6","5.15.0-1007.8","5.15.0-1008.9","5.15.0-1010.12","5.15.0-1012.15","5.15.0-1013.16","5.15.0-1014.17","5.15.0-1017.20","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.29","5.15.0-1024.30","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1033.40","5.15.0-1034.41","5.15.0-1035.42","5.15.0-1036.43","5.15.0-1037.44","5.15.0-1038.45","5.15.0-1039.46","5.15.0-1040.47","5.15.0-1041.48","5.15.0-1042.49","5.15.0-1044.51"],"bundled":35},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1045.52.1"}]}],"versions":["5.15.0-1019.24.1","5.15.0-1024.30.1","5.15.0-1029.36.1","5.15.0-1030.37.1","5.15.0-1031.38.1","5.15.0-1033.40.1","5.15.0-1034.41.1","5.15.0-1035.42.1","5.15.0-1036.43.1","5.15.0-1037.44.1","5.15.0-1038.45.1","5.15.0-1039.46.1","5.15.0-1041.48.1","5.15.0-1042.49.1","5.15.0-1044.51.1"],"bundled":35},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-iotg-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1038.43~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.1","5.15.0-1008.11~20.04.1","5.15.0-1010.14~20.04.1","5.15.0-1015.20~20.04.2","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1036.39"}]}],"versions":["5.13.0-1008.9","5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1008.8","5.15.0-1011.13","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.20","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1025.27","5.15.0-1026.28","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1029.31","5.15.0-1030.32","5.15.0-1032.35","5.15.0-1033.36","5.15.0-1034.37","5.15.0-1035.38"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-1021.21"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20"],"bundled":37}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"linux","product":"kernel"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"}],"references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=4bedf9eee016286c835e3d8fa981ddece5338795","tags":["patch","x_transferred","Mailing List","Patch","Vendor Advisory","fix","article"]},{"url":"https://kernel.dance/4bedf9eee016286c835e3d8fa981ddece5338795","tags":["x_transferred","Patch","Vendor Advisory","web"]},{"url":"https://www.debian.org/security/2023/dsa-5461","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0005/","tags":["x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3610","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0005"},{"url":"https://github.com/advisories/GHSA-gcrv-hhf7-6qvh"},{"url":"https://access.redhat.com/errata/RHSA-2023:5069","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1637","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-20593","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21102","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-31248","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3390","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-35001","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3610","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3776","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4004","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4147","tags":["report"]},{"url":"https://bugzilla.redhat.com/2181891","tags":["report"]},{"url":"https://bugzilla.redhat.com/2213260","tags":["report"]},{"url":"https://bugzilla.redhat.com/2213455","tags":["report"]},{"url":"https://bugzilla.redhat.com/2217845","tags":["report"]},{"url":"https://bugzilla.redhat.com/2220892","tags":["report"]},{"url":"https://bugzilla.redhat.com/2220893","tags":["report"]},{"url":"https://bugzilla.redhat.com/2225097","tags":["report"]},{"url":"https://bugzilla.redhat.com/2225198","tags":["report"]},{"url":"https://bugzilla.redhat.com/2225239","tags":["report"]},{"url":"https://bugzilla.redhat.com/2225275","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-5069.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5091","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-5091.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-3610","tags":["advisory"]},{"url":"https://git.kernel.org","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3610.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-3610","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32248","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38428","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1468","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3812","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2217845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2220892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2220893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225275","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5069.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-50661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2420323","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-50661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50661","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025120942-CVE-2022-50661-ff17@gregkh/T","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1637","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e2a1256b17b16f9b9adf1b6fea56819e7b68e463","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=27398","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3390","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3390","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3610","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3776","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0323bce598eea038714f941ce2b22541c46d488f","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4004","tags":["advisory"]},{"url":"https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230719190824.21196-1-fw@strlen.de/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4147","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ebc1064e4874d5987722a2ddbc18f94aa53b211","tags":["article"]},{"url":"https://www.spinics.net/lists/stable/msg671573.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20593","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=522b1d69219d8f083173819fde04f994aa051a98","tags":["article"]},{"url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21102","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21102","tags":["advisory"]},{"url":"https://android.googlesource.com/kernel/common/+/ec6fe823507b2f6ef4a58f3a9bee9a5ec086c32c%5E%21/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31248","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31248","tags":["advisory"]},{"url":"https://lore.kernel.org/netfilter-devel/20230705121627.GC19489@breakpoint.cc/T/","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2023/07/05/2","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-899/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35001","tags":["advisory"]},{"url":"https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2023/07/05/3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44466","tags":["advisory"]},{"url":"https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a282a2f10539dce2aa619e71e1817570d557fc97","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-53383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2396396","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-53383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53383","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025091857-CVE-2023-53383-fea9@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-53556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401478","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-53556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53556","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025100448-CVE-2023-53556-db4c@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-53769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2419909","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-53769","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53769","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025120846-CVE-2023-53769-1a8b@gregkh/T","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5091.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5093","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5093.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:5091","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233599-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1023051","tags":["report"]},{"url":"https://bugzilla.suse.com/1120059","tags":["report"]},{"url":"https://bugzilla.suse.com/1177719","tags":["report"]},{"url":"https://bugzilla.suse.com/1188885","tags":["report"]},{"url":"https://bugzilla.suse.com/1193629","tags":["report"]},{"url":"https://bugzilla.suse.com/1194869","tags":["report"]},{"url":"https://bugzilla.suse.com/1203329","tags":["report"]},{"url":"https://bugzilla.suse.com/1203330","tags":["report"]},{"url":"https://bugzilla.suse.com/1205462","tags":["report"]},{"url":"https://bugzilla.suse.com/1206453","tags":["report"]},{"url":"https://bugzilla.suse.com/1208902","tags":["report"]},{"url":"https://bugzilla.suse.com/1208949","tags":["report"]},{"url":"https://bugzilla.suse.com/1209284","tags":["report"]},{"url":"https://bugzilla.suse.com/1209799","tags":["report"]},{"url":"https://bugzilla.suse.com/1210048","tags":["report"]},{"url":"https://bugzilla.suse.com/1210448","tags":["report"]},{"url":"https://bugzilla.suse.com/1211220","tags":["report"]},{"url":"https://bugzilla.suse.com/1212091","tags":["report"]},{"url":"https://bugzilla.suse.com/1212142","tags":["report"]},{"url":"https://bugzilla.suse.com/1212423","tags":["report"]},{"url":"https://bugzilla.suse.com/1212526","tags":["report"]},{"url":"https://bugzilla.suse.com/1212857","tags":["report"]},{"url":"https://bugzilla.suse.com/1212873","tags":["report"]},{"url":"https://bugzilla.suse.com/1213026","tags":["report"]},{"url":"https://bugzilla.suse.com/1213123","tags":["report"]},{"url":"https://bugzilla.suse.com/1213546","tags":["report"]},{"url":"https://bugzilla.suse.com/1213580","tags":["report"]},{"url":"https://bugzilla.suse.com/1213601","tags":["report"]},{"url":"https://bugzilla.suse.com/1213666","tags":["report"]},{"url":"https://bugzilla.suse.com/1213733","tags":["report"]},{"url":"https://bugzilla.suse.com/1213757","tags":["report"]},{"url":"https://bugzilla.suse.com/1213759","tags":["report"]},{"url":"https://bugzilla.suse.com/1213916","tags":["report"]},{"url":"https://bugzilla.suse.com/1213921","tags":["report"]},{"url":"https://bugzilla.suse.com/1213927","tags":["report"]},{"url":"https://bugzilla.suse.com/1213946","tags":["report"]},{"url":"https://bugzilla.suse.com/1213949","tags":["report"]},{"url":"https://bugzilla.suse.com/1213968","tags":["report"]},{"url":"https://bugzilla.suse.com/1213970","tags":["report"]},{"url":"https://bugzilla.suse.com/1213971","tags":["report"]},{"url":"https://bugzilla.suse.com/1214000","tags":["report"]},{"url":"https://bugzilla.suse.com/1214019","tags":["report"]},{"url":"https://bugzilla.suse.com/1214073","tags":["report"]},{"url":"https://bugzilla.suse.com/1214120","tags":["report"]},{"url":"https://bugzilla.suse.com/1214149","tags":["report"]},{"url":"https://bugzilla.suse.com/1214180","tags":["report"]},{"url":"https://bugzilla.suse.com/1214233","tags":["report"]},{"url":"https://bugzilla.suse.com/1214238","tags":["report"]},{"url":"https://bugzilla.suse.com/1214285","tags":["report"]},{"url":"https://bugzilla.suse.com/1214297","tags":["report"]},{"url":"https://bugzilla.suse.com/1214299","tags":["report"]},{"url":"https://bugzilla.suse.com/1214305","tags":["report"]},{"url":"https://bugzilla.suse.com/1214350","tags":["report"]},{"url":"https://bugzilla.suse.com/1214368","tags":["report"]},{"url":"https://bugzilla.suse.com/1214370","tags":["report"]},{"url":"https://bugzilla.suse.com/1214371","tags":["report"]},{"url":"https://bugzilla.suse.com/1214372","tags":["report"]},{"url":"https://bugzilla.suse.com/1214380","tags":["report"]},{"url":"https://bugzilla.suse.com/1214386","tags":["report"]},{"url":"https://bugzilla.suse.com/1214392","tags":["report"]},{"url":"https://bugzilla.suse.com/1214393","tags":["report"]},{"url":"https://bugzilla.suse.com/1214397","tags":["report"]},{"url":"https://bugzilla.suse.com/1214404","tags":["report"]},{"url":"https://bugzilla.suse.com/1214428","tags":["report"]},{"url":"https://bugzilla.suse.com/1214451","tags":["report"]},{"url":"https://bugzilla.suse.com/1214659","tags":["report"]},{"url":"https://bugzilla.suse.com/1214661","tags":["report"]},{"url":"https://bugzilla.suse.com/1214727","tags":["report"]},{"url":"https://bugzilla.suse.com/1214729","tags":["report"]},{"url":"https://bugzilla.suse.com/1214742","tags":["report"]},{"url":"https://bugzilla.suse.com/1214743","tags":["report"]},{"url":"https://bugzilla.suse.com/1214756","tags":["report"]},{"url":"https://bugzilla.suse.com/1214976","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4569","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233599-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233600-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233600-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233656-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214760","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233682-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233964-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214635","tags":["report"]},{"url":"https://bugzilla.suse.com/1215522","tags":["report"]},{"url":"https://bugzilla.suse.com/1215523","tags":["report"]},{"url":"https://bugzilla.suse.com/1215552","tags":["report"]},{"url":"https://bugzilla.suse.com/1215553","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233969-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233971-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233988-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1065729","tags":["report"]},{"url":"https://bugzilla.suse.com/1187236","tags":["report"]},{"url":"https://bugzilla.suse.com/1208995","tags":["report"]},{"url":"https://bugzilla.suse.com/1210169","tags":["report"]},{"url":"https://bugzilla.suse.com/1210643","tags":["report"]},{"url":"https://bugzilla.suse.com/1214813","tags":["report"]},{"url":"https://bugzilla.suse.com/1214873","tags":["report"]},{"url":"https://bugzilla.suse.com/1214928","tags":["report"]},{"url":"https://bugzilla.suse.com/1214988","tags":["report"]},{"url":"https://bugzilla.suse.com/1215123","tags":["report"]},{"url":"https://bugzilla.suse.com/1215124","tags":["report"]},{"url":"https://bugzilla.suse.com/1215148","tags":["report"]},{"url":"https://bugzilla.suse.com/1215221","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4881","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234766-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213584","tags":["report"]},{"url":"https://bugzilla.suse.com/1215097","tags":["report"]},{"url":"https://bugzilla.suse.com/1215442","tags":["report"]},{"url":"https://bugzilla.suse.com/1215519","tags":["report"]},{"url":"https://bugzilla.suse.com/1215971","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5345","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234805-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234822-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234841-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234848-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234849-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234872-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243190-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194111","tags":["report"]},{"url":"https://bugzilla.suse.com/1194765","tags":["report"]},{"url":"https://bugzilla.suse.com/1196261","tags":["report"]},{"url":"https://bugzilla.suse.com/1196516","tags":["report"]},{"url":"https://bugzilla.suse.com/1196894","tags":["report"]},{"url":"https://bugzilla.suse.com/1198017","tags":["report"]},{"url":"https://bugzilla.suse.com/1203360","tags":["report"]},{"url":"https://bugzilla.suse.com/1206006","tags":["report"]},{"url":"https://bugzilla.suse.com/1206258","tags":["report"]},{"url":"https://bugzilla.suse.com/1206843","tags":["report"]},{"url":"https://bugzilla.suse.com/1207158","tags":["report"]},{"url":"https://bugzilla.suse.com/1208783","tags":["report"]},{"url":"https://bugzilla.suse.com/1210644","tags":["report"]},{"url":"https://bugzilla.suse.com/1213632","tags":["report"]},{"url":"https://bugzilla.suse.com/1216834","tags":["report"]},{"url":"https://bugzilla.suse.com/1220428","tags":["report"]},{"url":"https://bugzilla.suse.com/1220877","tags":["report"]},{"url":"https://bugzilla.suse.com/1220962","tags":["report"]},{"url":"https://bugzilla.suse.com/1221269","tags":["report"]},{"url":"https://bugzilla.suse.com/1221326","tags":["report"]},{"url":"https://bugzilla.suse.com/1221630","tags":["report"]},{"url":"https://bugzilla.suse.com/1221645","tags":["report"]},{"url":"https://bugzilla.suse.com/1222335","tags":["report"]},{"url":"https://bugzilla.suse.com/1222350","tags":["report"]},{"url":"https://bugzilla.suse.com/1222372","tags":["report"]},{"url":"https://bugzilla.suse.com/1222387","tags":["report"]},{"url":"https://bugzilla.suse.com/1222634","tags":["report"]},{"url":"https://bugzilla.suse.com/1222808","tags":["report"]},{"url":"https://bugzilla.suse.com/1222967","tags":["report"]},{"url":"https://bugzilla.suse.com/1223074","tags":["report"]},{"url":"https://bugzilla.suse.com/1223191","tags":["report"]},{"url":"https://bugzilla.suse.com/1223508","tags":["report"]},{"url":"https://bugzilla.suse.com/1223720","tags":["report"]},{"url":"https://bugzilla.suse.com/1223742","tags":["report"]},{"url":"https://bugzilla.suse.com/1223777","tags":["report"]},{"url":"https://bugzilla.suse.com/1223803","tags":["report"]},{"url":"https://bugzilla.suse.com/1223807","tags":["report"]},{"url":"https://bugzilla.suse.com/1224105","tags":["report"]},{"url":"https://bugzilla.suse.com/1224415","tags":["report"]},{"url":"https://bugzilla.suse.com/1224496","tags":["report"]},{"url":"https://bugzilla.suse.com/1224510","tags":["report"]},{"url":"https://bugzilla.suse.com/1224542","tags":["report"]},{"url":"https://bugzilla.suse.com/1224578","tags":["report"]},{"url":"https://bugzilla.suse.com/1224639","tags":["report"]},{"url":"https://bugzilla.suse.com/1225162","tags":["report"]},{"url":"https://bugzilla.suse.com/1225352","tags":["report"]},{"url":"https://bugzilla.suse.com/1225428","tags":["report"]},{"url":"https://bugzilla.suse.com/1225524","tags":["report"]},{"url":"https://bugzilla.suse.com/1225578","tags":["report"]},{"url":"https://bugzilla.suse.com/1225582","tags":["report"]},{"url":"https://bugzilla.suse.com/1225773","tags":["report"]},{"url":"https://bugzilla.suse.com/1225814","tags":["report"]},{"url":"https://bugzilla.suse.com/1225827","tags":["report"]},{"url":"https://bugzilla.suse.com/1225832","tags":["report"]},{"url":"https://bugzilla.suse.com/1225903","tags":["report"]},{"url":"https://bugzilla.suse.com/1226168","tags":["report"]},{"url":"https://bugzilla.suse.com/1226530","tags":["report"]},{"url":"https://bugzilla.suse.com/1226613","tags":["report"]},{"url":"https://bugzilla.suse.com/1226742","tags":["report"]},{"url":"https://bugzilla.suse.com/1226765","tags":["report"]},{"url":"https://bugzilla.suse.com/1226798","tags":["report"]},{"url":"https://bugzilla.suse.com/1226801","tags":["report"]},{"url":"https://bugzilla.suse.com/1226874","tags":["report"]},{"url":"https://bugzilla.suse.com/1226885","tags":["report"]},{"url":"https://bugzilla.suse.com/1227079","tags":["report"]},{"url":"https://bugzilla.suse.com/1227623","tags":["report"]},{"url":"https://bugzilla.suse.com/1227761","tags":["report"]},{"url":"https://bugzilla.suse.com/1227830","tags":["report"]},{"url":"https://bugzilla.suse.com/1227863","tags":["report"]},{"url":"https://bugzilla.suse.com/1227867","tags":["report"]},{"url":"https://bugzilla.suse.com/1227929","tags":["report"]},{"url":"https://bugzilla.suse.com/1227937","tags":["report"]},{"url":"https://bugzilla.suse.com/1227958","tags":["report"]},{"url":"https://bugzilla.suse.com/1228020","tags":["report"]},{"url":"https://bugzilla.suse.com/1228065","tags":["report"]},{"url":"https://bugzilla.suse.com/1228114","tags":["report"]},{"url":"https://bugzilla.suse.com/1228410","tags":["report"]},{"url":"https://bugzilla.suse.com/1228426","tags":["report"]},{"url":"https://bugzilla.suse.com/1228427","tags":["report"]},{"url":"https://bugzilla.suse.com/1228429","tags":["report"]},{"url":"https://bugzilla.suse.com/1228446","tags":["report"]},{"url":"https://bugzilla.suse.com/1228447","tags":["report"]},{"url":"https://bugzilla.suse.com/1228449","tags":["report"]},{"url":"https://bugzilla.suse.com/1228450","tags":["report"]},{"url":"https://bugzilla.suse.com/1228452","tags":["report"]},{"url":"https://bugzilla.suse.com/1228456","tags":["report"]},{"url":"https://bugzilla.suse.com/1228463","tags":["report"]},{"url":"https://bugzilla.suse.com/1228466","tags":["report"]},{"url":"https://bugzilla.suse.com/1228467","tags":["report"]},{"url":"https://bugzilla.suse.com/1228469","tags":["report"]},{"url":"https://bugzilla.suse.com/1228480","tags":["report"]},{"url":"https://bugzilla.suse.com/1228481","tags":["report"]},{"url":"https://bugzilla.suse.com/1228482","tags":["report"]},{"url":"https://bugzilla.suse.com/1228483","tags":["report"]},{"url":"https://bugzilla.suse.com/1228484","tags":["report"]},{"url":"https://bugzilla.suse.com/1228485","tags":["report"]},{"url":"https://bugzilla.suse.com/1228487","tags":["report"]},{"url":"https://bugzilla.suse.com/1228489","tags":["report"]},{"url":"https://bugzilla.suse.com/1228491","tags":["report"]},{"url":"https://bugzilla.suse.com/1228493","tags":["report"]},{"url":"https://bugzilla.suse.com/1228494","tags":["report"]},{"url":"https://bugzilla.suse.com/1228495","tags":["report"]},{"url":"https://bugzilla.suse.com/1228496","tags":["report"]},{"url":"https://bugzilla.suse.com/1228501","tags":["report"]},{"url":"https://bugzilla.suse.com/1228503","tags":["report"]},{"url":"https://bugzilla.suse.com/1228509","tags":["report"]},{"url":"https://bugzilla.suse.com/1228513","tags":["report"]},{"url":"https://bugzilla.suse.com/1228515","tags":["report"]},{"url":"https://bugzilla.suse.com/1228516","tags":["report"]},{"url":"https://bugzilla.suse.com/1228526","tags":["report"]},{"url":"https://bugzilla.suse.com/1228531","tags":["report"]},{"url":"https://bugzilla.suse.com/1228563","tags":["report"]},{"url":"https://bugzilla.suse.com/1228564","tags":["report"]},{"url":"https://bugzilla.suse.com/1228567","tags":["report"]},{"url":"https://bugzilla.suse.com/1228576","tags":["report"]},{"url":"https://bugzilla.suse.com/1228579","tags":["report"]},{"url":"https://bugzilla.suse.com/1228584","tags":["report"]},{"url":"https://bugzilla.suse.com/1228588","tags":["report"]},{"url":"https://bugzilla.suse.com/1228590","tags":["report"]},{"url":"https://bugzilla.suse.com/1228615","tags":["report"]},{"url":"https://bugzilla.suse.com/1228616","tags":["report"]},{"url":"https://bugzilla.suse.com/1228635","tags":["report"]},{"url":"https://bugzilla.suse.com/1228636","tags":["report"]},{"url":"https://bugzilla.suse.com/1228654","tags":["report"]},{"url":"https://bugzilla.suse.com/1228656","tags":["report"]},{"url":"https://bugzilla.suse.com/1228658","tags":["report"]},{"url":"https://bugzilla.suse.com/1228660","tags":["report"]},{"url":"https://bugzilla.suse.com/1228662","tags":["report"]},{"url":"https://bugzilla.suse.com/1228667","tags":["report"]},{"url":"https://bugzilla.suse.com/1228673","tags":["report"]},{"url":"https://bugzilla.suse.com/1228677","tags":["report"]},{"url":"https://bugzilla.suse.com/1228687","tags":["report"]},{"url":"https://bugzilla.suse.com/1228706","tags":["report"]},{"url":"https://bugzilla.suse.com/1228708","tags":["report"]},{"url":"https://bugzilla.suse.com/1228710","tags":["report"]},{"url":"https://bugzilla.suse.com/1228718","tags":["report"]},{"url":"https://bugzilla.suse.com/1228720","tags":["report"]},{"url":"https://bugzilla.suse.com/1228721","tags":["report"]},{"url":"https://bugzilla.suse.com/1228722","tags":["report"]},{"url":"https://bugzilla.suse.com/1228724","tags":["report"]},{"url":"https://bugzilla.suse.com/1228726","tags":["report"]},{"url":"https://bugzilla.suse.com/1228727","tags":["report"]},{"url":"https://bugzilla.suse.com/1228733","tags":["report"]},{"url":"https://bugzilla.suse.com/1228748","tags":["report"]},{"url":"https://bugzilla.suse.com/1228766","tags":["report"]},{"url":"https://bugzilla.suse.com/1228779","tags":["report"]},{"url":"https://bugzilla.suse.com/1228801","tags":["report"]},{"url":"https://bugzilla.suse.com/1228850","tags":["report"]},{"url":"https://bugzilla.suse.com/1228857","tags":["report"]},{"url":"https://bugzilla.suse.com/1228959","tags":["report"]},{"url":"https://bugzilla.suse.com/1228964","tags":["report"]},{"url":"https://bugzilla.suse.com/1228966","tags":["report"]},{"url":"https://bugzilla.suse.com/1228967","tags":["report"]},{"url":"https://bugzilla.suse.com/1228979","tags":["report"]},{"url":"https://bugzilla.suse.com/1228988","tags":["report"]},{"url":"https://bugzilla.suse.com/1228989","tags":["report"]},{"url":"https://bugzilla.suse.com/1228991","tags":["report"]},{"url":"https://bugzilla.suse.com/1228992","tags":["report"]},{"url":"https://bugzilla.suse.com/1229042","tags":["report"]},{"url":"https://bugzilla.suse.com/1229054","tags":["report"]},{"url":"https://bugzilla.suse.com/1229086","tags":["report"]},{"url":"https://bugzilla.suse.com/1229136","tags":["report"]},{"url":"https://bugzilla.suse.com/1229154","tags":["report"]},{"url":"https://bugzilla.suse.com/1229187","tags":["report"]},{"url":"https://bugzilla.suse.com/1229188","tags":["report"]},{"url":"https://bugzilla.suse.com/1229190","tags":["report"]},{"url":"https://bugzilla.suse.com/1229287","tags":["report"]},{"url":"https://bugzilla.suse.com/1229290","tags":["report"]},{"url":"https://bugzilla.suse.com/1229292","tags":["report"]},{"url":"https://bugzilla.suse.com/1229296","tags":["report"]},{"url":"https://bugzilla.suse.com/1229297","tags":["report"]},{"url":"https://bugzilla.suse.com/1229301","tags":["report"]},{"url":"https://bugzilla.suse.com/1229303","tags":["report"]},{"url":"https://bugzilla.suse.com/1229304","tags":["report"]},{"url":"https://bugzilla.suse.com/1229305","tags":["report"]},{"url":"https://bugzilla.suse.com/1229307","tags":["report"]},{"url":"https://bugzilla.suse.com/1229309","tags":["report"]},{"url":"https://bugzilla.suse.com/1229312","tags":["report"]},{"url":"https://bugzilla.suse.com/1229314","tags":["report"]},{"url":"https://bugzilla.suse.com/1229315","tags":["report"]},{"url":"https://bugzilla.suse.com/1229317","tags":["report"]},{"url":"https://bugzilla.suse.com/1229318","tags":["report"]},{"url":"https://bugzilla.suse.com/1229319","tags":["report"]},{"url":"https://bugzilla.suse.com/1229327","tags":["report"]},{"url":"https://bugzilla.suse.com/1229341","tags":["report"]},{"url":"https://bugzilla.suse.com/1229345","tags":["report"]},{"url":"https://bugzilla.suse.com/1229346","tags":["report"]},{"url":"https://bugzilla.suse.com/1229347","tags":["report"]},{"url":"https://bugzilla.suse.com/1229349","tags":["report"]},{"url":"https://bugzilla.suse.com/1229350","tags":["report"]},{"url":"https://bugzilla.suse.com/1229351","tags":["report"]},{"url":"https://bugzilla.suse.com/1229354","tags":["report"]},{"url":"https://bugzilla.suse.com/1229356","tags":["report"]},{"url":"https://bugzilla.suse.com/1229357","tags":["report"]},{"url":"https://bugzilla.suse.com/1229358","tags":["report"]},{"url":"https://bugzilla.suse.com/1229359","tags":["report"]},{"url":"https://bugzilla.suse.com/1229360","tags":["report"]},{"url":"https://bugzilla.suse.com/1229366","tags":["report"]},{"url":"https://bugzilla.suse.com/1229370","tags":["report"]},{"url":"https://bugzilla.suse.com/1229373","tags":["report"]},{"url":"https://bugzilla.suse.com/1229374","tags":["report"]},{"url":"https://bugzilla.suse.com/1229381","tags":["report"]},{"url":"https://bugzilla.suse.com/1229382","tags":["report"]},{"url":"https://bugzilla.suse.com/1229383","tags":["report"]},{"url":"https://bugzilla.suse.com/1229386","tags":["report"]},{"url":"https://bugzilla.suse.com/1229388","tags":["report"]},{"url":"https://bugzilla.suse.com/1229391","tags":["report"]},{"url":"https://bugzilla.suse.com/1229392","tags":["report"]},{"url":"https://bugzilla.suse.com/1229395","tags":["report"]},{"url":"https://bugzilla.suse.com/1229398","tags":["report"]},{"url":"https://bugzilla.suse.com/1229399","tags":["report"]},{"url":"https://bugzilla.suse.com/1229400","tags":["report"]},{"url":"https://bugzilla.suse.com/1229407","tags":["report"]},{"url":"https://bugzilla.suse.com/1229409","tags":["report"]},{"url":"https://bugzilla.suse.com/1229410","tags":["report"]},{"url":"https://bugzilla.suse.com/1229411","tags":["report"]},{"url":"https://bugzilla.suse.com/1229413","tags":["report"]},{"url":"https://bugzilla.suse.com/1229414","tags":["report"]},{"url":"https://bugzilla.suse.com/1229417","tags":["report"]},{"url":"https://bugzilla.suse.com/1229418","tags":["report"]},{"url":"https://bugzilla.suse.com/1229444","tags":["report"]},{"url":"https://bugzilla.suse.com/1229453","tags":["report"]},{"url":"https://bugzilla.suse.com/1229454","tags":["report"]},{"url":"https://bugzilla.suse.com/1229481","tags":["report"]},{"url":"https://bugzilla.suse.com/1229482","tags":["report"]},{"url":"https://bugzilla.suse.com/1229488","tags":["report"]},{"url":"https://bugzilla.suse.com/1229489","tags":["report"]},{"url":"https://bugzilla.suse.com/1229490","tags":["report"]},{"url":"https://bugzilla.suse.com/1229493","tags":["report"]},{"url":"https://bugzilla.suse.com/1229495","tags":["report"]},{"url":"https://bugzilla.suse.com/1229497","tags":["report"]},{"url":"https://bugzilla.suse.com/1229500","tags":["report"]},{"url":"https://bugzilla.suse.com/1229503","tags":["report"]},{"url":"https://bugzilla.suse.com/1229506","tags":["report"]},{"url":"https://bugzilla.suse.com/1229507","tags":["report"]},{"url":"https://bugzilla.suse.com/1229508","tags":["report"]},{"url":"https://bugzilla.suse.com/1229509","tags":["report"]},{"url":"https://bugzilla.suse.com/1229510","tags":["report"]},{"url":"https://bugzilla.suse.com/1229512","tags":["report"]},{"url":"https://bugzilla.suse.com/1229516","tags":["report"]},{"url":"https://bugzilla.suse.com/1229521","tags":["report"]},{"url":"https://bugzilla.suse.com/1229522","tags":["report"]},{"url":"https://bugzilla.suse.com/1229523","tags":["report"]},{"url":"https://bugzilla.suse.com/1229524","tags":["report"]},{"url":"https://bugzilla.suse.com/1229525","tags":["report"]},{"url":"https://bugzilla.suse.com/1229526","tags":["report"]},{"url":"https://bugzilla.suse.com/1229527","tags":["report"]},{"url":"https://bugzilla.suse.com/1229528","tags":["report"]},{"url":"https://bugzilla.suse.com/1229529","tags":["report"]},{"url":"https://bugzilla.suse.com/1229531","tags":["report"]},{"url":"https://bugzilla.suse.com/1229533","tags":["report"]},{"url":"https://bugzilla.suse.com/1229535","tags":["report"]},{"url":"https://bugzilla.suse.com/1229536","tags":["report"]},{"url":"https://bugzilla.suse.com/1229537","tags":["report"]},{"url":"https://bugzilla.suse.com/1229540","tags":["report"]},{"url":"https://bugzilla.suse.com/1229544","tags":["report"]},{"url":"https://bugzilla.suse.com/1229545","tags":["report"]},{"url":"https://bugzilla.suse.com/1229546","tags":["report"]},{"url":"https://bugzilla.suse.com/1229547","tags":["report"]},{"url":"https://bugzilla.suse.com/1229548","tags":["report"]},{"url":"https://bugzilla.suse.com/1229554","tags":["report"]},{"url":"https://bugzilla.suse.com/1229557","tags":["report"]},{"url":"https://bugzilla.suse.com/1229558","tags":["report"]},{"url":"https://bugzilla.suse.com/1229559","tags":["report"]},{"url":"https://bugzilla.suse.com/1229560","tags":["report"]},{"url":"https://bugzilla.suse.com/1229562","tags":["report"]},{"url":"https://bugzilla.suse.com/1229564","tags":["report"]},{"url":"https://bugzilla.suse.com/1229565","tags":["report"]},{"url":"https://bugzilla.suse.com/1229566","tags":["report"]},{"url":"https://bugzilla.suse.com/1229568","tags":["report"]},{"url":"https://bugzilla.suse.com/1229569","tags":["report"]},{"url":"https://bugzilla.suse.com/1229572","tags":["report"]},{"url":"https://bugzilla.suse.com/1229573","tags":["report"]},{"url":"https://bugzilla.suse.com/1229576","tags":["report"]},{"url":"https://bugzilla.suse.com/1229581","tags":["report"]},{"url":"https://bugzilla.suse.com/1229588","tags":["report"]},{"url":"https://bugzilla.suse.com/1229598","tags":["report"]},{"url":"https://bugzilla.suse.com/1229603","tags":["report"]},{"url":"https://bugzilla.suse.com/1229604","tags":["report"]},{"url":"https://bugzilla.suse.com/1229605","tags":["report"]},{"url":"https://bugzilla.suse.com/1229608","tags":["report"]},{"url":"https://bugzilla.suse.com/1229611","tags":["report"]},{"url":"https://bugzilla.suse.com/1229612","tags":["report"]},{"url":"https://bugzilla.suse.com/1229613","tags":["report"]},{"url":"https://bugzilla.suse.com/1229614","tags":["report"]},{"url":"https://bugzilla.suse.com/1229615","tags":["report"]},{"url":"https://bugzilla.suse.com/1229616","tags":["report"]},{"url":"https://bugzilla.suse.com/1229617","tags":["report"]},{"url":"https://bugzilla.suse.com/1229620","tags":["report"]},{"url":"https://bugzilla.suse.com/1229622","tags":["report"]},{"url":"https://bugzilla.suse.com/1229623","tags":["report"]},{"url":"https://bugzilla.suse.com/1229624","tags":["report"]},{"url":"https://bugzilla.suse.com/1229625","tags":["report"]},{"url":"https://bugzilla.suse.com/1229626","tags":["report"]},{"url":"https://bugzilla.suse.com/1229628","tags":["report"]},{"url":"https://bugzilla.suse.com/1229629","tags":["report"]},{"url":"https://bugzilla.suse.com/1229630","tags":["report"]},{"url":"https://bugzilla.suse.com/1229631","tags":["report"]},{"url":"https://bugzilla.suse.com/1229632","tags":["report"]},{"url":"https://bugzilla.suse.com/1229635","tags":["report"]},{"url":"https://bugzilla.suse.com/1229636","tags":["report"]},{"url":"https://bugzilla.suse.com/1229637","tags":["report"]},{"url":"https://bugzilla.suse.com/1229638","tags":["report"]},{"url":"https://bugzilla.suse.com/1229639","tags":["report"]},{"url":"https://bugzilla.suse.com/1229641","tags":["report"]},{"url":"https://bugzilla.suse.com/1229642","tags":["report"]},{"url":"https://bugzilla.suse.com/1229643","tags":["report"]},{"url":"https://bugzilla.suse.com/1229645","tags":["report"]},{"url":"https://bugzilla.suse.com/1229657","tags":["report"]},{"url":"https://bugzilla.suse.com/1229658","tags":["report"]},{"url":"https://bugzilla.suse.com/1229662","tags":["report"]},{"url":"https://bugzilla.suse.com/1229664","tags":["report"]},{"url":"https://bugzilla.suse.com/1229707","tags":["report"]},{"url":"https://bugzilla.suse.com/1229739","tags":["report"]},{"url":"https://bugzilla.suse.com/1229743","tags":["report"]},{"url":"https://bugzilla.suse.com/1229746","tags":["report"]},{"url":"https://bugzilla.suse.com/1229754","tags":["report"]},{"url":"https://bugzilla.suse.com/1229755","tags":["report"]},{"url":"https://bugzilla.suse.com/1229756","tags":["report"]},{"url":"https://bugzilla.suse.com/1229759","tags":["report"]},{"url":"https://bugzilla.suse.com/1229761","tags":["report"]},{"url":"https://bugzilla.suse.com/1229767","tags":["report"]},{"url":"https://bugzilla.suse.com/1229768","tags":["report"]},{"url":"https://bugzilla.suse.com/1229781","tags":["report"]},{"url":"https://bugzilla.suse.com/1229784","tags":["report"]},{"url":"https://bugzilla.suse.com/1229787","tags":["report"]},{"url":"https://bugzilla.suse.com/1229788","tags":["report"]},{"url":"https://bugzilla.suse.com/1229789","tags":["report"]},{"url":"https://bugzilla.suse.com/1229792","tags":["report"]},{"url":"https://bugzilla.suse.com/1229820","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-47106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-47517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-47546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44947","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243209-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243483-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230413","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4382","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-3610","tags":["report"]},{"url":"https://security.googleblog.com/2023/06/learnings-from-kctf-vrps-42-linux.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6285-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6315-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6318-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6321-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6325-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6328-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6330-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6332-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6348-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6385-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-48502","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3390","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-31248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-32629","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-35001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-38430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-38432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-40982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-20593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-21400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-4269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-23004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-28466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-30772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-32248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-33203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-33288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-35823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-35824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-35828","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-35829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-0458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-2162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-4569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-28328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-31436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-32269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-40283","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-3610","title":"Use-after-free in Linux kernel's netfilter: nf_tables component","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","status":"published","published":"2023-07-21T20:48:13.121Z","modified":"2026-10-14T20:59:54.696Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:35:24.360381Z"}],"euvd":[{"id":"EUVD-2023-44259","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","status":"published","published":"2023-07-21T20:48:13Z","modified":"2026-10-14T20:59:54Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:11.707191Z"}],"ghsa":[{"id":"GHSA-gcrv-hhf7-6qvh","title":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be...","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","status":"published","published":"2023-07-21T21:30:33Z","modified":"2026-10-14T21:31:43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:13:28.606179Z"}],"nvd":[{"id":"CVE-2023-3610","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","status":"published","published":"2023-07-21T21:15:11.82Z","modified":"2026-10-14T21:17:17.39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:08:17.044696Z"}],"osv":[{"id":"AZL-27673","title":"CVE-2023-3610 affecting package kernel for versions less than 5.15.122.1-2","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","status":"published","published":"2023-07-21T21:15:11Z","modified":"2026-04-21T04:24:32.616541Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-3610","status":"published","published":"2023-10-18T13:45:30.455076Z","modified":"2026-01-26T09:33:26.102212Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-3610","title":"Use-after-free in Linux kernel's netfilter: nf_tables component","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","status":"published","published":"2023-07-21T20:48:13.121Z","modified":"2026-10-28T02:30:49.441449206Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:44:32.510144Z"},{"id":"DEBIAN-CVE-2023-3610","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.  Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.  We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","status":"published","published":"2023-07-21T21:15:11.82Z","modified":"2026-10-26T18:02:19.915298441Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"OESA-2023-1467","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nIn multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\r\n\r\n(CVE-2023-21255)\r\n\r\n(CVE-2023-2163)\r\n\r\nA flaw was found in the Linux kernel\u0026apos;s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.(CVE-2023-32248)\r\n\r\nVUL-0: CVE-2023-32255: kernel: Linux Kernel ksmbd Session Setup Memory Leak Denial-of-Service Vulnerability(CVE-2023-32255)\r\n\r\nA use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This flaw allows an attacker with local user access to cause a system crash or leak internal kernel information.(CVE-2023-3567)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\r\n\r\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\r\n\r\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.\r\n\r\n(CVE-2023-3609)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\r\n\r\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\r\n\r\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.\r\n\r\n(CVE-2023-3610)\r\n\r\nAn out-of-bounds write vulnerability in the Linux kernel\u0026apos;s net/sched: sch_qfq component can be exploited to achieve local privilege escalation.\r\n\r\nThe qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.\r\n\r\nWe recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.\r\n\r\n(CVE-2023-3611)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: cls_fw component can be exploited to achieve local privilege escalation.\r\n\r\nIf tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\r\n\r\nWe recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.\r\n\r\n(CVE-2023-3776)\r\n\r\nAn issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context\u0026apos;s name_len is larger than the tag length.(CVE-2023-38426)\r\n\r\nAn issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.(CVE-2023-38428)","status":"published","published":"2023-08-06T11:05:55Z","modified":"2026-08-18T01:17:47.472071738Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1468","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nIn multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\r\n\r\n(CVE-2023-21255)\r\n\r\n(CVE-2023-2163)\r\n\r\nA flaw was found in the Linux kernel\u0026apos;s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.(CVE-2023-32248)\r\n\r\nVUL-0: CVE-2023-32255: kernel: Linux Kernel ksmbd Session Setup Memory Leak Denial-of-Service Vulnerability(CVE-2023-32255)\r\n\r\nA use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This flaw allows an attacker with local user access to cause a system crash or leak internal kernel information.(CVE-2023-3567)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\r\n\r\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\r\n\r\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.\r\n\r\n(CVE-2023-3609)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\r\n\r\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\r\n\r\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.\r\n\r\n(CVE-2023-3610)\r\n\r\nAn out-of-bounds write vulnerability in the Linux kernel\u0026apos;s net/sched: sch_qfq component can be exploited to achieve local privilege escalation.\r\n\r\nThe qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.\r\n\r\nWe recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.\r\n\r\n(CVE-2023-3611)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: cls_fw component can be exploited to achieve local privilege escalation.\r\n\r\nIf tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\r\n\r\nWe recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.\r\n\r\n(CVE-2023-3776)\r\n\r\nAn issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context\u0026apos;s name_len is larger than the tag length.(CVE-2023-38426)\r\n\r\nAn issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.(CVE-2023-38428)","status":"published","published":"2023-08-06T11:05:55Z","modified":"2026-08-18T01:17:46.444660102Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1471","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\r\n\r\nIn multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\r\n\r\n(CVE-2023-21255)\r\n\r\n(CVE-2023-2163)\r\n\r\nA flaw was found in the Linux kernel\u0026apos;s ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.(CVE-2023-32248)\r\n\r\nVUL-0: CVE-2023-32255: kernel: Linux Kernel ksmbd Session Setup Memory Leak Denial-of-Service Vulnerability(CVE-2023-32255)\r\n\r\nA use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This flaw allows an attacker with local user access to cause a system crash or leak internal kernel information.(CVE-2023-3567)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\r\n\r\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\r\n\r\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.\r\n\r\n(CVE-2023-3609)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\r\n\r\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\r\n\r\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.\r\n\r\n(CVE-2023-3610)\r\n\r\nAn out-of-bounds write vulnerability in the Linux kernel\u0026apos;s net/sched: sch_qfq component can be exploited to achieve local privilege escalation.\r\n\r\nThe qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.\r\n\r\nWe recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.\r\n\r\n(CVE-2023-3611)\r\n\r\nA use-after-free vulnerability in the Linux kernel\u0026apos;s net/sched: cls_fw component can be exploited to achieve local privilege escalation.\r\n\r\nIf tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\r\n\r\nWe recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.\r\n\r\n(CVE-2023-3776)\r\n\r\nAn out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.(CVE-2023-3812)\r\n\r\nAn issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context\u0026apos;s name_len is larger than the tag length.(CVE-2023-38426)\r\n\r\nAn issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.(CVE-2023-38428)","status":"published","published":"2023-08-06T11:05:56Z","modified":"2026-08-18T01:17:46.97890004Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:5069","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-16T12:38:40Z","modified":"2026-10-17T10:02:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5091","title":"Red Hat Security Advisory: kernel-rt security and bug fix update","status":"published","published":"2024-09-16T12:38:29Z","modified":"2026-10-15T10:04:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5093","title":"Red Hat Security Advisory: kpatch-patch security update","status":"published","published":"2024-09-16T12:38:49Z","modified":"2026-10-15T10:04:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"UBUNTU-CVE-2023-3610","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.","status":"published","published":"2023-07-21T21:15:00Z","modified":"2026-10-08T12:51:05.638521041Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"ALSA-2023:5069","title":"Important: kernel security, bug fix, and enhancement update","description":"The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nThe following packages have been upgraded to a later upstream version: kernel (5.14.0).\n\nSecurity Fix(es):\n\n* kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390)\n* kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610)\n* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)\n* kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)\n* kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147)\n* kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248)\n* kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)\n* kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637)\n* hw: amd: Cross-Process Information Leak (CVE-2023-20593)\n* kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [Intel 9.3 BUG] [SPR][EMR][FHF] ACPI: Fix system hang during S3 wakeup (BZ#2218026)\n* [Dell 9.2 BUG] Monitor lost after replug WD19TBS to SUT port wiith VGA/DVI to type-C dongle (BZ#2219463)\n* rtmutex: Incorrect waiter woken when requeueing in rt_mutex_adjust_prio_chain() (BZ#2222121)\n* AlmaLinux AWS ARM Instability During Microshift e2e tests (BZ#2223310)\n* AlmaLinux 9.x updates for SEV-SNP guest support (BZ#2224587)\n* Lock state corruption from nested rtmutex blocking in blk_flush_plug() (BZ#2225623)\n* bpf_jit_limit hit again - copy_seccomp() fix (BZ#2226945)\n* libceph: harden msgr2.1 frame segment length checks (BZ#2227070)\n* Temporary values used for the FIPS integrity test should be zeroized after use (BZ#2227768)\n* Important iavf bug fixes July 2023 (BZ#2228156)\n* [i40e/ice] error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228158)\n* lvconvert --splitcache, --uncache operations getting hung (BZ#2228481)\n* perf: EMR core and uncore PMU support (BZ#2230175)\n* NVIDIA - Grace: Backport i2c: tegra: Set ACPI node as primary fwnode (BZ#2230483)\n* NVIDIA - Grace: Backport i2c: tegra: Fix PEC support for SMBUS block read (BZ#2230488)\n* [Hyper-V][AlmaLinux 9]incomplete fc_transport implementation in storvsc causes null dereference in fc_timed_out() (BZ#2230747)\n* Kernel config option CONFIG_CRYPTO_STATS should be disabled until it is enhanced (BZ#2231850)\n* [AlmaLinux 9][Hyper-V]Excessive hv_storvsc driver logging with srb_status  SRB_STATUS_INTERNAL_ERROR  (0x30) (BZ#2231990)\n* AlmaLinux-9: WARNING: bad unlock balance detected! (BZ#2232213)\n* NVIDIA - Grace: Backport drm/ast patch expected for kernel 6.4 (BZ#2232302)\n* [Lenovo 9.1 bug]   AlmaLinux 9 will hang when \"echo c \u003e /proc/sysrq-trigger\". (BZ#2232700)\n* [AlmaLinux-9] bz2022169 in /kernel/general/process/reg-suit fails on aarch64  (/proc/[pid]/wchan broken) (BZ#2233928)\n\nEnhancement(s):\n\n* [Intel 9.3 FEAT] cpufreq: intel_pstate: Enable HWP IO boost for all servers (BZ#2210270)\n* [Dell 9.3 FEAT] - New MB with AMP Codec Change on Maya Bay (audio driver) (BZ#2218960)\n* [Lenovo 9.3 FEAT] MDRAID - Update to the latest upstream (BZ#2221170)\n* [Intel 9.3 FEAT] [EMR] Add EMR support to uncore-frequency driver (BZ#2230169)","status":"published","published":"2023-09-12T00:00:00Z","modified":"2026-10-29T11:31:30.905004532Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:5091","title":"Important: kernel-rt security and bug fix update","description":"The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390)\n* kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610)\n* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)\n* kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)\n* kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147)\n* kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248)\n* kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)\n* kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637)\n* hw: amd: Cross-Process Information Leak (CVE-2023-20593)\n* kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* kernel-rt: update RT source tree to the latest AlmaLinux-9.2.z3 Batch (BZ#2228482)","status":"published","published":"2023-09-12T00:00:00Z","modified":"2026-10-29T11:31:29.879659021Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"DLA-3512-1","title":"linux-5.10 - security update","status":"published","published":"2023-07-31T00:00:00Z","modified":"2026-03-09T01:19:39.019038Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5461-1","title":"linux - security update","status":"published","published":"2023-07-30T00:00:00Z","modified":"2026-03-09T02:08:44.365839Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"RLSA-2023:5091","title":"Important: kernel-rt security and bug fix update","description":"The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.\n\nSecurity Fix(es):\n\n* kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390)\n\n* kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE (CVE-2023-3610)\n\n* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)\n\n* kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)\n\n* kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free (CVE-2023-4147)\n\n* kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248)\n\n* kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)\n\n* kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637)\n\n* hw: amd: Cross-Process Information Leak (CVE-2023-20593)\n\n* kernel: bypass of shadow stack protection due to a logic error (CVE-2023-21102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* kernel-rt: update RT source tree to the latest Rocky Linux-9.2.z3 Batch (BZ#2228482)","status":"published","published":"2023-09-19T12:09:59.109271Z","modified":"2025-10-09T05:47:20.636234Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:3599-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).\n- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).\n- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).\n- ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes).\n- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).\n- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).\n- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).\n- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).\n- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).\n- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).\n- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).\n- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).\n- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).\n- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).\n- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).\n- ARM: dts: imx6sll: fixup of operating points (git-fixes).\n- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).\n- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).\n- ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes).\n- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).\n- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).\n- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).\n- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).\n- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).\n- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- CONFIG_NVME_VERBOSE_ERRORS=y     gone with a82baa8083b\n- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13  gone with 7e152d55123\n- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.\n- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).\n- Documentation: devices.txt: Remove ttyIOC* (git-fixes).\n- Documentation: devices.txt: Remove ttySIOC* (git-fixes).\n- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).\n- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).\n- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).\n- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).\n- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).\n- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).\n- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).\n- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).\n- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)\n- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).\n- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).\n- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).\n- HID: wacom: remove the battery when the EKR is off (git-fixes).\n- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).\n- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)\n- IB/uverbs: Fix an potential error pointer dereference (git-fixes)\n- Input: exc3000 - properly stop timer on shutdown (git-fixes).\n- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).\n- Kbuild: move to -std=gnu11 (bsc#1214756).\n- PCI/ASPM: Avoid link retraining race (git-fixes).\n- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).\n- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).\n- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).\n- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).\n- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).\n- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).\n- PCI: meson: Remove cast between incompatible function type (git-fixes).\n- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).\n- PCI: microchip: Remove cast between incompatible function type (git-fixes).\n- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).\n- PCI: rockchip: Remove writes to unused registers (git-fixes).\n- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).\n- PCI: tegra194: Fix possible array out of bounds access (git-fixes).\n- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).\n- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)\n- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)\n- RDMA/efa: Fix wrong resources deallocation order (git-fixes)\n- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)\n- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- RDMA/hns: Fix port active speed (git-fixes)\n- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)\n- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)\n- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)\n- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- RDMA/siw: Balance the reference of cep-\u003ekref in the error path (git-fixes)\n- RDMA/siw: Correct wrong debug message (git-fixes)\n- RDMA/umem: Set iova in ODP flow (git-fixes)\n- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.\n- Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes)\n- Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes).\n- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: Compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).\n- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: Do not increase MTU when set by user (git-fixes).\n- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).\n- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).\n- batman-adv: Trigger events for auto adjusted MTU (git-fixes).\n- bnx2x: fix page fault following EEH recovery (bsc#1214299).\n- bpf: Disable preemption in bpf_event_output (git-fixes).\n- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).\n- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: Fix cast to enum warning (git-fixes).\n- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: Modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).\n- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).\n- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).\n- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).\n- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).\n- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).\n- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).\n- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).\n- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).\n- define more Hyper-V related constants (bsc#1206453).\n- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: Fix docs syntax (git-fixes).\n- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).\n- docs/process/howto: Replace C89 with C11 (bsc#1214756).\n- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: Fix hex printing of signed values (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: Apply 60us prefetch for DCFCLK \u0026lt;= 300Mhz (git-fixes).\n- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).\n- drm/amd/display: Do not set drr on pipe commit (git-fixes).\n- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).\n- drm/amd/display: Ensure that planes are in the same order (git-fixes).\n- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).\n- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).\n- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).\n- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).\n- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).\n- drm/amd/display: disable RCO for DCN314 (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).\n- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/display: trigger timing sync only if TG is running (git-fixes).\n- drm/amd/pm/smu7: move variables to where they are used (git-fixes).\n- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).\n- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).\n- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).\n- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).\n- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: Remove unnecessary domain argument (git-fixes).\n- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/amdgpu: add S/G display parameter (git-fixes).\n- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).\n- drm/amdgpu: fix memory leak in mes self test (git-fixes).\n- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).\n- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).\n- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: Fix DRAM init on AST2200 (git-fixes).\n- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).\n- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).\n- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active MMU context (git-fixes).\n- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).\n- drm/i915/sdvo: fix panel_type initialization (git-fixes).\n- drm/i915: Fix premature release of request's reusable memory (git-fixes).\n- drm/mediatek: Fix dereference before null check (git-fixes).\n- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).\n- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).\n- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).\n- drm/msm/mdp5: Do not leak some plane state (git-fixes).\n- drm/msm: Update dev core dump to not print backwards (git-fixes).\n- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).\n- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).\n- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).\n- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix UAF on handle creation (git-fixes).\n- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).\n- drm/rockchip: Do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: Reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/stm: ltdc: fix late dereference check (git-fixes).\n- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned BOs for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: Fix shader stage validation (git-fixes).\n- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).\n- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).\n- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: Fix typos in comments (jsc#PED-5738).\n- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).\n- e1000: switch to napi_build_skb() (jsc#PED-5738).\n- e1000: switch to napi_consume_skb() (jsc#PED-5738).\n- exfat: fix unexpected EOF while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).\n- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: Improve performance of sys_imageblit() (git-fixes).\n- fbdev: Update fbdev source file paths (git-fixes).\n- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: Fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).\n- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).\n- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).\n- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).\n- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).\n- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).\n- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).\n- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).\n- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: Delete error messages for failed memory allocations (git-fixes).\n- i2c: Improve size determinations (git-fixes).\n- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: designware: Correct length byte validation logic (git-fixes).\n- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).\n- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: nomadik: Remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: Remove unnecessary goto label (git-fixes).\n- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).\n- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for FDIR filters (git-fixes).\n- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).\n- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).\n- ice: Fix max_rate check while configuring TX rate limits (git-fixes).\n- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).\n- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).\n- iio: adc: stx104: Implement and utilize register structures (git-fixes).\n- iio: adc: stx104: Utilize iomap interface (git-fixes).\n- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#PED-5738).\n- intel: remove unused macros (jsc#PED-5738).\n- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).\n- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).\n- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).\n- iommu/amd: Fix compile warning in init code (git-fixes).\n- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).\n- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: Fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).\n- iommu/iova: Fix module config properly (git-fixes).\n- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).\n- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).\n- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).\n- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).\n- iommu/mediatek: Use component_match_add (git-fixes).\n- iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes).\n- iommu/omap: Fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/s390: Fix duplicate domain attachments (git-fixes).\n- iommu/sun50i: Consider all fault sources for reset (git-fixes).\n- iommu/sun50i: Fix R/W permission check (git-fixes).\n- iommu/sun50i: Fix flush size (git-fixes).\n- iommu/sun50i: Fix reset release (git-fixes).\n- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).\n- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).\n- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).\n- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).\n- ipmi:ssif: Add check for kstrdup (git-fixes).\n- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: Ignore newly added SRSO mitigation functions\n- kabi: Allow extra bugsints (bsc#1213927).\n- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).\n- leds: multicolor: Use rounded division when calculating color components (git-fixes).\n- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: Fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: Remove redundant if statement (git-fixes).\n- media: i2c: ccs: Check rules is non-NULL (git-fixes).\n- media: i2c: rdacm21: Fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: Fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).\n- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: Fix vflip / hflip set functions (git-fixes).\n- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).\n- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for H.264 (git-fixes).\n- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).\n- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).\n- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).\n- mkspec: Allow unsupported KMPs (bsc#1214386)\n- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).\n- mmc: block: Fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).\n- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).\n- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).\n- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).\n- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)\n- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).\n- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: Fix SRSO mess (git-fixes).\n- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).\n- objtool: Union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.\n- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- pinctrl: amd: Mask wake bits on probe again (git-fixes).\n- pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: Fix reference leak (git-fixes).\n- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).\n- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).\n- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.\n- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: Check start of empty przs during init (git-fixes).\n- pwm: Add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).\n- qed: Fix scheduling in a tasklet while getting stats (git-fixes).\n- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).\n- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: Fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpm/mkspec-dtb: support for nested subdirs.\n- rpmsg: glink: Add check for kstrdup (git-fixes).\n- rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension).\n- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).\n- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: Use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).\n- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).\n- scsi: 53c700: Check that command slot is not NULL (git-fixes).\n- scsi: RDMA/srp: Fix residual handling (git-fixes)\n- scsi: bsg: Increase number of devices (bsc#1210048).\n- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).\n- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).\n- scsi: qedf: Fix NULL dereference in error handling (git-fixes).\n- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: scsi_debug: Remove dead code (git-fixes).\n- scsi: sg: Increase number of devices (bsc#1210048).\n- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).\n- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: storvsc: Always set no_report_opcodes (git-fixes).\n- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).\n- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).\n- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).\n- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).\n- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- selftests/futex: Order calls to futex_lock_pi (git-fixes).\n- selftests/harness: Actually report SKIP for signal tests (git-fixes).\n- selftests/resctrl: Close perf value read fd on errors (git-fixes).\n- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: Switch off timeout (git-fixes).\n- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).\n- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: Fix DMA buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while NIC is resetting (git-fixes).\n- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).\n- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: Add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: Provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: Rename del_timer() to timer_delete() (bsc#1213970).\n- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: Replace BUG_ON()s (bsc#1213970).\n- timers: Silently ignore timers with a NULL function (bsc#1213970).\n- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: Update kernel-doc for various functions (bsc#1213970).\n- timers: Use del_timer_sync() even on UP (bsc#1213970).\n- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: Fix not to count error code to total length (git-fixes).\n- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: Fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).\n- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).\n- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).\n- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: Fix typos in gadget.c (git-fixes).\n- usb: dwc3: Properly handle processing of pending events (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).\n- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).\n- usb: serial: option: add Quectel EC200A module support (git-fixes).\n- usb: serial: option: support Quectel EM060K_128 (git-fixes).\n- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).\n- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).\n- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: Fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).\n- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).\n- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).\n- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).\n- x86/alternative: Make custom return thunk unconditional (git-fixes).\n- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).\n- x86/cpu: Clean up SRSO return thunk mess (git-fixes).\n- x86/cpu: Cleanup the untrain mess (git-fixes).\n- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: Rename original retbleed methods (git-fixes).\n- x86/cpu: Rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).\n- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).\n- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).\n- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).\n- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).\n- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).\n- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).\n- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).\n- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).\n- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).\n- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).\n- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).\n- x86/speculation: Add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).\n- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).\n- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: Explain the untraining sequences a bit more (git-fixes).\n- x86/srso: Fix build breakage with the LLVM linker (git-fixes).\n- x86/srso: Fix return thunks in generated code (git-fixes).\n- x86/static_call: Fix __static_call_fixup() (git-fixes).\n- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).\n- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).\n- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n","status":"published","published":"2023-09-21T10:18:23Z","modified":"2026-02-04T04:31:39.589628Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3599-2","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).\n- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).\n- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).\n- ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes).\n- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).\n- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).\n- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).\n- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).\n- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).\n- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).\n- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).\n- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).\n- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).\n- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).\n- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).\n- ARM: dts: imx6sll: fixup of operating points (git-fixes).\n- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).\n- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).\n- ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes).\n- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).\n- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).\n- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).\n- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).\n- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).\n- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- CONFIG_NVME_VERBOSE_ERRORS=y     gone with a82baa8083b\n- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13  gone with 7e152d55123\n- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.\n- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).\n- Documentation: devices.txt: Remove ttyIOC* (git-fixes).\n- Documentation: devices.txt: Remove ttySIOC* (git-fixes).\n- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).\n- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).\n- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).\n- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).\n- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).\n- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).\n- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).\n- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).\n- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)\n- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).\n- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).\n- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).\n- HID: wacom: remove the battery when the EKR is off (git-fixes).\n- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).\n- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)\n- IB/uverbs: Fix an potential error pointer dereference (git-fixes)\n- Input: exc3000 - properly stop timer on shutdown (git-fixes).\n- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).\n- Kbuild: move to -std=gnu11 (bsc#1214756).\n- PCI/ASPM: Avoid link retraining race (git-fixes).\n- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).\n- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).\n- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).\n- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).\n- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).\n- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).\n- PCI: meson: Remove cast between incompatible function type (git-fixes).\n- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).\n- PCI: microchip: Remove cast between incompatible function type (git-fixes).\n- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).\n- PCI: rockchip: Remove writes to unused registers (git-fixes).\n- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).\n- PCI: tegra194: Fix possible array out of bounds access (git-fixes).\n- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).\n- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)\n- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)\n- RDMA/efa: Fix wrong resources deallocation order (git-fixes)\n- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)\n- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- RDMA/hns: Fix port active speed (git-fixes)\n- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)\n- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)\n- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)\n- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- RDMA/siw: Balance the reference of cep-\u003ekref in the error path (git-fixes)\n- RDMA/siw: Correct wrong debug message (git-fixes)\n- RDMA/umem: Set iova in ODP flow (git-fixes)\n- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.\n- Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes)\n- Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes).\n- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: Compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).\n- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: Do not increase MTU when set by user (git-fixes).\n- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).\n- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).\n- batman-adv: Trigger events for auto adjusted MTU (git-fixes).\n- bnx2x: fix page fault following EEH recovery (bsc#1214299).\n- bpf: Disable preemption in bpf_event_output (git-fixes).\n- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).\n- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: Fix cast to enum warning (git-fixes).\n- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: Modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).\n- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).\n- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).\n- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).\n- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).\n- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).\n- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).\n- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).\n- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).\n- define more Hyper-V related constants (bsc#1206453).\n- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: Fix docs syntax (git-fixes).\n- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).\n- docs/process/howto: Replace C89 with C11 (bsc#1214756).\n- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: Fix hex printing of signed values (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: Apply 60us prefetch for DCFCLK \u0026lt;= 300Mhz (git-fixes).\n- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).\n- drm/amd/display: Do not set drr on pipe commit (git-fixes).\n- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).\n- drm/amd/display: Ensure that planes are in the same order (git-fixes).\n- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).\n- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).\n- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).\n- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).\n- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).\n- drm/amd/display: disable RCO for DCN314 (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).\n- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/display: trigger timing sync only if TG is running (git-fixes).\n- drm/amd/pm/smu7: move variables to where they are used (git-fixes).\n- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).\n- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).\n- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).\n- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).\n- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: Remove unnecessary domain argument (git-fixes).\n- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/amdgpu: add S/G display parameter (git-fixes).\n- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).\n- drm/amdgpu: fix memory leak in mes self test (git-fixes).\n- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).\n- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).\n- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: Fix DRAM init on AST2200 (git-fixes).\n- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).\n- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).\n- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active MMU context (git-fixes).\n- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).\n- drm/i915/sdvo: fix panel_type initialization (git-fixes).\n- drm/i915: Fix premature release of request's reusable memory (git-fixes).\n- drm/mediatek: Fix dereference before null check (git-fixes).\n- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).\n- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).\n- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).\n- drm/msm/mdp5: Do not leak some plane state (git-fixes).\n- drm/msm: Update dev core dump to not print backwards (git-fixes).\n- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).\n- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).\n- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).\n- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix UAF on handle creation (git-fixes).\n- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).\n- drm/rockchip: Do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: Reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/stm: ltdc: fix late dereference check (git-fixes).\n- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned BOs for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: Fix shader stage validation (git-fixes).\n- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).\n- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).\n- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: Fix typos in comments (jsc#PED-5738).\n- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).\n- e1000: switch to napi_build_skb() (jsc#PED-5738).\n- e1000: switch to napi_consume_skb() (jsc#PED-5738).\n- exfat: fix unexpected EOF while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).\n- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: Improve performance of sys_imageblit() (git-fixes).\n- fbdev: Update fbdev source file paths (git-fixes).\n- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: Fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).\n- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).\n- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).\n- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).\n- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).\n- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).\n- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).\n- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).\n- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: Delete error messages for failed memory allocations (git-fixes).\n- i2c: Improve size determinations (git-fixes).\n- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: designware: Correct length byte validation logic (git-fixes).\n- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).\n- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: nomadik: Remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: Remove unnecessary goto label (git-fixes).\n- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).\n- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for FDIR filters (git-fixes).\n- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).\n- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).\n- ice: Fix max_rate check while configuring TX rate limits (git-fixes).\n- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).\n- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).\n- iio: adc: stx104: Implement and utilize register structures (git-fixes).\n- iio: adc: stx104: Utilize iomap interface (git-fixes).\n- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#PED-5738).\n- intel: remove unused macros (jsc#PED-5738).\n- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).\n- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).\n- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).\n- iommu/amd: Fix compile warning in init code (git-fixes).\n- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).\n- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: Fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).\n- iommu/iova: Fix module config properly (git-fixes).\n- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).\n- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).\n- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).\n- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).\n- iommu/mediatek: Use component_match_add (git-fixes).\n- iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes).\n- iommu/omap: Fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/s390: Fix duplicate domain attachments (git-fixes).\n- iommu/sun50i: Consider all fault sources for reset (git-fixes).\n- iommu/sun50i: Fix R/W permission check (git-fixes).\n- iommu/sun50i: Fix flush size (git-fixes).\n- iommu/sun50i: Fix reset release (git-fixes).\n- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).\n- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).\n- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).\n- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).\n- ipmi:ssif: Add check for kstrdup (git-fixes).\n- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: Ignore newly added SRSO mitigation functions\n- kabi: Allow extra bugsints (bsc#1213927).\n- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).\n- leds: multicolor: Use rounded division when calculating color components (git-fixes).\n- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: Fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: Remove redundant if statement (git-fixes).\n- media: i2c: ccs: Check rules is non-NULL (git-fixes).\n- media: i2c: rdacm21: Fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: Fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).\n- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: Fix vflip / hflip set functions (git-fixes).\n- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).\n- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for H.264 (git-fixes).\n- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).\n- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).\n- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).\n- mkspec: Allow unsupported KMPs (bsc#1214386)\n- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).\n- mmc: block: Fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).\n- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).\n- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).\n- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).\n- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)\n- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).\n- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: Fix SRSO mess (git-fixes).\n- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).\n- objtool: Union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.\n- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- pinctrl: amd: Mask wake bits on probe again (git-fixes).\n- pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: Fix reference leak (git-fixes).\n- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).\n- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).\n- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.\n- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: Check start of empty przs during init (git-fixes).\n- pwm: Add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).\n- qed: Fix scheduling in a tasklet while getting stats (git-fixes).\n- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).\n- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: Fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpm/mkspec-dtb: support for nested subdirs.\n- rpmsg: glink: Add check for kstrdup (git-fixes).\n- rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension).\n- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).\n- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: Use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).\n- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).\n- scsi: 53c700: Check that command slot is not NULL (git-fixes).\n- scsi: RDMA/srp: Fix residual handling (git-fixes)\n- scsi: bsg: Increase number of devices (bsc#1210048).\n- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).\n- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).\n- scsi: qedf: Fix NULL dereference in error handling (git-fixes).\n- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: scsi_debug: Remove dead code (git-fixes).\n- scsi: sg: Increase number of devices (bsc#1210048).\n- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).\n- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: storvsc: Always set no_report_opcodes (git-fixes).\n- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).\n- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).\n- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).\n- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).\n- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- selftests/futex: Order calls to futex_lock_pi (git-fixes).\n- selftests/harness: Actually report SKIP for signal tests (git-fixes).\n- selftests/resctrl: Close perf value read fd on errors (git-fixes).\n- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: Switch off timeout (git-fixes).\n- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).\n- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: Fix DMA buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while NIC is resetting (git-fixes).\n- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).\n- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: Add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: Provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: Rename del_timer() to timer_delete() (bsc#1213970).\n- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: Replace BUG_ON()s (bsc#1213970).\n- timers: Silently ignore timers with a NULL function (bsc#1213970).\n- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: Update kernel-doc for various functions (bsc#1213970).\n- timers: Use del_timer_sync() even on UP (bsc#1213970).\n- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: Fix not to count error code to total length (git-fixes).\n- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: Fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).\n- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).\n- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).\n- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: Fix typos in gadget.c (git-fixes).\n- usb: dwc3: Properly handle processing of pending events (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).\n- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).\n- usb: serial: option: add Quectel EC200A module support (git-fixes).\n- usb: serial: option: support Quectel EM060K_128 (git-fixes).\n- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).\n- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).\n- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: Fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).\n- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).\n- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).\n- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).\n- x86/alternative: Make custom return thunk unconditional (git-fixes).\n- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).\n- x86/cpu: Clean up SRSO return thunk mess (git-fixes).\n- x86/cpu: Cleanup the untrain mess (git-fixes).\n- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: Rename original retbleed methods (git-fixes).\n- x86/cpu: Rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).\n- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).\n- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).\n- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).\n- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).\n- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).\n- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).\n- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).\n- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).\n- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).\n- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).\n- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).\n- x86/speculation: Add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).\n- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).\n- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: Explain the untraining sequences a bit more (git-fixes).\n- x86/srso: Fix build breakage with the LLVM linker (git-fixes).\n- x86/srso: Fix return thunks in generated code (git-fixes).\n- x86/static_call: Fix __static_call_fixup() (git-fixes).\n- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).\n- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).\n- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n","status":"published","published":"2023-09-21T10:18:23Z","modified":"2026-02-04T04:12:14.350931Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3600-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n\nThe following non-security bugs were fixed:\n\n- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).\n- acpi: processor: perflib: use the 'no limit' frequency qos (git-fixes).\n- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).\n- alsa: ac97: fix possible error value of *rac97 (git-fixes).\n- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).\n- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).\n- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).\n- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).\n- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).\n- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).\n- alsa: usb-audio: fix init call orders for uac1 (git-fixes).\n- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).\n- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).\n- arm: dts: imx6sll: fixup of operating points (git-fixes).\n- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- asoc: lower 'no backend dais enabled for ... port' log severity (git-fixes).\n- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).\n- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).\n- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).\n- asoc: tegra: fix sfc conversion for few rates (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).\n- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: do not increase mtu when set by user (git-fixes).\n- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: fix tt global entry leak when client roamed back (git-fixes).\n- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).\n- batman-adv: trigger events for auto adjusted mtu (git-fixes).\n- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).\n- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- bluetooth: fix potential use-after-free when clear keys (git-fixes).\n- bluetooth: l2cap: fix use-after-free (git-fixes).\n- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).\n- bnx2x: fix page fault following eeh recovery (bsc#1214299).\n- bpf: disable preemption in bpf_event_output (git-fixes).\n- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: fix cast to enum warning (git-fixes).\n- bus: ti-sysc: flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on mds stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- config_nvme_verbose_errors=y     gone with a82baa8083b\n- config_printk_safe_log_buf_shift=13  gone with 7e152d55123\n- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).\n- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).\n- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).\n- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: fix docs syntax (git-fixes).\n- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).\n- docs/process/howto: replace c89 with c11 (bsc#1214756).\n- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: fix hex printing of signed values (git-fixes).\n- documentation: devices.txt: fix minors for ttycpm* (git-fixes).\n- documentation: devices.txt: remove ttyioc* (git-fixes).\n- documentation: devices.txt: remove ttysioc* (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).\n- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).\n- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: fix dram init on ast2200 (git-fixes).\n- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: fix -wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active mmu context (git-fixes).\n- drm/mediatek: fix dereference before null check (git-fixes).\n- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).\n- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/mdp5: do not leak some plane state (git-fixes).\n- drm/msm: update dev core dump to not print backwards (git-fixes).\n- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).\n- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix uaf on handle creation (git-fixes).\n- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).\n- drm/rockchip: do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned bos for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: fix shader stage validation (git-fixes).\n- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).\n- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).\n- drop cfg80211 lock fix patches that caused a regression (bsc#1213757) \n- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) \n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: fix typos in comments (jsc#ped-5738).\n- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).\n- e1000: switch to napi_build_skb() (jsc#ped-5738).\n- e1000: switch to napi_consume_skb() (jsc#ped-5738).\n- enable analog devices industrial ethernet phy driver (jsc#ped-4759)\n- exfat: fix unexpected eof while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).\n- fbdev: fix potential oob read in fast_imageblit() (git-fixes).\n- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: improve performance of sys_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).\n- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).\n- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).\n- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).\n- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).\n- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).\n- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).\n- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).\n- hid: wacom: remove the battery when the ekr is off (git-fixes).\n- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).\n- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).\n- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: delete error messages for failed memory allocations (git-fixes).\n- i2c: designware: correct length byte validation logic (git-fixes).\n- i2c: designware: handle invalid smbus block data response length value (git-fixes).\n- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: improve size determinations (git-fixes).\n- i2c: nomadik: remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: remove unnecessary goto label (git-fixes).\n- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).\n- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for fdir filters (git-fixes).\n- ib/hfi1: fix possible panic during hotplug remove (git-fixes)\n- ib/uverbs: fix an potential error pointer dereference (git-fixes)\n- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).\n- ice: fix max_rate check while configuring tx rate limits (git-fixes).\n- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).\n- ice: fix rdma vsi removal during queue rebuild (git-fixes).\n- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).\n- iio: adc: stx104: implement and utilize register structures (git-fixes).\n- iio: adc: stx104: utilize iomap interface (git-fixes).\n- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).\n- input: exc3000 - properly stop timer on shutdown (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#ped-5738).\n- intel: remove unused macros (jsc#ped-5738).\n- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).\n- iommu/amd: fix compile warning in init code (git-fixes).\n- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: initialize dart_streams_enable (git-fixes).\n- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).\n- iommu/iova: fix module config properly (git-fixes).\n- iommu/omap: fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/sun50i: consider all fault sources for reset (git-fixes).\n- iommu/sun50i: fix flush size (git-fixes).\n- iommu/sun50i: fix r/w permission check (git-fixes).\n- iommu/sun50i: fix reset release (git-fixes).\n- iommu/sun50i: implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: remove iommu_domain_identity (git-fixes).\n- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).\n- iommu/vt-d: check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).\n- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).\n- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).\n- ipmi:ssif: add check for kstrdup (git-fixes).\n- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: ignore newly added srso mitigation functions\n- kabi: allow extra bugsints (bsc#1213927).\n- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).\n- kbuild: move to -std=gnu11 (bsc#1214756).\n- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).\n- leds: multicolor: use rounded division when calculating color components (git-fixes).\n- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order max_order (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: remove redundant if statement (git-fixes).\n- media: i2c: ccs: check rules is non-null (git-fixes).\n- media: i2c: rdacm21: fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).\n- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: fix vflip / hflip set functions (git-fixes).\n- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).\n- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for h.264 (git-fixes).\n- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).\n- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).\n- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).\n- mkspec: allow unsupported kmps (bsc#1214386)\n- mlxsw: pci: add shutdown method in pci driver (git-fixes).\n- mmc: block: fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- move upstreamed powerpc patches into sorted section\n- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: check bus width while setting qe bit (git-fixes).\n- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).\n- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).\n- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).\n- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).\n- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: fix srso mess (git-fixes).\n- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).\n- objtool: union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.\n- pci/aspm: avoid link retraining race (git-fixes).\n- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).\n- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).\n- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).\n- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).\n- pci: meson: remove cast between incompatible function type (git-fixes).\n- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).\n- pci: microchip: remove cast between incompatible function type (git-fixes).\n- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).\n- pci: rockchip: remove writes to unused registers (git-fixes).\n- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).\n- pci: tegra194: fix possible array out of bounds access (git-fixes).\n- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: fix reference leak (git-fixes).\n- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).\n- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).\n- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106). \n- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).\n- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: check start of empty przs during init (git-fixes).\n- pwm: add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).\n- pwm: meson: simplify duplicated per-channel tracking (git-fixes).\n- qed: fix scheduling in a tasklet while getting stats (git-fixes).\n- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)\n- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)\n- rdma/efa: fix wrong resources deallocation order (git-fixes)\n- rdma/hns: fix cq and qp cache affinity (git-fixes)\n- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- rdma/hns: fix port active speed (git-fixes)\n- rdma/irdma: prevent zero-length stag registration (git-fixes)\n- rdma/irdma: replace one-element array with flexible-array member (git-fixes)\n- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)\n- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- rdma/siw: balance the reference of cep-\u003ekref in the error path (git-fixes)\n- rdma/siw: correct wrong debug message (git-fixes)\n- rdma/umem: set iova in odp flow (git-fixes)\n- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.\n- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).\n- revert 'ib/isert: fix incorrect release of isert connection' (git-fixes)\n- revert 'tracing: add '(fault)' name injection to kernel probes' (git-fixes).\n- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpmsg: glink: add check for kstrdup (git-fixes).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).\n- scsi: bsg: increase number of devices (bsc#1210048).\n- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: rdma/srp: fix residual handling (git-fixes)\n- scsi: sg: increase number of devices (bsc#1210048).\n- scsi: storvsc: always set no_report_opcodes (git-fixes).\n- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).\n- scsi: storvsc: handle srb status value 0x30 (git-fixes).\n- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).\n- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).\n- selftests/futex: order calls to futex_lock_pi (git-fixes).\n- selftests/harness: actually report skip for signal tests (git-fixes).\n- selftests/resctrl: close perf value read fd on errors (git-fixes).\n- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).\n- selftests: forwarding: skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: switch off timeout (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_flower: relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).\n- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: fix dma buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while nic is resetting (git-fixes).\n- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).\n- smb: client: fix -wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: rename del_timer() to timer_delete() (bsc#1213970).\n- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: replace bug_on()s (bsc#1213970).\n- timers: silently ignore timers with a null function (bsc#1213970).\n- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: update kernel-doc for various functions (bsc#1213970).\n- timers: use del_timer_sync() even on up (bsc#1213970).\n- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: fix not to count error code to total length (git-fixes).\n- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).\n- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).\n- ubifs: fix memleak when insert_old_idx() failed (git-fixes).\n- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: fix typos in gadget.c (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: dwc3: properly handle processing of pending events (git-fixes).\n- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).\n- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for focusrite scarlett (git-fixes).\n- usb: serial: option: add quectel ec200a module support (git-fixes).\n- usb: serial: option: support quectel em060k_128 (git-fixes).\n- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).\n- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).\n- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).\n- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/alternative: make custom return thunk unconditional (git-fixes).\n- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).\n- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).\n- x86/cpu: clean up srso return thunk mess (git-fixes).\n- x86/cpu: cleanup the untrain mess (git-fixes).\n- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: rename original retbleed methods (git-fixes).\n- x86/cpu: rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).\n- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).\n- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).\n- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).\n- x86/speculation: add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).\n- x86/srso: correct the mitigation status when smt is disabled (git-fixes).\n- x86/srso: disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: explain the untraining sequences a bit more (git-fixes).\n- x86/srso: fix build breakage with the llvm linker (git-fixes).\n- x86/srso: fix return thunks in generated code (git-fixes).\n- x86/static_call: fix __static_call_fixup() (git-fixes).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n","status":"published","published":"2023-09-21T10:18:09Z","modified":"2026-02-04T03:12:42.577668Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3600-2","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n\nThe following non-security bugs were fixed:\n\n- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).\n- acpi: processor: perflib: use the 'no limit' frequency qos (git-fixes).\n- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).\n- alsa: ac97: fix possible error value of *rac97 (git-fixes).\n- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).\n- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).\n- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).\n- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).\n- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).\n- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).\n- alsa: usb-audio: fix init call orders for uac1 (git-fixes).\n- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).\n- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).\n- arm: dts: imx6sll: fixup of operating points (git-fixes).\n- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- asoc: lower 'no backend dais enabled for ... port' log severity (git-fixes).\n- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).\n- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).\n- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).\n- asoc: tegra: fix sfc conversion for few rates (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).\n- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: do not increase mtu when set by user (git-fixes).\n- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: fix tt global entry leak when client roamed back (git-fixes).\n- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).\n- batman-adv: trigger events for auto adjusted mtu (git-fixes).\n- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).\n- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- bluetooth: fix potential use-after-free when clear keys (git-fixes).\n- bluetooth: l2cap: fix use-after-free (git-fixes).\n- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).\n- bnx2x: fix page fault following eeh recovery (bsc#1214299).\n- bpf: disable preemption in bpf_event_output (git-fixes).\n- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: fix cast to enum warning (git-fixes).\n- bus: ti-sysc: flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on mds stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- config_nvme_verbose_errors=y     gone with a82baa8083b\n- config_printk_safe_log_buf_shift=13  gone with 7e152d55123\n- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).\n- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).\n- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).\n- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: fix docs syntax (git-fixes).\n- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).\n- docs/process/howto: replace c89 with c11 (bsc#1214756).\n- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: fix hex printing of signed values (git-fixes).\n- documentation: devices.txt: fix minors for ttycpm* (git-fixes).\n- documentation: devices.txt: remove ttyioc* (git-fixes).\n- documentation: devices.txt: remove ttysioc* (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).\n- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).\n- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: fix dram init on ast2200 (git-fixes).\n- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: fix -wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active mmu context (git-fixes).\n- drm/mediatek: fix dereference before null check (git-fixes).\n- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).\n- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/mdp5: do not leak some plane state (git-fixes).\n- drm/msm: update dev core dump to not print backwards (git-fixes).\n- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).\n- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix uaf on handle creation (git-fixes).\n- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).\n- drm/rockchip: do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned bos for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: fix shader stage validation (git-fixes).\n- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).\n- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).\n- drop cfg80211 lock fix patches that caused a regression (bsc#1213757) \n- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) \n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: fix typos in comments (jsc#ped-5738).\n- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).\n- e1000: switch to napi_build_skb() (jsc#ped-5738).\n- e1000: switch to napi_consume_skb() (jsc#ped-5738).\n- enable analog devices industrial ethernet phy driver (jsc#ped-4759)\n- exfat: fix unexpected eof while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).\n- fbdev: fix potential oob read in fast_imageblit() (git-fixes).\n- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: improve performance of sys_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).\n- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).\n- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).\n- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).\n- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).\n- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).\n- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).\n- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).\n- hid: wacom: remove the battery when the ekr is off (git-fixes).\n- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).\n- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).\n- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: delete error messages for failed memory allocations (git-fixes).\n- i2c: designware: correct length byte validation logic (git-fixes).\n- i2c: designware: handle invalid smbus block data response length value (git-fixes).\n- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: improve size determinations (git-fixes).\n- i2c: nomadik: remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: remove unnecessary goto label (git-fixes).\n- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).\n- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for fdir filters (git-fixes).\n- ib/hfi1: fix possible panic during hotplug remove (git-fixes)\n- ib/uverbs: fix an potential error pointer dereference (git-fixes)\n- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).\n- ice: fix max_rate check while configuring tx rate limits (git-fixes).\n- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).\n- ice: fix rdma vsi removal during queue rebuild (git-fixes).\n- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).\n- iio: adc: stx104: implement and utilize register structures (git-fixes).\n- iio: adc: stx104: utilize iomap interface (git-fixes).\n- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).\n- input: exc3000 - properly stop timer on shutdown (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#ped-5738).\n- intel: remove unused macros (jsc#ped-5738).\n- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).\n- iommu/amd: fix compile warning in init code (git-fixes).\n- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: initialize dart_streams_enable (git-fixes).\n- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).\n- iommu/iova: fix module config properly (git-fixes).\n- iommu/omap: fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/sun50i: consider all fault sources for reset (git-fixes).\n- iommu/sun50i: fix flush size (git-fixes).\n- iommu/sun50i: fix r/w permission check (git-fixes).\n- iommu/sun50i: fix reset release (git-fixes).\n- iommu/sun50i: implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: remove iommu_domain_identity (git-fixes).\n- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).\n- iommu/vt-d: check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).\n- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).\n- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).\n- ipmi:ssif: add check for kstrdup (git-fixes).\n- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: ignore newly added srso mitigation functions\n- kabi: allow extra bugsints (bsc#1213927).\n- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).\n- kbuild: move to -std=gnu11 (bsc#1214756).\n- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).\n- leds: multicolor: use rounded division when calculating color components (git-fixes).\n- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order max_order (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: remove redundant if statement (git-fixes).\n- media: i2c: ccs: check rules is non-null (git-fixes).\n- media: i2c: rdacm21: fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).\n- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: fix vflip / hflip set functions (git-fixes).\n- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).\n- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for h.264 (git-fixes).\n- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).\n- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).\n- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).\n- mkspec: allow unsupported kmps (bsc#1214386)\n- mlxsw: pci: add shutdown method in pci driver (git-fixes).\n- mmc: block: fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- move upstreamed powerpc patches into sorted section\n- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: check bus width while setting qe bit (git-fixes).\n- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).\n- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).\n- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).\n- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).\n- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: fix srso mess (git-fixes).\n- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).\n- objtool: union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.\n- pci/aspm: avoid link retraining race (git-fixes).\n- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).\n- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).\n- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).\n- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).\n- pci: meson: remove cast between incompatible function type (git-fixes).\n- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).\n- pci: microchip: remove cast between incompatible function type (git-fixes).\n- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).\n- pci: rockchip: remove writes to unused registers (git-fixes).\n- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).\n- pci: tegra194: fix possible array out of bounds access (git-fixes).\n- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: fix reference leak (git-fixes).\n- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).\n- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).\n- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106). \n- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).\n- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: check start of empty przs during init (git-fixes).\n- pwm: add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).\n- pwm: meson: simplify duplicated per-channel tracking (git-fixes).\n- qed: fix scheduling in a tasklet while getting stats (git-fixes).\n- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)\n- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)\n- rdma/efa: fix wrong resources deallocation order (git-fixes)\n- rdma/hns: fix cq and qp cache affinity (git-fixes)\n- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- rdma/hns: fix port active speed (git-fixes)\n- rdma/irdma: prevent zero-length stag registration (git-fixes)\n- rdma/irdma: replace one-element array with flexible-array member (git-fixes)\n- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)\n- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- rdma/siw: balance the reference of cep-\u003ekref in the error path (git-fixes)\n- rdma/siw: correct wrong debug message (git-fixes)\n- rdma/umem: set iova in odp flow (git-fixes)\n- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.\n- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).\n- revert 'ib/isert: fix incorrect release of isert connection' (git-fixes)\n- revert 'tracing: add '(fault)' name injection to kernel probes' (git-fixes).\n- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpmsg: glink: add check for kstrdup (git-fixes).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).\n- scsi: bsg: increase number of devices (bsc#1210048).\n- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: rdma/srp: fix residual handling (git-fixes)\n- scsi: sg: increase number of devices (bsc#1210048).\n- scsi: storvsc: always set no_report_opcodes (git-fixes).\n- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).\n- scsi: storvsc: handle srb status value 0x30 (git-fixes).\n- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).\n- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).\n- selftests/futex: order calls to futex_lock_pi (git-fixes).\n- selftests/harness: actually report skip for signal tests (git-fixes).\n- selftests/resctrl: close perf value read fd on errors (git-fixes).\n- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).\n- selftests: forwarding: skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: switch off timeout (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_flower: relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).\n- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: fix dma buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while nic is resetting (git-fixes).\n- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).\n- smb: client: fix -wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: rename del_timer() to timer_delete() (bsc#1213970).\n- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: replace bug_on()s (bsc#1213970).\n- timers: silently ignore timers with a null function (bsc#1213970).\n- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: update kernel-doc for various functions (bsc#1213970).\n- timers: use del_timer_sync() even on up (bsc#1213970).\n- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: fix not to count error code to total length (git-fixes).\n- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).\n- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).\n- ubifs: fix memleak when insert_old_idx() failed (git-fixes).\n- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: fix typos in gadget.c (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: dwc3: properly handle processing of pending events (git-fixes).\n- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).\n- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for focusrite scarlett (git-fixes).\n- usb: serial: option: add quectel ec200a module support (git-fixes).\n- usb: serial: option: support quectel em060k_128 (git-fixes).\n- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).\n- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).\n- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).\n- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/alternative: make custom return thunk unconditional (git-fixes).\n- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).\n- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).\n- x86/cpu: clean up srso return thunk mess (git-fixes).\n- x86/cpu: cleanup the untrain mess (git-fixes).\n- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: rename original retbleed methods (git-fixes).\n- x86/cpu: rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).\n- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).\n- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).\n- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).\n- x86/speculation: add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).\n- x86/srso: correct the mitigation status when smt is disabled (git-fixes).\n- x86/srso: disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: explain the untraining sequences a bit more (git-fixes).\n- x86/srso: fix build breakage with the llvm linker (git-fixes).\n- x86/srso: fix return thunks in generated code (git-fixes).\n- x86/static_call: fix __static_call_fixup() (git-fixes).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n","status":"published","published":"2023-09-21T10:18:09Z","modified":"2026-02-04T03:17:54.04672Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3656-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).\n- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).\n- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).\n- ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes).\n- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).\n- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).\n- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).\n- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).\n- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).\n- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).\n- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).\n- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).\n- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).\n- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).\n- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).\n- ARM: dts: imx6sll: fixup of operating points (git-fixes).\n- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).\n- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).\n- ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes).\n- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).\n- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).\n- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).\n- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).\n- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).\n- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- CONFIG_NVME_VERBOSE_ERRORS=y     gone with a82baa8083b\n- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13  gone with 7e152d55123\n- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.\n- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).\n- Documentation: devices.txt: Remove ttyIOC* (git-fixes).\n- Documentation: devices.txt: Remove ttySIOC* (git-fixes).\n- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).\n- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).\n- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).\n- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).\n- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).\n- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).\n- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).\n- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).\n- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)\n- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).\n- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).\n- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).\n- HID: wacom: remove the battery when the EKR is off (git-fixes).\n- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).\n- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)\n- IB/uverbs: Fix an potential error pointer dereference (git-fixes)\n- Input: exc3000 - properly stop timer on shutdown (git-fixes).\n- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).\n- Kbuild: move to -std=gnu11 (bsc#1214756).\n- PCI/ASPM: Avoid link retraining race (git-fixes).\n- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).\n- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).\n- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).\n- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).\n- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).\n- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).\n- PCI: meson: Remove cast between incompatible function type (git-fixes).\n- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).\n- PCI: microchip: Remove cast between incompatible function type (git-fixes).\n- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).\n- PCI: rockchip: Remove writes to unused registers (git-fixes).\n- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).\n- PCI: tegra194: Fix possible array out of bounds access (git-fixes).\n- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).\n- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)\n- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)\n- RDMA/efa: Fix wrong resources deallocation order (git-fixes)\n- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)\n- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- RDMA/hns: Fix port active speed (git-fixes)\n- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)\n- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)\n- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)\n- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- RDMA/siw: Balance the reference of cep-\u003ekref in the error path (git-fixes)\n- RDMA/siw: Correct wrong debug message (git-fixes)\n- RDMA/umem: Set iova in ODP flow (git-fixes)\n- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.\n- Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes)\n- Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes).\n- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: Compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).\n- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: Do not increase MTU when set by user (git-fixes).\n- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).\n- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).\n- batman-adv: Trigger events for auto adjusted MTU (git-fixes).\n- bnx2x: fix page fault following EEH recovery (bsc#1214299).\n- bpf: Disable preemption in bpf_event_output (git-fixes).\n- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).\n- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: Fix cast to enum warning (git-fixes).\n- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: Modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).\n- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).\n- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).\n- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).\n- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).\n- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).\n- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).\n- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).\n- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).\n- define more Hyper-V related constants (bsc#1206453).\n- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: Fix docs syntax (git-fixes).\n- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).\n- docs/process/howto: Replace C89 with C11 (bsc#1214756).\n- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: Fix hex printing of signed values (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: Apply 60us prefetch for DCFCLK \u0026lt;= 300Mhz (git-fixes).\n- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).\n- drm/amd/display: Do not set drr on pipe commit (git-fixes).\n- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).\n- drm/amd/display: Ensure that planes are in the same order (git-fixes).\n- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).\n- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).\n- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).\n- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).\n- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).\n- drm/amd/display: disable RCO for DCN314 (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).\n- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/display: trigger timing sync only if TG is running (git-fixes).\n- drm/amd/pm/smu7: move variables to where they are used (git-fixes).\n- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).\n- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).\n- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).\n- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).\n- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: Remove unnecessary domain argument (git-fixes).\n- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/amdgpu: add S/G display parameter (git-fixes).\n- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).\n- drm/amdgpu: fix memory leak in mes self test (git-fixes).\n- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).\n- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).\n- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: Fix DRAM init on AST2200 (git-fixes).\n- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).\n- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).\n- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active MMU context (git-fixes).\n- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).\n- drm/i915/sdvo: fix panel_type initialization (git-fixes).\n- drm/i915: Fix premature release of request's reusable memory (git-fixes).\n- drm/mediatek: Fix dereference before null check (git-fixes).\n- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).\n- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).\n- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).\n- drm/msm/mdp5: Do not leak some plane state (git-fixes).\n- drm/msm: Update dev core dump to not print backwards (git-fixes).\n- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).\n- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).\n- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).\n- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix UAF on handle creation (git-fixes).\n- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).\n- drm/rockchip: Do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: Reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/stm: ltdc: fix late dereference check (git-fixes).\n- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned BOs for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: Fix shader stage validation (git-fixes).\n- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).\n- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).\n- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: Fix typos in comments (jsc#PED-5738).\n- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).\n- e1000: switch to napi_build_skb() (jsc#PED-5738).\n- e1000: switch to napi_consume_skb() (jsc#PED-5738).\n- enable TPM in azure (bsc#1214760)\n- exfat: fix unexpected EOF while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).\n- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: Improve performance of sys_imageblit() (git-fixes).\n- fbdev: Update fbdev source file paths (git-fixes).\n- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: Fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).\n- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).\n- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).\n- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).\n- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).\n- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).\n- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).\n- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).\n- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: Delete error messages for failed memory allocations (git-fixes).\n- i2c: Improve size determinations (git-fixes).\n- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: designware: Correct length byte validation logic (git-fixes).\n- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).\n- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: nomadik: Remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: Remove unnecessary goto label (git-fixes).\n- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).\n- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for FDIR filters (git-fixes).\n- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).\n- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).\n- ice: Fix max_rate check while configuring TX rate limits (git-fixes).\n- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).\n- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).\n- iio: adc: stx104: Implement and utilize register structures (git-fixes).\n- iio: adc: stx104: Utilize iomap interface (git-fixes).\n- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#PED-5738).\n- intel: remove unused macros (jsc#PED-5738).\n- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).\n- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).\n- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).\n- iommu/amd: Fix compile warning in init code (git-fixes).\n- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).\n- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: Fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).\n- iommu/iova: Fix module config properly (git-fixes).\n- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).\n- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).\n- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).\n- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).\n- iommu/mediatek: Use component_match_add (git-fixes).\n- iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes).\n- iommu/omap: Fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/s390: Fix duplicate domain attachments (git-fixes).\n- iommu/sun50i: Consider all fault sources for reset (git-fixes).\n- iommu/sun50i: Fix R/W permission check (git-fixes).\n- iommu/sun50i: Fix flush size (git-fixes).\n- iommu/sun50i: Fix reset release (git-fixes).\n- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).\n- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).\n- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).\n- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).\n- ipmi:ssif: Add check for kstrdup (git-fixes).\n- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: Ignore newly added SRSO mitigation functions\n- kabi: Allow extra bugsints (bsc#1213927).\n- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).\n- leds: multicolor: Use rounded division when calculating color components (git-fixes).\n- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: Fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: Remove redundant if statement (git-fixes).\n- media: i2c: ccs: Check rules is non-NULL (git-fixes).\n- media: i2c: rdacm21: Fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: Fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).\n- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: Fix vflip / hflip set functions (git-fixes).\n- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).\n- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for H.264 (git-fixes).\n- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).\n- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).\n- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).\n- mkspec: Allow unsupported KMPs (bsc#1214386)\n- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).\n- mmc: block: Fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).\n- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).\n- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).\n- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).\n- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)\n- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).\n- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: Fix SRSO mess (git-fixes).\n- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).\n- objtool: Union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.\n- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- pinctrl: amd: Mask wake bits on probe again (git-fixes).\n- pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: Fix reference leak (git-fixes).\n- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).\n- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).\n- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.\n- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: Check start of empty przs during init (git-fixes).\n- pwm: Add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).\n- qed: Fix scheduling in a tasklet while getting stats (git-fixes).\n- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).\n- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: Fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpm/mkspec-dtb: support for nested subdirs\n- rpmsg: glink: Add check for kstrdup (git-fixes).\n- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).\n- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: Use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).\n- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).\n- scsi: 53c700: Check that command slot is not NULL (git-fixes).\n- scsi: RDMA/srp: Fix residual handling (git-fixes)\n- scsi: bsg: Increase number of devices (bsc#1210048).\n- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).\n- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).\n- scsi: qedf: Fix NULL dereference in error handling (git-fixes).\n- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: scsi_debug: Remove dead code (git-fixes).\n- scsi: sg: Increase number of devices (bsc#1210048).\n- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).\n- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: storvsc: Always set no_report_opcodes (git-fixes).\n- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).\n- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).\n- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).\n- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).\n- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- selftests/futex: Order calls to futex_lock_pi (git-fixes).\n- selftests/harness: Actually report SKIP for signal tests (git-fixes).\n- selftests/resctrl: Close perf value read fd on errors (git-fixes).\n- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: Switch off timeout (git-fixes).\n- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).\n- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: Fix DMA buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while NIC is resetting (git-fixes).\n- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).\n- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: Add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: Provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: Rename del_timer() to timer_delete() (bsc#1213970).\n- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: Replace BUG_ON()s (bsc#1213970).\n- timers: Silently ignore timers with a NULL function (bsc#1213970).\n- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: Update kernel-doc for various functions (bsc#1213970).\n- timers: Use del_timer_sync() even on UP (bsc#1213970).\n- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: Fix not to count error code to total length (git-fixes).\n- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: Fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).\n- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).\n- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).\n- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: Fix typos in gadget.c (git-fixes).\n- usb: dwc3: Properly handle processing of pending events (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).\n- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).\n- usb: serial: option: add Quectel EC200A module support (git-fixes).\n- usb: serial: option: support Quectel EM060K_128 (git-fixes).\n- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).\n- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).\n- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: Fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).\n- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).\n- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).\n- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).\n- x86/alternative: Make custom return thunk unconditional (git-fixes).\n- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).\n- x86/cpu: Clean up SRSO return thunk mess (git-fixes).\n- x86/cpu: Cleanup the untrain mess (git-fixes).\n- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: Rename original retbleed methods (git-fixes).\n- x86/cpu: Rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).\n- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).\n- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).\n- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).\n- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).\n- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).\n- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).\n- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).\n- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).\n- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).\n- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).\n- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).\n- x86/speculation: Add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).\n- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).\n- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: Explain the untraining sequences a bit more (git-fixes).\n- x86/srso: Fix build breakage with the LLVM linker (git-fixes).\n- x86/srso: Fix return thunks in generated code (git-fixes).\n- x86/static_call: Fix __static_call_fixup() (git-fixes).\n- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).\n- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).\n- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n","status":"published","published":"2023-09-18T15:36:40Z","modified":"2026-02-04T03:07:32.524858Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3682-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n\nThe following non-security bugs were fixed:\n\n- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).\n- acpi: processor: perflib: use the 'no limit' frequency qos (git-fixes).\n- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).\n- alsa: ac97: fix possible error value of *rac97 (git-fixes).\n- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).\n- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).\n- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).\n- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).\n- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).\n- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).\n- alsa: usb-audio: fix init call orders for uac1 (git-fixes).\n- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).\n- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).\n- arm: dts: imx6sll: fixup of operating points (git-fixes).\n- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- asoc: lower 'no backend dais enabled for ... port' log severity (git-fixes).\n- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).\n- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).\n- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).\n- asoc: tegra: fix sfc conversion for few rates (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).\n- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: do not increase mtu when set by user (git-fixes).\n- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: fix tt global entry leak when client roamed back (git-fixes).\n- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).\n- batman-adv: trigger events for auto adjusted mtu (git-fixes).\n- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).\n- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- bluetooth: fix potential use-after-free when clear keys (git-fixes).\n- bluetooth: l2cap: fix use-after-free (git-fixes).\n- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).\n- bnx2x: fix page fault following eeh recovery (bsc#1214299).\n- bpf: disable preemption in bpf_event_output (git-fixes).\n- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: fix cast to enum warning (git-fixes).\n- bus: ti-sysc: flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on mds stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- config_nvme_verbose_errors=y     gone with a82baa8083b\n- config_printk_safe_log_buf_shift=13  gone with 7e152d55123\n- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).\n- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).\n- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).\n- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: fix docs syntax (git-fixes).\n- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).\n- docs/process/howto: replace c89 with c11 (bsc#1214756).\n- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: fix hex printing of signed values (git-fixes).\n- documentation: devices.txt: fix minors for ttycpm* (git-fixes).\n- documentation: devices.txt: remove ttyioc* (git-fixes).\n- documentation: devices.txt: remove ttysioc* (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).\n- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).\n- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: fix dram init on ast2200 (git-fixes).\n- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: fix -wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active mmu context (git-fixes).\n- drm/mediatek: fix dereference before null check (git-fixes).\n- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).\n- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/mdp5: do not leak some plane state (git-fixes).\n- drm/msm: update dev core dump to not print backwards (git-fixes).\n- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).\n- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix uaf on handle creation (git-fixes).\n- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).\n- drm/rockchip: do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned bos for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: fix shader stage validation (git-fixes).\n- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).\n- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).\n- drop cfg80211 lock fix patches that caused a regression (bsc#1213757) \n- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) \n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: fix typos in comments (jsc#ped-5738).\n- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).\n- e1000: switch to napi_build_skb() (jsc#ped-5738).\n- e1000: switch to napi_consume_skb() (jsc#ped-5738).\n- enable analog devices industrial ethernet phy driver (jsc#ped-4759)\n- enable tpm in azure (bsc#1214760)\n- exfat: fix unexpected eof while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).\n- fbdev: fix potential oob read in fast_imageblit() (git-fixes).\n- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: improve performance of sys_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).\n- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).\n- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).\n- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).\n- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).\n- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).\n- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).\n- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).\n- hid: wacom: remove the battery when the ekr is off (git-fixes).\n- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).\n- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).\n- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: delete error messages for failed memory allocations (git-fixes).\n- i2c: designware: correct length byte validation logic (git-fixes).\n- i2c: designware: handle invalid smbus block data response length value (git-fixes).\n- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: improve size determinations (git-fixes).\n- i2c: nomadik: remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: remove unnecessary goto label (git-fixes).\n- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).\n- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for fdir filters (git-fixes).\n- ib/hfi1: fix possible panic during hotplug remove (git-fixes)\n- ib/uverbs: fix an potential error pointer dereference (git-fixes)\n- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).\n- ice: fix max_rate check while configuring tx rate limits (git-fixes).\n- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).\n- ice: fix rdma vsi removal during queue rebuild (git-fixes).\n- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).\n- iio: adc: stx104: implement and utilize register structures (git-fixes).\n- iio: adc: stx104: utilize iomap interface (git-fixes).\n- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).\n- input: exc3000 - properly stop timer on shutdown (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#ped-5738).\n- intel: remove unused macros (jsc#ped-5738).\n- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).\n- iommu/amd: fix compile warning in init code (git-fixes).\n- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: initialize dart_streams_enable (git-fixes).\n- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).\n- iommu/iova: fix module config properly (git-fixes).\n- iommu/omap: fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/sun50i: consider all fault sources for reset (git-fixes).\n- iommu/sun50i: fix flush size (git-fixes).\n- iommu/sun50i: fix r/w permission check (git-fixes).\n- iommu/sun50i: fix reset release (git-fixes).\n- iommu/sun50i: implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: remove iommu_domain_identity (git-fixes).\n- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).\n- iommu/vt-d: check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).\n- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).\n- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).\n- ipmi:ssif: add check for kstrdup (git-fixes).\n- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: ignore newly added srso mitigation functions\n- kabi: allow extra bugsints (bsc#1213927).\n- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).\n- kbuild: move to -std=gnu11 (bsc#1214756).\n- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).\n- leds: multicolor: use rounded division when calculating color components (git-fixes).\n- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order max_order (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: remove redundant if statement (git-fixes).\n- media: i2c: ccs: check rules is non-null (git-fixes).\n- media: i2c: rdacm21: fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).\n- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: fix vflip / hflip set functions (git-fixes).\n- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).\n- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for h.264 (git-fixes).\n- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).\n- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).\n- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).\n- mkspec: allow unsupported kmps (bsc#1214386)\n- mlxsw: pci: add shutdown method in pci driver (git-fixes).\n- mmc: block: fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- move upstreamed powerpc patches into sorted section\n- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: check bus width while setting qe bit (git-fixes).\n- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).\n- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).\n- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).\n- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).\n- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: fix srso mess (git-fixes).\n- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).\n- objtool: union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.\n- pci/aspm: avoid link retraining race (git-fixes).\n- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).\n- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).\n- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).\n- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).\n- pci: meson: remove cast between incompatible function type (git-fixes).\n- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).\n- pci: microchip: remove cast between incompatible function type (git-fixes).\n- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).\n- pci: rockchip: remove writes to unused registers (git-fixes).\n- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).\n- pci: tegra194: fix possible array out of bounds access (git-fixes).\n- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: fix reference leak (git-fixes).\n- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).\n- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).\n- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). \n- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106). \n- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).\n- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: check start of empty przs during init (git-fixes).\n- pwm: add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).\n- pwm: meson: simplify duplicated per-channel tracking (git-fixes).\n- qed: fix scheduling in a tasklet while getting stats (git-fixes).\n- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)\n- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)\n- rdma/efa: fix wrong resources deallocation order (git-fixes)\n- rdma/hns: fix cq and qp cache affinity (git-fixes)\n- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- rdma/hns: fix port active speed (git-fixes)\n- rdma/irdma: prevent zero-length stag registration (git-fixes)\n- rdma/irdma: replace one-element array with flexible-array member (git-fixes)\n- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)\n- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- rdma/siw: balance the reference of cep-\u003ekref in the error path (git-fixes)\n- rdma/siw: correct wrong debug message (git-fixes)\n- rdma/umem: set iova in odp flow (git-fixes)\n- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.\n- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).\n- revert 'ib/isert: fix incorrect release of isert connection' (git-fixes)\n- revert 'tracing: add '(fault)' name injection to kernel probes' (git-fixes).\n- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpmsg: glink: add check for kstrdup (git-fixes).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).\n- scsi: bsg: increase number of devices (bsc#1210048).\n- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: rdma/srp: fix residual handling (git-fixes)\n- scsi: sg: increase number of devices (bsc#1210048).\n- scsi: storvsc: always set no_report_opcodes (git-fixes).\n- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).\n- scsi: storvsc: handle srb status value 0x30 (git-fixes).\n- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).\n- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).\n- selftests/futex: order calls to futex_lock_pi (git-fixes).\n- selftests/harness: actually report skip for signal tests (git-fixes).\n- selftests/resctrl: close perf value read fd on errors (git-fixes).\n- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).\n- selftests: forwarding: skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: switch off timeout (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_flower: relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).\n- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: fix dma buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while nic is resetting (git-fixes).\n- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).\n- smb: client: fix -wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: rename del_timer() to timer_delete() (bsc#1213970).\n- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: replace bug_on()s (bsc#1213970).\n- timers: silently ignore timers with a null function (bsc#1213970).\n- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: update kernel-doc for various functions (bsc#1213970).\n- timers: use del_timer_sync() even on up (bsc#1213970).\n- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: fix not to count error code to total length (git-fixes).\n- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).\n- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).\n- ubifs: fix memleak when insert_old_idx() failed (git-fixes).\n- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: fix typos in gadget.c (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: dwc3: properly handle processing of pending events (git-fixes).\n- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).\n- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for focusrite scarlett (git-fixes).\n- usb: serial: option: add quectel ec200a module support (git-fixes).\n- usb: serial: option: support quectel em060k_128 (git-fixes).\n- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).\n- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).\n- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).\n- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/alternative: make custom return thunk unconditional (git-fixes).\n- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).\n- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).\n- x86/cpu: clean up srso return thunk mess (git-fixes).\n- x86/cpu: cleanup the untrain mess (git-fixes).\n- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: rename original retbleed methods (git-fixes).\n- x86/cpu: rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).\n- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).\n- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).\n- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).\n- x86/speculation: add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).\n- x86/srso: correct the mitigation status when smt is disabled (git-fixes).\n- x86/srso: disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: explain the untraining sequences a bit more (git-fixes).\n- x86/srso: fix build breakage with the llvm linker (git-fixes).\n- x86/srso: fix return thunks in generated code (git-fixes).\n- x86/static_call: fix __static_call_fixup() (git-fixes).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n","status":"published","published":"2023-09-19T15:06:19Z","modified":"2025-05-02T04:34:26.181627Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3964-1","title":"Security update for the Linux Kernel","description":" The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n\nThe following non-security bugs were fixed:\n\n- Drop amdgpu patch causing spamming (bsc#1215523)\n- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).\n- acpi: processor: perflib: use the 'no limit' frequency qos (git-fixes).\n- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).\n- alsa: ac97: fix possible error value of *rac97 (git-fixes).\n- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).\n- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).\n- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).\n- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).\n- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).\n- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).\n- alsa: usb-audio: fix init call orders for uac1 (git-fixes).\n- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).\n- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).\n- arm: dts: imx6sll: fixup of operating points (git-fixes).\n- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- asoc: lower 'no backend dais enabled for ... port' log severity (git-fixes).\n- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).\n- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).\n- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).\n- asoc: tegra: fix sfc conversion for few rates (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).\n- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: do not increase mtu when set by user (git-fixes).\n- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: fix tt global entry leak when client roamed back (git-fixes).\n- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).\n- batman-adv: trigger events for auto adjusted mtu (git-fixes).\n- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).\n- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- bluetooth: fix potential use-after-free when clear keys (git-fixes).\n- bluetooth: l2cap: fix use-after-free (git-fixes).\n- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).\n- bnx2x: fix page fault following eeh recovery (bsc#1214299).\n- bpf: disable preemption in bpf_event_output (git-fixes).\n- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: fix cast to enum warning (git-fixes).\n- bus: ti-sysc: flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on mds stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- config_nvme_verbose_errors=y     gone with a82baa8083b\n- config_printk_safe_log_buf_shift=13  gone with 7e152d55123\n- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).\n- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).\n- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).\n- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: fix docs syntax (git-fixes).\n- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).\n- docs/process/howto: replace c89 with c11 (bsc#1214756).\n- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: fix hex printing of signed values (git-fixes).\n- documentation: devices.txt: fix minors for ttycpm* (git-fixes).\n- documentation: devices.txt: remove ttyioc* (git-fixes).\n- documentation: devices.txt: remove ttysioc* (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).\n- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).\n- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: fix dram init on ast2200 (git-fixes).\n- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: fix -wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active mmu context (git-fixes).\n- drm/mediatek: fix dereference before null check (git-fixes).\n- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).\n- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/mdp5: do not leak some plane state (git-fixes).\n- drm/msm: update dev core dump to not print backwards (git-fixes).\n- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).\n- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix uaf on handle creation (git-fixes).\n- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).\n- drm/rockchip: do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned bos for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: fix shader stage validation (git-fixes).\n- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).\n- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).\n- drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: fix typos in comments (jsc#ped-5738).\n- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).\n- e1000: switch to napi_build_skb() (jsc#ped-5738).\n- e1000: switch to napi_consume_skb() (jsc#ped-5738).\n- enable analog devices industrial ethernet phy driver (jsc#ped-4759)\n- exfat: fix unexpected eof while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).\n- fbdev: fix potential oob read in fast_imageblit() (git-fixes).\n- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: improve performance of sys_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).\n- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).\n- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).\n- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).\n- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).\n- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).\n- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).\n- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).\n- hid: wacom: remove the battery when the ekr is off (git-fixes).\n- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).\n- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).\n- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: delete error messages for failed memory allocations (git-fixes).\n- i2c: designware: correct length byte validation logic (git-fixes).\n- i2c: designware: handle invalid smbus block data response length value (git-fixes).\n- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: improve size determinations (git-fixes).\n- i2c: nomadik: remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: remove unnecessary goto label (git-fixes).\n- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).\n- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for fdir filters (git-fixes).\n- ib/hfi1: fix possible panic during hotplug remove (git-fixes)\n- ib/uverbs: fix an potential error pointer dereference (git-fixes)\n- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).\n- ice: fix max_rate check while configuring tx rate limits (git-fixes).\n- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).\n- ice: fix rdma vsi removal during queue rebuild (git-fixes).\n- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).\n- iio: adc: stx104: implement and utilize register structures (git-fixes).\n- iio: adc: stx104: utilize iomap interface (git-fixes).\n- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).\n- input: exc3000 - properly stop timer on shutdown (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#ped-5738).\n- intel: remove unused macros (jsc#ped-5738).\n- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).\n- iommu/amd: fix compile warning in init code (git-fixes).\n- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: initialize dart_streams_enable (git-fixes).\n- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).\n- iommu/iova: fix module config properly (git-fixes).\n- iommu/omap: fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/sun50i: consider all fault sources for reset (git-fixes).\n- iommu/sun50i: fix flush size (git-fixes).\n- iommu/sun50i: fix r/w permission check (git-fixes).\n- iommu/sun50i: fix reset release (git-fixes).\n- iommu/sun50i: implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: remove iommu_domain_identity (git-fixes).\n- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).\n- iommu/vt-d: check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).\n- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).\n- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).\n- ipmi:ssif: add check for kstrdup (git-fixes).\n- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: ignore newly added srso mitigation functions\n- kabi: allow extra bugsints (bsc#1213927).\n- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).\n- kbuild: move to -std=gnu11 (bsc#1214756).\n- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).\n- leds: multicolor: use rounded division when calculating color components (git-fixes).\n- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order max_order (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: remove redundant if statement (git-fixes).\n- media: i2c: ccs: check rules is non-null (git-fixes).\n- media: i2c: rdacm21: fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).\n- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: fix vflip / hflip set functions (git-fixes).\n- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).\n- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for h.264 (git-fixes).\n- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).\n- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).\n- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).\n- mkspec: allow unsupported kmps (bsc#1214386)\n- mlxsw: pci: add shutdown method in pci driver (git-fixes).\n- mmc: block: fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- move upstreamed powerpc patches into sorted section\n- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: check bus width while setting qe bit (git-fixes).\n- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).\n- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).\n- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).\n- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).\n- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: fix srso mess (git-fixes).\n- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).\n- objtool: union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.\n- pci/aspm: avoid link retraining race (git-fixes).\n- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).\n- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).\n- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).\n- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).\n- pci: meson: remove cast between incompatible function type (git-fixes).\n- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).\n- pci: microchip: remove cast between incompatible function type (git-fixes).\n- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).\n- pci: rockchip: remove writes to unused registers (git-fixes).\n- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).\n- pci: tegra194: fix possible array out of bounds access (git-fixes).\n- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: fix reference leak (git-fixes).\n- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).\n- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).\n- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).\n- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: check start of empty przs during init (git-fixes).\n- pwm: add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).\n- pwm: meson: simplify duplicated per-channel tracking (git-fixes).\n- qed: fix scheduling in a tasklet while getting stats (git-fixes).\n- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)\n- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)\n- rdma/efa: fix wrong resources deallocation order (git-fixes)\n- rdma/hns: fix cq and qp cache affinity (git-fixes)\n- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- rdma/hns: fix port active speed (git-fixes)\n- rdma/irdma: prevent zero-length stag registration (git-fixes)\n- rdma/irdma: replace one-element array with flexible-array member (git-fixes)\n- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)\n- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- rdma/siw: balance the reference of cep-\u003ekref in the error path (git-fixes)\n- rdma/siw: correct wrong debug message (git-fixes)\n- rdma/umem: set iova in odp flow (git-fixes)\n- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.\n- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).\n- revert 'ib/isert: fix incorrect release of isert connection' (git-fixes)\n- revert 'tracing: add '(fault)' name injection to kernel probes' (git-fixes).\n- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpmsg: glink: add check for kstrdup (git-fixes).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).\n- scsi: bsg: increase number of devices (bsc#1210048).\n- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: rdma/srp: fix residual handling (git-fixes)\n- scsi: sg: increase number of devices (bsc#1210048).\n- scsi: storvsc: always set no_report_opcodes (git-fixes).\n- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).\n- scsi: storvsc: handle srb status value 0x30 (git-fixes).\n- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).\n- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).\n- selftests/futex: order calls to futex_lock_pi (git-fixes).\n- selftests/harness: actually report skip for signal tests (git-fixes).\n- selftests/resctrl: close perf value read fd on errors (git-fixes).\n- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).\n- selftests: forwarding: skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: switch off timeout (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_flower: relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).\n- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: fix dma buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while nic is resetting (git-fixes).\n- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).\n- smb: client: fix -wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: rename del_timer() to timer_delete() (bsc#1213970).\n- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: replace bug_on()s (bsc#1213970).\n- timers: silently ignore timers with a null function (bsc#1213970).\n- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: update kernel-doc for various functions (bsc#1213970).\n- timers: use del_timer_sync() even on up (bsc#1213970).\n- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: fix not to count error code to total length (git-fixes).\n- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).\n- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).\n- ubifs: fix memleak when insert_old_idx() failed (git-fixes).\n- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: fix typos in gadget.c (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: dwc3: properly handle processing of pending events (git-fixes).\n- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).\n- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for focusrite scarlett (git-fixes).\n- usb: serial: option: add quectel ec200a module support (git-fixes).\n- usb: serial: option: support quectel em060k_128 (git-fixes).\n- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).\n- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).\n- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).\n- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/alternative: make custom return thunk unconditional (git-fixes).\n- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).\n- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).\n- x86/cpu: clean up srso return thunk mess (git-fixes).\n- x86/cpu: cleanup the untrain mess (git-fixes).\n- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: rename original retbleed methods (git-fixes).\n- x86/cpu: rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).\n- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).\n- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).\n- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).\n- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).\n- x86/speculation: add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).\n- x86/srso: correct the mitigation status when smt is disabled (git-fixes).\n- x86/srso: disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: explain the untraining sequences a bit more (git-fixes).\n- x86/srso: fix build breakage with the llvm linker (git-fixes).\n- x86/srso: fix return thunks in generated code (git-fixes).\n- x86/static_call: fix __static_call_fixup() (git-fixes).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n","status":"published","published":"2023-10-04T07:39:08Z","modified":"2026-02-04T03:16:10.848419Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3969-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n\nThe following non-security bugs were fixed:\n\n- Drop amdgpu patch causing spamming (bsc#1215523)\n- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).\n- acpi: processor: perflib: use the 'no limit' frequency qos (git-fixes).\n- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).\n- alsa: ac97: fix possible error value of *rac97 (git-fixes).\n- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).\n- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).\n- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).\n- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).\n- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).\n- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).\n- alsa: usb-audio: fix init call orders for uac1 (git-fixes).\n- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).\n- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).\n- arm: dts: imx6sll: fixup of operating points (git-fixes).\n- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- asoc: lower 'no backend dais enabled for ... port' log severity (git-fixes).\n- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).\n- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).\n- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).\n- asoc: tegra: fix sfc conversion for few rates (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).\n- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: do not increase mtu when set by user (git-fixes).\n- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: fix tt global entry leak when client roamed back (git-fixes).\n- batman-adv: trigger events for auto adjusted mtu (git-fixes).\n- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).\n- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- bluetooth: fix potential use-after-free when clear keys (git-fixes).\n- bluetooth: l2cap: fix use-after-free (git-fixes).\n- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).\n- bnx2x: fix page fault following eeh recovery (bsc#1214299).\n- bpf: disable preemption in bpf_event_output (git-fixes).\n- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: fix cast to enum warning (git-fixes).\n- bus: ti-sysc: flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on mds stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- config_nvme_verbose_errors=y     gone with a82baa8083b\n- config_printk_safe_log_buf_shift=13  gone with 7e152d55123\n- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).\n- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).\n- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).\n- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: fix docs syntax (git-fixes).\n- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).\n- docs/process/howto: replace c89 with c11 (bsc#1214756).\n- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: fix hex printing of signed values (git-fixes).\n- documentation: devices.txt: fix minors for ttycpm* (git-fixes).\n- documentation: devices.txt: remove ttyioc* (git-fixes).\n- documentation: devices.txt: remove ttysioc* (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).\n- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).\n- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: fix dram init on ast2200 (git-fixes).\n- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: fix -wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active mmu context (git-fixes).\n- drm/mediatek: fix dereference before null check (git-fixes).\n- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).\n- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/mdp5: do not leak some plane state (git-fixes).\n- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).\n- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix uaf on handle creation (git-fixes).\n- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).\n- drm/rockchip: do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned bos for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: fix shader stage validation (git-fixes).\n- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).\n- drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: fix typos in comments (jsc#ped-5738).\n- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).\n- e1000: switch to napi_build_skb() (jsc#ped-5738).\n- e1000: switch to napi_consume_skb() (jsc#ped-5738).\n- enable analog devices industrial ethernet phy driver (jsc#ped-4759)\n- exfat: fix unexpected eof while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).\n- fbdev: fix potential oob read in fast_imageblit() (git-fixes).\n- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: improve performance of sys_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).\n- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).\n- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).\n- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).\n- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).\n- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).\n- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).\n- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).\n- hid: wacom: remove the battery when the ekr is off (git-fixes).\n- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).\n- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).\n- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: designware: correct length byte validation logic (git-fixes).\n- i2c: designware: handle invalid smbus block data response length value (git-fixes).\n- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: improve size determinations (git-fixes).\n- i2c: nomadik: remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: remove unnecessary goto label (git-fixes).\n- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).\n- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for fdir filters (git-fixes).\n- ib/hfi1: fix possible panic during hotplug remove (git-fixes)\n- ib/uverbs: fix an potential error pointer dereference (git-fixes)\n- ice: fix max_rate check while configuring tx rate limits (git-fixes).\n- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).\n- ice: fix rdma vsi removal during queue rebuild (git-fixes).\n- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).\n- iio: adc: stx104: implement and utilize register structures (git-fixes).\n- iio: adc: stx104: utilize iomap interface (git-fixes).\n- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).\n- input: exc3000 - properly stop timer on shutdown (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#ped-5738).\n- intel: remove unused macros (jsc#ped-5738).\n- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).\n- iommu/amd: fix compile warning in init code (git-fixes).\n- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: initialize dart_streams_enable (git-fixes).\n- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).\n- iommu/iova: fix module config properly (git-fixes).\n- iommu/omap: fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/sun50i: consider all fault sources for reset (git-fixes).\n- iommu/sun50i: fix flush size (git-fixes).\n- iommu/sun50i: fix r/w permission check (git-fixes).\n- iommu/sun50i: fix reset release (git-fixes).\n- iommu/sun50i: implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: remove iommu_domain_identity (git-fixes).\n- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).\n- iommu/vt-d: check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).\n- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).\n- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).\n- ipmi:ssif: add check for kstrdup (git-fixes).\n- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: ignore newly added srso mitigation functions\n- kabi: allow extra bugsints (bsc#1213927).\n- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).\n- kbuild: move to -std=gnu11 (bsc#1214756).\n- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).\n- leds: multicolor: use rounded division when calculating color components (git-fixes).\n- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order max_order (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: remove redundant if statement (git-fixes).\n- media: i2c: ccs: check rules is non-null (git-fixes).\n- media: i2c: rdacm21: fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).\n- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: fix vflip / hflip set functions (git-fixes).\n- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).\n- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for h.264 (git-fixes).\n- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).\n- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).\n- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).\n- mkspec: allow unsupported kmps (bsc#1214386)\n- mlxsw: pci: add shutdown method in pci driver (git-fixes).\n- mmc: block: fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- move upstreamed hid patch into sorted section\n- move upstreamed powerpc patches into sorted section\n- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: check bus width while setting qe bit (git-fixes).\n- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).\n- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).\n- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).\n- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).\n- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: fix srso mess (git-fixes).\n- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).\n- objtool: union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.\n- pci/aspm: avoid link retraining race (git-fixes).\n- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).\n- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).\n- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).\n- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).\n- pci: meson: remove cast between incompatible function type (git-fixes).\n- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).\n- pci: microchip: remove cast between incompatible function type (git-fixes).\n- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).\n- pci: rockchip: remove writes to unused registers (git-fixes).\n- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).\n- pci: tegra194: fix possible array out of bounds access (git-fixes).\n- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: fix reference leak (git-fixes).\n- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).\n- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).\n- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).\n- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: check start of empty przs during init (git-fixes).\n- pwm: add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).\n- pwm: meson: simplify duplicated per-channel tracking (git-fixes).\n- qed: fix scheduling in a tasklet while getting stats (git-fixes).\n- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)\n- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)\n- rdma/efa: fix wrong resources deallocation order (git-fixes)\n- rdma/hns: fix cq and qp cache affinity (git-fixes)\n- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- rdma/hns: fix port active speed (git-fixes)\n- rdma/irdma: prevent zero-length stag registration (git-fixes)\n- rdma/irdma: replace one-element array with flexible-array member (git-fixes)\n- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)\n- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- rdma/siw: balance the reference of cep-\u003ekref in the error path (git-fixes)\n- rdma/siw: correct wrong debug message (git-fixes)\n- rdma/umem: set iova in odp flow (git-fixes)\n- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.\n- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).\n- revert 'ib/isert: fix incorrect release of isert connection' (git-fixes)\n- revert 'tracing: add '(fault)' name injection to kernel probes' (git-fixes).\n- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpmsg: glink: add check for kstrdup (git-fixes).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).\n- scsi: bsg: increase number of devices (bsc#1210048).\n- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: rdma/srp: fix residual handling (git-fixes)\n- scsi: sg: increase number of devices (bsc#1210048).\n- scsi: storvsc: always set no_report_opcodes (git-fixes).\n- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).\n- scsi: storvsc: handle srb status value 0x30 (git-fixes).\n- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).\n- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).\n- selftests/futex: order calls to futex_lock_pi (git-fixes).\n- selftests/harness: actually report skip for signal tests (git-fixes).\n- selftests/resctrl: close perf value read fd on errors (git-fixes).\n- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).\n- selftests: forwarding: skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: switch off timeout (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_flower: relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).\n- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: fix dma buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while nic is resetting (git-fixes).\n- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).\n- smb: client: fix -wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: rename del_timer() to timer_delete() (bsc#1213970).\n- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: replace bug_on()s (bsc#1213970).\n- timers: silently ignore timers with a null function (bsc#1213970).\n- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: update kernel-doc for various functions (bsc#1213970).\n- timers: use del_timer_sync() even on up (bsc#1213970).\n- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: fix not to count error code to total length (git-fixes).\n- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).\n- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).\n- ubifs: fix memleak when insert_old_idx() failed (git-fixes).\n- update cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: fix typos in gadget.c (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: dwc3: properly handle processing of pending events (git-fixes).\n- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).\n- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for focusrite scarlett (git-fixes).\n- usb: serial: option: add quectel ec200a module support (git-fixes).\n- usb: serial: option: support quectel em060k_128 (git-fixes).\n- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).\n- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).\n- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).\n- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/alternative: make custom return thunk unconditional (git-fixes).\n- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).\n- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).\n- x86/cpu: clean up srso return thunk mess (git-fixes).\n- x86/cpu: cleanup the untrain mess (git-fixes).\n- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: rename original retbleed methods (git-fixes).\n- x86/cpu: rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).\n- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).\n- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).\n- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).\n- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).\n- x86/speculation: add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).\n- x86/srso: correct the mitigation status when smt is disabled (git-fixes).\n- x86/srso: disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: explain the untraining sequences a bit more (git-fixes).\n- x86/srso: fix build breakage with the llvm linker (git-fixes).\n- x86/srso: fix return thunks in generated code (git-fixes).\n- x86/static_call: fix __static_call_fixup() (git-fixes).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n\n","status":"published","published":"2023-10-04T12:06:02Z","modified":"2026-02-04T04:08:24.734527Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3971-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).\n- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).\n- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).\n- ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes).\n- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).\n- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).\n- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).\n- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).\n- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).\n- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).\n- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).\n- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).\n- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).\n- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).\n- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).\n- ARM: dts: imx6sll: fixup of operating points (git-fixes).\n- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).\n- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).\n- ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes).\n- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).\n- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).\n- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).\n- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).\n- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).\n- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- CONFIG_NVME_VERBOSE_ERRORS=y     gone with a82baa8083b\n- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13  gone with 7e152d55123\n- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.\n- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).\n- Documentation: devices.txt: Remove ttyIOC* (git-fixes).\n- Documentation: devices.txt: Remove ttySIOC* (git-fixes).\n- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).\n- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).\n- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).\n- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).\n- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).\n- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).\n- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).\n- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).\n- Drop amdgpu patch causing spamming (bsc#1215523)\n- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)\n- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).\n- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).\n- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).\n- HID: wacom: remove the battery when the EKR is off (git-fixes).\n- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).\n- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)\n- IB/uverbs: Fix an potential error pointer dereference (git-fixes)\n- Input: exc3000 - properly stop timer on shutdown (git-fixes).\n- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).\n- Kbuild: move to -std=gnu11 (bsc#1214756).\n- PCI/ASPM: Avoid link retraining race (git-fixes).\n- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).\n- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).\n- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).\n- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).\n- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).\n- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).\n- PCI: meson: Remove cast between incompatible function type (git-fixes).\n- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).\n- PCI: microchip: Remove cast between incompatible function type (git-fixes).\n- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).\n- PCI: rockchip: Remove writes to unused registers (git-fixes).\n- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).\n- PCI: tegra194: Fix possible array out of bounds access (git-fixes).\n- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).\n- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)\n- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)\n- RDMA/efa: Fix wrong resources deallocation order (git-fixes)\n- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)\n- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- RDMA/hns: Fix port active speed (git-fixes)\n- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)\n- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)\n- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)\n- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- RDMA/siw: Balance the reference of cep-\u003ekref in the error path (git-fixes)\n- RDMA/siw: Correct wrong debug message (git-fixes)\n- RDMA/umem: Set iova in ODP flow (git-fixes)\n- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.\n- Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes)\n- Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes).\n- SMB3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: Compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).\n- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: Do not increase MTU when set by user (git-fixes).\n- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).\n- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).\n- batman-adv: Trigger events for auto adjusted MTU (git-fixes).\n- bnx2x: fix page fault following EEH recovery (bsc#1214299).\n- bpf: Disable preemption in bpf_event_output (git-fixes).\n- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).\n- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: Fix cast to enum warning (git-fixes).\n- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: Modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).\n- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).\n- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).\n- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).\n- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).\n- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).\n- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).\n- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).\n- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).\n- define more Hyper-V related constants (bsc#1206453).\n- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: Fix docs syntax (git-fixes).\n- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).\n- docs/process/howto: Replace C89 with C11 (bsc#1214756).\n- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: Fix hex printing of signed values (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: Apply 60us prefetch for DCFCLK \u0026lt;= 300Mhz (git-fixes).\n- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).\n- drm/amd/display: Do not set drr on pipe commit (git-fixes).\n- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).\n- drm/amd/display: Ensure that planes are in the same order (git-fixes).\n- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).\n- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).\n- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).\n- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).\n- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).\n- drm/amd/display: disable RCO for DCN314 (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).\n- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/display: trigger timing sync only if TG is running (git-fixes).\n- drm/amd/pm/smu7: move variables to where they are used (git-fixes).\n- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).\n- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).\n- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).\n- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).\n- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: Remove unnecessary domain argument (git-fixes).\n- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/amdgpu: add S/G display parameter (git-fixes).\n- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).\n- drm/amdgpu: fix memory leak in mes self test (git-fixes).\n- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).\n- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).\n- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: Fix DRAM init on AST2200 (git-fixes).\n- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).\n- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).\n- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active MMU context (git-fixes).\n- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).\n- drm/i915/sdvo: fix panel_type initialization (git-fixes).\n- drm/i915: Fix premature release of request's reusable memory (git-fixes).\n- drm/mediatek: Fix dereference before null check (git-fixes).\n- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).\n- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).\n- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).\n- drm/msm/mdp5: Do not leak some plane state (git-fixes).\n- drm/msm: Update dev core dump to not print backwards (git-fixes).\n- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).\n- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).\n- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).\n- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix UAF on handle creation (git-fixes).\n- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).\n- drm/rockchip: Do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: Reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/stm: ltdc: fix late dereference check (git-fixes).\n- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned BOs for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: Fix shader stage validation (git-fixes).\n- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).\n- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).\n- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: Fix typos in comments (jsc#PED-5738).\n- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).\n- e1000: switch to napi_build_skb() (jsc#PED-5738).\n- e1000: switch to napi_consume_skb() (jsc#PED-5738).\n- exfat: fix unexpected EOF while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).\n- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: Improve performance of sys_imageblit() (git-fixes).\n- fbdev: Update fbdev source file paths (git-fixes).\n- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: Fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).\n- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).\n- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).\n- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).\n- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).\n- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).\n- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).\n- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).\n- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: Delete error messages for failed memory allocations (git-fixes).\n- i2c: Improve size determinations (git-fixes).\n- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: designware: Correct length byte validation logic (git-fixes).\n- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).\n- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: nomadik: Remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: Remove unnecessary goto label (git-fixes).\n- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).\n- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for FDIR filters (git-fixes).\n- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).\n- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).\n- ice: Fix max_rate check while configuring TX rate limits (git-fixes).\n- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).\n- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).\n- iio: adc: stx104: Implement and utilize register structures (git-fixes).\n- iio: adc: stx104: Utilize iomap interface (git-fixes).\n- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#PED-5738).\n- intel: remove unused macros (jsc#PED-5738).\n- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).\n- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).\n- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).\n- iommu/amd: Fix compile warning in init code (git-fixes).\n- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).\n- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: Fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).\n- iommu/iova: Fix module config properly (git-fixes).\n- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).\n- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).\n- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).\n- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).\n- iommu/mediatek: Use component_match_add (git-fixes).\n- iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes).\n- iommu/omap: Fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/s390: Fix duplicate domain attachments (git-fixes).\n- iommu/sun50i: Consider all fault sources for reset (git-fixes).\n- iommu/sun50i: Fix R/W permission check (git-fixes).\n- iommu/sun50i: Fix flush size (git-fixes).\n- iommu/sun50i: Fix reset release (git-fixes).\n- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).\n- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).\n- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).\n- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).\n- ipmi:ssif: Add check for kstrdup (git-fixes).\n- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: Ignore newly added SRSO mitigation functions\n- kabi: Allow extra bugsints (bsc#1213927).\n- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).\n- leds: multicolor: Use rounded division when calculating color components (git-fixes).\n- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: Fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: Remove redundant if statement (git-fixes).\n- media: i2c: ccs: Check rules is non-NULL (git-fixes).\n- media: i2c: rdacm21: Fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: Fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).\n- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: Fix vflip / hflip set functions (git-fixes).\n- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).\n- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for H.264 (git-fixes).\n- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).\n- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).\n- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).\n- mkspec: Allow unsupported KMPs (bsc#1214386)\n- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).\n- mmc: block: Fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).\n- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).\n- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).\n- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).\n- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)\n- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).\n- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: Fix SRSO mess (git-fixes).\n- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).\n- objtool: Union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.\n- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- pinctrl: amd: Mask wake bits on probe again (git-fixes).\n- pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: Fix reference leak (git-fixes).\n- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).\n- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).\n- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.\n- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: Check start of empty przs during init (git-fixes).\n- pwm: Add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).\n- qed: Fix scheduling in a tasklet while getting stats (git-fixes).\n- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).\n- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: Fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpm/mkspec-dtb: support for nested subdirs\n- rpmsg: glink: Add check for kstrdup (git-fixes).\n- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).\n- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: Use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).\n- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).\n- scsi: 53c700: Check that command slot is not NULL (git-fixes).\n- scsi: RDMA/srp: Fix residual handling (git-fixes)\n- scsi: bsg: Increase number of devices (bsc#1210048).\n- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).\n- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).\n- scsi: qedf: Fix NULL dereference in error handling (git-fixes).\n- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: scsi_debug: Remove dead code (git-fixes).\n- scsi: sg: Increase number of devices (bsc#1210048).\n- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).\n- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: storvsc: Always set no_report_opcodes (git-fixes).\n- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).\n- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).\n- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).\n- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).\n- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- selftests/futex: Order calls to futex_lock_pi (git-fixes).\n- selftests/harness: Actually report SKIP for signal tests (git-fixes).\n- selftests/resctrl: Close perf value read fd on errors (git-fixes).\n- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: Switch off timeout (git-fixes).\n- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).\n- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: Fix DMA buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while NIC is resetting (git-fixes).\n- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).\n- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: Add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: Provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: Rename del_timer() to timer_delete() (bsc#1213970).\n- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: Replace BUG_ON()s (bsc#1213970).\n- timers: Silently ignore timers with a NULL function (bsc#1213970).\n- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: Update kernel-doc for various functions (bsc#1213970).\n- timers: Use del_timer_sync() even on UP (bsc#1213970).\n- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: Fix not to count error code to total length (git-fixes).\n- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: Fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).\n- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).\n- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).\n- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: Fix typos in gadget.c (git-fixes).\n- usb: dwc3: Properly handle processing of pending events (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).\n- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).\n- usb: serial: option: add Quectel EC200A module support (git-fixes).\n- usb: serial: option: support Quectel EM060K_128 (git-fixes).\n- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).\n- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).\n- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: Fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).\n- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).\n- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).\n- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).\n- x86/alternative: Make custom return thunk unconditional (git-fixes).\n- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).\n- x86/cpu: Clean up SRSO return thunk mess (git-fixes).\n- x86/cpu: Cleanup the untrain mess (git-fixes).\n- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: Rename original retbleed methods (git-fixes).\n- x86/cpu: Rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).\n- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).\n- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).\n- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).\n- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).\n- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).\n- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).\n- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).\n- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).\n- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).\n- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).\n- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).\n- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).\n- x86/speculation: Add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).\n- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).\n- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: Explain the untraining sequences a bit more (git-fixes).\n- x86/srso: Fix build breakage with the LLVM linker (git-fixes).\n- x86/srso: Fix return thunks in generated code (git-fixes).\n- x86/static_call: Fix __static_call_fixup() (git-fixes).\n- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).\n- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).\n- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n","status":"published","published":"2023-10-04T12:36:06Z","modified":"2026-02-04T02:39:34.29802Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3988-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).\n- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).\n- CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995  CVE-2023-1192).\n- CVE-2023-1859: Fixed a use-after-free flaw in xen_9pfs_front_removet that could lead to system crash and kernel information leak (bsc#1210169).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-2177: Fixed null pointer dereference issue in the sctp network protocol that could lead to system crash or DoS (bsc#1210643).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n- CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).\n- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).\n- ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes).\n- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).\n- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).\n- ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes).\n- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).\n- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).\n- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).\n- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).\n- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).\n- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).\n- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).\n- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).\n- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).\n- ARM: dts: imx6sll: fixup of operating points (git-fixes).\n- ARM: pxa: remove use of symbol_get() (git-fixes).\n- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).\n- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).\n- ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes).\n- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).\n- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).\n- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).\n- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).\n- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes).\n- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).\n- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- CONFIG_NVME_VERBOSE_ERRORS=y     gone with a82baa8083b\n- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13  gone with 7e152d55123\n- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).\n- Documentation: devices.txt: Remove ttyIOC* (git-fixes).\n- Documentation: devices.txt: Remove ttySIOC* (git-fixes).\n- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).\n- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).\n- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).\n- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).\n- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).\n- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).\n- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).\n- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).\n- Drop amdgpu patch causing spamming (bsc#1215523)\n- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)\n- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).\n- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).\n- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).\n- HID: wacom: remove the battery when the EKR is off (git-fixes).\n- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).\n- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)\n- IB/uverbs: Fix an potential error pointer dereference (git-fixes)\n- Input: exc3000 - properly stop timer on shutdown (git-fixes).\n- Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes).\n- KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes).\n- KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes).\n- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).\n- Kbuild: move to -std=gnu11 (bsc#1214756).\n- PCI/ASPM: Avoid link retraining race (git-fixes).\n- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).\n- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).\n- PCI: Free released resource after coalescing (git-fixes).\n- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).\n- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).\n- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).\n- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).\n- PCI: meson: Remove cast between incompatible function type (git-fixes).\n- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).\n- PCI: microchip: Remove cast between incompatible function type (git-fixes).\n- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).\n- PCI: rockchip: Remove writes to unused registers (git-fixes).\n- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).\n- PCI: tegra194: Fix possible array out of bounds access (git-fixes).\n- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).\n- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)\n- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)\n- RDMA/efa: Fix wrong resources deallocation order (git-fixes)\n- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)\n- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- RDMA/hns: Fix port active speed (git-fixes)\n- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)\n- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)\n- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)\n- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- RDMA/siw: Balance the reference of cep-\u003ekref in the error path (git-fixes)\n- RDMA/siw: Correct wrong debug message (git-fixes)\n- RDMA/umem: Set iova in ODP flow (git-fixes)\n- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.\n- Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes)\n- Revert 'PCI: Mark NVIDIA T4 GPUs to avoid bus reset' (git-fixes).\n- Revert 'scsi: qla2xxx: Fix buffer overrun' (bsc#1214928).\n- Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes).\n- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453).\n- arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).\n- ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes).\n- ata: pata_falcon: fix IO base selection for Q40 (git-fixes).\n- ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes).\n- ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: Compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).\n- backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes).\n- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: Do not increase MTU when set by user (git-fixes).\n- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).\n- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).\n- batman-adv: Trigger events for auto adjusted MTU (git-fixes).\n- bnx2x: fix page fault following EEH recovery (bsc#1214299).\n- bpf: Clear the probe_addr for uprobe (git-fixes).\n- bpf: Disable preemption in bpf_event_output (git-fixes).\n- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- btrfs: do not hold CPU for too long when defragging a file (bsc#1214988).\n- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).\n- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: Fix cast to enum warning (git-fixes).\n- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: Modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).\n- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).\n- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).\n- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).\n- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).\n- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).\n- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).\n- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).\n- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).\n- define more Hyper-V related constants (bsc#1206453).\n- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: Fix docs syntax (git-fixes).\n- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).\n- docs/process/howto: Replace C89 with C11 (bsc#1214756).\n- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: Fix hex printing of signed values (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: Add smu write msg id fail retry process (git-fixes).\n- drm/amd/display: Apply 60us prefetch for DCFCLK \u0026lt;= 300Mhz (git-fixes).\n- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).\n- drm/amd/display: Do not set drr on pipe commit (git-fixes).\n- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).\n- drm/amd/display: Ensure that planes are in the same order (git-fixes).\n- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).\n- drm/amd/display: Remove wait while locked (git-fixes).\n- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).\n- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).\n- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).\n- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).\n- drm/amd/display: disable RCO for DCN314 (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).\n- drm/amd/display: fix the white screen issue when \u003e= 64GB DRAM (git-fixes).\n- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: prevent potential division by zero errors (git-fixes).\n- drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/display: trigger timing sync only if TG is running (git-fixes).\n- drm/amd/pm/smu7: move variables to where they are used (git-fixes).\n- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).\n- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).\n- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).\n- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).\n- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: Remove unnecessary domain argument (git-fixes).\n- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/amdgpu: add S/G display parameter (git-fixes).\n- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).\n- drm/amdgpu: fix memory leak in mes self test (git-fixes).\n- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).\n- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).\n- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: Fix DRAM init on AST2200 (git-fixes).\n- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).\n- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).\n- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active MMU context (git-fixes).\n- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).\n- drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes).\n- drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes).\n- drm/i915/gvt: Verify pfn is 'valid' before dereferencing 'struct page' (git-fixes).\n- drm/i915/sdvo: fix panel_type initialization (git-fixes).\n- drm/i915: Fix premature release of request's reusable memory (git-fixes).\n- drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes).\n- drm/mediatek: Fix dereference before null check (git-fixes).\n- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).\n- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).\n- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).\n- drm/msm/mdp5: Do not leak some plane state (git-fixes).\n- drm/msm: Update dev core dump to not print backwards (git-fixes).\n- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).\n- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).\n- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).\n- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix UAF on handle creation (git-fixes).\n- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).\n- drm/rockchip: Do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: Reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/stm: ltdc: fix late dereference check (git-fixes).\n- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned BOs for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: Fix shader stage validation (git-fixes).\n- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).\n- drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes).\n- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).\n- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: Fix typos in comments (jsc#PED-5738).\n- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).\n- e1000: switch to napi_build_skb() (jsc#PED-5738).\n- e1000: switch to napi_consume_skb() (jsc#PED-5738).\n- exfat: fix unexpected EOF while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).\n- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: Improve performance of sys_imageblit() (git-fixes).\n- fbdev: Update fbdev source file paths (git-fixes).\n- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: Fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).\n- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).\n- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).\n- fs: do not update freeing inode i_io_list (bsc#1214813).\n- fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813).\n- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).\n- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).\n- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).\n- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).\n- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).\n- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: Delete error messages for failed memory allocations (git-fixes).\n- i2c: Improve size determinations (git-fixes).\n- i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes).\n- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: designware: Correct length byte validation logic (git-fixes).\n- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).\n- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).\n- i2c: nomadik: Remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: Remove unnecessary goto label (git-fixes).\n- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).\n- i3c: master: svc: fix probe failure when no i3c device exist (git-fixes).\n- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for FDIR filters (git-fixes).\n- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).\n- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).\n- ice: Fix max_rate check while configuring TX rate limits (git-fixes).\n- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).\n- idr: fix param name in idr_alloc_cyclic() doc (git-fixes).\n- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).\n- iio: adc: stx104: Implement and utilize register structures (git-fixes).\n- iio: adc: stx104: Utilize iomap interface (git-fixes).\n- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#PED-5738).\n- intel: remove unused macros (jsc#PED-5738).\n- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).\n- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).\n- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).\n- iommu/amd: Fix compile warning in init code (git-fixes).\n- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).\n- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: Fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).\n- iommu/iova: Fix module config properly (git-fixes).\n- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).\n- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).\n- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).\n- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).\n- iommu/mediatek: Use component_match_add (git-fixes).\n- iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes).\n- iommu/omap: Fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/s390: Fix duplicate domain attachments (git-fixes).\n- iommu/sun50i: Consider all fault sources for reset (git-fixes).\n- iommu/sun50i: Fix R/W permission check (git-fixes).\n- iommu/sun50i: Fix flush size (git-fixes).\n- iommu/sun50i: Fix reset release (git-fixes).\n- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).\n- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).\n- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).\n- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).\n- ipmi:ssif: Add check for kstrdup (git-fixes).\n- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: Ignore newly added SRSO mitigation functions\n- kabi/severities: ignore mlx4 internal symbols\n- kabi: Allow extra bugsints (bsc#1213927).\n- kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025).\n- kconfig: fix possible buffer overflow (git-fixes).\n- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.\n- kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes).\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).\n- leds: multicolor: Use rounded division when calculating color components (git-fixes).\n- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: Fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: Remove redundant if statement (git-fixes).\n- media: i2c: ccs: Check rules is non-NULL (git-fixes).\n- media: i2c: rdacm21: Fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: Fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).\n- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: Fix vflip / hflip set functions (git-fixes).\n- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).\n- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for H.264 (git-fixes).\n- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).\n- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).\n- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).\n- mkspec: Allow unsupported KMPs (bsc#1214386)\n- mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236).\n- mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236).\n- mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236).\n- mlx4: Delete custom device management logic (bsc#1187236).\n- mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236).\n- mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236).\n- mlx4: Move the bond work to the core driver (bsc#1187236).\n- mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236).\n- mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236).\n- mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236).\n- mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236).\n- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).\n- mmc: block: Fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).\n- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).\n- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).\n- net/mlx4: Remove many unnecessary NULL values (bsc#1187236).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).\n- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).\n- net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes).\n- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)\n- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).\n- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- ntb: Clean up tx tail index on link down (git-fixes).\n- ntb: Drop packets when qp link is down (git-fixes).\n- ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: Fix SRSO mess (git-fixes).\n- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).\n- objtool: Union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.\n- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- pinctrl: amd: Mask wake bits on probe again (git-fixes).\n- pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes).\n- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes).\n- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).\n- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes).\n- platform/x86: dell-sysman: Fix reference leak (git-fixes).\n- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729).\n- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).\n- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).\n- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/xics: Remove unnecessary endian conversion (bsc#1065729).\n- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.\n- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: Check start of empty przs during init (git-fixes).\n- pwm: Add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: lpc32xx: Remove handling of PWM channels (git-fixes).\n- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).\n- qed: Fix scheduling in a tasklet while getting stats (git-fixes).\n- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).\n- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: Fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpm/mkspec-dtb: support for nested subdirs.\n- rpmsg: glink: Add check for kstrdup (git-fixes).\n- rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension).\n- s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes).\n- s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124).\n- s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023).\n- s390/ipl: add eckd dump support (jsc#PED-2025).\n- s390/ipl: add eckd support (jsc#PED-2023).\n- s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023).\n- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).\n- s390/ipl: use octal values instead of S_* macros (jsc#PED-2023).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes).\n- s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148).\n- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).\n- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: Use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).\n- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).\n- scsi: 53c700: Check that command slot is not NULL (git-fixes).\n- scsi: RDMA/srp: Fix residual handling (git-fixes)\n- scsi: bsg: Increase number of devices (bsc#1210048).\n- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).\n- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).\n- scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes).\n- scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes).\n- scsi: lpfc: Remove reftag check in DIF paths (git-fixes).\n- scsi: qedf: Fix NULL dereference in error handling (git-fixes).\n- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928).\n- scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928).\n- scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928).\n- scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928).\n- scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928).\n- scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928).\n- scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928).\n- scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928).\n- scsi: qla2xxx: Remove unused declarations (bsc#1214928).\n- scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928).\n- scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928).\n- scsi: scsi_debug: Remove dead code (git-fixes).\n- scsi: sg: Increase number of devices (bsc#1210048).\n- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).\n- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: storvsc: Always set no_report_opcodes (git-fixes).\n- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).\n- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).\n- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).\n- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).\n- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- selftests/futex: Order calls to futex_lock_pi (git-fixes).\n- selftests/harness: Actually report SKIP for signal tests (git-fixes).\n- selftests/resctrl: Close perf value read fd on errors (git-fixes).\n- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: Switch off timeout (git-fixes).\n- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).\n- selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).\n- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: Fix DMA buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while NIC is resetting (git-fixes).\n- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).\n- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- tcpm: Avoid soft reset when partner does not support get_status (git-fixes).\n- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: Add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: Provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: Rename del_timer() to timer_delete() (bsc#1213970).\n- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: Replace BUG_ON()s (bsc#1213970).\n- timers: Silently ignore timers with a NULL function (bsc#1213970).\n- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: Update kernel-doc for various functions (bsc#1213970).\n- timers: Use del_timer_sync() even on UP (bsc#1213970).\n- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: Fix not to count error code to total length (git-fixes).\n- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).\n- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: Fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: Fix race issue between cpu buffer write and swap (git-fixes).\n- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).\n- tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes).\n- tracing: Remove unnecessary copying of tr-\u003ecurrent_trace (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).\n- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).\n- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).\n- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes).\n- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: Fix typos in gadget.c (git-fixes).\n- usb: dwc3: Properly handle processing of pending events (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).\n- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).\n- usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes).\n- usb: serial: option: add Quectel EC200A module support (git-fixes).\n- usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes).\n- usb: serial: option: support Quectel EM060K_128 (git-fixes).\n- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpci: clear the fault status bit (git-fixes).\n- usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes).\n- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).\n- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes).\n- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).\n- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: Fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).\n- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).\n- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).\n- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729).\n- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).\n- x86/alternative: Fix race in try_get_desc() (git-fixes).\n- x86/alternative: Make custom return thunk unconditional (git-fixes).\n- x86/boot/e820: Fix typo in e820.c comment (git-fixes).\n- x86/bugs: Reset speculation control settings on init (git-fixes).\n- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).\n- x86/cpu: Add Lunar Lake M (git-fixes).\n- x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes).\n- x86/cpu: Clean up SRSO return thunk mess (git-fixes).\n- x86/cpu: Cleanup the untrain mess (git-fixes).\n- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: Rename original retbleed methods (git-fixes).\n- x86/cpu: Rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes).\n- x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes).\n- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).\n- x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453).\n- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).\n- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).\n- x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453).\n- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).\n- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).\n- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).\n- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes).\n- x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes).\n- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).\n- x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes).\n- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).\n- x86/mce: Retrieve poison range from hardware (git-fixes).\n- x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes).\n- x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes).\n- x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes).\n- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).\n- x86/purgatory: remove PGO flags (git-fixes).\n- x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes).\n- x86/resctl: fix scheduler confusion with 'current' (git-fixes).\n- x86/resctrl: Fix task CLOSID/RMID update race (git-fixes).\n- x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes).\n- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).\n- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).\n- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).\n- x86/rtc: Remove __init for runtime functions (git-fixes).\n- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).\n- x86/sgx: Reduce delay and interference of enclave release (git-fixes).\n- x86/speculation: Add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).\n- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).\n- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: Explain the untraining sequences a bit more (git-fixes).\n- x86/srso: Fix build breakage with the LLVM linker (git-fixes).\n- x86/srso: Fix return thunks in generated code (git-fixes).\n- x86/static_call: Fix __static_call_fixup() (git-fixes).\n- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).\n- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).\n- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).\n- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n","status":"published","published":"2023-10-05T12:35:12Z","modified":"2026-02-04T03:01:05.570458Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:4766-1","title":"Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)","description":"This update for the Linux Kernel 5.14.21-150500_11 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584).\n- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097)\n- CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215971)\n- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215442).\n- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)\n","status":"published","published":"2023-12-13T12:35:06Z","modified":"2026-02-04T02:48:53.700484Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4805-1","title":"Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)","description":"This update for the Linux Kernel 5.14.21-150500_53 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584).\n- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097)\n- CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215971)\n- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215442).\n- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)\n","status":"published","published":"2023-12-13T17:04:25Z","modified":"2026-02-04T04:21:15.754887Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4822-1","title":"Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4)","description":"This update for the Linux Kernel 5.14.21-150400_24_60 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584).\n- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097)\n- CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215971)\n- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215442).\n- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)\n","status":"published","published":"2023-12-13T20:33:46Z","modified":"2026-02-04T03:53:23.917626Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4841-1","title":"Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)","description":"This update for the Linux Kernel 5.14.21-150500_55_12 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584).\n- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097)\n- CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215971)\n- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215442).\n- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)\n","status":"published","published":"2023-12-14T10:35:02Z","modified":"2026-02-04T03:06:01.31849Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4848-1","title":"Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)","description":"This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584).\n- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097)\n- CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215971)\n- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215442).\n- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)\n","status":"published","published":"2023-12-14T13:06:05Z","modified":"2026-02-04T03:45:10.236841Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4849-1","title":"Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP4)","description":"This update for the Linux Kernel 5.14.21-150400_24_28 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584).\n- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097)\n- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215442).\n- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)\n","status":"published","published":"2023-12-14T12:04:03Z","modified":"2026-02-04T03:53:53.843307Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4872-1","title":"Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP4)","description":"This update for the Linux Kernel 5.14.21-150400_24_81 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584).\n- CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc#1215097)\n- CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215971)\n- CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215442).\n- CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. (bsc#1215519)\n","status":"published","published":"2023-12-14T18:33:33Z","modified":"2026-02-04T04:40:25.871102Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2024:3190-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).\n- CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).\n- CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).\n- CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).\n- CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).\n- CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).\n- CVE-2023-52489: Fix race in accessing memory_section-\u003eusage (bsc#1221326).\n- CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).\n- CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).\n- CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).\n- CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).\n- CVE-2024-44939: fix null ptr deref in dtInsertEntry (bsc#1229820).\n- CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).\n- CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).\n- CVE-2024-43902: Add null checker before passing variables (bsc#1229767).\n- CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)\n- CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).\n- CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)\n- CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).\n- CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).\n- CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).\n- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)\n- CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).\n- CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).\n- CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)\n- CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).\n- CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)\n- CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).\n- CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).\n- CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).\n- CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).\n- CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).\n- CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)\n- CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)\n- CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)\n- CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)\n- CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).\n- CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)\n- CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).\n- CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).\n- CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).\n- CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).\n- CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).\n- CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).\n- CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).\n- CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).\n- CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).\n- CVE-2024-27016: Validate pppoe header (bsc#1223807).\n- CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).\n- CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).\n- CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).\n- CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).\n- CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).\n- CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).\n- CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)\n- CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)\n- CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)\n- CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727 CVE-2024-42157 git-fixes).\n- CVE-2024-26677: Blacklist e7870cf13d20 ('rxrpc: Fix delayed ACKs to not set the reference serial number') (bsc#1222387)\n- CVE-2024-36009: Blacklist 467324bcfe1a ('ax25: Fix netdev refcount issue') (bsc#1224542)\n- CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).\n- CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)\n- CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)\n- CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383)\n- CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)\n- CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345)\n- CVE-2024-42322: Properly dereference pe in ip_vs_add_service (bsc#1229347)\n- CVE-2024-42301: Fix the array out-of-bounds risk (bsc#1229407).\n- CVE-2024-42318: Do not lose track of restrictions on cred_transfer (bsc#1229351).\n- CVE-2024-26669: Fix chain template offload (bsc#1222350).\n- CVE-2023-52889: Fix null pointer deref when receiving skb during sock creation (bsc#1229287,).\n- CVE-2022-48645: Move enetc_set_psfp() out of the common enetc_set_features() (bsc#1223508).\n- CVE-2024-41007: Use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863).\n- CVE-2024-36933: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).\n- CVE-2024-42295: Handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).\n- CVE-2024-42319: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (bsc#1229350).\n- CVE-2024-43860: Skip over memory region when node value is NULL (bsc#1229319).\n- CVE-2024-43831: Handle invalid decoder vsi (bsc#1229309).\n- CVE-2024-43849: Protect locator_addr with the main mutex (bsc#1229307).\n- CVE-2024-43841: Do not use strlen() in const context (bsc#1229304).\n- CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).\n- CVE-2024-41088: Fix infinite loop when xmit fails (bsc#1228469).\n- CVE-2024-42281: Fix a segment issue when downgrading gso_size (bsc#1229386).\n- CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)\n- CVE-2024-41080: Fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616).\n- CVE-2024-42246: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).\n- CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)\n- CVE-2024-26735: Fix possible use-after-free and null-ptr-deref (bsc#1222372).\n- CVE-2024-42106: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).\n- CVE-2024-38662: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).\n- CVE-2024-42110: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).\n- CVE-2024-42247: Avoid unaligned 64-bit memory accesses (bsc#1228988).\n- CVE-2022-48865: Fix kernel panic when enabling bearer (bsc#1228065).\n- CVE-2023-52498: Fix possible deadlocks in core system-wide PM code (bsc#1221269).\n- CVE-2024-41068: Fix sclp_init() cleanup on failure (bsc#1228579).\n- CVE-2022-48808: Fix panic when DSA master device unbinds on shutdown (bsc#1227958).\n- CVE-2024-42095: Fix Errata i2310 with RX FIFO level check (bsc#1228446).\n- CVE-2024-40978: Fix crash while reading debugfs attribute (bsc#1227929).\n- CVE-2024-42107: Do not process extts if PTP is disabled (bsc#1228494).\n- CVE-2024-42139: Fix improper extts handling (bsc#1228503).\n- CVE-2024-42148: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).\n- CVE-2024-42142: E-switch, Create ingress ACL when needed (bsc#1228491).\n- CVE-2024-42162: Account for stopped queues when reading NIC stats (bsc#1228706).\n- CVE-2024-42082: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482).\n- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667).\n- CVE-2024-40995: Fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).\n- CVE-2024-38602: Merge repeat codes in ax25_dev_device_down() (git-fixes CVE-2024-38602 bsc#1226613).\n- CVE-2024-38554: Fix reference count leak issue of net_device (bsc#1226742).\n- CVE-2024-36929: Reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).\n- CVE-2024-41009: Fix overrunning reservations in ringbuf (bsc#1228020).\n- CVE-2024-27024: Fix WARNING in rds_conn_connect_if_down (bsc#1223777).\n\nThe following non-security bugs were fixed:\n\n- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC (git-fixes).\n- ACPI: bus: Indicate support for the Generic Event Device thru _OSC (git-fixes).\n- ACPI: bus: Rework system-level device notification handling (git-fixes).\n- ACPI: thermal: Drop nocrt parameter (git-fixes).\n- ACPI: x86: s2idle: Post-increment variables when getting constraints (git-fixes).\n- afs: Do not cross .backup mountpoint from backup volume (git-fixes).\n- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).\n- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).\n- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).\n- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (git-fixes).\n- ALSA: line6: Fix racy access to midibuf (stable-fixes).\n- ALSA: timer: Relax start tick time check for slave timer elements (git-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (stable-fixes).\n- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).\n- ALSA: usb-audio: Support Yamaha P-125 quirk entry (stable-fixes).\n- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (stable-fixes).\n- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes)\n- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes)\n- arm64: Add Neoverse-V2 part (git-fixes)\n- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes)\n- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes)\n- arm64: barrier: Restore spec_bar() macro (git-fixes)\n- arm64: cpufeature: Add missing .field_width for GIC system registers (git-fixes)\n- arm64: cpufeature: Fix the visibility of compat hwcaps (git-fixes)\n- arm64: cpufeature: Force HWCAP to be based on the sysreg visible to (git-fixes)\n- arm64: cputype: Add Cortex-A720 definitions (git-fixes)\n- arm64: cputype: Add Cortex-A725 definitions (git-fixes)\n- arm64: cputype: Add Cortex-X1C definitions (git-fixes)\n- arm64: cputype: Add Cortex-X3 definitions (git-fixes)\n- arm64: cputype: Add Cortex-X4 definitions (git-fixes)\n- arm64: cputype: Add Cortex-X925 definitions (git-fixes)\n- arm64: cputype: Add Neoverse-V3 definitions (git-fixes)\n- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes)\n- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes)\n- arm64: errata: Add workaround for Arm errata 3194386 and 3312417 (git-fixes)\n- arm64: errata: Expand speculative SSBS workaround (again) (git-fixes)\n- arm64: errata: Expand speculative SSBS workaround (git-fixes)\n- arm64: errata: Unify speculative SSBS errata logic (git-fixes) Also update default configuration.\n- arm64: Fix KASAN random tag seed initialization (git-fixes)\n- arm64: Fix KASAN random tag seed initialization (git-fixes)\n- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).\n- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).\n- async: Introduce async_schedule_dev_nocall() (bsc#1221269).\n- async: Split async_schedule_node_domain() (bsc#1221269).\n- Bluetooth: Fix usage of __hci_cmd_sync_status (git-fixes).\n- Bluetooth: hci_core: Fix not handling hibernation actions (git-fixes).\n- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (git-fixes).\n- Bluetooth: L2CAP: Fix deadlock (git-fixes).\n- bpf: Fix a kernel verifier crash in stacksafe() (bsc#1225903).\n- bpf: kprobe: remove unused declaring of bpf_kprobe_override (git-fixes).\n- btrfs: fix leak of qgroup extent records after transaction abort (git-fixes).\n- btrfs: make btrfs_destroy_delayed_refs() return void (git-fixes).\n- btrfs: remove unnecessary prototype declarations at disk-io.c (git-fixes).\n- btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).\n- cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop (bsc#1229418).\n- ceph: issue a cap release immediately if no cap exists (bsc#1225162).\n- ceph: periodically flush the cap releases (bsc#1225162).\n- cpu/SMT: Enable SMT only if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).\n- cpuidle, ACPI: Evaluate LPI arch_flags for broadcast timer (git-fixes).\n- docs: KVM: Fix register ID of SPSR_FIQ (git-fixes).\n- drm: add missing MODULE_DESCRIPTION() macros (stable-fixes).\n- drm: panel-orientation-quirks: Add labels for both Valve Steam Deck revisions (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for Aya Neo KUN (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for Nanote UMPC-01 (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for OrangePi Neo (stable-fixes).\n- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored (stable-fixes).\n- drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (stable-fixes).\n- drm/amd/display: avoid using null object of framebuffer (git-fixes).\n- drm/amd/display: Fix \u0026\u0026 vs || typos (git-fixes).\n- drm/amd/display: Skip Recompute DSC Params if no Stream on Link (stable-fixes).\n- drm/amd/display: Validate hw_points_num before using it (stable-fixes).\n- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (stable-fixes).\n- drm/amdgpu: Actually check flags for all context ops (stable-fixes).\n- drm/amdgpu: Add lock around VF RLCG interface (stable-fixes).\n- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent (stable-fixes).\n- drm/amdgpu: Fix the null pointer dereference to ras_manager (stable-fixes).\n- drm/amdgpu: Validate TA binary size (stable-fixes).\n- drm/amdgpu/jpeg2: properly set atomics vmid field (stable-fixes).\n- drm/amdgpu/pm: Fix the null pointer dereference for smu7 (stable-fixes).\n- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (stable-fixes).\n- drm/amdgpu/pm: Fix the param type of set_power_profile_mode (stable-fixes).\n- drm/bridge: analogix_dp: properly handle zero sized AUX transactions (stable-fixes).\n- drm/bridge: tc358768: Attempt to fix DSI horizontal timings (stable-fixes).\n- drm/client: fix null pointer dereference in drm_client_modeset_probe (git-fixes).\n- drm/dp_mst: Skip CSN if topology probing is not done yet (stable-fixes).\n- drm/lima: set gp bus_stop bit before hard reset (stable-fixes).\n- drm/msm/dp: reset the link phy params before link training (git-fixes).\n- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (git-fixes).\n- drm/msm/dpu: do not play tricks with debug macros (git-fixes).\n- drm/tegra: Zero-initialize iosys_map (stable-fixes).\n- exfat: fix inode-\u003ei_blocks for non-512 byte sector size device (git-fixes).\n- exfat: fix potential deadlock on __exfat_get_dentry_set (git-fixes).\n- exfat: redefine DIR_DELETED as the bad cluster number (git-fixes).\n- exfat: support dynamic allocate bh for exfat_entry_set_cache (git-fixes).\n- fs/netfs/fscache_cookie: add missing 'n_accesses' check (bsc#1229453).\n- fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).\n- genirq: Add might_sleep() to disable_irq() (git-fixes).\n- genirq: Always limit the affinity to online CPUs (git-fixes).\n- genirq: Do not return error on missing optional irq_request_resources() (git-fixes).\n- genirq: Take the proposed affinity at face value if force==true (git-fixes).\n- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (git-fixes).\n- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (git-fixes).\n- genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() (git-fixes).\n- genirq/irqdesc: Do not try to remove non-existing sysfs files (git-fixes).\n- genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (git-fixes).\n- genirq/msi: Shutdown managed interrupts with unsatifiable affinities (git-fixes).\n- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (git-fixes).\n- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (git-fixes).\n- i2c: smbus: Improve handling of stuck alerts (git-fixes).\n- i2c: smbus: Send alert notifications to all devices if source not found (git-fixes).\n- iommu/amd: Convert comma to semicolon (git-fixes).\n- ip6_tunnel: Fix broken GRO (bsc#1229444).\n- ipv6: sr: fix incorrect unregister order (git-fixes).\n- irqdomain: Drop bogus fwspec-mapping error handling (git-fixes).\n- irqdomain: Fix association race (git-fixes).\n- irqdomain: Fix disassociation race (git-fixes).\n- irqdomain: Fix domain registration race (git-fixes).\n- irqdomain: Fix mapping-creation race (git-fixes).\n- irqdomain: Fixed unbalanced fwnode get and put (git-fixes).\n- irqdomain: Look for existing mapping only once (git-fixes).\n- irqdomain: Refactor __irq_domain_alloc_irqs() (git-fixes).\n- irqdomain: Report irq number for NOMAP domains (git-fixes).\n- kprobes: Fix to check symbol prefixes correctly (git-fixes).\n- lockd: move from strlcpy with unused retval to strscpy (git-fixes).\n- memcg: protect concurrent access to mem_cgroup_idr (git-fixes).\n- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).\n- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).\n- mmc: dw_mmc: allow biu and ciu clocks to defer (git-fixes).\n- mmc: mmc_test: Fix NULL dereference on allocation failure (git-fixes).\n- net: ks8851: Fix another TX stall caused by wrong ISR flag handling (git-fixes).\n- net: ks8851: Fix deadlock with the SPI chip variant (git-fixes).\n- net: ks8851: Fix potential TX stall after interface reopen (git-fixes).\n- net: ks8851: Fix TX stall caused by TX buffer overrun (gix-fixes).\n- net: mana: Add support for page sizes other than 4KB on ARM64 (jsc#PED-8491 bsc#1226530).\n- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1229154).\n- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes).\n- net: mana: Fix RX buf alloc_size alignment and atomic op panic (bsc#1229086).\n- net: remove two BUG() from skb_checksum_help() (bsc#1229312).\n- net: usb: qmi_wwan: fix memory leak for not ip packets (git-fixes).\n- net/rds: fix possible cp null dereference (git-fixes).\n- net/sched: initialize noop_qdisc owner (git-fixes).\n- nfc: pn533: Add poll mod list filling check (git-fixes).\n- nfs: expose /proc/net/sunrpc/nfs in net namespaces (git-fixes).\n- nfs: make the rpc_stat per net namespace (git-fixes).\n- NFSD: add posix ACLs to struct nfsd_attrs (git-fixes).\n- NFSD: add security label to struct nfsd_attrs (git-fixes).\n- NFSD: fix regression with setting ACLs (git-fixes).\n- NFSD: Fix strncpy() fortify warning (git-fixes).\n- NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND (git-fixes).\n- NFSD: introduce struct nfsd_attrs (git-fixes).\n- NFSD: move from strlcpy with unused retval to strscpy (git-fixes).\n- NFSD: Optimize DRC bucket pruning (git-fixes).\n- nfsd: return error if nfs4_setacl fails (git-fixes).\n- NFSD: set attributes when creating symlinks (git-fixes).\n- nfsd: use locks_inode_context helper (git-fixes).\n- nilfs2: Remove check for PageError (git-fixes).\n- nvme_core: scan namespaces asynchronously (bsc#1224105).\n- ocfs2: use coarse time for new created files (git-fixes).\n- padata: Fix possible divide-by-0 panic in padata_mt_helper() (git-fixes).\n- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (git-fixes).\n- platform/x86/amd/hsmp: Add support for ACPI based probing (jsc#PED-8779).\n- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket (jsc#PED-8779).\n- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() (jsc#PED-8779).\n- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors (jsc#PED-8779).\n- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS (jsc#PED-8779).\n- platform/x86/amd/hsmp: Create static func to handle platdev (jsc#PED-8779).\n- platform/x86/amd/hsmp: Define a struct to hold mailbox regs (jsc#PED-8779).\n- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket (jsc#PED-8779).\n- platform/x86/amd/hsmp: Move hsmp_test to probe (jsc#PED-8779).\n- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh (jsc#PED-8779).\n- platform/x86/amd/hsmp: Remove extra parenthesis and add a space (jsc#PED-8779).\n- platform/x86/amd/hsmp: Restructure sysfs group creation (jsc#PED-8779).\n- platform/x86/amd/hsmp: switch to use device_add_groups() (jsc#PED-8779).\n- power: supply: axp288_charger: Fix constant_charge_voltage writes (git-fixes).\n- power: supply: axp288_charger: Round constant_charge_voltage writes down (git-fixes).\n- powerpc: Fail build if using recordmcount with binutils v2.37 (bsc#1194869).\n- powerpc: Mark .opd section read-only (bsc#1194869).\n- powerpc: use generic version of arch_is_kernel_initmem_freed() (bsc#1194869).\n- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (bsc#1194869).\n- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (bsc#1194869).\n- powerpc/io: Avoid clang null pointer arithmetic warnings (bsc#1194869).\n- powerpc/kexec_file: fix cpus node update to FDT (bsc#1194869).\n- powerpc/kexec: make the update_cpus_node() function public (bsc#1194869).\n- powerpc/kexec: split CONFIG_KEXEC_FILE and CONFIG_CRASH_DUMP (bsc#1194869).\n- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (bsc#1194869).\n- powerpc/pseries: Whitelist dtl slub object for copying to userspace (bsc#1194869).\n- powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE (bsc#1194869).\n- powerpc/topology: Check if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).\n- powerpc/xmon: Check cpu id in commands 'c#', 'dp#' and 'dx#' (bsc#1194869).\n- RDMA/mana_ib: Use virtual address in dma regions for MRs (git-fixes).\n- RDMA/rxe: Fix incomplete state save in rxe_requester (git-fixes)\n- RDMA/rxe: Fix rxe_modify_srq (git-fixes)\n- RDMA/rxe: Move work queue code to subroutines (git-fixes)\n- s390/cpacf: get rid of register asm (git-fixes bsc#1227079 bsc#1229187).\n- s390/cpacf: Make use of invalid opcode produce a link error (git-fixes bsc#1227079).\n- s390/cpacf: Split and rework cpacf query functions (git-fixes bsc#1229187).\n- s390/dasd: fix error checks in dasd_copy_pair_store() (git-fixes bsc#1229190).\n- s390/dasd: fix error recovery leading to data corruption on ESE devices (git-fixes bsc#1229573).\n- s390/sclp: Prevent release of buffer in I/O (git-fixes bsc#1229572).\n- s390/uv: Panic for set and remove shared access UVC errors (git-fixes bsc#1229188).\n- spi: spi-fsl-lpspi: Fix scldiv calculation (git-fixes).\n- RDMA/rxe: Handle zero length rdma (git-fixes)\n- sunrpc: add a struct rpc_stats arg to rpc_create_args (git-fixes).\n- SUNRPC: Fix a race to wake a sync task (git-fixes).\n- swiotlb: fix swiotlb_bounce() to do partial sync's correctly (git-fixes).\n- syscalls: fix compat_sys_io_pgetevents_time64 usage (git-fixes).\n- tracing: Return from tracing_buffers_read() if the file has been closed (bsc#1229136 git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- vfio/pci: fix potential memory leak in vfio_intx_enable() (git-fixes).\n- wifi: iwlwifi: fw: fix wgds rev 3 exact size (git-fixes).\n- wifi: mwifiex: duplicate static structs used in driver instances (git-fixes).\n- x86/APM: drop the duplicate APM_MINOR_DEV macro (git-fixes).\n- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (git-fixes).\n- x86/mm: Fix pti_clone_entry_text() for i386 (git-fixes).\n- x86/mtrr: Check if fixed MTRRs exist before saving them (git-fixes).\n- x86/pm: Work around false positive kmemleak report in msr_build_context() (git-fixes).\n- xfs: Fix missing interval for missing_owner in xfs fsmap (git-fixes).\n- xfs: Fix the owner setting issue for rmap query in xfs fsmap (git-fixes).\n- xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code (git-fixes).\n- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (git-fixes).\n- xprtrdma: Fix rpcrdma_reqs_reset() (git-fixes).\n","status":"published","published":"2024-09-10T08:46:37Z","modified":"2026-02-04T02:34:20.347313Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3209-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).\n- CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).\n- CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).\n- CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).\n- CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).\n- CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).\n- CVE-2023-52489: Fix race in accessing memory_section-\u003eusage (bsc#1221326).\n- CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).\n- CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).\n- CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).\n- CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).\n- CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).\n- CVE-2024-41087: Fix double free on error (bsc#1228466).\n- CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).\n- CVE-2024-43902: Add null checker before passing variables (bsc#1229767).\n- CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)\n- CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).\n- CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)\n- CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).\n- CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).\n- CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).\n- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)\n- CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).\n- CVE-2024-26812: struct virqfd kABI workaround (bsc#1222808).\n- CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)\n- CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).\n- CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)\n- CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).\n- CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).\n- CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).\n- CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).\n- CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).\n- CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)\n- CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)\n- CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)\n- CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)\n- CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).\n- CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)\n- CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).\n- CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).\n- CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).\n- CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).\n- CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).\n- CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).\n- CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).\n- CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).\n- CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).\n- CVE-2024-27016: Validate pppoe header (bsc#1223807).\n- CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).\n- CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).\n- CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).\n- CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).\n- CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).\n- CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).\n- CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)\n- CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)\n- CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)\n- CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727).\n- CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387)\n- CVE-2024-36009: Blacklist 467324bcfe1a ('ax25: Fix netdev refcount issue') (bsc#1224542)\n- CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).\n- CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)\n- CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)\n- CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383)\n- CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)\n- CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345)\n- CVE-2024-42322: Properly dereference pe in ip_vs_add_service (bsc#1229347)\n- CVE-2024-42301: Fix the array out-of-bounds risk (bsc#1229407).\n- CVE-2024-42318: Do not lose track of restrictions on cred_transfer (bsc#1229351).\n- CVE-2024-26669: Fix chain template offload (bsc#1222350).\n- CVE-2023-52889: Fix null pointer deref when receiving skb during sock creation (bsc#1229287).\n- CVE-2022-48645: Move enetc_set_psfp() out of the common enetc_set_features() (bsc#1223508).\n- CVE-2024-41007: Use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863).\n- CVE-2024-36933: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).\n- CVE-2024-42295: Handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).\n- CVE-2024-42319: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (bsc#1229350).\n- CVE-2024-43860: Skip over memory region when node value is NULL (bsc#1229319).\n- CVE-2024-43831: Handle invalid decoder vsi (bsc#1229309).\n- CVE-2024-43849: Protect locator_addr with the main mutex (bsc#1229307).\n- CVE-2024-43841: Do not use strlen() in const context (bsc#1229304).\n- CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).\n- CVE-2024-41088: Fix infinite loop when xmit fails (bsc#1228469).\n- CVE-2024-42281: Fix a segment issue when downgrading gso_size (bsc#1229386).\n- CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)\n- CVE-2024-41080: Fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616).\n- CVE-2024-42246: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).\n- CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)\n- CVE-2024-26735: Fix possible use-after-free and null-ptr-deref (bsc#1222372).\n- CVE-2024-42106: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).\n- CVE-2024-38662: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).\n- CVE-2024-42110: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).\n- CVE-2024-42247: Avoid unaligned 64-bit memory accesses (bsc#1228988).\n- CVE-2022-48865: Fix kernel panic when enabling bearer (bsc#1228065).\n- CVE-2023-52498: Fix possible deadlocks in core system-wide PM code (bsc#1221269).\n- CVE-2024-41068: Fix sclp_init() cleanup on failure (bsc#1228579).\n- CVE-2022-48808: Fix panic when DSA master device unbinds on shutdown (bsc#1227958).\n- CVE-2024-42095: Fix Errata i2310 with RX FIFO level check (bsc#1228446).\n- CVE-2024-40978: Fix crash while reading debugfs attribute (bsc#1227929).\n- CVE-2024-42107: Do not process extts if PTP is disabled (bsc#1228494).\n- CVE-2024-42139: Fix improper extts handling (bsc#1228503).\n- CVE-2024-42148: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).\n- CVE-2024-42142: E-switch, Create ingress ACL when needed (bsc#1228491).\n- CVE-2024-42162: Account for stopped queues when reading NIC stats (bsc#1228706).\n- CVE-2024-42082: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482).\n- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667).\n- CVE-2024-40995: Fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).\n- CVE-2024-38602: Merge repeat codes in ax25_dev_device_down() (bsc#1226613).\n- CVE-2024-38554: Fix reference count leak issue of net_device (bsc#1226742).\n- CVE-2024-36929: Reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).\n- CVE-2024-41009: Fix overrunning reservations in ringbuf (bsc#1228020).\n- CVE-2024-27024: Fix WARNING in rds_conn_connect_if_down (bsc#1223777).\n\nThe following non-security bugs were fixed:\n\n- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC (git-fixes).\n- ACPI: bus: Indicate support for the Generic Event Device thru _OSC (git-fixes).\n- ACPI: bus: Rework system-level device notification handling (git-fixes).\n- ACPI: thermal: Drop nocrt parameter (git-fixes).\n- ACPI: x86: s2idle: Post-increment variables when getting constraints (git-fixes).\n- afs: Do not cross .backup mountpoint from backup volume (git-fixes).\n- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).\n- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).\n- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).\n- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (git-fixes).\n- ALSA: line6: Fix racy access to midibuf (stable-fixes).\n- ALSA: timer: Relax start tick time check for slave timer elements (git-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (stable-fixes).\n- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).\n- ALSA: usb-audio: Support Yamaha P-125 quirk entry (stable-fixes).\n- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (stable-fixes).\n- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes)\n- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes)\n- arm64: Add Neoverse-V2 part (git-fixes)\n- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes)\n- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes)\n- arm64: barrier: Restore spec_bar() macro (git-fixes)\n- arm64: cpufeature: Add missing .field_width for GIC system registers (git-fixes)\n- arm64: cpufeature: Fix the visibility of compat hwcaps (git-fixes)\n- arm64: cpufeature: Force HWCAP to be based on the sysreg visible to (git-fixes)\n- arm64: cputype: Add Cortex-A720 definitions (git-fixes)\n- arm64: cputype: Add Cortex-A725 definitions (git-fixes)\n- arm64: cputype: Add Cortex-X1C definitions (git-fixes)\n- arm64: cputype: Add Cortex-X3 definitions (git-fixes)\n- arm64: cputype: Add Cortex-X4 definitions (git-fixes)\n- arm64: cputype: Add Cortex-X925 definitions (git-fixes)\n- arm64: cputype: Add Neoverse-V3 definitions (git-fixes)\n- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes)\n- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes)\n- arm64: errata: Expand speculative SSBS workaround (again) (git-fixes)\n- arm64: errata: Expand speculative SSBS workaround (git-fixes)\n- arm64: errata: Unify speculative SSBS errata logic (git-fixes) Also update default configuration.\n- arm64: Fix KASAN random tag seed initialization (git-fixes)\n- arm64: Fix KASAN random tag seed initialization (git-fixes)\n- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).\n- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).\n- async: Introduce async_schedule_dev_nocall() (bsc#1221269).\n- async: Split async_schedule_node_domain() (bsc#1221269).\n- Bluetooth: Fix usage of __hci_cmd_sync_status (git-fixes).\n- Bluetooth: hci_core: Fix not handling hibernation actions (git-fixes).\n- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (git-fixes).\n- Bluetooth: L2CAP: Fix deadlock (git-fixes).\n- bpf: Fix a kernel verifier crash in stacksafe() (bsc#1225903).\n- bpf: kprobe: remove unused declaring of bpf_kprobe_override (git-fixes).\n- btrfs: fix leak of qgroup extent records after transaction abort (git-fixes).\n- btrfs: make btrfs_destroy_delayed_refs() return void (git-fixes).\n- btrfs: remove unnecessary prototype declarations at disk-io.c (git-fixes).\n- btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).\n- cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop (bsc#1229418).\n- ceph: issue a cap release immediately if no cap exists (bsc#1225162).\n- ceph: periodically flush the cap releases (bsc#1225162).\n- cpu/SMT: Enable SMT only if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).\n- cpuidle, ACPI: Evaluate LPI arch_flags for broadcast timer (git-fixes).\n- docs: KVM: Fix register ID of SPSR_FIQ (git-fixes).\n- drm: add missing MODULE_DESCRIPTION() macros (stable-fixes).\n- drm: panel-orientation-quirks: Add labels for both Valve Steam Deck revisions (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for Aya Neo KUN (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for Nanote UMPC-01 (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for OrangePi Neo (stable-fixes).\n- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored (stable-fixes).\n- drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (stable-fixes).\n- drm/amd/display: avoid using null object of framebuffer (git-fixes).\n- drm/amd/display: Fix \u0026\u0026 vs || typos (git-fixes).\n- drm/amd/display: Skip Recompute DSC Params if no Stream on Link (stable-fixes).\n- drm/amd/display: Validate hw_points_num before using it (stable-fixes).\n- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (stable-fixes).\n- drm/amdgpu: Actually check flags for all context ops (stable-fixes).\n- drm/amdgpu: Add lock around VF RLCG interface (stable-fixes).\n- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent (stable-fixes).\n- drm/amdgpu: Fix the null pointer dereference to ras_manager (stable-fixes).\n- drm/amdgpu: Validate TA binary size (stable-fixes).\n- drm/amdgpu/jpeg2: properly set atomics vmid field (stable-fixes).\n- drm/amdgpu/pm: Fix the null pointer dereference for smu7 (stable-fixes).\n- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (stable-fixes).\n- drm/amdgpu/pm: Fix the param type of set_power_profile_mode (stable-fixes).\n- drm/bridge: analogix_dp: properly handle zero sized AUX transactions (stable-fixes).\n- drm/bridge: tc358768: Attempt to fix DSI horizontal timings (stable-fixes).\n- drm/client: fix null pointer dereference in drm_client_modeset_probe (git-fixes).\n- drm/dp_mst: Skip CSN if topology probing is not done yet (stable-fixes).\n- drm/lima: set gp bus_stop bit before hard reset (stable-fixes).\n- drm/msm/dp: reset the link phy params before link training (git-fixes).\n- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (git-fixes).\n- drm/msm/dpu: do not play tricks with debug macros (git-fixes).\n- drm/tegra: Zero-initialize iosys_map (stable-fixes).\n- exfat: fix inode-\u003ei_blocks for non-512 byte sector size device (git-fixes).\n- exfat: fix potential deadlock on __exfat_get_dentry_set (git-fixes).\n- exfat: redefine DIR_DELETED as the bad cluster number (git-fixes).\n- exfat: support dynamic allocate bh for exfat_entry_set_cache (git-fixes).\n- fs/netfs/fscache_cookie: add missing 'n_accesses' check (bsc#1229453).\n- fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).\n- genirq: Add might_sleep() to disable_irq() (git-fixes).\n- genirq: Always limit the affinity to online CPUs (git-fixes).\n- genirq: Do not return error on missing optional irq_request_resources() (git-fixes).\n- genirq: Take the proposed affinity at face value if force==true (git-fixes).\n- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (git-fixes).\n- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (git-fixes).\n- genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() (git-fixes).\n- genirq/irqdesc: Do not try to remove non-existing sysfs files (git-fixes).\n- genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (git-fixes).\n- genirq/msi: Shutdown managed interrupts with unsatifiable affinities (git-fixes).\n- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (git-fixes).\n- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (git-fixes).\n- i2c: smbus: Improve handling of stuck alerts (git-fixes).\n- i2c: smbus: Send alert notifications to all devices if source not found (git-fixes).\n- iommu/amd: Convert comma to semicolon (git-fixes).\n- ip6_tunnel: Fix broken GRO (bsc#1229444).\n- ipv6: sr: fix incorrect unregister order (git-fixes).\n- irqdomain: Drop bogus fwspec-mapping error handling (git-fixes).\n- irqdomain: Fix association race (git-fixes).\n- irqdomain: Fix disassociation race (git-fixes).\n- irqdomain: Fix domain registration race (git-fixes).\n- irqdomain: Fix mapping-creation race (git-fixes).\n- irqdomain: Fixed unbalanced fwnode get and put (git-fixes).\n- irqdomain: Look for existing mapping only once (git-fixes).\n- irqdomain: Refactor __irq_domain_alloc_irqs() (git-fixes).\n- irqdomain: Report irq number for NOMAP domains (git-fixes).\n- kprobes: Fix to check symbol prefixes correctly (git-fixes).\n- lockd: move from strlcpy with unused retval to strscpy (git-fixes).\n- memcg: protect concurrent access to mem_cgroup_idr (git-fixes).\n- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).\n- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).\n- mmc: dw_mmc: allow biu and ciu clocks to defer (git-fixes).\n- mmc: mmc_test: Fix NULL dereference on allocation failure (git-fixes).\n- net: ks8851: Fix another TX stall caused by wrong ISR flag handling (git-fixes).\n- net: ks8851: Fix deadlock with the SPI chip variant (git-fixes).\n- net: ks8851: Fix potential TX stall after interface reopen (git-fixes).\n- net: ks8851: Fix TX stall caused by TX buffer overrun (gix-fixes).\n- net: mana: Add support for page sizes other than 4KB on ARM64 (jsc#PED-8491 bsc#1226530).\n- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1229154).\n- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes).\n- net: mana: Fix RX buf alloc_size alignment and atomic op panic (bsc#1229086).\n- net: remove two BUG() from skb_checksum_help() (bsc#1229312).\n- net: usb: qmi_wwan: fix memory leak for not ip packets (git-fixes).\n- net/rds: fix possible cp null dereference (git-fixes).\n- net/sched: initialize noop_qdisc owner (git-fixes).\n- nfc: pn533: Add poll mod list filling check (git-fixes).\n- nfs: expose /proc/net/sunrpc/nfs in net namespaces (git-fixes).\n- nfs: make the rpc_stat per net namespace (git-fixes).\n- NFSD: add posix ACLs to struct nfsd_attrs (git-fixes).\n- NFSD: add security label to struct nfsd_attrs (git-fixes).\n- NFSD: fix regression with setting ACLs (git-fixes).\n- NFSD: Fix strncpy() fortify warning (git-fixes).\n- NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND (git-fixes).\n- NFSD: introduce struct nfsd_attrs (git-fixes).\n- NFSD: move from strlcpy with unused retval to strscpy (git-fixes).\n- NFSD: Optimize DRC bucket pruning (git-fixes).\n- nfsd: return error if nfs4_setacl fails (git-fixes).\n- NFSD: set attributes when creating symlinks (git-fixes).\n- nfsd: use locks_inode_context helper (git-fixes).\n- nilfs2: Remove check for PageError (git-fixes).\n- nvme_core: scan namespaces asynchronously (bsc#1224105).\n- ocfs2: use coarse time for new created files (git-fixes).\n- padata: Fix possible divide-by-0 panic in padata_mt_helper() (git-fixes).\n- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (git-fixes).\n- platform/x86/amd/hsmp: Add support for ACPI based probing (jsc#PED-8779).\n- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket (jsc#PED-8779).\n- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() (jsc#PED-8779).\n- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors (jsc#PED-8779).\n- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS (jsc#PED-8779).\n- platform/x86/amd/hsmp: Create static func to handle platdev (jsc#PED-8779).\n- platform/x86/amd/hsmp: Define a struct to hold mailbox regs (jsc#PED-8779).\n- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket (jsc#PED-8779).\n- platform/x86/amd/hsmp: Move hsmp_test to probe (jsc#PED-8779).\n- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh (jsc#PED-8779).\n- platform/x86/amd/hsmp: Remove extra parenthesis and add a space (jsc#PED-8779).\n- platform/x86/amd/hsmp: Restructure sysfs group creation (jsc#PED-8779).\n- platform/x86/amd/hsmp: switch to use device_add_groups() (jsc#PED-8779).\n- power: supply: axp288_charger: Fix constant_charge_voltage writes (git-fixes).\n- power: supply: axp288_charger: Round constant_charge_voltage writes down (git-fixes).\n- powerpc: Fail build if using recordmcount with binutils v2.37 (bsc#1194869).\n- powerpc: Mark .opd section read-only (bsc#1194869).\n- powerpc: use generic version of arch_is_kernel_initmem_freed() (bsc#1194869).\n- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (bsc#1194869).\n- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (bsc#1194869).\n- powerpc/io: Avoid clang null pointer arithmetic warnings (bsc#1194869).\n- powerpc/kexec_file: fix cpus node update to FDT (bsc#1194869).\n- powerpc/kexec: make the update_cpus_node() function public (bsc#1194869).\n- powerpc/kexec: split CONFIG_KEXEC_FILE and CONFIG_CRASH_DUMP (bsc#1194869).\n- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (bsc#1194869).\n- powerpc/pseries: Whitelist dtl slub object for copying to userspace (bsc#1194869).\n- powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE (bsc#1194869).\n- powerpc/topology: Check if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).\n- powerpc/xmon: Check cpu id in commands 'c#', 'dp#' and 'dx#' (bsc#1194869).\n- RDMA/mana_ib: Use virtual address in dma regions for MRs (git-fixes).\n- RDMA/rxe: Fix incomplete state save in rxe_requester (git-fixes)\n- RDMA/rxe: Fix rxe_modify_srq (git-fixes)\n- RDMA/rxe: Handle zero length rdma (git-fixes)\n- RDMA/rxe: Move work queue code to subroutines (git-fixes)\n- s390/cpacf: get rid of register asm (git-fixes bsc#1227079 bsc#1229187).\n- s390/cpacf: Make use of invalid opcode produce a link error (git-fixes bsc#1227079).\n- s390/cpacf: Split and rework cpacf query functions (git-fixes bsc#1229187).\n- s390/dasd: fix error checks in dasd_copy_pair_store() (git-fixes bsc#1229190).\n- s390/dasd: fix error recovery leading to data corruption on ESE devices (git-fixes bsc#1229573).\n- s390/sclp: Prevent release of buffer in I/O (git-fixes bsc#1229572).\n- s390/uv: Panic for set and remove shared access UVC errors (git-fixes bsc#1229188).\n- spi: spi-fsl-lpspi: Fix scldiv calculation (git-fixes).\n- sunrpc: add a struct rpc_stats arg to rpc_create_args (git-fixes).\n- SUNRPC: Fix a race to wake a sync task (git-fixes).\n- swiotlb: fix swiotlb_bounce() to do partial sync's correctly (git-fixes).\n- syscalls: fix compat_sys_io_pgetevents_time64 usage (git-fixes).\n- tracing: Return from tracing_buffers_read() if the file has been closed (bsc#1229136 git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- vfio/pci: fix potential memory leak in vfio_intx_enable() (git-fixes).\n- wifi: iwlwifi: fw: fix wgds rev 3 exact size (git-fixes).\n- wifi: mwifiex: duplicate static structs used in driver instances (git-fixes).\n- x86/APM: drop the duplicate APM_MINOR_DEV macro (git-fixes).\n- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (git-fixes).\n- x86/mm: Fix pti_clone_entry_text() for i386 (git-fixes).\n- x86/mtrr: Check if fixed MTRRs exist before saving them (git-fixes).\n- x86/pm: Work around false positive kmemleak report in msr_build_context() (git-fixes).\n- xfs: Fix missing interval for missing_owner in xfs fsmap (git-fixes).\n- xfs: Fix the owner setting issue for rmap query in xfs fsmap (git-fixes).\n- xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code (git-fixes).\n- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (git-fixes).\n- xprtrdma: Fix rpcrdma_reqs_reset() (git-fixes).\n","status":"published","published":"2024-09-11T15:39:03Z","modified":"2026-02-04T03:59:23.624917Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3483-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).\n- CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).\n- CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).\n- CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).\n- CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).\n- CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).\n- CVE-2024-36270: Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (bsc#1226798)\n- CVE-2023-52489: Fix race in accessing memory_section-\u003eusage (bsc#1221326).\n- CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).\n- CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).\n- CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).\n- CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).\n- CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).\n- CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).\n- CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).\n- CVE-2024-43902: Add null checker before passing variables (bsc#1229767).\n- CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)\n- CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).\n- CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)\n- CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).\n- CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).\n- CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).\n- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)\n- CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).\n- CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).\n- CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)\n- CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).\n- CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)\n- CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).\n- CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).\n- CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).\n- CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).\n- CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).\n- CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)\n- CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)\n- CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)\n- CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)\n- CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).\n- CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)\n- CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).\n- CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).\n- CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).\n- CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).\n- CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).\n- CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).\n- CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).\n- CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).\n- CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).\n- CVE-2024-27016: Validate pppoe header (bsc#1223807).\n- CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).\n- CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).\n- CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).\n- CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).\n- CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).\n- CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).\n- CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)\n- CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)\n- CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)\n- CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727 CVE-2024-42157 git-fixes).\n- CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387)\n- CVE-2024-36009: Blacklist 467324bcfe1a ('ax25: Fix netdev refcount issue') (bsc#1224542)\n- CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).\n- CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)\n- CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)\n- CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383)\n- CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)\n- CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345)\n- CVE-2024-42322: Properly dereference pe in ip_vs_add_service (bsc#1229347)\n- CVE-2024-42308: Update DRM patch reference (bsc#1229411)\n- CVE-2024-42301: Fix the array out-of-bounds risk (bsc#1229407).\n- CVE-2024-42318: Do not lose track of restrictions on cred_transfer (bsc#1229351).\n- CVE-2024-26669: Fix chain template offload (bsc#1222350).\n- CVE-2023-52889: Fix null pointer deref when receiving skb during sock creation (bsc#1229287,).\n- CVE-2022-48645: Move enetc_set_psfp() out of the common enetc_set_features() (bsc#1223508).\n- CVE-2024-41007: Use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863).\n- CVE-2024-36933: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).\n- CVE-2024-42295: Handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).\n- CVE-2024-42319: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (bsc#1229350).\n- CVE-2024-43860: Skip over memory region when node value is NULL (bsc#1229319).\n- CVE-2024-43831: Handle invalid decoder vsi (bsc#1229309).\n- CVE-2024-43849: Protect locator_addr with the main mutex (bsc#1229307).\n- CVE-2024-43841: Do not use strlen() in const context (bsc#1229304).\n- CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).\n- CVE-2024-41088: Fix infinite loop when xmit fails (bsc#1228469).\n- CVE-2024-42281: Fix a segment issue when downgrading gso_size (bsc#1229386).\n- CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)\n- CVE-2024-41080: Fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616).\n- CVE-2024-42246: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).\n- CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)\n- CVE-2024-26735: Fix possible use-after-free and null-ptr-deref (bsc#1222372).\n- CVE-2024-42106: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).\n- CVE-2024-38662: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).\n- CVE-2024-42110: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).\n- CVE-2024-42247: Avoid unaligned 64-bit memory accesses (bsc#1228988).\n- CVE-2022-48865: Fix kernel panic when enabling bearer (bsc#1228065).\n- CVE-2023-52498: Fix possible deadlocks in core system-wide PM code (bsc#1221269).\n- CVE-2024-41068: Fix sclp_init() cleanup on failure (bsc#1228579).\n- CVE-2022-48808: Fix panic when DSA master device unbinds on shutdown (bsc#1227958).\n- CVE-2024-42095: Fix Errata i2310 with RX FIFO level check (bsc#1228446).\n- CVE-2024-40978: Fix crash while reading debugfs attribute (bsc#1227929).\n- CVE-2024-42107: Do not process extts if PTP is disabled (bsc#1228494).\n- CVE-2024-42139: Fix improper extts handling (bsc#1228503).\n- CVE-2024-42148: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).\n- CVE-2024-42142: E-switch, Create ingress ACL when needed (bsc#1228491).\n- CVE-2024-42162: Account for stopped queues when reading NIC stats (bsc#1228706).\n- CVE-2024-42082: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482).\n- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667).\n- CVE-2024-40995: Fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).\n- CVE-2024-38602: Merge repeat codes in ax25_dev_device_down() (git-fixes CVE-2024-38602 bsc#1226613).\n- CVE-2024-38554: Fix reference count leak issue of net_device (bsc#1226742).\n- CVE-2024-36929: Reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).\n- CVE-2024-41009: Fix overrunning reservations in ringbuf (bsc#1228020).\n- CVE-2024-27024: Fix WARNING in rds_conn_connect_if_down (bsc#1223777).\n\nThe following non-security bugs were fixed:\n\n- Indicate support for IRQ ResourceSource thru _OSC (git-fixes).\n- Indicate support for the Generic Event Device thru _OSC (git-fixes).\n- Rework system-level device notification handling (git-fixes).\n- Drop nocrt parameter (git-fixes).\n- x86: s2 Post-increment variables when getting constraints (git-fixes).\n- Do not cross .backup mountpoint from backup volume (git-fixes).\n- Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).\n- Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).\n- Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).\n- Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (git-fixes).\n- line6: Fix racy access to midibuf (stable-fixes).\n- Relax start tick time check for slave timer elements (git-fixes).\n- Add delay quirk for VIVO USB-C-XE710 HEADSET (stable-fixes).\n- Re-add ScratchAmp quirk entries (git-fixes).\n- Support Yamaha P-125 quirk entry (stable-fixes).\n- Fix UBSAN warning in parse_audio_unit() (stable-fixes).\n- arm64: initialize all values of acpi_early_node_map to (git-fixes)\n- arm64: initialize all values of acpi_early_node_map to (git-fixes)\n- arm64: Add Neoverse-V2 part (git-fixes)\n- arm64: armv8_ Fix warning in isndep cpuhp starting process (git-fixes)\n- arm64: armv8_ Fix warning in isndep cpuhp starting process (git-fixes)\n- arm64: Restore spec_bar() macro (git-fixes)\n- arm64: Add missing .field_width for GIC system registers (git-fixes)\n- arm64: Fix the visibility of compat hwcaps (git-fixes)\n- arm64: Force HWCAP to be based on the sysreg visible to (git-fixes)\n- arm64: Add Cortex-A720 definitions (git-fixes)\n- arm64: Add Cortex-A725 definitions (git-fixes)\n- arm64: Add Cortex-X1C definitions (git-fixes)\n- arm64: Add Cortex-X3 definitions (git-fixes)\n- arm64: Add Cortex-X4 definitions (git-fixes)\n- arm64: Add Cortex-X925 definitions (git-fixes)\n- arm64: Add Neoverse-V3 definitions (git-fixes)\n- arm64: Increase VOP clk rate on RK3328 (git-fixes)\n- arm64: Increase VOP clk rate on RK3328 (git-fixes)\n- arm64: Expand speculative SSBS workaround (again) (git-fixes)\n- arm64: Expand speculative SSBS workaround (git-fixes)\n- arm64: Unify speculative SSBS errata logic (git-fixes) Also update default configuration.\n- arm64: Fix KASAN random tag seed initialization (git-fixes)\n- arm64: Fix KASAN random tag seed initialization (git-fixes)\n- wcd938 Correct Soundwire ports mask (git-fixes).\n- wsa881 Correct Soundwire ports mask (git-fixes).\n- fix irq scheduling issue with PREEMPT_RT (git-fixes).\n- Introduce async_schedule_dev_nocall() (bsc#1221269).\n- Split async_schedule_node_domain() (bsc#1221269).\n- Fix usage of __hci_cmd_sync_status (git-fixes).\n- hci_ Fix not handling hibernation actions (git-fixes).\n- l2 always unlock channel in l2cap_conless_channel() (git-fixes).\n- L2 Fix deadlock (git-fixes).\n- Fix a kernel verifier crash in stacksafe() (bsc#1225903).\n- remove unused declaring of bpf_kprobe_override (git-fixes).\n- fix leak of qgroup extent records after transaction abort (git-fixes).\n- make btrfs_destroy_delayed_refs() return void (git-fixes).\n- remove unnecessary prototype declarations at disk-io.c (git-fixes).\n- update fs features directory asynchronously (bsc#1226168).\n- propagate errors from vfs_getxattr() to avoid infinite loop (bsc#1229418).\n- issue a cap release immediately if no cap exists (bsc#1225162).\n- periodically flush the cap releases (bsc#1225162).\n- Enable SMT only if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).\n- cpuidle, Evaluate LPI arch_flags for broadcast timer (git-fixes).\n- Fix register ID of SPSR_FIQ (git-fixes).\n- add missing MODULE_DESCRIPTION() macros (stable-fixes).\n- Add labels for both Valve Steam Deck revisions (stable-fixes).\n- Add quirk for Aya Neo KUN (stable-fixes).\n- Add quirk for Lenovo Yoga Tab 3 X90F (stable-fixes).\n- Add quirk for Nanote UMPC-01 (stable-fixes).\n- Add quirk for OrangePi Neo (stable-fixes).\n- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored (stable-fixes).\n- Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (stable-fixes).\n- avoid using null object of framebuffer (git-fixes).\n- Fix \u0026\u0026 vs || typos (git-fixes).\n- Skip Recompute DSC Params if no Stream on Link (stable-fixes).\n- Validate hw_points_num before using it (stable-fixes).\n- Fix the null pointer dereference for vega10_hwmgr (stable-fixes).\n- Actually check flags for all context ops (stable-fixes).\n- Add lock around VF RLCG interface (stable-fixes).\n- fix dereference null return value for the function amdgpu_vm_pt_parent (stable-fixes).\n- Fix the null pointer dereference to ras_manager (stable-fixes).\n- Validate TA binary size (stable-fixes).\n- drm/amdgpu/jpeg2: properly set atomics vmid field (stable-fixes).\n- Fix the null pointer dereference for smu7 (stable-fixes).\n- Fix the null pointer dereference in apply_state_adjust_rules (stable-fixes).\n- Fix the param type of set_power_profile_mode (stable-fixes).\n- analogix_ properly handle zero sized AUX transactions (stable-fixes).\n- tc358768: Attempt to fix DSI horizontal timings (stable-fixes).\n- fix null pointer dereference in drm_client_modeset_probe (git-fixes).\n- drm/dp_ Skip CSN if topology probing is not done yet (stable-fixes).\n- set gp bus_stop bit before hard reset (stable-fixes).\n- reset the link phy params before link training (git-fixes).\n- cleanup FB if dpu_format_populate_layout fails (git-fixes).\n- do not play tricks with debug macros (git-fixes).\n- Zero-initialize iosys_map (stable-fixes).\n- fix inode-\u003ei_blocks for non-512 byte sector size device (git-fixes).\n- fix potential deadlock on __exfat_get_dentry_set (git-fixes).\n- redefine DIR_DELETED as the bad cluster number (git-fixes).\n- support dynamic allocate bh for exfat_entry_set_cache (git-fixes).\n- fs/netfs/fscache_ add missing 'n_accesses' check (bsc#1229453).\n- Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).\n- Add might_sleep() to disable_irq() (git-fixes).\n- Always limit the affinity to online CPUs (git-fixes).\n- Do not return error on missing optional irq_request_resources() (git-fixes).\n- Take the proposed affinity at face value if force==true (git-fixes).\n- genirq/cpuhotplug, x86 Prevent vector leak during CPU offline (git-fixes).\n- genirq/generic_ Make irq_remove_generic_chip() irqdomain aware (git-fixes).\n- Fix NULL pointer deref in irq_data_get_affinity_mask() (git-fixes).\n- Do not try to remove non-existing sysfs files (git-fixes).\n- Exclude managed interrupts in irq_matrix_allocated() (git-fixes).\n- Shutdown managed interrupts with unsatifiable affinities (git-fixes).\n- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (git-fixes).\n- fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (git-fixes).\n- i2 Improve handling of stuck alerts (git-fixes).\n- i2 Send alert notifications to all devices if source not found (git-fixes).\n- Convert comma to semicolon (git-fixes).\n- ip6_ Fix broken GRO (bsc#1229444).\n- ipv6: fix incorrect unregister order (git-fixes).\n- Drop bogus fwspec-mapping error handling (git-fixes).\n- Fix association race (git-fixes).\n- Fix disassociation race (git-fixes).\n- Fix domain registration race (git-fixes).\n- Fix mapping-creation race (git-fixes).\n- Fixed unbalanced fwnode get and put (git-fixes).\n- Look for existing mapping only once (git-fixes).\n- Refactor __irq_domain_alloc_irqs() (git-fixes).\n- Report irq number for NOMAP domains (git-fixes).\n- Revert 'mm: prevent derefencing NULL ptr in pfn_section_valid()' (bsc#1230413).\n- Revert 'mm, kmsan: fix infinite recursion due to RCU critical section' (bsc#1230413).\n- Revert 'mm/sparsemem: fix race in accessing memory_section-\u003eusage' (bsc#1230413).\n- kernel/irq/irqdomain. fix memory leak with using debugfs_lookup() (git-fixes).\n- Fix to check symbol prefixes correctly (git-fixes).\n- move from strlcpy with unused retval to strscpy (git-fixes).\n- protect concurrent access to mem_cgroup_idr (git-fixes).\n- mm, fix infinite recursion due to RCU critical section (git-fixes).\n- prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).\n- dw_ allow biu and ciu clocks to defer (git-fixes).\n- mmc_ Fix NULL dereference on allocation failure (git-fixes).\n- ks8851: Fix another TX stall caused by wrong ISR flag handling (git-fixes).\n- ks8851: Fix deadlock with the SPI chip variant (git-fixes).\n- ks8851: Fix potential TX stall after interface reopen (git-fixes).\n- ks8851: Fix TX stall caused by TX buffer overrun (gix-fixes).\n- Add support for page sizes other than 4KB on ARM64 (jsc#PED-8491 bsc#1226530).\n- Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1229154).\n- Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes).\n- Fix RX buf alloc_size alignment and atomic op panic (bsc#1229086).\n- remove two BUG() from skb_checksum_help() (bsc#1229312).\n- qmi_ fix memory leak for not ip packets (git-fixes).\n- fix possible cp null dereference (git-fixes).\n- initialize noop_qdisc owner (git-fixes).\n- pn533: Add poll mod list filling check (git-fixes).\n- expose /proc/net/sunrpc/nfs in net namespaces (git-fixes).\n- make the rpc_stat per net namespace (git-fixes).\n- add posix ACLs to struct nfsd_attrs (git-fixes).\n- add security label to struct nfsd_attrs (git-fixes).\n- fix regression with setting ACLs (git-fixes).\n- Fix strncpy() fortify warning (git-fixes).\n- Increase NFSD_MAX_OPS_PER_COMPOUND (git-fixes).\n- introduce struct nfsd_attrs (git-fixes).\n- move from strlcpy with unused retval to strscpy (git-fixes).\n- Optimize DRC bucket pruning (git-fixes).\n- return error if nfs4_setacl fails (git-fixes).\n- set attributes when creating symlinks (git-fixes).\n- use locks_inode_context helper (git-fixes).\n- nilfs2: Remove check for PageError (git-fixes).\n- nvme_ scan namespaces asynchronously (bsc#1224105).\n- ocfs2: use coarse time for new created files (git-fixes).\n- Fix possible divide-by-0 panic in padata_mt_helper() (git-fixes).\n- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (git-fixes).\n- platform/x86 Add support for ACPI based probing (jsc#PED-8779).\n- platform/x86 Cache pci_dev in struct hsmp_socket (jsc#PED-8779).\n- platform/x86 Change devm_kzalloc() to devm_kcalloc() (jsc#PED-8779).\n- platform/x86 Check HSMP support on AMD family of processors (jsc#PED-8779).\n- platform/x86 Check num_sockets against MAX_AMD_SOCKETS (jsc#PED-8779).\n- platform/x86 Create static func to handle platdev (jsc#PED-8779).\n- platform/x86 Define a struct to hold mailbox regs (jsc#PED-8779).\n- platform/x86 Move dev from platdev to hsmp_socket (jsc#PED-8779).\n- platform/x86 Move hsmp_test to probe (jsc#PED-8779).\n- platform/x86 Non-ACPI support for AMD F1A_M00~0Fh (jsc#PED-8779).\n- platform/x86 Remove extra parenthesis and add a space (jsc#PED-8779).\n- platform/x86 Restructure sysfs group creation (jsc#PED-8779).\n- platform/x86 switch to use device_add_groups() (jsc#PED-8779).\n- axp288_ Fix constant_charge_voltage writes (git-fixes).\n- axp288_ Round constant_charge_voltage writes down (git-fixes).\n- Fail build if using recordmcount with binutils v2.37 (bsc#1194869).\n- Mark .opd section read-only (bsc#1194869).\n- use generic version of arch_is_kernel_initmem_freed() (bsc#1194869).\n- xor_ Add '-mhard-float' to CFLAGS (bsc#1194869).\n- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (bsc#1194869).\n- Avoid clang null pointer arithmetic warnings (bsc#1194869).\n- powerpc/kexec_ fix cpus node update to FDT (bsc#1194869).\n- make the update_cpus_node() function public (bsc#1194869).\n- split CONFIG_KEXEC_FILE and CONFIG_CRASH_DUMP (bsc#1194869).\n- Add failure related checks for h_get_mpp and h_get_ppp (bsc#1194869).\n- Whitelist dtl slub object for copying to userspace (bsc#1194869).\n- Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE (bsc#1194869).\n- Check if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).\n- Check cpu id in commands 'c#', 'dp#' and 'dx#' (bsc#1194869).\n- RDMA/mana_ Use virtual address in dma regions for MRs (git-fixes).\n- Fix incomplete state save in rxe_requester (git-fixes)\n- Fix rxe_modify_srq (git-fixes)\n- Handle zero length rdma (git-fixes)\n- Move work queue code to subroutines (git-fixes)\n- s390 get rid of register asm (git-fixes bsc#1227079 bsc#1229187).\n- s390 Make use of invalid opcode produce a link error (git-fixes bsc#1227079).\n- s390 Split and rework cpacf query functions (git-fixes bsc#1229187).\n- s390 fix error checks in dasd_copy_pair_store() (git-fixes bsc#1229190).\n- s390 fix error recovery leading to data corruption on ESE devices (git-fixes bsc#1229573).\n- s390 Prevent release of buffer in I/O (git-fixes bsc#1229572).\n- s390 Panic for set and remove shared access UVC errors (git-fixes bsc#1229188).\n- Fix scldiv calculation (git-fixes).\n- add a struct rpc_stats arg to rpc_create_args (git-fixes).\n- Fix a race to wake a sync task (git-fixes).\n- fix swiotlb_bounce() to do partial sync's correctly (git-fixes).\n- fix compat_sys_io_pgetevents_time64 usage (git-fixes).\n- Return from tracing_buffers_read() if the file has been closed (bsc#1229136 git-fixes).\n- add check for crypto_shash_tfm_digest (git-fixes).\n- dbg_orphan_ Fix missed key type checking (git-fixes).\n- Fix adding orphan entry twice for the same inode (git-fixes).\n- Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- fix potential memory leak in vfio_intx_enable() (git-fixes).\n- fix wgds rev 3 exact size (git-fixes).\n- duplicate static structs used in driver instances (git-fixes).\n- x86 drop the duplicate APM_MINOR_DEV macro (git-fixes).\n- x86 Fix PUSH instruction in x86 instruction decoder opcode map (git-fixes).\n- x86 Fix pti_clone_entry_text() for i386 (git-fixes).\n- x86 Check if fixed MTRRs exist before saving them (git-fixes).\n- x86 Work around false positive kmemleak report in msr_build_context() (git-fixes).\n- Fix missing interval for missing_owner in xfs fsmap (git-fixes).\n- Fix the owner setting issue for rmap query in xfs fsmap (git-fixes).\n- use XFS_BUF_DADDR_NULL for daddrs in getfsmap code (git-fixes).\n- Fix Panther point NULL pointer deref at full-speed re-enumeration (git-fixes).\n- Fix rpcrdma_reqs_reset() (git-fixes).\n","status":"published","published":"2024-09-27T15:11:57Z","modified":"2026-02-04T04:18:47.136888Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"USN-6285-1","title":"linux-oem-6.1 vulnerabilities","description":"It was discovered that the NTFS file system implementation in the Linux\nkernel did not properly check buffer indexes in certain situations, leading\nto an out-of-bounds read vulnerability. A local attacker could possibly use\nthis to expose sensitive information (kernel memory). (CVE-2022-48502)\n\nStonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS\nimplementation in the Ubuntu Linux kernel did not properly perform\npermission checks in certain situations. A local attacker could possibly\nuse this to gain elevated privileges. (CVE-2023-2640)\n\nIt was discovered that a race condition existed in the f2fs file system in\nthe Linux kernel, leading to a null pointer dereference vulnerability. An\nattacker could use this to construct a malicious f2fs image that, when\nmounted and operated on, could cause a denial of service (system crash).\n(CVE-2023-2898)\n\nMingi Cho discovered that the netfilter subsystem in the Linux kernel did\nnot properly validate the status of a nft chain while performing a lookup\nby id, leading to a use-after-free vulnerability. An attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2023-31248)\n\nShir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in\nthe Ubuntu Linux kernel did not properly perform permission checks in\ncertain situations. A local attacker could possibly use this to gain\nelevated privileges. (CVE-2023-32629)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle some error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3390)\n\nTanguy Dubroca discovered that the netfilter subsystem in the Linux kernel\ndid not properly handle certain pointer data type, leading to an out-of-\nbounds write vulnerability. A privileged attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-35001)\n\nIt was discovered that the universal 32bit network packet classifier\nimplementation in the Linux kernel did not properly perform reference\ncounting in some situations, leading to a use-after-free vulnerability. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2023-3609)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle certain error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3610)\n\nIt was discovered that the Quick Fair Queueing network scheduler\nimplementation in the Linux kernel contained an out-of-bounds write\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3611)\n\nIt was discovered that the network packet classifier with\nnetfilter/firewall marks implementation in the Linux kernel did not\nproperly handle reference counting, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3776)\n\nChih-Yen Chang discovered that the KSMBD implementation in the Linux kernel\ndid not properly validate SMB request protocol IDs, leading to a out-of-\nbounds read vulnerability. A remote attacker could possibly use this to\ncause a denial of service (system crash). (CVE-2023-38430)\n\nChih-Yen Chang discovered that the KSMBD implementation in the Linux kernel\ndid not properly validate command payload size, leading to a out-of-bounds\nread vulnerability. A remote attacker could possibly use this to cause a\ndenial of service (system crash). (CVE-2023-38432)\n\nIt was discovered that the NFC implementation in the Linux kernel contained\na use-after-free vulnerability when performing peer-to-peer communication\nin certain conditions. A privileged attacker could use this to cause a\ndenial of service (system crash) or possibly expose sensitive information\n(kernel memory). (CVE-2023-3863)\n\n","status":"published","published":"2023-08-11T17:51:46Z","modified":"2026-10-22T23:18:38.555928065Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6315-1","title":"linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities","description":"\nDaniel Moghimi discovered that some Intel(R) Processors did not properly\nclear microarchitectural state after speculative execution of various\ninstructions. A local unprivileged user could use this to obtain to\nsensitive information. (CVE-2022-40982)\n\nTavis Ormandy discovered that some AMD processors did not properly handle\nspeculative execution of certain vector register instructions. A local\nattacker could use this to expose sensitive information. (CVE-2023-20593)\n\nYe Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux\nkernel did not properly handle locking for rings with IOPOLL, leading to a\ndouble-free vulnerability. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-21400)\n\nIt was discovered that the universal 32bit network packet classifier\nimplementation in the Linux kernel did not properly perform reference\ncounting in some situations, leading to a use-after-free vulnerability. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2023-3609)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle certain error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3610)\n\nIt was discovered that the Quick Fair Queueing network scheduler\nimplementation in the Linux kernel contained an out-of-bounds write\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3611)\n\nIt was discovered that the network packet classifier with\nnetfilter/firewall marks implementation in the Linux kernel did not\nproperly handle reference counting, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3776)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle table rules flush in certain circumstances. A local\nattacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-3777)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle rule additions to bound chains in certain\ncircumstances. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-3995)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle PIPAPO element removal, leading to a use-after-free\nvulnerability. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-4004)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle bound chain deactivation in certain circumstances. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-4015)\n\n","status":"published","published":"2023-08-29T19:57:02Z","modified":"2026-10-22T23:18:59.349319865Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6318-1","title":"linux, linux-aws, linux-aws-6.2, linux-azure, linux-hwe-6.2, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-6.2, linux-raspi vulnerabilities","description":"Daniel Moghimi discovered that some Intel(R) Processors did not properly\nclear microarchitectural state after speculative execution of various\ninstructions. A local unprivileged user could use this to obtain to\nsensitive information. (CVE-2022-40982)\n\nTavis Ormandy discovered that some AMD processors did not properly handle\nspeculative execution of certain vector register instructions. A local\nattacker could use this to expose sensitive information. (CVE-2023-20593)\n\nIt was discovered that the universal 32bit network packet classifier\nimplementation in the Linux kernel did not properly perform reference\ncounting in some situations, leading to a use-after-free vulnerability. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2023-3609)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle certain error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3610)\n\nIt was discovered that the Quick Fair Queueing network scheduler\nimplementation in the Linux kernel contained an out-of-bounds write\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3611)\n\nIt was discovered that the network packet classifier with\nnetfilter/firewall marks implementation in the Linux kernel did not\nproperly handle reference counting, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3776)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle table rules flush in certain circumstances. A local\nattacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-3777)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle rule additions to bound chains in certain\ncircumstances. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-3995)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle PIPAPO element removal, leading to a use-after-free\nvulnerability. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-4004)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle bound chain deactivation in certain circumstances. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-4015)\n\n","status":"published","published":"2023-08-29T21:35:56Z","modified":"2026-10-22T23:18:51.312733757Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6325-1","title":"linux-gkeop-5.15, linux-intel-iotg vulnerabilities","description":"Daniel Moghimi discovered that some Intel(R) Processors did not properly\nclear microarchitectural state after speculative execution of various\ninstructions. A local unprivileged user could use this to obtain to\nsensitive information. (CVE-2022-40982)\n\nTavis Ormandy discovered that some AMD processors did not properly handle\nspeculative execution of certain vector register instructions. A local\nattacker could use this to expose sensitive information. (CVE-2023-20593)\n\nYe Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux\nkernel did not properly handle locking for rings with IOPOLL, leading to a\ndouble-free vulnerability. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-21400)\n\nIt was discovered that the universal 32bit network packet classifier\nimplementation in the Linux kernel did not properly perform reference\ncounting in some situations, leading to a use-after-free vulnerability. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2023-3609)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle certain error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3610)\n\nIt was discovered that the Quick Fair Queueing network scheduler\nimplementation in the Linux kernel contained an out-of-bounds write\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3611)\n\nIt was discovered that the network packet classifier with\nnetfilter/firewall marks implementation in the Linux kernel did not\nproperly handle reference counting, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3776)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle table rules flush in certain circumstances. A local\nattacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-3777)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle rule additions to bound chains in certain\ncircumstances. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-3995)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle PIPAPO element removal, leading to a use-after-free\nvulnerability. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-4004)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle bound chain deactivation in certain circumstances. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-4015)\n\n","status":"published","published":"2023-08-31T13:43:31Z","modified":"2026-10-22T23:18:51.08866072Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6330-1","title":"linux-gcp-5.15 vulnerabilities","description":"Daniel Moghimi discovered that some Intel(R) Processors did not properly\nclear microarchitectural state after speculative execution of various\ninstructions. A local unprivileged user could use this to obtain to\nsensitive information. (CVE-2022-40982)\n\nTavis Ormandy discovered that some AMD processors did not properly handle\nspeculative execution of certain vector register instructions. A local\nattacker could use this to expose sensitive information. (CVE-2023-20593)\n\nYe Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux\nkernel did not properly handle locking for rings with IOPOLL, leading to a\ndouble-free vulnerability. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-21400)\n\nIt was discovered that the universal 32bit network packet classifier\nimplementation in the Linux kernel did not properly perform reference\ncounting in some situations, leading to a use-after-free vulnerability. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2023-3609)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle certain error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3610)\n\nIt was discovered that the Quick Fair Queueing network scheduler\nimplementation in the Linux kernel contained an out-of-bounds write\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3611)\n\nIt was discovered that the network packet classifier with\nnetfilter/firewall marks implementation in the Linux kernel did not\nproperly handle reference counting, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3776)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle table rules flush in certain circumstances. A local\nattacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-3777)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle rule additions to bound chains in certain\ncircumstances. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-3995)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle PIPAPO element removal, leading to a use-after-free\nvulnerability. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-4004)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle bound chain deactivation in certain circumstances. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-4015)\n\n","status":"published","published":"2023-08-31T22:19:45Z","modified":"2026-10-22T23:18:54.415993132Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6332-1","title":"linux-azure, linux-azure-5.15, linux-azure-fde vulnerabilities","description":"Daniel Moghimi discovered that some Intel(R) Processors did not properly\nclear microarchitectural state after speculative execution of various\ninstructions. A local unprivileged user could use this to obtain to\nsensitive information. (CVE-2022-40982)\n\nWilliam Zhao discovered that the Traffic Control (TC) subsystem in the\nLinux kernel did not properly handle network packet retransmission in\ncertain situations. A local attacker could use this to cause a denial of\nservice (kernel deadlock). (CVE-2022-4269)\n\nIt was discovered that the NTFS file system implementation in the Linux\nkernel did not properly check buffer indexes in certain situations, leading\nto an out-of-bounds read vulnerability. A local attacker could possibly use\nthis to expose sensitive information (kernel memory). (CVE-2022-48502)\n\nSeth Jenkins discovered that the Linux kernel did not properly perform\naddress randomization for a per-cpu memory management structure. A local\nattacker could use this to expose sensitive information (kernel memory) or\nin conjunction with another kernel vulnerability. (CVE-2023-0597)\n\nIt was discovered that a race condition existed in the btrfs file system\nimplementation in the Linux kernel, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly expose sensitive information. (CVE-2023-1611)\n\nIt was discovered that the APM X-Gene SoC hardware monitoring driver in the\nLinux kernel contained a race condition, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or expose sensitive information (kernel memory).\n(CVE-2023-1855)\n\nIt was discovered that the ST NCI NFC driver did not properly handle device\nremoval events. A physically proximate attacker could use this to cause a\ndenial of service (system crash). (CVE-2023-1990)\n\nRuihan Li discovered that the bluetooth subsystem in the Linux kernel did\nnot properly perform permissions checks when handling HCI sockets. A\nphysically proximate attacker could use this to cause a denial of service\n(bluetooth communication). (CVE-2023-2002)\n\nTavis Ormandy discovered that some AMD processors did not properly handle\nspeculative execution of certain vector register instructions. A local\nattacker could use this to expose sensitive information. (CVE-2023-20593)\n\nIt was discovered that the XFS file system implementation in the Linux\nkernel did not properly perform metadata validation when mounting certain\nimages. An attacker could use this to specially craft a file system image\nthat, when mounted, could cause a denial of service (system crash).\n(CVE-2023-2124)\n\nYe Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux\nkernel did not properly handle locking for rings with IOPOLL, leading to a\ndouble-free vulnerability. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-21400)\n\nJuan Jose Lopez Jaimez, Meador Inge, Simon Scannell, and Nenad Stojanovski\ndiscovered that the BPF verifier in the Linux kernel did not properly mark\nregisters for precision tracking in certain situations, leading to an out-\nof-bounds access vulnerability. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-2163)\n\nIt was discovered that the SLIMpro I2C device driver in the Linux kernel\ndid not properly validate user-supplied data in some situations, leading to\nan out-of-bounds write vulnerability. A privileged attacker could use this\nto cause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2023-2194)\n\nIt was discovered that the perf subsystem in the Linux kernel contained a\nuse-after-free vulnerability. A privileged local attacker could possibly\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2023-2235)\n\nZheng Zhang discovered that the device-mapper implementation in the Linux\nkernel did not properly handle locking during table_clear() operations. A\nlocal attacker could use this to cause a denial of service (kernel\ndeadlock). (CVE-2023-2269)\n\nIt was discovered that the ARM Mali Display Processor driver implementation\nin the Linux kernel did not properly handle certain error conditions. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash). (CVE-2023-23004)\n\nIt was discovered that a race condition existed in the TLS subsystem in the\nLinux kernel, leading to a use-after-free or a null pointer dereference\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-28466)\n\nIt was discovered that the DA9150 charger driver in the Linux kernel did\nnot properly handle device removal, leading to a user-after free\nvulnerability. A physically proximate attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-30772)\n\nIt was discovered that the Ricoh R5C592 MemoryStick card reader driver in\nthe Linux kernel contained a race condition during module unload, leading\nto a use-after-free vulnerability. A local attacker could use this to cause\na denial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-3141)\n\nQuentin Minster discovered that the KSMBD implementation in the Linux\nkernel did not properly validate pointers in some situations, leading to a\nnull pointer dereference vulnerability. A remote attacker could use this to\ncause a denial of service (system crash). (CVE-2023-32248)\n\nIt was discovered that the kernel-\u003euser space relay implementation in the\nLinux kernel did not properly perform certain buffer calculations, leading\nto an out-of-bounds read vulnerability. A local attacker could use this to\ncause a denial of service (system crash) or expose sensitive information\n(kernel memory). (CVE-2023-3268)\n\nIt was discovered that the Qualcomm EMAC ethernet driver in the Linux\nkernel did not properly handle device removal, leading to a user-after free\nvulnerability. A physically proximate attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-33203)\n\nIt was discovered that the BQ24190 charger driver in the Linux kernel did\nnot properly handle device removal, leading to a user-after free\nvulnerability. A physically proximate attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-33288)\n\nIt was discovered that the video4linux driver for Philips based TV cards in\nthe Linux kernel contained a race condition during device removal, leading\nto a use-after-free vulnerability. A physically proximate attacker could\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2023-35823)\n\nIt was discovered that the SDMC DM1105 PCI device driver in the Linux\nkernel contained a race condition during device removal, leading to a use-\nafter-free vulnerability. A physically proximate attacker could use this to\ncause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2023-35824)\n\nIt was discovered that the Renesas USB controller driver in the Linux\nkernel contained a race condition during device removal, leading to a use-\nafter-free vulnerability. A privileged attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-35828)\n\nIt was discovered that the Rockchip Video Decoder IP driver in the Linux\nkernel contained a race condition during device removal, leading to a use-\nafter-free vulnerability. A privileged attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-35829)\n\nIt was discovered that the universal 32bit network packet classifier\nimplementation in the Linux kernel did not properly perform reference\ncounting in some situations, leading to a use-after-free vulnerability. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2023-3609)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle certain error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3610)\n\nIt was discovered that the Quick Fair Queueing network scheduler\nimplementation in the Linux kernel contained an out-of-bounds write\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3611)\n\nIt was discovered that the network packet classifier with\nnetfilter/firewall marks implementation in the Linux kernel did not\nproperly handle reference counting, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3776)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle table rules flush in certain circumstances. A local\nattacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-3777)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle rule additions to bound chains in certain\ncircumstances. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-3995)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle PIPAPO element removal, leading to a use-after-free\nvulnerability. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-4004)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle bound chain deactivation in certain circumstances. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-4015)\n\n","status":"published","published":"2023-08-31T22:45:23Z","modified":"2026-10-22T23:18:55.86704061Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6348-1","title":"linux-intel-iotg-5.15, linux-raspi vulnerabilities","description":"\nDaniel Moghimi discovered that some Intel(R) Processors did not properly\nclear microarchitectural state after speculative execution of various\ninstructions. A local unprivileged user could use this to obtain to\nsensitive information. (CVE-2022-40982)\n\nTavis Ormandy discovered that some AMD processors did not properly handle\nspeculative execution of certain vector register instructions. A local\nattacker could use this to expose sensitive information. (CVE-2023-20593)\n\nYe Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux\nkernel did not properly handle locking for rings with IOPOLL, leading to a\ndouble-free vulnerability. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-21400)\n\nIt was discovered that the universal 32bit network packet classifier\nimplementation in the Linux kernel did not properly perform reference\ncounting in some situations, leading to a use-after-free vulnerability. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2023-3609)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle certain error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3610)\n\nIt was discovered that the Quick Fair Queueing network scheduler\nimplementation in the Linux kernel contained an out-of-bounds write\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3611)\n\nIt was discovered that the network packet classifier with\nnetfilter/firewall marks implementation in the Linux kernel did not\nproperly handle reference counting, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3776)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle table rules flush in certain circumstances. A local\nattacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-3777)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle rule additions to bound chains in certain\ncircumstances. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-3995)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle PIPAPO element removal, leading to a use-after-free\nvulnerability. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-4004)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle bound chain deactivation in certain circumstances. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-4015)\n\n","status":"published","published":"2023-09-06T16:15:30Z","modified":"2026-10-22T23:18:57.293170769Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6385-1","title":"linux-oem-6.0 vulnerabilities","description":"\nIt was discovered that some AMD x86-64 processors with SMT enabled could\nspeculatively execute instructions using a return address from a sibling\nthread. A local attacker could possibly use this to expose sensitive\ninformation. (CVE-2022-27672)\n\nWilliam Zhao discovered that the Traffic Control (TC) subsystem in the\nLinux kernel did not properly handle network packet retransmission in\ncertain situations. A local attacker could use this to cause a denial of\nservice (kernel deadlock). (CVE-2022-4269)\n\nJordy Zomer and Alexandra Sandulescu discovered that syscalls invoking the\ndo_prlimit() function in the Linux kernel did not properly handle\nspeculative execution barriers. A local attacker could use this to expose\nsensitive information (kernel memory). (CVE-2023-0458)\n\nIt was discovered that the TLS subsystem in the Linux kernel contained a\ntype confusion vulnerability in some situations. A local attacker could use\nthis to cause a denial of service (system crash) or possibly expose\nsensitive information. (CVE-2023-1075)\n\nIt was discovered that the TUN/TAP driver in the Linux kernel did not\nproperly initialize socket data. A local attacker could use this to cause a\ndenial of service (system crash). (CVE-2023-1076, CVE-2023-4194)\n\nIt was discovered that the IPv6 implementation in the Linux kernel\ncontained a high rate of hash collisions in connection lookup table. A\nremote attacker could use this to cause a denial of service (excessive CPU\nconsumption). (CVE-2023-1206)\n\nIt was discovered that the Broadcom FullMAC USB WiFi driver in the Linux\nkernel did not properly perform data buffer size validation in some\nsituations. A physically proximate attacker could use this to craft a\nmalicious USB device that when inserted, could cause a denial of service\n(system crash) or possibly expose sensitive information. (CVE-2023-1380)\n\nIt was discovered that a race condition existed in the btrfs file system\nimplementation in the Linux kernel, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly expose sensitive information. (CVE-2023-1611)\n\nRuihan Li discovered that the bluetooth subsystem in the Linux kernel did\nnot properly perform permissions checks when handling HCI sockets. A\nphysically proximate attacker could use this to cause a denial of service\n(bluetooth communication). (CVE-2023-2002)\n\nTavis Ormandy discovered that some AMD processors did not properly handle\nspeculative execution of certain vector register instructions. A local\nattacker could use this to expose sensitive information. (CVE-2023-20593)\n\nIt was discovered that a use-after-free vulnerability existed in the iSCSI\nTCP implementation in the Linux kernel. A local attacker could possibly use\nthis to cause a denial of service (system crash). (CVE-2023-2162)\n\nJuan Jose Lopez Jaimez, Meador Inge, Simon Scannell, and Nenad Stojanovski\ndiscovered that the BPF verifier in the Linux kernel did not properly mark\nregisters for precision tracking in certain situations, leading to an out-\nof-bounds access vulnerability. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-2163)\n\nIt was discovered that the perf subsystem in the Linux kernel contained a\nuse-after-free vulnerability. A privileged local attacker could possibly\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2023-2235)\n\nZheng Zhang discovered that the device-mapper implementation in the Linux\nkernel did not properly handle locking during table_clear() operations. A\nlocal attacker could use this to cause a denial of service (kernel\ndeadlock). (CVE-2023-2269)\n\nWei Chen discovered that the DVB USB AZ6027 driver in the Linux kernel\ncontained a null pointer dereference when handling certain messages from\nuser space. A local attacker could use this to cause a denial of service\n(system crash). (CVE-2023-28328)\n\nIt was discovered that a race condition existed in the TLS subsystem in the\nLinux kernel, leading to a use-after-free or a null pointer dereference\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-28466)\n\nIt was discovered that a race condition existed in the f2fs file system in\nthe Linux kernel, leading to a null pointer dereference vulnerability. An\nattacker could use this to construct a malicious f2fs image that, when\nmounted and operated on, could cause a denial of service (system crash).\n(CVE-2023-2898)\n\nIt was discovered that the IP-VLAN network driver for the Linux kernel did\nnot properly initialize memory in some situations, leading to an out-of-\nbounds write vulnerability. An attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2023-3090)\n\nIt was discovered that the Ricoh R5C592 MemoryStick card reader driver in\nthe Linux kernel contained a race condition during module unload, leading\nto a use-after-free vulnerability. A local attacker could use this to cause\na denial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-3141)\n\nGwangun Jung discovered that the Quick Fair Queueing scheduler\nimplementation in the Linux kernel contained an out-of-bounds write\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-31436)\n\nIt was discovered that the Qualcomm MSM DPU driver in the Linux kernel did\nnot properly validate memory allocations in certain situations, leading to\na null pointer dereference vulnerability. A local attacker could use this\nto cause a denial of service (system crash). (CVE-2023-3220)\n\nIt was discovered that the NET/ROM protocol implementation in the Linux\nkernel contained a race condition in some situations, leading to a use-\nafter-free vulnerability. A local attacker could use this to cause a denial\nof service (system crash) or possibly execute arbitrary code.\n(CVE-2023-32269)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle some error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3390)\n\nIt was discovered that the universal 32bit network packet classifier\nimplementation in the Linux kernel did not properly perform reference\ncounting in some situations, leading to a use-after-free vulnerability. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2023-3609)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle certain error conditions, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3610)\n\nIt was discovered that the Quick Fair Queueing network scheduler\nimplementation in the Linux kernel contained an out-of-bounds write\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3611)\n\nIt was discovered that the network packet classifier with\nnetfilter/firewall marks implementation in the Linux kernel did not\nproperly handle reference counting, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-3776)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle table rules flush in certain circumstances. A local\nattacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-3777)\n\nIt was discovered that the NFC implementation in the Linux kernel contained\na use-after-free vulnerability when performing peer-to-peer communication\nin certain conditions. A privileged attacker could use this to cause a\ndenial of service (system crash) or possibly expose sensitive information\n(kernel memory). (CVE-2023-3863)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle rule additions to bound chains in certain\ncircumstances. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-3995)\n\nIt was discovered that the netfilter subsystem in the Linux kernel did not\nproperly handle PIPAPO element removal, leading to a use-after-free\nvulnerability. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2023-4004)\n\nKevin Rich discovered that the netfilter subsystem in the Linux kernel did\nnot properly handle bound chain deactivation in certain circumstances. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2023-4015)\n\nIt was discovered that the bluetooth subsystem in the Linux kernel did not\nproperly handle L2CAP socket release, leading to a use-after-free\nvulnerability. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2023-40283)\n\nIt was discovered that some network classifier implementations in the Linux\nkernel contained use-after-free vulnerabilities. A local attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2023-4128)\n\nMaxim Suhanov discovered that the exFAT file system implementation in the\nLinux kernel did not properly check a file name length, leading to an out-\nof-bounds write vulnerability. An attacker could use this to construct a\nmalicious exFAT image that, when mounted and operated on, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2023-4273)\n\nLonial Con discovered that the netfilter subsystem in the Linux kernel\ncontained a memory leak when handling certain element flush operations. A\nlocal attacker could use this to expose sensitive information (kernel\nmemory). (CVE-2023-4569)\n\n","status":"published","published":"2023-09-19T17:44:43Z","modified":"2026-10-23T10:33:10.314692738Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}